This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft File: 5WzVePQvjeBnI2dnxs_CusvBbgU.mft (raw, json) Hash identifier: 5f19aWVWRUU9GzqOEFPwKs3V4w+oyE+3AQ4PIFZNpbM= Subject key identifier: 0F:19:E6:C9:B5:2B:77:1B:E0:82:D5:98:C8:8D:AC:C9:FF:4C:A9:8F Authority key identifier: E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05 Certificate issuer: /CN=e56cd578f42f8de067236767c6cfc2bacbc16e05 Certificate serial: 019AF20926C000154A5015D200811ED20520 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft Manifest number: 16DF Signing time: Sat 06 Dec 2025 05:01:17 +0000 Manifest this update: Sat 06 Dec 2025 05:01:17 +0000 Manifest next update: Sun 07 Dec 2025 05:01:17 +0000 Files and hashes: 1: 5WzVePQvjeBnI2dnxs_CusvBbgU.crl (hash: PrT5xLzv1isGM5nVRz8W5izUaU9pwNlaiMENOjfIydI=) 2: QNHfp-QpZNwcvnNXnGl6CZVZ8Tc.roa (hash: 6rWKjyivZLws8Y1JTJaRv4be4dA3ijdzaWgzmRI12KU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:26:c0:00:15:4a:50:15:d2:00:81:1e:d2:05:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e56cd578f42f8de067236767c6cfc2bacbc16e05 Validity Not Before: Dec 6 05:01:17 2025 GMT Not After : Dec 7 05:01:17 2025 GMT Subject: CN=0f19e6c9b52b771be082d598c88dacc9ff4ca98f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:05:77:27:ad:76:7e:8f:55:1d:1b:99:a4:f6: b5:1f:ef:e0:55:06:30:e8:bd:e5:5e:e5:7a:45:f8: 46:c0:4c:bb:3a:65:b3:f0:0d:fb:e0:ce:b5:3a:05: 27:5a:74:e7:7f:00:5c:31:e4:8c:a6:99:24:63:2f: a3:83:89:70:b4:31:c0:ce:3a:69:fc:1d:8d:66:40: e4:6a:66:00:89:3c:48:71:9c:a4:4a:a4:3d:0c:23: ce:03:55:c1:49:61:0b:56:76:1c:9a:ea:1c:0f:b6: 54:20:ee:ae:71:d2:bb:0f:58:87:a0:ff:8c:2c:b7: 6f:0a:b2:b3:40:70:11:30:4a:5b:fe:29:55:57:f5: 4f:d7:02:0a:ee:29:87:8a:82:2a:79:85:62:a8:b9: 58:26:7a:9b:7e:a1:7a:f3:0a:12:d6:e7:4b:44:ea: 4d:73:34:f1:5d:d4:7f:96:24:b1:db:bf:51:1e:6d: fd:b6:ef:da:39:a9:1b:d1:b0:0b:e9:c3:b2:1f:25: c3:5a:42:d4:15:71:df:cc:4f:cd:c4:c7:82:f7:98: 33:69:f7:81:fc:e9:d5:2f:d1:cf:4f:ee:c7:d0:24: 3b:e8:c2:32:73:2d:59:c4:e0:e0:c2:05:2e:ec:a7: eb:a4:c6:87:89:d7:74:bb:3c:42:8b:a1:d4:7f:2d: 5f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:19:E6:C9:B5:2B:77:1B:E0:82:D5:98:C8:8D:AC:C9:FF:4C:A9:8F X509v3 Authority Key Identifier: keyid:E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:07:0f:fe:d4:97:12:4c:3a:ad:dc:ea:30:0c:23:90:fe:9b: d0:5b:f3:e5:2b:0a:b6:db:ca:b7:c1:41:cb:d2:2a:c6:45:04: