This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft File: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json) Hash identifier: gIpIZeQcKF2YXNx2CWPJMvy4VNKxm9qUcsFsnGeld2k= Subject key identifier: 50:99:63:2F:9E:6C:FE:45:C1:B6:4B:36:08:4A:F7:68:82:F5:D3:D6 Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f Certificate serial: 019AF4656A87D3AC7D988C9E328A907E1B6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft Manifest number: 0BD3 Signing time: Sat 06 Dec 2025 16:01:18 +0000 Manifest this update: Sat 06 Dec 2025 16:01:18 +0000 Manifest next update: Sun 07 Dec 2025 16:01:18 +0000 Files and hashes: 1: 0fMiJFl550osRSOwJ53RLThidmY.roa (hash: 62Jum/5Ter4OZqqvtTzk7nbCXv0FL6G77xoVhVQlYjw=) 2: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: 3NO4ET16LHMZvBvTV7R6aNHgzsR3lGszuAOca7X5Vsw=) 3: L9pi3nyxzTSejNrNKTLFupEkeKc.roa (hash: KRhXEXpB0ZgWCnBzMsYjo3MIerLmYQGo8A6sCf5dI54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:6a:87:d3:ac:7d:98:8c:9e:32:8a:90:7e:1b:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f Validity Not Before: Dec 6 16:01:18 2025 GMT Not After : Dec 7 16:01:18 2025 GMT Subject: CN=5099632f9e6cfe45c1b64b36084af76882f5d3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b8:ab:6b:05:c7:a9:db:df:d4:21:59:a3:71: 30:82:54:87:5b:20:9c:a2:50:cb:4c:09:c3:2c:9e: e2:52:6d:94:bb:26:a8:cb:9e:fc:76:e0:b4:5d:1e: e7:b3:39:94:0d:9a:15:a3:39:59:df:77:9f:c0:1f: a9:fb:6d:5e:62:b6:a2:1f:ee:c1:7e:ff:9a:e3:99: bb:e5:b4:47:3e:5d:f2:da:fc:0c:24:5c:39:c0:5b: ca:2c:2f:7e:4c:69:42:36:b8:ee:53:94:e4:b4:ed: 05:c0:40:f7:1a:71:0b:7d:9d:62:bc:75:06:87:32: 5a:9a:bb:59:84:46:2f:3a:39:2b:2b:86:54:c3:2a: 11:77:35:e2:e3:60:e8:33:6f:38:31:13:1e:7d:3d: a5:b4:30:91:e4:a2:58:e5:64:e0:58:d5:b8:41:98: 96:12:66:3b:95:9b:35:89:67:df:04:f5:8b:8f:fe: 31:fa:58:6b:8a:86:89:56:fd:f2:04:70:96:d8:ef: 4f:ee:f9:86:70:7e:d7:ac:3c:83:35:94:5e:14:a1: 2d:5d:97:e0:ab:7d:77:03:eb:44:07:7a:05:d6:ed: d1:2e:d8:cb:2d:f2:81:64:20:f3:d9:24:2e:ff:c3: 41:39:e5:af:be:2d:3f:95:70:a8:20:f5:87:85:aa: e6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:99:63:2F:9E:6C:FE:45:C1:B6:4B:36:08:4A:F7:68:82:F5:D3:D6 X509v3 Authority Key Identifier: keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:cc:b7:29:f6:31:fd:ae:32:4e:e9:96:12:eb:9e:a8:97:5b: 70:ab:1a:e1:2f:f1:02:1c:72:d1:b5:d5:91:0c:2c:63:2f:02: eb:bc:dc:49:d4:4f:bf:3b:71:a9:38:d8:f9:ad:ce:43:60:25: 43:10:67:32:6f:95:99:1e:98:15:79:40:ae:0d:64:18:9c:17: 99:f4:09:f4:54:8a:0c:92:57:17:9c:c7:b3:56:c8:7b:ef:97: d7:d3:29:95:e6:ff:1b:39:83:98:82:25:e8:b9:18:e0:3f:92: a1:1d:72:7c:71:9c:6f:ba:62:40:db:74:e4:32:19:76:4f:7d: 76:20:73:cd:7d:ab:5b:d5:3f:4f:1d:3c:92:cf:33:ef:5e:9b: b8:61:f1:89:ba:1b:8b:f5:d8:24:82:39:05:31:5c:f8:43:01: d7:7c:c2:36:26:bd:b4:d3:c0:cb:3b:8c:3f:55:90:3a:dd:7d: d2:75:18:4f:55:c9:cf:f2:fc:8a:d1:09:5a:c7:0c:f5:fb:84: 38:2b:8e:66:34:1e:b0:c6:c7:99:38:63:11:1a:0b:80:be:fe: 6f:4f:01:8c:54:ae:01:05:cc:af:66:24:2f:00:89:07:77:9e: df:eb:9d:9e:02:a5:54:bd:a0:99:01:f4:9f:2b:07:02:0d:9e: dd:ea:03:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZWqH06x9mIyeMoqQfhtuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YzM0MGVlNWI5ZGFmMWE2ODE4ZjBkZjQwN2ZhNTk3NTg4 NmIxMGYwHhcNMjUxMjA2MTYwMTE4WhcNMjUxMjA3MTYwMTE4WjAzMTEwLwYDVQQD Eyg1MDk5NjMyZjllNmNmZTQ1YzFiNjRiMzYwODRhZjc2ODgyZjVkM2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbirawXHqdvf1CFZo3EwglSHWyCc olDLTAnDLJ7iUm2Uuyaoy578duC0XR7nszmUDZoVozlZ33efwB+p+21eYraiH+7B fv+a45m75bRHPl3y2vwMJFw5wFvKLC9+TGlCNrjuU5TktO0FwED3GnELfZ1ivHUG hzJamrtZhEYvOjkrK4ZUwyoRdzXi42DoM284MRMefT2ltDCR5KJY5WTgWNW4QZiW EmY7lZs1iWffBPWLj/4x+lhrioaJVv3yBHCW2O9P7vmGcH7XrDyDNZReFKEtXZfg q313A+tEB3oF1u3RLtjLLfKBZCDz2SQu/8NBOeWvvi0/lXCoIPWHharmuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCZYy+ebP5FwbZLNghK92iC9dPWMB8GA1UdIwQY MBaAFOXDQO5bna8aaBjw30B/pZdYhrEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kNTEwNGMtZjY0YS00NGNhLWEzN2It NmUxZjJmNjg1MWNmLzEvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9kNTEwNGMtZjY0YS00NGNhLWEzN2ItNmUxZjJmNjg1MWNm LzEvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScy3KfYx /a4yTumWEuueqJdbcKsa4S/xAhxy0bXVkQwsYy8C67zcSdRPvztxqTjY+a3OQ2Al QxBnMm+VmR6YFXlArg1kGJwXmfQJ9FSKDJJXF5zHs1bIe++X19Mpleb/GzmDmIIl 6LkY4D+SoR1yfHGcb7piQNt05DIZdk99diBzzX2rW9U/Tx08ks8z716buGHxibob i/XYJII5BTFc+EMB13zCNia9tNPAyzuMP1WQOt190nUYT1XJz/L8itEJWscM9fuE OCuOZjQesMbHmThjERoLgL7+b08BjFSuAQXMr2YkLwCJB3ee3+udngKlVL2gmQH0 nysHAg2e3eoDIA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:31:12 2025 by rpki-client