This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft File: 5cN18687kSQJ3YNgp0CRNVaTcUE.mft (raw, json) Hash identifier: urwYh3WO6jbK086842Hw6qPctMcXY8/7aZRUNARVEI0= Subject key identifier: 94:A5:B5:3F:C9:7F:59:19:14:D7:4C:1A:3C:CA:21:9F:30:86:BF:71 Authority key identifier: E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41 Certificate issuer: /CN=e5c375f3af3b912409dd8360a740913556937141 Certificate serial: 019AF2764FCCDB5762A01A028DF4FAF3E336 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft Manifest number: 069E Signing time: Sat 06 Dec 2025 07:00:31 +0000 Manifest this update: Sat 06 Dec 2025 07:00:31 +0000 Manifest next update: Sun 07 Dec 2025 07:00:31 +0000 Files and hashes: 1: 5cN18687kSQJ3YNgp0CRNVaTcUE.crl (hash: enIol9aWFlsfKZG9tTxHE/Pc+jJrT7YuatLns51e+0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.crl rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:4f:cc:db:57:62:a0:1a:02:8d:f4:fa:f3:e3:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5c375f3af3b912409dd8360a740913556937141 Validity Not Before: Dec 6 07:00:31 2025 GMT Not After : Dec 7 07:00:31 2025 GMT Subject: CN=94a5b53fc97f591914d74c1a3cca219f3086bf71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:8d:3d:c2:91:71:68:bc:64:e3:d9:04:28: 9d:06:58:07:75:79:ce:a9:c7:33:94:43:d2:f5:bd: 68:c2:9a:69:a1:60:a0:d1:c1:c6:31:15:3b:06:e1: 1a:c8:40:75:38:35:85:73:f8:07:09:59:06:25:51: 5e:57:17:bd:f3:c1:bf:85:fb:a1:de:80:b8:cb:38: 72:68:39:b7:bf:97:25:2f:76:9e:3e:d7:f0:d0:7f: 9b:b1:9f:1b:64:a0:a4:27:2f:9e:0b:aa:ee:84:17: 45:b1:f9:f0:5d:43:e2:dc:6d:27:f9:95:54:f6:d3: 08:a8:0f:41:0c:ab:34:a9:4a:de:83:85:18:3d:1c: bc:9f:c9:b0:fe:3a:cf:2f:ef:17:4e:73:0c:5b:db: 5b:32:d2:f1:62:9f:7f:2d:cf:ac:c7:08:2d:a4:d7: 96:07:3c:be:99:e2:2c:10:7f:17:fd:f5:ae:1c:bd: 0f:f8:93:1e:94:47:df:f8:7f:9f:23:61:41:c9:54: a4:b2:1a:21:d8:9d:86:de:6b:1e:b6:57:19:1a:56: f9:fc:61:8b:ba:4b:9c:aa:86:cc:dd:5d:ec:fb:b8: f8:b5:34:e5:be:40:34:af:3a:90:af:d6:d3:4e:af: 98:b8:19:3a:d0:2b:24:b3:9e:c8:3b:0b:e9:6a:cd: 89:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A5:B5:3F:C9:7F:59:19:14:D7:4C:1A:3C:CA:21:9F:30:86:BF:71 X509v3 Authority Key Identifier: keyid:E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:2b:0e:83:b7:3a:b1:89:b9:da:db:a4:1d:1b:b3:38:9f:85: e4:70:3e:e5:e7:cb:4f:9a:07:f3:be:01:d5:c6:af:92:b3:d9: 