This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft File: 5eioFf01iudtJ0sEWwpxW9UcYng.mft (raw, json) Hash identifier: SiWXxisec+7b++N6tOeLNSDdvLFUQGMCyyyXQfynikU= Subject key identifier: 43:4E:C8:06:DC:18:6B:78:36:60:EE:05:DD:99:AD:13:3C:F4:6D:5E Authority key identifier: E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78 Certificate issuer: /CN=e5e8a815fd358ae76d274b045b0a715bd51c6278 Certificate serial: 019AF2099D9A7608BAFEE8AC7461B177D6CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft Manifest number: 05C9 Signing time: Sat 06 Dec 2025 05:01:47 +0000 Manifest this update: Sat 06 Dec 2025 05:01:47 +0000 Manifest next update: Sun 07 Dec 2025 05:01:47 +0000 Files and hashes: 1: 5eioFf01iudtJ0sEWwpxW9UcYng.crl (hash: pOZNc1VHo5F7svPu6B7VWVWrPi2TnOWj7hzJsMz83E4=) 2: zgXChFab3CAW1cEIvlaaHwBihDQ.roa (hash: KIPNLp3NHIAV1bWGC3MaoaY8HHw3uTlNTX/DpY4nEoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9d:9a:76:08:ba:fe:e8:ac:74:61:b1:77:d6:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5e8a815fd358ae76d274b045b0a715bd51c6278 Validity Not Before: Dec 6 05:01:47 2025 GMT Not After : Dec 7 05:01:47 2025 GMT Subject: CN=434ec806dc186b783660ee05dd99ad133cf46d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ae:a0:ed:ee:cd:a7:98:36:0b:36:8c:59:07: ad:ed:75:85:96:2c:04:9f:54:7b:90:98:24:36:a4: f3:bc:f2:bf:2f:2d:7e:09:3f:09:7f:85:cd:e5:6c: 26:ef:3e:68:38:39:5c:0d:97:a6:59:fc:b7:00:fb: 18:56:3e:44:89:0a:c1:cd:36:68:61:1d:db:1c:ec: 54:d2:44:db:38:35:dd:f2:92:28:e7:f4:8d:c7:7a: 06:03:76:2c:e6:c4:d4:7a:dc:54:0b:8e:ad:8d:0c: 55:3a:4a:a0:43:ed:0f:92:e5:62:12:20:d2:e0:d7: 23:23:6f:f8:f7:00:00:83:24:c0:38:26:30:5f:35: b0:13:ff:8f:a6:9c:f5:c0:58:a0:64:b9:71:36:39: c2:5c:65:7a:4a:41:2b:21:fc:68:68:06:d2:53:81: 23:e4:f9:80:08:5e:51:48:9d:0f:c7:52:0c:23:26: 8e:cb:0b:eb:15:bd:61:43:e7:db:93:59:c2:e3:d9: f9:2a:e9:bf:38:6e:96:69:6a:fc:67:4c:65:ff:ec: b2:8d:51:b6:06:8d:48:67:7b:5d:80:8b:45:86:1e: b5:19:4c:38:0b:58:f1:de:dd:36:e3:29:95:8f:11: 65:15:87:86:5b:10:ef:9c:e7:bf:f0:d2:f1:64:4c: bd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4E:C8:06:DC:18:6B:78:36:60:EE:05:DD:99:AD:13:3C:F4:6D:5E X509v3 Authority Key Identifier: keyid:E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:67:0e:73:cf:61:b6:d4:05:f6:92:df:fd:60:ca:80:3b:4f: a5:b0:00:5a:92:4f:bc:67:6a:ca:66:da:c6:29:b6:be:5a:e6: