This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft File: 5snUihjDwNLk5jp7g4haeWd1WCY.mft (raw, json) Hash identifier: QuyGb4P2qTfy8qs92JfdzxgBrxLYisI3xzRgNJr0kZ4= Subject key identifier: 9F:E9:08:E5:89:11:65:DB:93:BF:60:D4:3A:70:3B:46:30:98:84:FA Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26 Certificate issuer: /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826 Certificate serial: 019AF4652A36F722B131BF2B0C000D4BDD78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 16:01:01 +0000 Manifest this update: Sat 06 Dec 2025 16:01:01 +0000 Manifest next update: Sun 07 Dec 2025 16:01:01 +0000 Files and hashes: 1: 5snUihjDwNLk5jp7g4haeWd1WCY.crl (hash: qu5/uravji8aHpQRSJAU2hVdEjeQj+DiQVakja89wb8=) 2: zohWKsAJg1AB7BcLgO5mP203ZJ8.roa (hash: qyr9zS4mbTGjUUiqIIIhploYFAxZHgevrVarc4Vt5k8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:2a:36:f7:22:b1:31:bf:2b:0c:00:0d:4b:dd:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826 Validity Not Before: Dec 6 16:01:01 2025 GMT Not After : Dec 7 16:01:01 2025 GMT Subject: CN=9fe908e5891165db93bf60d43a703b46309884fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:23:a1:1f:03:74:68:a1:d6:b1:98:e6:a2:ef: 6c:5c:78:a6:16:46:d6:f9:67:32:77:ef:f6:d8:cf: 30:9a:dd:b6:4f:80:07:e7:9e:30:63:dd:cb:a2:55: 81:5d:0b:01:51:28:07:3a:05:6b:ae:d4:80:c6:45: a8:e7:7e:8b:e1:b0:60:f8:31:9a:a3:a9:a8:02:7b: f4:83:8b:8c:c3:ca:e6:b4:2f:bd:96:d1:ab:14:c8: d2:44:b3:22:dc:ec:b8:30:c2:8b:0b:f4:6f:77:f2: 18:13:31:a2:8b:75:43:62:2a:56:22:66:da:68:46: 6d:2c:aa:6c:ac:eb:fa:6c:e6:ca:5e:d7:06:b0:38: 87:a9:36:8b:d7:19:4e:34:cd:8c:5a:36:93:78:73: b0:c8:67:c4:90:19:90:35:b5:e9:e3:12:a9:a3:f2: 23:26:8c:6e:01:8b:70:95:c0:fb:a0:11:17:ec:81: 81:8e:8e:cc:9e:8a:ab:44:09:da:58:8a:27:50:79: 8e:c3:ad:7f:f3:89:e2:e3:be:12:ab:f3:04:f2:cf: 48:ab:62:00:b0:9d:9b:76:ef:49:05:5e:1f:b7:38: 7f:57:7c:53:84:c8:30:a9:2a:c1:f1:48:63:b8:a3: f9:52:21:b7:a0:de:1c:0c:02:e7:ab:60:52:50:04: 31:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E9:08:E5:89:11:65:DB:93:BF:60:D4:3A:70:3B:46:30:98:84:FA X509v3 Authority Key Identifier: keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:6e:85:9e:22:0e:51:99:7c:14:e5:36:42:18:04:0d:64:c9: 1d:a2:26:1d:e6:6d:31:60:d7:84:a6:aa:6e:fd:c7:b5:36:e7: f7:ba:46:b5:f8:e9:0b:81:5e:74:c6:22:7e:d7:81:68:00:97: 47:ec:c0:dc:2e:0b:20:25:a3:cb:d6:88:d7:34:d3:02:24:cf: fe:f1:1c:97:e3:3b:d5:55:e5:e3:8e:40:1f:29:23:23:ef:b8: 96:e4:ae:4c:7a:47:49:fc:6c:aa:aa:5a:4a:ce:8c:f4:60:51: ba:cb:fb:b0:36:96:b0:93:07:af:55:f3:90:51:0e:86:4d:e6: 54:40:28:3f:86:db:2f:70:67:57:89:a0:ca:8e:81:80:38:bd: 02:6a:12:ea:d9:13:76:f9:e0:27:49:9c:a2:b8:6b:b6:0d:8b: cc:0d:42:d8:54:25:2f:5e:c2:0c:c9:27:3a:46:cf:b3:cd:d6: 81:7b:95:d5:a7:e7:87:b4:e1:75:e6:cf:6f:21:3c:18:49:b4: 60:92:de:ba:bf:a5:da:4c:fb:d8:af:cb:28:61:52:e1:0b:b7: 9c:da:9b:56:7b:21:d8:ae:d6:16:b7:e3:2c:d4:99:0d:b9:ca: eb:d8:32:38:c5:94:79:d7:7a:47:c5:35:c2:46:70:7d:36:69: 5b:61:0e:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZSo29yKxMb8rDAANS914MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YzlkNDhhMThjM2MwZDJlNGU2M2E3YjgzODg1YTc5Njc3 NTU4MjYwHhcNMjUxMjA2MTYwMTAxWhcNMjUxMjA3MTYwMTAxWjAzMTEwLwYDVQQD Eyg5ZmU5MDhlNTg5MTE2NWRiOTNiZjYwZDQzYTcwM2I0NjMwOTg4NGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiOhHwN0aKHWsZjmou9sXHimFkbW +Wcyd+/22M8wmt22T4AH554wY93LolWBXQsBUSgHOgVrrtSAxkWo536L4bBg+DGa o6moAnv0g4uMw8rmtC+9ltGrFMjSRLMi3Oy4MMKLC/Rvd/IYEzGii3VDYipWImba aEZtLKpsrOv6bObKXtcGsDiHqTaL1xlONM2MWjaTeHOwyGfEkBmQNbXp4xKpo/Ij JoxuAYtwlcD7oBEX7IGBjo7MnoqrRAnaWIonUHmOw61/84ni474Sq/ME8s9Iq2IA sJ2bdu9JBV4ftzh/V3xThMgwqSrB8UhjuKP5UiG3oN4cDALnq2BSUAQxhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/pCOWJEWXbk79g1DpwO0YwmIT6MB8GA1UdIwQY MBaAFObJ1IoYw8DS5OY6e4OIWnlndVgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMt ODQ4ZjczZGY4YjIwLzEvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMtODQ4ZjczZGY4YjIw LzEvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAom6FniIO UZl8FOU2QhgEDWTJHaImHeZtMWDXhKaqbv3HtTbn97pGtfjpC4FedMYifteBaACX R+zA3C4LICWjy9aI1zTTAiTP/vEcl+M71VXl445AHykjI++4luSuTHpHSfxsqqpa Ss6M9GBRusv7sDaWsJMHr1XzkFEOhk3mVEAoP4bbL3BnV4mgyo6BgDi9AmoS6tkT dvngJ0mcorhrtg2LzA1C2FQlL17CDMknOkbPs83WgXuV1afnh7ThdebPbyE8GEm0 YJLeur+l2kz72K/LKGFS4Qu3nNqbVnsh2K7WFrfjLNSZDbnK69gyOMWUedd6R8U1 wkZwfTZpW2EOEg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:54:54 2025 by rpki-client