This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft File: 5llE5PrhnBWib8tfJzL_G6I9NU0.mft (raw, json) Hash identifier: ZmBtRtBG0nSuoQ6ubKfXP7J5mO1kET3qYdkda7H9yy0= Subject key identifier: AA:E3:64:37:06:97:02:D1:49:A1:9F:7C:77:F2:0B:C7:CC:C9:E9:DC Authority key identifier: E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D Certificate issuer: /CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d Certificate serial: 019AF19A98841D80F262E642574B0F533483 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft Manifest number: 0420 Signing time: Sat 06 Dec 2025 03:00:31 +0000 Manifest this update: Sat 06 Dec 2025 03:00:31 +0000 Manifest next update: Sun 07 Dec 2025 03:00:31 +0000 Files and hashes: 1: 5llE5PrhnBWib8tfJzL_G6I9NU0.crl (hash: C5MWQk62tYQiPErEh2dQf1yjVj/Se/MGEunEB2Dih0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:98:84:1d:80:f2:62:e6:42:57:4b:0f:53:34:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d Validity Not Before: Dec 6 03:00:31 2025 GMT Not After : Dec 7 03:00:31 2025 GMT Subject: CN=aae36437069702d149a19f7c77f20bc7ccc9e9dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5c:ec:b7:66:17:aa:1a:b1:72:8a:97:10:50: e2:60:bd:9b:05:1b:5d:68:f2:b6:f8:04:f3:0b:16: 34:06:80:39:ee:56:dc:38:d3:e9:d8:5c:5b:99:10: e3:10:33:62:e1:c7:19:b9:e5:c3:7b:c7:f7:72:bd: 70:66:80:37:2b:44:fb:d3:e7:91:12:16:56:02:45: 48:2b:fe:b3:e2:ba:58:6b:47:0a:82:48:a6:40:d7: ef:90:03:5a:53:44:99:58:b9:ca:73:5a:27:84:f2: ba:88:3b:8b:71:6a:a9:d2:50:a5:23:2b:2e:0a:03: fd:0b:3b:a4:fc:0f:ae:8a:3b:d7:29:54:44:92:94: 90:67:31:22:76:84:8d:08:ed:bd:9c:66:16:24:a3: 2e:9a:72:e8:f7:3f:53:83:8a:8d:bc:bc:31:7a:31: fd:94:f2:16:e4:5e:01:81:e6:24:34:30:cc:3b:62: 05:69:b9:ff:5c:ee:00:49:2c:90:19:06:e5:7a:9e: 9e:fd:76:66:f4:13:60:13:f2:09:dd:ed:49:e8:4e: 6f:09:a1:35:dc:34:e1:e6:b2:07:28:bd:f2:94:bc: a9:47:4a:b3:9e:03:a4:d8:ea:ae:64:08:4a:f3:11: 32:ee:60:57:58:ff:e6:1e:c4:cb:f5:64:06:6b:fb: cd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E3:64:37:06:97:02:D1:49:A1:9F:7C:77:F2:0B:C7:CC:C9:E9:DC X509v3 Authority Key Identifier: keyid:E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:00:c4:9e:81:64:96:02:42:49:d2:cb:63:1a:13:32:ee:4a: 6d:28:ee:78:5b:e5:79:12:84:66:15:ab:8f:9d:2a:0f:63:2e: 5a:85:5f:b9:da:5f:7b:52:97:8c:e6:cd:53:8e:4e:a3:94:41: 67:d3:7f:bc:f7:f1:97:09:31:fe:ef:02:78:a3:94:af:a4:2e: 9a:61:b3:84:3e:e3:0b:95:3e:ad:13:71:94:2e:51:f6:69:22: bb:5f:14:c2:ca:b6:c3:c0:da:14:cd:b9:46:70:eb:80:2e:14: 76:66:a3:87:65:20:94:ae:ac:8b:3b:62:56:18:c8:43:1b:a2: 09:82:0d:57:44:d4:48:20:72:17:8f:90:df:2d:38:3b:ec:07: a0:ea:76:5a:be:50:72:be:c2:ac:69:03:f9:cd:79:16:02:db: b5:38:8d:31:66:54:9e:81:6f:fd:e5:84:18:85:bc:87:34:5d: 09:32:b4:f2:55:7f:b2:69:e5:cd:2c:b8:a1:99:15:bd:25:ba: d7:d4:34:0c:89:41:d0:4d:5a:30:c4:fc:b7:48:38:c8:32:5c: 03:e7:94:45:9e:9c:09:89:82:16:c7:64:20:c7:c0:40:37:b4: 92:72:00:11:f9:51:24:c7:f2:8c:d9:f4:3f:9d:ca:67:f4:47: 87:0a:e3:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpiEHYDyYuZCV0sPUzSDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NTk0NGU0ZmFlMTljMTVhMjZmY2I1ZjI3MzJmZjFiYTIz ZDM1NGQwHhcNMjUxMjA2MDMwMDMxWhcNMjUxMjA3MDMwMDMxWjAzMTEwLwYDVQQD EyhhYWUzNjQzNzA2OTcwMmQxNDlhMTlmN2M3N2YyMGJjN2NjYzllOWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41zst2YXqhqxcoqXEFDiYL2bBRtd aPK2+ATzCxY0BoA57lbcONPp2FxbmRDjEDNi4ccZueXDe8f3cr1wZoA3K0T70+eR EhZWAkVIK/6z4rpYa0cKgkimQNfvkANaU0SZWLnKc1onhPK6iDuLcWqp0lClIysu CgP9Czuk/A+uijvXKVREkpSQZzEidoSNCO29nGYWJKMumnLo9z9Tg4qNvLwxejH9 lPIW5F4BgeYkNDDMO2IFabn/XO4ASSyQGQblep6e/XZm9BNgE/IJ3e1J6E5vCaE1 3DTh5rIHKL3ylLypR0qzngOk2OquZAhK8xEy7mBXWP/mHsTL9WQGa/vNXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrjZDcGlwLRSaGffHfyC8fMyencMB8GA1UdIwQY MBaAFOZZROT64ZwVom/LXycy/xuiPTVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWxsRTVQcmhuQldpYjh0Zkp6TF9HNkk5TlUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83M2RhMGQtZmM4Mi00NTcyLTg4ZDMt Njk4Y2M3MjY4ODgwLzEvNWxsRTVQcmhuQldpYjh0Zkp6TF9HNkk5TlUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83M2RhMGQtZmM4Mi00NTcyLTg4ZDMtNjk4Y2M3MjY4ODgw LzEvNWxsRTVQcmhuQldpYjh0Zkp6TF9HNkk5TlUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwDEnoFk lgJCSdLLYxoTMu5KbSjueFvleRKEZhWrj50qD2MuWoVfudpfe1KXjObNU45Oo5RB Z9N/vPfxlwkx/u8CeKOUr6QummGzhD7jC5U+rRNxlC5R9mkiu18Uwsq2w8DaFM25 RnDrgC4Udmajh2UglK6siztiVhjIQxuiCYINV0TUSCByF4+Q3y04O+wHoOp2Wr5Q cr7CrGkD+c15FgLbtTiNMWZUnoFv/eWEGIW8hzRdCTK08lV/smnlzSy4oZkVvSW6 19Q0DIlB0E1aMMT8t0g4yDJcA+eURZ6cCYmCFsdkIMfAQDe0knIAEflRJMfyjNn0 P53KZ/RHhwrjQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:33:22 2025 by rpki-client