This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft File: 5qTLdM9STBgSHVO1MsA8BvSta-Y.mft (raw, json) Hash identifier: JpHcHvz7lvt27AwMB2jJRMIaRznyoRYAQAUqwEu1UZo= Subject key identifier: 60:A5:6F:22:C7:71:F0:51:C4:14:43:52:67:20:88:FF:E3:6B:D0:BB Authority key identifier: E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6 Certificate issuer: /CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6 Certificate serial: 019AF19B7FA501635EA6A73FEE10577C04EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft Manifest number: 115B Signing time: Sat 06 Dec 2025 03:01:30 +0000 Manifest this update: Sat 06 Dec 2025 03:01:30 +0000 Manifest next update: Sun 07 Dec 2025 03:01:30 +0000 Files and hashes: 1: 5qTLdM9STBgSHVO1MsA8BvSta-Y.crl (hash: ITbcsTpMRllA8jr9Z3S8KLFcuzCbL43zZWp1KRVkLPI=) 2: FXr_S2B4fxLM9qAbLsO0vh-M550.roa (hash: XI0iDABL8ODtA8iq4rY+TAYyWpnlmsL+6qt8rzYOd/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:7f:a5:01:63:5e:a6:a7:3f:ee:10:57:7c:04:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6 Validity Not Before: Dec 6 03:01:30 2025 GMT Not After : Dec 7 03:01:30 2025 GMT Subject: CN=60a56f22c771f051c4144352672088ffe36bd0bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:be:92:9f:3a:8b:5d:60:97:c6:d4:4c:1f:a0: 4d:a9:3e:30:b2:3c:89:79:e4:cf:ee:1a:14:e2:74: 4c:dd:03:ff:5f:a3:f2:c8:b3:98:75:19:48:fc:62: 43:f6:7e:62:82:dd:e8:15:0e:4d:e5:af:a0:54:71: a1:c9:12:67:fa:d5:e7:a8:fe:36:aa:7d:e4:60:37: 30:b9:b5:7a:a1:2e:ac:3d:de:b6:3a:12:69:23:0f: 2f:83:1e:89:a6:76:25:42:75:37:67:bc:24:65:a9: b8:e5:af:e0:7f:3d:54:9d:73:cb:73:9b:bd:cc:79: 35:3c:12:0b:dd:ae:5e:dc:d7:dc:5a:8b:c0:90:dc: e5:4b:2f:b4:4e:e5:c3:72:1f:6d:7c:f2:39:4a:99: a3:81:23:b6:b4:a7:35:53:a7:7d:20:c2:de:01:47: 02:ac:52:a7:da:02:67:33:28:f5:b7:2c:4d:11:f6: 73:81:8b:a6:09:eb:0b:5a:f2:08:34:a6:3d:9a:da: 3a:c3:86:e2:61:52:20:fd:03:56:a5:ce:62:b5:37: 8e:9f:09:08:75:5f:80:b9:d8:2b:9f:c9:68:a0:71: 72:a0:65:0f:fb:6c:95:ef:e4:dc:f1:2d:99:2e:b8: 40:17:2d:33:e2:30:76:45:08:09:6b:be:68:ba:61: 21:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A5:6F:22:C7:71:F0:51:C4:14:43:52:67:20:88:FF:E3:6B:D0:BB X509v3 Authority Key Identifier: keyid:E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:00:d0:cc:3c:d3:df:ab:f2:bf:03:d1:0d:ff:0f:7c:6d:65: 65:03:f5:2f:81:0c:3f:60:48:c0:b1:51:82:38:51:c1:99:05: 