This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft File: 5hbHsgGVYH8nsT2I-Svx0Os45g8.mft (raw, json) Hash identifier: BX7xcId/gNRB8htRyX/UTtlFamCQqAWDo+4kFvPSjhw= Subject key identifier: A9:31:3D:03:8D:D7:B8:B7:CB:9A:E4:25:5D:E1:06:82:D3:64:AC:73 Authority key identifier: E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F Certificate issuer: /CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f Certificate serial: 019AF49C28491A044E5B2A00A978F9BE63F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft Manifest number: 0217 Signing time: Sat 06 Dec 2025 17:01:05 +0000 Manifest this update: Sat 06 Dec 2025 17:01:05 +0000 Manifest next update: Sun 07 Dec 2025 17:01:05 +0000 Files and hashes: 1: 5hbHsgGVYH8nsT2I-Svx0Os45g8.crl (hash: 2CwuhTHJCHDNF/+fUHTktXLQW5230z0jCSh4lxJFmes=) 2: kGI3GYIY0x4KUvkaQBv3fV9ynWg.roa (hash: gmJPfaxRI83koFjZWztv8K0vXqe3xOaLvXeiVBQz3Ts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:28:49:1a:04:4e:5b:2a:00:a9:78:f9:be:63:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f Validity Not Before: Dec 6 17:01:05 2025 GMT Not After : Dec 7 17:01:05 2025 GMT Subject: CN=a9313d038dd7b8b7cb9ae4255de10682d364ac73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ad:5a:54:c7:c6:c5:a8:d0:d7:00:d6:db:fd: 01:ec:bc:d0:82:9d:43:d7:7e:f2:d8:1a:d8:24:ac: 4e:35:58:84:70:13:7a:90:a9:78:d6:d3:4e:6a:9f: 4b:31:c5:04:0b:df:d0:fc:6a:db:92:e6:17:27:9c: 0d:c5:16:4f:48:a6:ce:9c:02:02:ed:01:f4:0b:e5: 19:4a:41:89:78:67:66:64:0b:b1:0a:4c:5e:7d:d7: 16:5b:a2:b8:87:de:d3:82:9b:64:4c:fb:00:b3:ff: b2:c5:67:b5:8a:e7:fb:c3:d1:46:50:e7:d5:45:aa: 05:6f:e2:8a:02:7c:72:26:b0:45:a1:51:31:6c:b2: aa:f4:64:0c:59:bd:80:d4:d3:b4:d3:1b:d8:fa:c3: 06:ed:2d:ad:ff:01:5d:cb:15:0c:14:32:b4:5c:f6: 49:12:a9:c2:8a:38:bb:37:59:9f:e5:ea:1a:00:16: 31:bc:31:3a:49:69:c4:5e:44:44:d3:a3:c9:85:0b: ce:0a:54:1f:90:70:80:ff:f7:70:cb:0f:f3:92:86: 3a:66:c2:1f:fd:d4:6c:83:ed:ab:6b:71:a3:aa:28: 54:4b:f2:66:0e:e6:0c:26:b3:87:14:73:e2:ec:05: 6d:b1:7c:8a:32:0e:7a:27:0f:36:c7:b4:7c:b6:82: fe:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:31:3D:03:8D:D7:B8:B7:CB:9A:E4:25:5D:E1:06:82:D3:64:AC:73 X509v3 Authority Key Identifier: keyid:E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:bd:63:b1:6e:67:fb:b6:a8:9b:b1:dd:6f:fd:50:ba:1c:6f: 0d:46:53:6b:5d:cd:6d:00:e2:58:c0:eb:fa:a6:fd:2a:63:29: ae:d9:7a:df:d7:4e:20:2b:18:f2:2c:6e:90:0b:4d:6d:95:2e: a5:4b:d7:84:14:fd:93:27:99:21:4c:23:53:a6:33:a3:65:f7: 2c:cb:b2:49:3d:d1:d1:9d:df:26:08:58:81:5a:d1:76:1a:37: 73:c5:25:32:bf:56:59:3e:0b:28:b6:ed:a8:14:e4:2d:f0:b2: 93:1b:62:1a:e4:3d:87:84:52:11:a4:f0:88:ae:9e:ed:b8:a3: 59:c3:bf:83:7a:b1:b4:d0:c9:a7:55:e2:16:2a:fd:f4:2c:b7: 32:d7:10:6a:3f:2b:db:55:11:a7:59:85:f1:e7:94:b8:40:06: 4c:c5:4f:e8:f2:29:00:4f:62:d5:09:c9:fd:45:bd:94:dc:15: ca:bc:04:50:f0:91:dc:19:5b:a0:5f:ae:26:ea:ec:83:8e:5d: ac:85:ec:df:4e:1f:e4:21:2e:e1:91:7e:43:89:9d:b2:26:d5: 60:8f:a7:ad:24:90:e2:da:19:92:26:b6:ea:33:67:e6:a1:f6: 41:3c:98:b2:7a:80:8f:4b:6a:a0:d5:0d:79:74:d3:25:2d:81: d6:27:32:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nChJGgROWyoAqXj5vmPwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MTZjN2IyMDE5NTYwN2YyN2IxM2Q4OGY5MmJmMWQwZWIz OGU2MGYwHhcNMjUxMjA2MTcwMTA1WhcNMjUxMjA3MTcwMTA1WjAzMTEwLwYDVQQD EyhhOTMxM2QwMzhkZDdiOGI3Y2I5YWU0MjU1ZGUxMDY4MmQzNjRhYzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK1aVMfGxajQ1wDW2/0B7LzQgp1D 137y2BrYJKxONViEcBN6kKl41tNOap9LMcUEC9/Q/GrbkuYXJ5wNxRZPSKbOnAIC 7QH0C+UZSkGJeGdmZAuxCkxefdcWW6K4h97TgptkTPsAs/+yxWe1iuf7w9FGUOfV RaoFb+KKAnxyJrBFoVExbLKq9GQMWb2A1NO00xvY+sMG7S2t/wFdyxUMFDK0XPZJ EqnCiji7N1mf5eoaABYxvDE6SWnEXkRE06PJhQvOClQfkHCA//dwyw/zkoY6ZsIf /dRsg+2ra3GjqihUS/JmDuYMJrOHFHPi7AVtsXyKMg56Jw82x7R8toL+HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkxPQON17i3y5rkJV3hBoLTZKxzMB8GA1UdIwQY MBaAFOYWx7IBlWB/J7E9iPkr8dDrOOYPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWhiSHNnR1ZZSDhuc1QySS1TdngwT3M0NWc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wMzYzODAtN2ZiZS00NDQ0LTg0ZDkt NWNkMDA0ZDZlMzY2LzEvNWhiSHNnR1ZZSDhuc1QySS1TdngwT3M0NWc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8wMzYzODAtN2ZiZS00NDQ0LTg0ZDktNWNkMDA0ZDZlMzY2 LzEvNWhiSHNnR1ZZSDhuc1QySS1TdngwT3M0NWc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcL1jsW5n +7aom7Hdb/1QuhxvDUZTa13NbQDiWMDr+qb9KmMprtl639dOICsY8ixukAtNbZUu pUvXhBT9kyeZIUwjU6Yzo2X3LMuyST3R0Z3fJghYgVrRdho3c8UlMr9WWT4LKLbt qBTkLfCykxtiGuQ9h4RSEaTwiK6e7bijWcO/g3qxtNDJp1XiFir99Cy3MtcQaj8r 21URp1mF8eeUuEAGTMVP6PIpAE9i1QnJ/UW9lNwVyrwEUPCR3BlboF+uJursg45d rIXs304f5CEu4ZF+Q4mdsibVYI+nrSSQ4toZkia26jNn5qH2QTyYsnqAj0tqoNUN eXTTJS2B1icysQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:57:47 2025 by rpki-client