de:61:f1:1b:20:ca:87:5e:9b:53:a1:33:aa:e3:ed:f5:cf:a6: ae:1d:61:f3:50:75:d8:a1:2a:a7:7a:7f:9f:29:74:9a:93:fb: 6c:53:66:67:df:f9:16:cb:2b:9c:f1:e6:48:b4:d3:54:e1:9b: 03:62:05:0b:12:02:9c:ae:35:a4:b7:94:96:a4:86:96:38:ab: 8d:e0:42:fb:b0:f6:cb:9c:d3:0b:ae:4b:bc:2f:4a:f7:8d:15: 17:e5:1e:87:63:4b:8f:8f:21:a0:ef:88:bf:0c:9b:d1:ba:56: 25:57:c5:76:df:b7:e2:18:31:e1:5d:08:05:c8:c8:8d:5a:1d: f8:99:1f:c1:00:f5:a1:6d:7d:db:ec:9b:4c:e0:35:74:2b:da: b9:a0:11:9a:4e:3d:f1:6d:df:eb:2b:22:cc:3e:d0:c4:b5:0d: 48:25:32:87:b8:fd:1d:21:5d:5b:c4:4b:57:a9:64:cd:e6:40: 28:75:2e:60:0a:95:1b:ec:46:8f:6b:d9:41:9c:d9:78:ae:97: cc:88:9a:43:e0:b1:b9:55:b3:ba:84:80:02:c1:4e:fb:e3:eb: 84:c3:b2:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSbAABVKUBXSAIEe0gUgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NmNkNTc4ZjQyZjhkZTA2NzIzNjc2N2M2Y2ZjMmJhY2Jj MTZlMDUwHhcNMjUxMjA2MDUwMTE3WhcNMjUxMjA3MDUwMTE3WjAzMTEwLwYDVQQD EygwZjE5ZTZjOWI1MmI3NzFiZTA4MmQ1OThjODhkYWNjOWZmNGNhOThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwV3J612fo9VHRuZpPa1H+/gVQYw 6L3lXuV6RfhGwEy7OmWz8A374M61OgUnWnTnfwBcMeSMppkkYy+jg4lwtDHAzjpp /B2NZkDkamYAiTxIcZykSqQ9DCPOA1XBSWELVnYcmuocD7ZUIO6ucdK7D1iHoP+M LLdvCrKzQHARMEpb/ilVV/VP1wIK7imHioIqeYViqLlYJnqbfqF68woS1udLROpN czTxXdR/liSx279RHm39tu/aOakb0bAL6cOyHyXDWkLUFXHfzE/NxMeC95gzafeB /OnVL9HPT+7H0CQ76MIycy1ZxODgwgUu7KfrpMaHidd0uzxCi6HUfy1f1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8Z5sm1K3cb4ILVmMiNrMn/TKmPMB8GA1UdIwQY MBaAFOVs1Xj0L43gZyNnZ8bPwrrLwW4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVd6VmVQUXZqZUJuSTJkbnhzX0N1c3ZCYmdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yOWRlNDYtYzJlOS00OGZiLTkyZDQt YjdhNTY0YWZiMDRiLzEvNVd6VmVQUXZqZUJuSTJkbnhzX0N1c3ZCYmdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8yOWRlNDYtYzJlOS00OGZiLTkyZDQtYjdhNTY0YWZiMDRi LzEvNVd6VmVQUXZqZUJuSTJkbnhzX0N1c3ZCYmdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOAcP/tSX Ekw6rdzqMAwjkP6b0Fvz5SsKttvKt8FBy9IqxkUE3mHxGyDKh16bU6EzquPt9c+m rh1h81B12KEqp3p/nyl0mpP7bFNmZ9/5FssrnPHmSLTTVOGbA2IFCxICnK41pLeU lqSGljirjeBC+7D2y5zTC65LvC9K940VF+Ueh2NLj48hoO+Ivwyb0bpWJVfFdt+3 4hgx4V0IBcjIjVod+JkfwQD1oW192+ybTOA1dCvauaARmk498W3f6ysizD7QxLUN SCUyh7j9HSFdW8RLV6lkzeZAKHUuYAqVG+xGj2vZQZzZeK6XzIiaQ+CxuVWzuoSA AsFO++PrhMOyMg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:34 2025 by rpki-client