This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft File: 5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft (raw, json) Hash identifier: BhYjEiwuC2HYMrRCepa1hiUX++cXCpplt+BwtPcWISw= Subject key identifier: AF:FF:15:A1:65:F7:C5:54:5E:13:20:5E:BA:DE:CB:24:C0:63:59:F6 Authority key identifier: E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93 Certificate issuer: /CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993 Certificate serial: 019AF3894671D1A4061CA3457ABE04FA1B56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft Manifest number: 0A1A Signing time: Sat 06 Dec 2025 12:00:51 +0000 Manifest this update: Sat 06 Dec 2025 12:00:51 +0000 Manifest next update: Sun 07 Dec 2025 12:00:51 +0000 Files and hashes: 1: 5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl (hash: LIqLgN2RqfNqIeke7o8j5GyXAnAevGPHY6a6FdNN1Is=) 2: pLApfkxIdjxoT9Fus2V1e6urFrI.roa (hash: vf/DF5zyaMPjk4SS8zEJvZOPKo0v68Ai1w0hvPkh9bQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:46:71:d1:a4:06:1c:a3:45:7a:be:04:fa:1b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4cd6e61c14e8391005a817b2722f7c4a81eb993 Validity Not Before: Dec 6 12:00:51 2025 GMT Not After : Dec 7 12:00:51 2025 GMT Subject: CN=afff15a165f7c5545e13205ebadecb24c06359f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8e:ee:70:13:0d:6d:60:fd:3c:34:a4:83:55: 89:ad:e9:f4:b3:f5:dc:97:59:6c:c6:ec:7b:61:0e: d9:13:fe:1c:cd:55:7e:28:e8:43:0a:e5:5d:7c:94: 49:e0:e0:05:a1:9d:ed:4a:82:a0:c5:65:56:97:eb: af:e5:39:d5:93:5d:25:8d:53:77:9a:23:c1:9b:ef: 6d:70:d4:d1:79:e7:a2:42:fc:b4:7f:3c:fa:57:9a: 8b:9c:15:e1:35:1b:a7:7e:9b:0b:7d:8a:eb:13:90: 6f:f5:b3:5c:50:78:20:95:00:2f:2e:39:80:86:93: af:7e:18:6a:86:86:5c:66:76:76:69:92:1c:dc:00: ed:84:5a:4f:67:1f:c2:b4:df:c7:ea:9a:d7:eb:bf: 35:1b:a3:c1:a6:f3:66:3f:de:87:1f:68:1c:12:13: 0e:ed:9f:07:3d:fd:51:e8:fe:92:ce:31:d0:69:6f: a4:8b:2e:1d:0c:71:3a:ca:84:20:b1:02:1b:30:92: 31:a7:38:ba:03:fd:7d:c3:2b:2e:36:c9:40:74:80: f6:a9:67:73:d7:d7:b5:b1:b9:7d:60:ff:d2:97:a5: 83:63:2c:02:fd:79:fc:fd:3f:e2:37:82:d9:20:d3: 2c:86:dd:de:06:84:91:f8:52:c5:bf:bc:9c:d6:5e: d9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FF:15:A1:65:F7:C5:54:5E:13:20:5E:BA:DE:CB:24:C0:63:59:F6 X509v3 Authority Key Identifier: keyid:E4:CD:6E:61:C1:4E:83:91:00:5A:81:7B:27:22:F7:C4:A8:1E:B9:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5M1uYcFOg5EAWoF7JyL3xKgeuZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/da40cf-9836-482b-b7a6-c5ad16a55c5f/1/5M1uYcFOg5EAWoF7JyL3xKgeuZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:9a:1b:8c:bb:ae:af:8f:be:d1:88:29:fd:ae:19:f0:39:cb: 