This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft File: 5vgk5Lxc2BiG7CS14VJm6V-N35M.mft (raw, json) Hash identifier: zejkVmwIysuixLX4eLsTv0fF1DgMsOZeVv2GDj2ytFs= Subject key identifier: FC:E7:F8:21:BE:FE:8D:4E:11:3A:50:F1:30:57:72:BE:63:20:A7:4E Authority key identifier: E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93 Certificate issuer: /CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93 Certificate serial: 019AF0BF254E688A57FC01B79238A440E3AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft Manifest number: 0CD5 Signing time: Fri 05 Dec 2025 23:00:50 +0000 Manifest this update: Fri 05 Dec 2025 23:00:50 +0000 Manifest next update: Sat 06 Dec 2025 23:00:50 +0000 Files and hashes: 1: 5vgk5Lxc2BiG7CS14VJm6V-N35M.crl (hash: dgpHdJMXBRjtzMu+24yPiCXrm4FwYQK0f6PLlY9tcDg=) 2: rf8xmxH0lxQMZaEoNGLhxRtMOZM.roa (hash: 8uXylOlK6BkO3v7SWg2Pp+uIEZNpg7MPKeK8yn1WMAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:25:4e:68:8a:57:fc:01:b7:92:38:a4:40:e3:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93 Validity Not Before: Dec 5 23:00:50 2025 GMT Not After : Dec 6 23:00:50 2025 GMT Subject: CN=fce7f821befe8d4e113a50f1305772be6320a74e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:34:59:4e:c6:11:33:bb:e8:fe:74:23:08:75: 16:fd:e4:9e:2b:65:e5:c0:eb:b5:47:0a:b1:3b:30: 84:03:1b:d5:f3:a5:85:e1:b9:6b:69:0e:7f:5b:f1: ca:f6:27:4b:44:8b:a0:5d:e3:73:38:0c:9a:c7:f0: 21:13:fc:4d:7d:50:d2:b7:4f:56:7c:70:a4:52:f6: 0b:f9:4d:54:11:8e:08:27:34:78:a4:67:a8:1e:56: bc:86:27:f3:29:70:8a:48:88:2c:22:41:bd:bc:c1: f0:a2:75:ed:35:7e:d3:0b:07:26:54:b7:69:61:2f: a9:a4:8a:72:dd:31:7e:fd:16:db:99:60:88:2c:b9: 53:41:43:cc:6c:01:6a:6b:d0:ed:d7:e3:3a:57:8a: 71:ec:88:8d:8d:d7:1b:06:e2:21:2d:3f:9b:df:5f: 2a:1c:58:fc:66:f1:ab:9a:0a:7d:8c:2a:1a:43:74: 9a:d4:ec:98:61:38:c1:a7:b2:95:1d:cd:16:15:d5: 3d:0f:5d:73:73:c9:85:40:63:bb:43:81:de:ce:be: 88:24:df:6f:46:38:01:c0:f2:57:f7:9c:f5:09:95: e7:49:80:eb:0b:62:6a:5e:50:37:0a:8f:e3:91:07: a3:bc:17:a4:7f:d8:98:1c:30:e8:f6:9e:a3:06:69: 5a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E7:F8:21:BE:FE:8D:4E:11:3A:50:F1:30:57:72:BE:63:20:A7:4E X509v3 Authority Key Identifier: keyid:E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:4a:d8:d2:f2:6f:4a:04:df:86:d2:06:b6:be:ec:76:60:70: 27:fe:06:71:48:40:08:40:78:de:79:45:c2:1d:3f:99:55:b4: 