This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft File: 5dfxPZFnbuwdyazIcjFtYqx3nXs.mft (raw, json) Hash identifier: 2wTH7JVU7rmJojbRGbBuA4suN3/qqcNHo3OvEuXRL9M= Subject key identifier: 5D:45:AA:60:F7:21:BB:93:B4:77:F6:9B:4F:92:4D:13:7F:8C:89:66 Authority key identifier: E5:D7:F1:3D:91:67:6E:EC:1D:C9:AC:C8:72:31:6D:62:AC:77:9D:7B Certificate issuer: /CN=e5d7f13d91676eec1dc9acc872316d62ac779d7b Certificate serial: 019AF12CD42DE8625BDAA5A4EB2E4D62ADE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft Manifest number: 0181 Signing time: Sat 06 Dec 2025 01:00:38 +0000 Manifest this update: Sat 06 Dec 2025 01:00:38 +0000 Manifest next update: Sun 07 Dec 2025 01:00:38 +0000 Files and hashes: 1: 5dfxPZFnbuwdyazIcjFtYqx3nXs.crl (hash: Cq48S+LC1ISz74BIaC0A8amePKAB3qEEAh0esXJ7qf0=) 2: O55FnDiUhMsPTi6hjIewBuX7Ta8.roa (hash: 3JNSAI/aVMRICcZVLh9uXFKqAHc+rCKXfwm9TEvUz2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d4:2d:e8:62:5b:da:a5:a4:eb:2e:4d:62:ad:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5d7f13d91676eec1dc9acc872316d62ac779d7b Validity Not Before: Dec 6 01:00:38 2025 GMT Not After : Dec 7 01:00:38 2025 GMT Subject: CN=5d45aa60f721bb93b477f69b4f924d137f8c8966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:32:6f:df:86:07:9b:18:d5:bf:c8:3d:f6:17: 39:db:f1:c7:ed:18:c7:43:86:c4:a3:cf:7c:03:ba: e6:11:25:c9:f7:a5:ea:25:29:80:b7:f8:70:d5:53: c8:8d:b7:6c:66:a4:be:e8:ce:08:d3:c3:63:b5:db: 40:3f:1d:59:d6:ff:cf:21:00:66:21:17:43:23:c8: ad:26:73:90:51:26:56:aa:4d:d9:0d:c6:35:11:ee: bf:d0:5e:b3:3c:5a:54:b8:bc:c1:97:fe:c6:e0:a1: e2:ce:25:65:f7:ea:d9:c6:c4:51:b6:1e:7f:89:b5: 76:25:c8:a5:01:f5:a0:c0:fe:8f:ec:a0:04:d0:aa: 12:e6:80:d2:7b:35:5f:f7:4d:31:e7:47:9d:47:f9: 8a:a0:c6:0d:92:7e:7f:00:a6:55:42:99:12:57:f4: 5c:b7:8b:f4:6b:05:39:e8:fb:25:a3:56:ae:43:a0: a3:f5:32:d6:cb:d1:a9:93:5b:0c:56:c7:71:bd:eb: 39:b3:25:8c:ce:ab:aa:52:22:88:31:4b:4d:b0:43: 92:e2:e6:34:50:dd:9c:1c:c8:10:37:e9:69:71:aa: 9b:68:22:d1:e7:10:e4:44:0f:d0:ff:ac:4a:80:83: 0e:d3:5d:e5:26:f0:fd:34:8f:61:b0:01:e9:a9:a6: cb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:45:AA:60:F7:21:BB:93:B4:77:F6:9B:4F:92:4D:13:7F:8C:89:66 X509v3 Authority Key Identifier: keyid:E5:D7:F1:3D:91:67:6E:EC:1D:C9:AC:C8:72:31:6D:62:AC:77:9D:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dfxPZFnbuwdyazIcjFtYqx3nXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2f541c-ea12-446f-bea4-a82a153ab13e/1/5dfxPZFnbuwdyazIcjFtYqx3nXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f3:eb:90:fc:77:15:13:31:0a:b4:7d:0e:2d:31:1a:53:9e: 