This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft File: 5MzXNQiptZmF1Vl4aOOl1ex0X14.mft (raw, json) Hash identifier: JWelrizcGDYo9Cuwgebf2bQ5xJCsgbaRmV9i1RG6izY= Subject key identifier: 2D:43:0D:CC:87:19:0E:A4:76:C9:0C:D6:3C:E3:3F:42:CC:51:2C:C7 Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e Certificate serial: 019AF1D22259292A3BB9616218BC5A0A9635 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft Manifest number: 0F32 Signing time: Sat 06 Dec 2025 04:01:11 +0000 Manifest this update: Sat 06 Dec 2025 04:01:11 +0000 Manifest next update: Sun 07 Dec 2025 04:01:11 +0000 Files and hashes: 1: 5MzXNQiptZmF1Vl4aOOl1ex0X14.crl (hash: mOe0oDX5T/eXWmsofva4AQqGerh0D2ylXK98UjH/780=) 2: 9cidng2JNpciqXWnAOhVR-xci3k.roa (hash: KdGn77knG5L66v7NxGPd44OS8+DeTlDe5QBcInKG3Yk=) 3: olWcwiaAoq2wbYuXrz1GVqOmILU.roa (hash: Elg7s5AYrUxQTxV0rajyo3IZzGiW80+xg0M4V3aItiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:22:59:29:2a:3b:b9:61:62:18:bc:5a:0a:96:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e Validity Not Before: Dec 6 04:01:11 2025 GMT Not After : Dec 7 04:01:11 2025 GMT Subject: CN=2d430dcc87190ea476c90cd63ce33f42cc512cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8e:4e:2a:61:0b:d1:1c:28:18:f9:10:18:90: 92:a5:33:24:60:7d:60:ad:de:17:68:8f:e4:97:0d: c6:77:07:e0:83:0b:fa:69:f8:ad:8e:f9:d9:4d:9f: 1f:87:2a:eb:f3:b6:e9:7b:b6:4e:27:1b:ac:25:b0: 1a:78:53:4b:d0:e4:45:a3:e3:76:89:00:b6:cd:a2: 57:ed:95:c6:ce:40:ab:8a:73:14:3b:bd:7b:d3:6d: dd:47:3b:29:48:fd:2a:06:61:6e:ed:5c:8f:21:6b: e4:75:61:65:cb:2f:d8:1f:57:8a:af:e6:8c:63:4f: 90:42:bd:e7:ea:ed:25:92:5c:dd:58:54:a7:36:0e: 18:48:66:e5:75:af:f2:f6:46:43:57:30:f8:f2:aa: 1a:e3:9a:4b:3a:93:aa:84:de:f1:50:35:9b:98:83: 48:9a:bd:76:3b:25:49:6f:1c:b2:28:8e:16:1a:a1: 7e:01:ac:f3:63:6d:9f:07:22:55:92:96:6e:c6:49: 40:ce:df:46:b8:10:5e:ec:fb:dd:e7:32:42:ae:ba: 10:9d:ee:30:9e:63:33:87:36:ec:d2:a4:17:87:d6: dd:cd:6e:9c:25:df:83:97:42:63:79:af:da:56:f0: 37:24:a6:6f:30:ec:72:01:38:8d:35:25:57:18:b3: fa:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:43:0D:CC:87:19:0E:A4:76:C9:0C:D6:3C:E3:3F:42:CC:51:2C:C7 X509v3 Authority Key Identifier: keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:12:e2:76:31:cf:1e:e9:7b:0e:06:e7:aa:74:fc:13:96:8a: 17:b4:0c:45:87:e4:0f:b4:6a:41:5a:c6:d7:c8:53:84:aa:5c: ec:86:ba:5b:13:fc:9c:7c:3b:a5:15:a4:20:3e:f2:d9:53:8f: 90:7f:ff:fb:f2:e6:34:d8:40:6f:15:57:8a:80:ee:e5:d1:57: 64:4e:b3:fb:33:85:a9:2c:21:5a:9a:05:77:9a:2d:5b:6c:2a: 28:6a:37:9b:0f:38:40:26:36:5c:bd:75:82:95:72:c1:0f:f2: 7f:f9:ef:28:cc:27:10:cf:73:04:84:07:11:ce:dc:90:5d:e6: 2c:f4:a3:c7:1a:c9:19:26:64:dc:3a:23:25:93:c3:a9:20:a1: 9c:ce:fe:22:c6:ec:ed:a1:74:9a:90:65:36:c7:9d:16:66:7a: 9c:f2:18:d8:8c:e2:96:e2:f1:56:6a:bf:ce:08:80:b7:16:1c: cd:38:9b:19:e0:e7:b2:44:b5:dc:53:7a:a4:21:7a:77:9e:69: aa:89:0d:95:a7:07:99:5f:3c:70:13:b1:1d:05:fb:56:ff:15: 26:7c:5f:24:9c:19:6d:bb:6e:23:77:9e:12:78:09:92:eb:ae: 5b:e9:a5:d9:bc:11:05:48:b1:2d:dc:87:3a:62:65:ff:13:03: 63:a4:5f:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iJZKSo7uWFiGLxaCpY1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Y2NkNzM1MDhhOWI1OTk4NWQ1NTk3ODY4ZTNhNWQ1ZWM3 NDVmNWUwHhcNMjUxMjA2MDQwMTExWhcNMjUxMjA3MDQwMTExWjAzMTEwLwYDVQQD EygyZDQzMGRjYzg3MTkwZWE0NzZjOTBjZDYzY2UzM2Y0MmNjNTEyY2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo5OKmEL0RwoGPkQGJCSpTMkYH1g rd4XaI/klw3Gdwfggwv6afitjvnZTZ8fhyrr87bpe7ZOJxusJbAaeFNL0ORFo+N2 iQC2zaJX7ZXGzkCrinMUO717023dRzspSP0qBmFu7VyPIWvkdWFlyy/YH1eKr+aM Y0+QQr3n6u0lklzdWFSnNg4YSGblda/y9kZDVzD48qoa45pLOpOqhN7xUDWbmINI mr12OyVJbxyyKI4WGqF+AazzY22fByJVkpZuxklAzt9GuBBe7Pvd5zJCrroQne4w nmMzhzbs0qQXh9bdzW6cJd+Dl0Jjea/aVvA3JKZvMOxyATiNNSVXGLP6wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1DDcyHGQ6kdskM1jzjP0LMUSzHMB8GA1UdIwQY MBaAFOTM1zUIqbWZhdVZeGjjpdXsdF9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NTNhZWQtNzY0NS00NTlkLTg1ZDgt ODVkODBhNTQ0YmViLzEvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC80NTNhZWQtNzY0NS00NTlkLTg1ZDgtODVkODBhNTQ0YmVi LzEvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyRLidjHP Hul7DgbnqnT8E5aKF7QMRYfkD7RqQVrG18hThKpc7Ia6WxP8nHw7pRWkID7y2VOP kH//+/LmNNhAbxVXioDu5dFXZE6z+zOFqSwhWpoFd5otW2wqKGo3mw84QCY2XL11 gpVywQ/yf/nvKMwnEM9zBIQHEc7ckF3mLPSjxxrJGSZk3DojJZPDqSChnM7+Isbs 7aF0mpBlNsedFmZ6nPIY2IziluLxVmq/zgiAtxYczTibGeDnskS13FN6pCF6d55p qokNlacHmV88cBOxHQX7Vv8VJnxfJJwZbbtuI3eeEngJkuuuW+ml2bwRBUixLdyH OmJl/xMDY6Rfbw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:37:31 2025 by rpki-client