93:5b:91:b3:48:74:92:83:02:07:27:f9:ec:cf:6d:4c:72:cd: 83:5a:bc:66:81:7e:1e:bc:a6:93:c4:94:a6:12:55:5b:0b:9a: 42:cc:64:83:8a:7c:f6:ed:54:e7:a8:57:f6:ae:2e:71:b0:9c: bd:29:94:a9:9c:ae:95:d5:4e:63:dd:43:f4:ba:52:07:3f:2e: 17:0e:3a:86:34:dd:85:9e:99:3e:b2:5b:eb:a1:b8:08:c7:99: db:76:3d:dd:e5:8a:8b:04:77:6c:11:ef:fb:fb:09:10:2f:c4: e5:38:38:07:5a:cf:4b:b9:56:0f:20:9f:28:f1:91:9d:44:4f: 3a:0a:e1:8a:2b:92:16:56:83:dc:89:84:6f:ef:e9:28:86:2b: d4:27:69:4d:e3:63:84:35:f5:d8:08:74:be:93:f0:74:ef:37: dd:2b:50:be:90:d7:ff:31:40:e2:08:b2:bd:e1:5f:e3:9e:a2: 96:e5:9b:c2:33:e9:85:cd:0d:80:4d:72:9c:51:66:95:d7:23: c2:66:9f:07:f3:e3:bc:2a:d5:06:29:0c:ab:b1:ea:45:92:0f: 72:48:55:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3+lAWNepqc/7hBXfATsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YTRjYjc0Y2Y1MjRjMTgxMjFkNTNiNTMyYzAzYzA2ZjRh ZDZiZTYwHhcNMjUxMjA2MDMwMTMwWhcNMjUxMjA3MDMwMTMwWjAzMTEwLwYDVQQD Eyg2MGE1NmYyMmM3NzFmMDUxYzQxNDQzNTI2NzIwODhmZmUzNmJkMGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL6SnzqLXWCXxtRMH6BNqT4wsjyJ eeTP7hoU4nRM3QP/X6PyyLOYdRlI/GJD9n5igt3oFQ5N5a+gVHGhyRJn+tXnqP42 qn3kYDcwubV6oS6sPd62OhJpIw8vgx6JpnYlQnU3Z7wkZam45a/gfz1UnXPLc5u9 zHk1PBIL3a5e3NfcWovAkNzlSy+0TuXDch9tfPI5SpmjgSO2tKc1U6d9IMLeAUcC rFKn2gJnMyj1tyxNEfZzgYumCesLWvIINKY9mto6w4biYVIg/QNWpc5itTeOnwkI dV+Audgrn8looHFyoGUP+2yV7+Tc8S2ZLrhAFy0z4jB2RQgJa75oumEhwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGClbyLHcfBRxBRDUmcgiP/ja9C7MB8GA1UdIwQY MBaAFOaky3TPUkwYEh1TtTLAPAb0rWvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXFUTGRNOVNUQmdTSFZPMU1zQThCdlN0YS1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mOWY3NzMtMTIxZS00NTBkLWI2MDYt OThiZjQyODlkZjNiLzEvNXFUTGRNOVNUQmdTSFZPMU1zQThCdlN0YS1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mOWY3NzMtMTIxZS00NTBkLWI2MDYtOThiZjQyODlkZjNi LzEvNXFUTGRNOVNUQmdTSFZPMU1zQThCdlN0YS1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewDQzDzT 36vyvwPRDf8PfG1lZQP1L4EMP2BIwLFRgjhRwZkFk1uRs0h0koMCByf57M9tTHLN g1q8ZoF+Hrymk8SUphJVWwuaQsxkg4p89u1U56hX9q4ucbCcvSmUqZyuldVOY91D 9LpSBz8uFw46hjTdhZ6ZPrJb66G4CMeZ23Y93eWKiwR3bBHv+/sJEC/E5Tg4B1rP S7lWDyCfKPGRnURPOgrhiiuSFlaD3ImEb+/pKIYr1CdpTeNjhDX12Ah0vpPwdO83 3StQvpDX/zFA4giyveFf456iluWbwjPphc0NgE1ynFFmldcjwmafB/PjvCrVBikM q7HqRZIPckhVxA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:40:15 2025 by rpki-client