f3:d1:ab:23:62:47:8c:1c:db:c1:b2:47:47:06:35:ed:94:6f: 75:40:97:57:ac:66:78:7f:68:39:40:5d:87:a3:e7:3c:c9:6b: 93:9c:ad:f2:5e:f4:7e:8a:20:66:64:77:76:df:4e:7a:60:a8: e0:20:35:e2:7c:d7:6e:d4:7c:46:c5:49:b0:2d:69:58:00:e2: eb:32:76:c4:f0:f7:36:d7:d5:49:40:a7:ca:6f:19:4c:4a:84: f3:a1:ab:ae:f5:07:50:b1:0c:2b:ed:e4:90:d9:e8:10:9e:64: e6:f4:9e:a5:31:1d:f5:8b:05:18:4f:ab:25:eb:1b:3e:a9:1d: d8:2d:58:d8:59:08:5e:18:dd:c2:fe:d3:cb:eb:cc:0b:d7:8f: c1:5a:ae:7b:3b:34:22:5f:1d:3f:c7:56:b0:c1:c1:0e:99:cc: bb:4c:a3:09:b0:6e:71:5b:76:ba:1a:43:8b:f4:de:8a:59:3a: 46:b6:c7:c5:37:2e:90:65:1e:98:e6:b4:4a:49:91:9f:1f:5a: 79:0b:2a:d6:86:64:2e:d6:3c:c1:80:2d:0a:00:d5:e5:98:bf: 66:d6:1d:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZ2adgi6/uisdGGxd9bNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZThhODE1ZmQzNThhZTc2ZDI3NGIwNDViMGE3MTViZDUx YzYyNzgwHhcNMjUxMjA2MDUwMTQ3WhcNMjUxMjA3MDUwMTQ3WjAzMTEwLwYDVQQD Eyg0MzRlYzgwNmRjMTg2Yjc4MzY2MGVlMDVkZDk5YWQxMzNjZjQ2ZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza6g7e7Np5g2CzaMWQet7XWFliwE n1R7kJgkNqTzvPK/Ly1+CT8Jf4XN5Wwm7z5oODlcDZemWfy3APsYVj5EiQrBzTZo YR3bHOxU0kTbODXd8pIo5/SNx3oGA3Ys5sTUetxUC46tjQxVOkqgQ+0PkuViEiDS 4NcjI2/49wAAgyTAOCYwXzWwE/+Pppz1wFigZLlxNjnCXGV6SkErIfxoaAbSU4Ej 5PmACF5RSJ0Px1IMIyaOywvrFb1hQ+fbk1nC49n5Kum/OG6WaWr8Z0xl/+yyjVG2 Bo1IZ3tdgItFhh61GUw4C1jx3t024ymVjxFlFYeGWxDvnOe/8NLxZEy94wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENOyAbcGGt4NmDuBd2ZrRM89G1eMB8GA1UdIwQY MBaAFOXoqBX9NYrnbSdLBFsKcVvVHGJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWVpb0ZmMDFpdWR0SjBzRVd3cHhXOVVjWW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85MjNlNzgtNzhhNy00ZDk3LTlhN2Mt Nzg2ZGUzZDFhYmU0LzEvNWVpb0ZmMDFpdWR0SjBzRVd3cHhXOVVjWW5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi85MjNlNzgtNzhhNy00ZDk3LTlhN2MtNzg2ZGUzZDFhYmU0 LzEvNWVpb0ZmMDFpdWR0SjBzRVd3cHhXOVVjWW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWcOc89h ttQF9pLf/WDKgDtPpbAAWpJPvGdqymbaxim2vlrm89GrI2JHjBzbwbJHRwY17ZRv dUCXV6xmeH9oOUBdh6PnPMlrk5yt8l70foogZmR3dt9OemCo4CA14nzXbtR8RsVJ sC1pWADi6zJ2xPD3NtfVSUCnym8ZTEqE86GrrvUHULEMK+3kkNnoEJ5k5vSepTEd 9YsFGE+rJesbPqkd2C1Y2FkIXhjdwv7Ty+vMC9ePwVquezs0Il8dP8dWsMHBDpnM u0yjCbBucVt2uhpDi/Teilk6RrbHxTcukGUemOa0SkmRnx9aeQsq1oZkLtY8wYAt CgDV5Zi/ZtYdLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:05 2025 by rpki-client