This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json) Hash identifier: PIVzkFLG5Nd5FfGtK5yrRqFdFEOLR38jFttmr96Q6kU= Subject key identifier: A5:55:14:82:18:0C:FF:9F:6D:14:32:1D:73:7B:2F:4E:CA:78:04:F7 Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb Certificate serial: 019AF23FD38A376DF662DBB3E0621F1D3AAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft Manifest number: 135A Signing time: Sat 06 Dec 2025 06:01:00 +0000 Manifest this update: Sat 06 Dec 2025 06:01:00 +0000 Manifest next update: Sun 07 Dec 2025 06:01:00 +0000 Files and hashes: 1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: lqPDqkj34+83JwGutx2kjkjwRYnRDHhU76e/h4voXNM=) 2: heGVk36ucrG4MWNpzqidvrKZ7YQ.roa (hash: m5uFEBEQAoAGMceOf2ib4bFCfxUv5uqZ6mZG8baGWlk=) 3: vKXgeHxyf9Ij8PbBtwAWk4PkSNM.roa (hash: FZfpvGBPzqeBXQfd0+/kWA7PAyR+Gx7rv6DgDmnZlfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d3:8a:37:6d:f6:62:db:b3:e0:62:1f:1d:3a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb Validity Not Before: Dec 6 06:01:00 2025 GMT Not After : Dec 7 06:01:00 2025 GMT Subject: CN=a5551482180cff9f6d14321d737b2f4eca7804f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c3:9c:c5:78:b6:37:01:89:c0:32:54:75:33: 04:e3:6f:97:43:75:97:f5:5d:3e:39:72:4b:ec:77: 02:81:bd:34:17:76:1c:a8:ef:2d:14:56:38:1d:83: 0c:c7:6b:be:30:94:c4:a4:2c:83:fd:64:15:43:1e: 99:e2:63:c9:2d:78:52:a4:42:81:0e:29:20:12:da: c7:aa:bc:58:9f:78:45:33:77:a2:cb:6f:f3:ed:20: 45:8e:35:b1:0a:d4:88:fb:f3:fa:9c:66:58:88:13: a0:ec:60:3c:cc:dd:04:90:17:ac:5f:8f:a3:e3:ce: 8e:11:87:fa:dc:cf:13:90:29:31:de:d7:b7:ec:de: 48:3e:51:d9:cd:6e:cf:eb:09:84:75:00:f7:12:92: 6f:ef:0b:f4:57:a2:19:cf:f5:46:6f:00:9d:5b:ff: 80:93:c0:84:a3:c1:40:66:41:a4:40:0b:f3:88:6d: 23:6b:f1:36:a9:69:7a:b1:d2:b2:f0:cf:0f:ea:f0: 21:40:b9:af:32:0d:d1:3a:00:5a:e7:2d:ce:97:5a: 37:3b:ac:e7:7f:8c:95:67:e5:1a:81:cd:e8:a7:ab: a2:4b:1b:48:14:72:3c:10:7d:d3:2b:74:53:59:76: f7:25:07:16:b7:a5:5e:db:f8:f6:d7:33:32:10:e7: 6a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:55:14:82:18:0C:FF:9F:6D:14:32:1D:73:7B:2F:4E:CA:78:04:F7 X509v3 Authority Key Identifier: keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:b1:f7:2a:95:77:7a:b9:41:b6:7d:3a:7f:15:cb:16:04:36: 32:80:c3:b3:d7:af:06:17:81:df:cf:17:92:78:1b:c8:39:89: 4a:19:79:52:f3:a2:6f:4a:81:3a:4d:38:82:0b:35:ae:19:73: 21:76:3c:5a:fe:f9:59:4e:a7:0e:8e:0a:a2:dd:35:a1:d4:87: 97:3b:fe:72:6e:93:20:dc:85:32:32:37:ad:08:23:29:49:cf: 1a:79:c7:46:95:aa:22:02:6c:d6:52:f3:30:2b:99:57:51:8c: 25:e4:0c:ad:74:89:72:1f:d2:82:53:a8:e5:15:47:01:8a:1b: 27:40:64:9a:51:5d:0f:56:3b:58:95:17:ea:5e:56:69:62:55: 05:1c:5a:8d:64:17:65:50:bd:7f:ba:70:b0:6c:81:76:d7:d3: 10:51:b0:1c:aa:3f:f3:1d:e1:87:b8:ce:f2:b5:bd:a5:7c:31: 2c:78:8c:8c:55:3e:28:38:fc:45:bf:42:28:dd:74:5e:42:45: 94:2f:c9:aa:96:7e:7f:41:e5:8f:b4:87:48:fd:a7:0b:37:b5: 0b:f1:2a:59:ae:d7:05:b7:43:f4:71:4a:74:fc:09:fb:4a:6e: ee:a2:49:71:65:85:cc:b8:fb:1a:57:dd:0c:ec:77:ac:30:fd: 4e:1b:7a:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9OKN232Ytuz4GIfHTqvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MTM1ZDYzOTc2OGEzYTYzZWQ5YzVmZjQwYWY1ZWQwMWRm NzQxY2IwHhcNMjUxMjA2MDYwMTAwWhcNMjUxMjA3MDYwMTAwWjAzMTEwLwYDVQQD EyhhNTU1MTQ4MjE4MGNmZjlmNmQxNDMyMWQ3MzdiMmY0ZWNhNzgwNGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MOcxXi2NwGJwDJUdTME42+XQ3WX 9V0+OXJL7HcCgb00F3YcqO8tFFY4HYMMx2u+MJTEpCyD/WQVQx6Z4mPJLXhSpEKB DikgEtrHqrxYn3hFM3eiy2/z7SBFjjWxCtSI+/P6nGZYiBOg7GA8zN0EkBesX4+j 486OEYf63M8TkCkx3te37N5IPlHZzW7P6wmEdQD3EpJv7wv0V6IZz/VGbwCdW/+A k8CEo8FAZkGkQAvziG0ja/E2qWl6sdKy8M8P6vAhQLmvMg3ROgBa5y3Ol1o3O6zn f4yVZ+Uagc3op6uiSxtIFHI8EH3TK3RTWXb3JQcWt6Ve2/j21zMyEOdqJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVVFIIYDP+fbRQyHXN7L07KeAT3MB8GA1UdIwQY MBaAFOYTXWOXaKOmPtnF/0CvXtAd90HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2Et MGE3NzBmMGM3NjA4LzEvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2EtMGE3NzBmMGM3NjA4 LzEvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLH3KpV3 erlBtn06fxXLFgQ2MoDDs9evBheB388XkngbyDmJShl5UvOib0qBOk04ggs1rhlz IXY8Wv75WU6nDo4Kot01odSHlzv+cm6TINyFMjI3rQgjKUnPGnnHRpWqIgJs1lLz MCuZV1GMJeQMrXSJch/SglOo5RVHAYobJ0BkmlFdD1Y7WJUX6l5WaWJVBRxajWQX ZVC9f7pwsGyBdtfTEFGwHKo/8x3hh7jO8rW9pXwxLHiMjFU+KDj8Rb9CKN10XkJF lC/JqpZ+f0Hlj7SHSP2nCze1C/EqWa7XBbdD9HFKdPwJ+0pu7qJJcWWFzLj7Glfd DOx3rDD9Tht6Ng== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:26 2025 by rpki-client