53:8c:35:70:c8:84:e4:0b:28:b0:d1:b4:6a:ce:e0:22:83:12: 64:d4:c9:f2:88:b6:88:e5:e6:10:3b:9d:b5:a6:47:ed:45:c9: b4:db:86:06:c9:92:ae:9b:04:99:25:1a:9d:5a:be:25:6b:4f: 0b:a6:78:8a:98:dc:cf:bb:b0:df:ad:93:aa:f8:46:68:ff:54: 16:dc:89:5a:c7:a8:1e:95:3d:33:ab:40:84:ba:01:5a:1b:d5: 4a:8d:06:4f:95:1b:b9:3b:21:69:1b:21:0a:a8:32:8e:b5:3b: 79:33:43:f5:04:33:72:3c:71:d0:a3:27:16:71:12:f3:95:85: 5e:b9:80:b8:aa:9f:b9:ad:03:6c:39:a5:4e:6b:d7:48:bc:1d: 21:a6:7b:7f:26:c5:43:1e:80:53:e3:4e:c2:28:19:29:93:9b: 66:0f:c7:f9:b7:35:21:c8:18:eb:22:ee:8f:23:de:9e:8e:b8: 8a:3b:38:37:5d:92:04:f8:42:f0:2c:7a:fb:70:56:df:b3:eb: e7:7b:cb:04:0b:92:30:e6:ee:a6:97:dd:40:2d:9e:a7:24:2a: de:81:96:b4:e9:d0:90:a0:c3:9b:cf:a0:34:65:ce:8f:2f:d1: 45:d4:3d:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNQt6GJb2qWk6y5NYq3mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZDdmMTNkOTE2NzZlZWMxZGM5YWNjODcyMzE2ZDYyYWM3 NzlkN2IwHhcNMjUxMjA2MDEwMDM4WhcNMjUxMjA3MDEwMDM4WjAzMTEwLwYDVQQD Eyg1ZDQ1YWE2MGY3MjFiYjkzYjQ3N2Y2OWI0ZjkyNGQxMzdmOGM4OTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzJv34YHmxjVv8g99hc52/HH7RjH Q4bEo898A7rmESXJ96XqJSmAt/hw1VPIjbdsZqS+6M4I08NjtdtAPx1Z1v/PIQBm IRdDI8itJnOQUSZWqk3ZDcY1Ee6/0F6zPFpUuLzBl/7G4KHiziVl9+rZxsRRth5/ ibV2JcilAfWgwP6P7KAE0KoS5oDSezVf900x50edR/mKoMYNkn5/AKZVQpkSV/Rc t4v0awU56Pslo1auQ6Cj9TLWy9Gpk1sMVsdxves5syWMzquqUiKIMUtNsEOS4uY0 UN2cHMgQN+lpcaqbaCLR5xDkRA/Q/6xKgIMO013lJvD9NI9hsAHpqabLIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1FqmD3IbuTtHf2m0+STRN/jIlmMB8GA1UdIwQY MBaAFOXX8T2RZ27sHcmsyHIxbWKsd517MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWRmeFBaRm5idXdkeWF6SWNqRnRZcXgzblhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yZjU0MWMtZWExMi00NDZmLWJlYTQt YTgyYTE1M2FiMTNlLzEvNWRmeFBaRm5idXdkeWF6SWNqRnRZcXgzblhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yZjU0MWMtZWExMi00NDZmLWJlYTQtYTgyYTE1M2FiMTNl LzEvNWRmeFBaRm5idXdkeWF6SWNqRnRZcXgzblhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/PrkPx3 FRMxCrR9Di0xGlOeU4w1cMiE5AsosNG0as7gIoMSZNTJ8oi2iOXmEDudtaZH7UXJ tNuGBsmSrpsEmSUanVq+JWtPC6Z4ipjcz7uw362TqvhGaP9UFtyJWseoHpU9M6tA hLoBWhvVSo0GT5UbuTshaRshCqgyjrU7eTND9QQzcjxx0KMnFnES85WFXrmAuKqf ua0DbDmlTmvXSLwdIaZ7fybFQx6AU+NOwigZKZObZg/H+bc1IcgY6yLujyPeno64 ijs4N12SBPhC8Cx6+3BW37Pr53vLBAuSMObuppfdQC2epyQq3oGWtOnQkKDDm8+g NGXOjy/RRdQ9wA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:53:37 2025 by rpki-client