This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft File: 5o9MhddoNjPDOOA92OykR78_Z4U.mft (raw, json) Hash identifier: e1FEFQXspDFsCHdBqJWADRKog7dqd4lhY0XvGsRlE4g= Subject key identifier: 09:7F:A3:B7:CA:86:88:EF:AB:31:14:FE:03:A2:8E:9F:43:C8:B0:D9 Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85 Certificate issuer: /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785 Certificate serial: 019AF12D5A74ED50F10DAAC470402FCC2EDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft Manifest number: 0CA4 Signing time: Sat 06 Dec 2025 01:01:12 +0000 Manifest this update: Sat 06 Dec 2025 01:01:12 +0000 Manifest next update: Sun 07 Dec 2025 01:01:12 +0000 Files and hashes: 1: 5o9MhddoNjPDOOA92OykR78_Z4U.crl (hash: kdA8Y3MR/AOvPXbVJJ4oX1W1pJ0yZr+nNkd6fIOoa40=) 2: n9muJIRBw4eBvZP1hvt-YKWhQ1g.roa (hash: MB5Zeb9aar2OAVcUrab3R1409lEJyOeTnWEExzpIcts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:5a:74:ed:50:f1:0d:aa:c4:70:40:2f:cc:2e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785 Validity Not Before: Dec 6 01:01:12 2025 GMT Not After : Dec 7 01:01:12 2025 GMT Subject: CN=097fa3b7ca8688efab3114fe03a28e9f43c8b0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:67:4d:bf:74:35:ac:5b:90:80:13:5c:98:03: 8c:77:52:95:ae:ab:31:dc:35:ec:47:36:c2:a8:2a: 5c:7e:64:21:b8:77:e1:de:05:28:86:b4:47:3d:76: d7:50:10:fc:3b:74:a0:d2:c0:91:66:c1:1f:64:5d: c0:38:31:1f:dd:ea:50:b3:9e:48:01:56:fc:41:ee: ea:13:d4:92:8a:e7:73:09:8f:39:af:f4:5d:b0:b8: 15:d4:9d:4b:9c:fe:3e:ab:58:e7:69:50:0b:9f:1f: 92:c1:ba:e1:4d:db:9b:84:41:b3:8c:31:17:ac:2c: 05:aa:8d:50:df:44:73:84:a1:30:7b:95:a9:cd:f5: 32:a9:7b:d8:54:c7:1d:fd:a0:10:39:84:f5:2e:d6: e3:0e:24:14:21:f1:13:b7:34:26:33:7c:ee:88:dc: 84:be:6e:8d:85:7c:56:44:49:a2:13:d7:02:01:e0: 74:cf:ff:36:4c:9f:62:82:4b:56:24:13:dc:ba:e2: 24:ff:33:1f:00:a6:06:83:f8:89:14:d4:f3:da:c8: 57:9a:a1:4a:96:48:7a:cd:b0:20:79:93:47:1e:cb: 64:58:3b:68:9c:61:b2:33:76:f8:d6:09:21:fa:d6: 57:f0:c1:4b:03:6d:94:d8:a6:e9:ef:96:3a:04:e0: 4a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7F:A3:B7:CA:86:88:EF:AB:31:14:FE:03:A2:8E:9F:43:C8:B0:D9 X509v3 Authority Key Identifier: keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:50:b5:98:b2:88:f2:ad:8a:38:80:b0:72:fc:76:ac:44:45: 6c:e7:4f:17:7b:74:a0:45:52:75:4e:06:4e:12:7e:d3:e1:d9: 