This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft File: 5nEAZ58HKCzUjLUQe_l69684ick.mft (raw, json) Hash identifier: tQ0umT49VY+1hHcg1WMu8bmnQzsNbwqiA1nEbTjk/B4= Subject key identifier: CE:CC:52:24:0A:A9:5B:22:F8:D1:C2:BF:9F:8B:21:57:A5:8D:70:BA Authority key identifier: E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9 Certificate issuer: /CN=e67100679f07282cd48cb5107bf97af7af3889c9 Certificate serial: 019AF1D23A4130FE007C4E1B5DB8CCF7C878 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 04:01:17 +0000 Manifest this update: Sat 06 Dec 2025 04:01:17 +0000 Manifest next update: Sun 07 Dec 2025 04:01:17 +0000 Files and hashes: 1: 5nEAZ58HKCzUjLUQe_l69684ick.crl (hash: zg0k/Mojyer5i4KFzAF/CHzRPKucJ/iACBLS62Vw1yQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3a:41:30:fe:00:7c:4e:1b:5d:b8:cc:f7:c8:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e67100679f07282cd48cb5107bf97af7af3889c9 Validity Not Before: Dec 6 04:01:17 2025 GMT Not After : Dec 7 04:01:17 2025 GMT Subject: CN=cecc52240aa95b22f8d1c2bf9f8b2157a58d70ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:75:fd:f5:1c:55:30:2d:17:57:9f:5e:f3:39: 03:f8:54:6f:1a:f6:57:99:77:8b:b4:10:c4:f9:84: fb:d5:e4:c5:3f:b8:14:e0:c7:82:6f:8d:71:f5:35: a6:c8:ae:7a:a2:90:d6:e5:1a:41:88:df:52:ba:90: 24:d4:7b:24:55:79:f1:3b:0e:41:f1:b9:a7:61:6d: cb:ab:10:9a:38:1c:95:d6:ba:27:a3:36:2f:80:52: 76:da:0d:9a:48:b3:ad:c2:71:62:1c:8d:64:cf:45: 72:ff:ec:d1:88:9c:ab:ed:ba:57:e2:cd:50:7f:34: ba:96:f8:08:32:b3:77:e7:9b:6a:bc:5d:4e:ff:bc: 72:19:28:75:e6:f2:34:aa:31:69:09:fd:a4:4b:0c: 9e:48:d1:42:69:a9:26:f2:2e:ef:5d:1d:37:4f:7a: 76:09:66:1a:70:d7:85:f6:36:7f:63:5e:45:86:a5: b7:81:b0:f4:bd:d9:48:2b:2d:38:c8:9a:29:8e:10: 69:4c:d8:0c:20:d2:6c:47:83:49:1a:f4:3e:0d:f4: d2:7b:91:79:4c:14:2a:4b:c2:8d:62:bf:0a:a8:87: 9a:f7:ab:01:86:87:9b:49:a2:f0:b9:be:17:8f:0b: a8:4b:ab:39:ed:9d:dc:69:eb:21:e8:e1:99:64:ad: 0d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CC:52:24:0A:A9:5B:22:F8:D1:C2:BF:9F:8B:21:57:A5:8D:70:BA X509v3 Authority Key Identifier: keyid:E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:41:3d:6e:85:33:22:98:58:80:11:37:0e:4c:fd:72:27:78: 38:cd:4a:b6:5a:7e:c8:6b:65:2c:03:d9:f9:16:d5:d8:a5:af: 79:05:48:64:f3:80:9f:e1:ec:bc:eb:7d:dd:be:2a:f3:00:48: ed:97:f2:60:1a:d1:c6:44:5a:5d:88:e0:95:44:bf:87:1c:cd: 69:de:48:94:50:bd:9d:d4:97:20:32:04:3b:00:70:e7:f5:85: 68:51:f5:f7:9a:93:e3:aa:a6:be:d5:ea:7e:d9:3b:35:4f:b8: 1e:5a:4e:01:95:af:d9:01:bd:14:2b:0a:c8:cd:07:b9:c6:05: 60:96:50:26:44:42:b2:00:f8:53:8e:5d:8e:8d:e8:09:8f:28: bb:4a:12:d0:b9:f3:06:b3:c1:e8:84:0e:db:1c:33:cb:9f:fd: 9c:a8:d3:4a:d6:98:0e:02:78:d0:d7:69:3d:d1:06:b3:a8:52: 07:b4:a9:4d:ce:e0:06:df:c4:b9:06:8a:9e:04:93:54:ca:26: 76:10:5d:c9:b3:b1:f4:16:05:71:e5:a9:25:6a:e9:fe:12:91: 47:8b:59:71:ba:d1:66:2e:bf:93:40:fd:2a:df:42:68:03:83: b1:6b:96:29:ca:2d:e8:4c:d3:04:79:14:41:f6:ae:72:ad:2c: 01:cf:4c:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jpBMP4AfE4bXbjM98h4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NzEwMDY3OWYwNzI4MmNkNDhjYjUxMDdiZjk3YWY3YWYz ODg5YzkwHhcNMjUxMjA2MDQwMTE3WhcNMjUxMjA3MDQwMTE3WjAzMTEwLwYDVQQD EyhjZWNjNTIyNDBhYTk1YjIyZjhkMWMyYmY5ZjhiMjE1N2E1OGQ3MGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXX99RxVMC0XV59e8zkD+FRvGvZX mXeLtBDE+YT71eTFP7gU4MeCb41x9TWmyK56opDW5RpBiN9SupAk1HskVXnxOw5B 8bmnYW3LqxCaOByV1ronozYvgFJ22g2aSLOtwnFiHI1kz0Vy/+zRiJyr7bpX4s1Q fzS6lvgIMrN355tqvF1O/7xyGSh15vI0qjFpCf2kSwyeSNFCaakm8i7vXR03T3p2 CWYacNeF9jZ/Y15FhqW3gbD0vdlIKy04yJopjhBpTNgMINJsR4NJGvQ+DfTSe5F5 TBQqS8KNYr8KqIea96sBhoebSaLwub4XjwuoS6s57Z3caesh6OGZZK0NnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7MUiQKqVsi+NHCv5+LIVeljXC6MB8GA1UdIwQY MBaAFOZxAGefBygs1Iy1EHv5evevOInJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW5FQVo1OEhLQ3pVakxVUWVfbDY5Njg0aWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81YzI2NWUtNDE4Ny00YTc0LTk5NmUt YWU4YzU4MzBjYzIwLzEvNW5FQVo1OEhLQ3pVakxVUWVfbDY5Njg0aWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy81YzI2NWUtNDE4Ny00YTc0LTk5NmUtYWU4YzU4MzBjYzIw LzEvNW5FQVo1OEhLQ3pVakxVUWVfbDY5Njg0aWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqUE9boUz IphYgBE3Dkz9cid4OM1Ktlp+yGtlLAPZ+RbV2KWveQVIZPOAn+HsvOt93b4q8wBI 7ZfyYBrRxkRaXYjglUS/hxzNad5IlFC9ndSXIDIEOwBw5/WFaFH195qT46qmvtXq ftk7NU+4HlpOAZWv2QG9FCsKyM0HucYFYJZQJkRCsgD4U45djo3oCY8ou0oS0Lnz BrPB6IQO2xwzy5/9nKjTStaYDgJ40NdpPdEGs6hSB7SpTc7gBt/EuQaKngSTVMom dhBdybOx9BYFceWpJWrp/hKRR4tZcbrRZi6/k0D9Kt9CaAODsWuWKcot6EzTBHkU Qfaucq0sAc9M/A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:24 2025 by rpki-client