2e:b2:54:d9:f5:ad:39:e5:87:8c:07:f8:ce:c4:15:5c:24:79: b8:02:de:09:de:6b:eb:28:ee:2d:f1:66:36:bd:09:c6:9f:ba: cf:fc:07:bd:cd:94:76:fa:e0:17:40:99:b0:fb:22:95:63:db: e6:12:1f:49:6a:65:33:6c:e8:de:0d:15:da:28:6f:3c:66:75: 3c:e4:c2:77:57:dd:bb:fa:c2:b3:2c:fc:9d:a2:4c:72:ad:1d: a3:68:e8:5f:28:2e:10:bc:36:c0:f9:54:90:7f:a9:7b:1a:5c: 63:fd:f3:22:23:b7:ab:3c:e2:58:a1:72:dc:ff:5e:7b:f3:a0: 9c:7c:07:2b:3d:eb:23:28:1d:35:f2:a6:c7:ca:e7:89:59:9b: bc:96:46:0b:b8:c1:4e:92:cb:98:61:96:90:17:a6:4b:36:70: 78:be:44:c6:d0:4c:c7:fc:52:47:ef:84:be:4f:a7:f9:ce:27: f9:df:72:35:f6:9c:c5:6c:d7:40:fe:28:12:22:e4:0d:53:23: 61:1e:b2:24:17:d5:8a:f1:04:6f:07:78:c4:fd:fc:8e:87:fd: f7:cc:a0:b2:b9:81:c1:16:ae:8b:26:0a:c0:e9:0c:b4:6f:ff: a0:ba:3f:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziUZx0aQGHKNFer4E+htWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Y2Q2ZTYxYzE0ZTgzOTEwMDVhODE3YjI3MjJmN2M0YTgx ZWI5OTMwHhcNMjUxMjA2MTIwMDUxWhcNMjUxMjA3MTIwMDUxWjAzMTEwLwYDVQQD EyhhZmZmMTVhMTY1ZjdjNTU0NWUxMzIwNWViYWRlY2IyNGMwNjM1OWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr47ucBMNbWD9PDSkg1WJren0s/Xc l1lsxux7YQ7ZE/4czVV+KOhDCuVdfJRJ4OAFoZ3tSoKgxWVWl+uv5TnVk10ljVN3 miPBm+9tcNTReeeiQvy0fzz6V5qLnBXhNRunfpsLfYrrE5Bv9bNcUHgglQAvLjmA hpOvfhhqhoZcZnZ2aZIc3ADthFpPZx/CtN/H6prX6781G6PBpvNmP96HH2gcEhMO 7Z8HPf1R6P6SzjHQaW+kiy4dDHE6yoQgsQIbMJIxpzi6A/19wysuNslAdID2qWdz 19e1sbl9YP/Sl6WDYywC/Xn8/T/iN4LZINMsht3eBoSR+FLFv7yc1l7ZnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK//FaFl98VUXhMgXrreyyTAY1n2MB8GA1UdIwQY MBaAFOTNbmHBToORAFqBeyci98SoHrmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU0xdVljRk9nNUVBV29GN0p5TDN4S2dldVpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kYTQwY2YtOTgzNi00ODJiLWI3YTYt YzVhZDE2YTU1YzVmLzEvNU0xdVljRk9nNUVBV29GN0p5TDN4S2dldVpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kYTQwY2YtOTgzNi00ODJiLWI3YTYtYzVhZDE2YTU1YzVm LzEvNU0xdVljRk9nNUVBV29GN0p5TDN4S2dldVpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpobjLuu r4++0Ygp/a4Z8DnLLrJU2fWtOeWHjAf4zsQVXCR5uALeCd5r6yjuLfFmNr0Jxp+6 z/wHvc2UdvrgF0CZsPsilWPb5hIfSWplM2zo3g0V2ihvPGZ1POTCd1fdu/rCsyz8 naJMcq0do2joXyguELw2wPlUkH+pexpcY/3zIiO3qzziWKFy3P9ee/OgnHwHKz3r IygdNfKmx8rniVmbvJZGC7jBTpLLmGGWkBemSzZweL5ExtBMx/xSR++Evk+n+c4n +d9yNfacxWzXQP4oEiLkDVMjYR6yJBfVivEEbwd4xP38jof998ygsrmBwRauiyYK wOkMtG//oLo/7w== -----END CERTIFICATE-----Generated at Sat Dec 6 16:57:15 2025 by rpki-client