8e:fd:3e:6f:7d:36:b1:36:fe:cb:39:29:30:a5:60:2a:bc:cb: 09:1d:21:5e:44:82:39:dd:a0:d6:49:89:48:e3:3b:19:6d:01: 0a:f2:78:46:4f:24:d7:2d:60:ef:54:b2:9e:61:35:ba:e3:bd: 49:8d:73:1e:37:4e:1f:fb:5e:16:95:1e:d0:00:b0:8d:c0:91: 50:ec:32:99:30:f9:77:4c:bc:dd:0d:d5:44:a9:ab:19:f0:4b: 48:4c:3d:04:89:8a:55:d9:6b:ac:13:68:f7:09:ad:4f:70:89: e0:73:2a:ac:88:ec:ce:56:4c:0b:29:29:18:52:33:53:0d:10: 97:3f:36:ae:16:3c:49:a9:5c:ad:d9:1b:2a:9f:ea:9b:c2:b6: aa:92:7b:e6:22:04:6d:4d:07:21:18:97:a3:cb:b2:7a:0c:14: 61:fc:96:8b:41:86:6e:cf:2c:36:01:eb:6a:d5:e4:df:ea:0a: 9e:fd:08:6e:52:a5:36:5f:3f:d5:d7:34:07:13:af:a2:c8:73: c2:5c:a2:60:4b:57:38:80:bb:f8:54:1c:20:6f:34:87:4d:6c: fa:d8:05:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydk/M21dioBoCjfT68+M2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YzM3NWYzYWYzYjkxMjQwOWRkODM2MGE3NDA5MTM1NTY5 MzcxNDEwHhcNMjUxMjA2MDcwMDMxWhcNMjUxMjA3MDcwMDMxWjAzMTEwLwYDVQQD Eyg5NGE1YjUzZmM5N2Y1OTE5MTRkNzRjMWEzY2NhMjE5ZjMwODZiZjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLyNPcKRcWi8ZOPZBCidBlgHdXnO qcczlEPS9b1owpppoWCg0cHGMRU7BuEayEB1ODWFc/gHCVkGJVFeVxe988G/hfuh 3oC4yzhyaDm3v5clL3aePtfw0H+bsZ8bZKCkJy+eC6ruhBdFsfnwXUPi3G0n+ZVU 9tMIqA9BDKs0qUreg4UYPRy8n8mw/jrPL+8XTnMMW9tbMtLxYp9/Lc+sxwgtpNeW Bzy+meIsEH8X/fWuHL0P+JMelEff+H+fI2FByVSkshoh2J2G3msetlcZGlb5/GGL ukucqobM3V3s+7j4tTTlvkA0rzqQr9bTTq+YuBk60Csks57IOwvpas2JzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSltT/Jf1kZFNdMGjzKIZ8whr9xMB8GA1UdIwQY MBaAFOXDdfOvO5EkCd2DYKdAkTVWk3FBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWNOMTg2ODdrU1FKM1lOZ3AwQ1JOVmFUY1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy84ZDAwYzItNzFkYi00ZmVlLWI2Y2It Yzc1YzZkMjBkMzJjLzEvNWNOMTg2ODdrU1FKM1lOZ3AwQ1JOVmFUY1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy84ZDAwYzItNzFkYi00ZmVlLWI2Y2ItYzc1YzZkMjBkMzJj LzEvNWNOMTg2ODdrU1FKM1lOZ3AwQ1JOVmFUY1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfysOg7c6 sYm52tukHRuzOJ+F5HA+5efLT5oH874B1cavkrPZjv0+b302sTb+yzkpMKVgKrzL CR0hXkSCOd2g1kmJSOM7GW0BCvJ4Rk8k1y1g71SynmE1uuO9SY1zHjdOH/teFpUe 0ACwjcCRUOwymTD5d0y83Q3VRKmrGfBLSEw9BImKVdlrrBNo9wmtT3CJ4HMqrIjs zlZMCykpGFIzUw0Qlz82rhY8SalcrdkbKp/qm8K2qpJ75iIEbU0HIRiXo8uyegwU YfyWi0GGbs8sNgHratXk3+oKnv0IblKlNl8/1dc0BxOvoshzwlyiYEtXOIC7+FQc IG80h01s+tgFKw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:26 2025 by rpki-client