This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft File: 5i7oJCK3hJkSKWNhQEZJp__smOU.mft (raw, json) Hash identifier: 5hCmjNbLL6jhL/ArhZ8ZYxJxsTDGPgh6F7bt5qtfVDY= Subject key identifier: 18:99:44:83:8D:E1:4F:85:AD:B4:61:6C:92:7C:6B:6C:1E:FE:4E:1B Authority key identifier: E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5 Certificate issuer: /CN=e62ee82422b7849912296361404649a7ffec98e5 Certificate serial: 019AF50BA8CEDB9817C48415E1AEDB59D9EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft Manifest number: 0E23 Signing time: Sat 06 Dec 2025 19:02:53 +0000 Manifest this update: Sat 06 Dec 2025 19:02:53 +0000 Manifest next update: Sun 07 Dec 2025 19:02:53 +0000 Files and hashes: 1: 5i7oJCK3hJkSKWNhQEZJp__smOU.crl (hash: 4FFc5bECtODXAIKVPijOOhX2KO0FbE0D8Ro5MBrxr48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:a8:ce:db:98:17:c4:84:15:e1:ae:db:59:d9:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e62ee82422b7849912296361404649a7ffec98e5 Validity Not Before: Dec 6 19:02:53 2025 GMT Not After : Dec 7 19:02:53 2025 GMT Subject: CN=189944838de14f85adb4616c927c6b6c1efe4e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c0:43:9f:09:5a:71:09:60:b3:46:16:25:2d: a9:44:6f:98:23:43:c7:1f:78:e8:c8:1b:0f:15:ed: c0:63:29:50:66:ce:48:16:9a:b6:1e:5b:81:c9:40: 44:3b:c3:9a:f6:40:50:c8:6d:f4:56:95:49:a0:2f: 70:90:30:0c:e5:b9:e2:d6:a4:19:d4:4d:4b:65:ac: 86:d8:cb:c5:aa:27:2e:a2:82:91:ed:79:4d:ba:f0: d3:44:6a:15:66:f4:f1:d5:bb:89:0c:85:33:cd:c3: 2a:9b:c2:8a:a9:d6:aa:78:df:82:82:f8:81:fb:f7: d8:30:27:76:01:34:e3:ca:3e:e1:90:44:82:d1:c9: 6a:d8:54:9c:b0:65:26:63:04:e1:21:d0:68:08:7c: 8a:c0:7a:e2:a9:52:a9:ab:db:14:a9:f6:97:40:07: 07:f6:4b:b3:84:41:83:76:01:fc:61:08:41:94:b6: 4c:3c:60:5d:e4:7b:23:9d:8e:d5:2a:7e:0e:c7:4b: e5:a5:a6:12:7b:ec:a8:e4:85:f0:73:1e:e5:8e:8a: 1d:b5:58:e3:56:c7:40:50:32:6e:6e:40:a6:13:32: 98:e7:5f:9b:dc:28:5b:89:59:ff:9c:b0:26:7c:88: 0c:ff:74:50:2d:59:14:5e:45:51:30:e5:34:7d:2f: 1f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:99:44:83:8D:E1:4F:85:AD:B4:61:6C:92:7C:6B:6C:1E:FE:4E:1B X509v3 Authority Key Identifier: keyid:E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:5c:10:a3:f6:d9:09:67:08:b1:a4:7b:59:00:27:25:bd:b3: e3:23:6b:8c:c0:df:c3:af:fe:2b:f7:96:ba:e0:99:c6:26:c2: 41:6c:7b:f4:c2:66:45:82:89:d5:ce:be:1e:88:34:6e:9a:db: 