4f:02:3d:b5:64:4a:db:4f:1b:35:49:aa:64:4d:10:ef:62:38: ad:2a:fd:e5:31:d9:90:ed:00:cd:79:60:d2:ac:ee:3b:53:20: 49:47:ad:c6:55:2b:df:6c:9f:e7:ff:8f:62:77:ee:ec:98:92: d1:f1:e4:a5:73:fd:8c:66:9b:60:a0:82:4c:4d:07:c7:83:48: 7f:79:34:54:16:e1:23:d6:ce:01:68:d3:48:3c:00:5b:ff:45: 54:48:26:7b:51:cf:09:bf:5c:93:5a:4f:dd:b5:d4:bc:90:72: c5:54:55:3d:ea:a6:ae:9e:46:ab:c3:cf:93:c4:3c:56:4c:2d: 91:c1:03:61:21:b0:6e:76:dd:fd:e9:b3:ef:c3:34:6a:3c:db: 5f:75:00:2c:31:18:30:3a:7d:23:87:fd:51:d7:ce:4a:97:50: df:65:0d:e3:7a:d3:75:00:20:b6:61:09:ca:1f:17:c7:4a:c7: 8d:f2:7b:4d:89:ee:b6:c9:bd:4b:f7:fd:82:e6:3b:bf:5f:66: 92:c7:44:53:cf:04:f8:05:7a:89:83:bb:7d:05:a8:95:6a:bc: 9f:bf:cc:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVp07VDxDarEcEAvzC7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2OGY0Yzg1ZDc2ODM2MzNjMzM4ZTAzZGQ4ZWNhNDQ3YmYz ZjY3ODUwHhcNMjUxMjA2MDEwMTEyWhcNMjUxMjA3MDEwMTEyWjAzMTEwLwYDVQQD EygwOTdmYTNiN2NhODY4OGVmYWIzMTE0ZmUwM2EyOGU5ZjQzYzhiMGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGdNv3Q1rFuQgBNcmAOMd1KVrqsx 3DXsRzbCqCpcfmQhuHfh3gUohrRHPXbXUBD8O3Sg0sCRZsEfZF3AODEf3epQs55I AVb8Qe7qE9SSiudzCY85r/RdsLgV1J1LnP4+q1jnaVALnx+SwbrhTdubhEGzjDEX rCwFqo1Q30RzhKEwe5WpzfUyqXvYVMcd/aAQOYT1LtbjDiQUIfETtzQmM3zuiNyE vm6NhXxWREmiE9cCAeB0z/82TJ9igktWJBPcuuIk/zMfAKYGg/iJFNTz2shXmqFK lkh6zbAgeZNHHstkWDtonGGyM3b41gkh+tZX8MFLA22U2Kbp75Y6BOBKKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAl/o7fKhojvqzEU/gOijp9DyLDZMB8GA1UdIwQY MBaAFOaPTIXXaDYzwzjgPdjspEe/P2eFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW85TWhkZG9OalBET09BOTJPeWtSNzhfWjRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81YmJlYmMtY2YzNi00M2E0LTk5NzQt OWI2Y2ZkOGEyYWEzLzEvNW85TWhkZG9OalBET09BOTJPeWtSNzhfWjRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy81YmJlYmMtY2YzNi00M2E0LTk5NzQtOWI2Y2ZkOGEyYWEz LzEvNW85TWhkZG9OalBET09BOTJPeWtSNzhfWjRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVC1mLKI 8q2KOICwcvx2rERFbOdPF3t0oEVSdU4GThJ+0+HZTwI9tWRK208bNUmqZE0Q72I4 rSr95THZkO0AzXlg0qzuO1MgSUetxlUr32yf5/+PYnfu7JiS0fHkpXP9jGabYKCC TE0Hx4NIf3k0VBbhI9bOAWjTSDwAW/9FVEgme1HPCb9ck1pP3bXUvJByxVRVPeqm rp5Gq8PPk8Q8VkwtkcEDYSGwbnbd/emz78M0ajzbX3UALDEYMDp9I4f9UdfOSpdQ 32UN43rTdQAgtmEJyh8Xx0rHjfJ7TYnutsm9S/f9guY7v19mksdEU88E+AV6iYO7 fQWolWq8n7/M5g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:35:46 2025 by rpki-client