25:e9:55:04:59:5a:d4:76:e6:85:eb:2e:57:0f:6d:24:1b:34: 20:1c:e3:88:dd:57:b3:22:6e:0b:b4:b8:3e:b2:ec:60:ee:91: 93:01:bc:b9:26:a9:be:a5:9a:e5:35:99:30:7b:04:1e:8c:c3: 1a:f7:72:d5:1c:00:5c:1b:1d:27:e4:7a:db:ac:20:27:04:37: 6c:f6:b5:f9:60:9f:8b:d9:5d:c2:73:93:e1:2b:be:90:1c:03: 3e:87:b6:f8:b4:49:9b:7d:6f:c2:67:93:48:80:53:0b:0e:20: e9:84:e4:2b:27:82:5f:7c:10:0a:d2:2c:7f:56:73:af:34:b7: 63:f4:a3:74:99:b7:c1:3b:40:11:60:99:19:de:81:7a:e9:60: ea:19:a9:7f:a5:37:b5:85:ae:30:3d:de:2d:ab:3d:68:95:27: 02:87:8f:74:43:ce:5e:c9:2c:4f:8b:0b:6f:e2:18:1c:8d:8c: 42:45:4a:54:b1:6e:c7:50:1f:2f:e6:65:87:43:0d:d4:f9:e9: bd:b9:69:fe:91:d5:d0:ac:ed:3f:77:0f:01:7b:8c:c1:d6:2e: 69:f6:19:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyVOaIpX/AG3kjikQOOvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZjgyNGU0YmM1Y2Q4MTg4NmVjMjRiNWUxNTI2NmU5NWY4 ZGRmOTMwHhcNMjUxMjA1MjMwMDUwWhcNMjUxMjA2MjMwMDUwWjAzMTEwLwYDVQQD EyhmY2U3ZjgyMWJlZmU4ZDRlMTEzYTUwZjEzMDU3NzJiZTYzMjBhNzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTRZTsYRM7vo/nQjCHUW/eSeK2Xl wOu1RwqxOzCEAxvV86WF4blraQ5/W/HK9idLRIugXeNzOAyax/AhE/xNfVDSt09W fHCkUvYL+U1UEY4IJzR4pGeoHla8hifzKXCKSIgsIkG9vMHwonXtNX7TCwcmVLdp YS+ppIpy3TF+/RbbmWCILLlTQUPMbAFqa9Dt1+M6V4px7IiNjdcbBuIhLT+b318q HFj8ZvGrmgp9jCoaQ3Sa1OyYYTjBp7KVHc0WFdU9D11zc8mFQGO7Q4Hezr6IJN9v RjgBwPJX95z1CZXnSYDrC2JqXlA3Co/jkQejvBekf9iYHDDo9p6jBmlaawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzn+CG+/o1OETpQ8TBXcr5jIKdOMB8GA1UdIwQY MBaAFOb4JOS8XNgYhuwkteFSZulfjd+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXZnazVMeGMyQmlHN0NTMTRWSm02Vi1OMzVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hZDM3OTctMzM0Ni00NzhmLTllOWQt YTg5Zjk1OWJlMjA0LzEvNXZnazVMeGMyQmlHN0NTMTRWSm02Vi1OMzVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9hZDM3OTctMzM0Ni00NzhmLTllOWQtYTg5Zjk1OWJlMjA0 LzEvNXZnazVMeGMyQmlHN0NTMTRWSm02Vi1OMzVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkrY0vJv SgTfhtIGtr7sdmBwJ/4GcUhACEB43nlFwh0/mVW0JelVBFla1HbmhesuVw9tJBs0 IBzjiN1XsyJuC7S4PrLsYO6RkwG8uSapvqWa5TWZMHsEHozDGvdy1RwAXBsdJ+R6 26wgJwQ3bPa1+WCfi9ldwnOT4Su+kBwDPoe2+LRJm31vwmeTSIBTCw4g6YTkKyeC X3wQCtIsf1ZzrzS3Y/SjdJm3wTtAEWCZGd6Beulg6hmpf6U3tYWuMD3eLas9aJUn AoePdEPOXsksT4sLb+IYHI2MQkVKVLFux1AfL+Zlh0MN1Pnpvblp/pHV0KztP3cP AXuMwdYuafYZrg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:23 2025 by rpki-client