84:1f:d8:9e:79:eb:27:e0:c5:8f:76:6c:41:62:e2:85:b6:ed: 45:a2:ce:3a:e8:61:e6:49:b0:b3:6a:85:bc:0e:e5:64:76:f6: 03:2a:e3:3e:8b:52:d3:74:86:df:76:16:a4:d8:6d:79:aa:cb: 7d:79:42:60:a5:65:1a:40:7e:98:5d:cb:8e:7c:0b:5e:bb:51: 76:61:eb:c9:45:36:b3:3a:f6:44:44:2b:96:8a:c4:a7:22:f1: 16:83:02:1f:11:29:5f:a8:0e:71:14:fe:bf:bb:7e:a9:cb:42: 7a:74:f2:27:5f:ae:0a:c9:de:5b:00:ef:f0:66:6f:b6:36:f4: 58:e8:aa:1c:e6:87:30:0d:22:d2:3f:02:6b:c5:4e:a3:55:bf: 54:2d:e9:97:75:ef:dc:1e:20:de:c5:70:f4:e8:cd:3d:85:b9: 06:1e:41:7c:7d:19:ee:7f:ee:56:5a:b6:89:bf:1a:ba:4b:ae: 5b:47:2c:a5:2b:9b:df:94:b9:84:cc:a9:5f:de:d2:d2:7c:a5: 4d:86:75:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C6jO25gXxIQV4a7bWdnqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MmVlODI0MjJiNzg0OTkxMjI5NjM2MTQwNDY0OWE3ZmZl Yzk4ZTUwHhcNMjUxMjA2MTkwMjUzWhcNMjUxMjA3MTkwMjUzWjAzMTEwLwYDVQQD EygxODk5NDQ4MzhkZTE0Zjg1YWRiNDYxNmM5MjdjNmI2YzFlZmU0ZTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8BDnwlacQlgs0YWJS2pRG+YI0PH H3joyBsPFe3AYylQZs5IFpq2HluByUBEO8Oa9kBQyG30VpVJoC9wkDAM5bni1qQZ 1E1LZayG2MvFqicuooKR7XlNuvDTRGoVZvTx1buJDIUzzcMqm8KKqdaqeN+CgviB +/fYMCd2ATTjyj7hkESC0clq2FScsGUmYwThIdBoCHyKwHriqVKpq9sUqfaXQAcH 9kuzhEGDdgH8YQhBlLZMPGBd5HsjnY7VKn4Ox0vlpaYSe+yo5IXwcx7ljoodtVjj VsdAUDJubkCmEzKY51+b3ChbiVn/nLAmfIgM/3RQLVkUXkVRMOU0fS8f1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiZRION4U+FrbRhbJJ8a2we/k4bMB8GA1UdIwQY MBaAFOYu6CQit4SZEiljYUBGSaf/7JjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWk3b0pDSzNoSmtTS1dOaFFFWkpwX19zbU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9iZDMxMWUtYzkwMS00YWVmLWIxODUt ZmZiMWJlYzMyNzIxLzEvNWk3b0pDSzNoSmtTS1dOaFFFWkpwX19zbU9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9iZDMxMWUtYzkwMS00YWVmLWIxODUtZmZiMWJlYzMyNzIx LzEvNWk3b0pDSzNoSmtTS1dOaFFFWkpwX19zbU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlwQo/bZ CWcIsaR7WQAnJb2z4yNrjMDfw6/+K/eWuuCZxibCQWx79MJmRYKJ1c6+Hog0bprb hB/YnnnrJ+DFj3ZsQWLihbbtRaLOOuhh5kmws2qFvA7lZHb2AyrjPotS03SG33YW pNhtearLfXlCYKVlGkB+mF3LjnwLXrtRdmHryUU2szr2REQrlorEpyLxFoMCHxEp X6gOcRT+v7t+qctCenTyJ1+uCsneWwDv8GZvtjb0WOiqHOaHMA0i0j8Ca8VOo1W/ VC3pl3Xv3B4g3sVw9OjNPYW5Bh5BfH0Z7n/uVlq2ib8aukuuW0cspSub35S5hMyp X97S0nylTYZ1pA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:58:42 2025 by rpki-client