This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft File: 5U0JIEfb6alooWDzFfq5u5yDVtc.mft (raw, json) Hash identifier: gSCL4L8gtZYgFdto/5+6kp+qFe/aDdSX9ph/AUPpfqA= Subject key identifier: C6:F7:09:6E:94:53:DB:20:28:D9:C5:77:3B:DC:B1:9D:89:40:CE:50 Authority key identifier: E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7 Certificate issuer: /CN=e54d092047dbe9a968a160f315fab9bb9c8356d7 Certificate serial: 019AF4658DE14E590804D478298806FDB340 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 16:01:27 +0000 Manifest this update: Sat 06 Dec 2025 16:01:27 +0000 Manifest next update: Sun 07 Dec 2025 16:01:27 +0000 Files and hashes: 1: 5U0JIEfb6alooWDzFfq5u5yDVtc.crl (hash: xu0vFtd43eyYSUefYbh8W4kFhxLGwTvbA+7OJFiAo28=) 2: KAeDRZYtk4gQYh2zbQ0HADYpjok.roa (hash: 3b5QOxzEttRmMN1A9txJTsvRVrohslbNkzlikXbgEz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:8d:e1:4e:59:08:04:d4:78:29:88:06:fd:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e54d092047dbe9a968a160f315fab9bb9c8356d7 Validity Not Before: Dec 6 16:01:27 2025 GMT Not After : Dec 7 16:01:27 2025 GMT Subject: CN=c6f7096e9453db2028d9c5773bdcb19d8940ce50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f9:4f:15:12:3b:94:a2:43:a6:e4:59:33:fe: c9:35:60:5a:ab:22:6b:8e:cb:15:22:f0:09:3d:3e: 31:de:c8:00:6c:38:d6:d6:e2:86:e3:3c:48:07:a2: 13:59:9d:cc:6b:90:b1:74:7f:bd:27:4a:e7:64:3b: 0c:10:ed:5b:4e:61:dc:86:a0:35:20:ec:8f:20:40: 36:cd:32:61:0a:b3:a0:87:99:06:ae:13:9e:e1:f0: 0e:aa:c4:b3:1c:ec:d7:6e:3e:32:29:86:75:e4:73: 59:8b:bb:c6:fd:7e:52:65:6d:17:3f:ee:44:7c:a1: 05:f4:b8:31:24:25:8e:a7:4c:92:a3:c4:80:6a:56: 87:36:02:6a:d7:ed:e9:cc:a1:fa:b7:92:3d:7f:8f: ed:4f:a7:84:f9:21:4b:ee:ec:d2:7f:d7:bc:5b:04: b2:de:5a:6e:b3:92:eb:ee:58:80:fd:5c:bd:69:05: e6:96:79:59:c4:e4:4d:25:a8:57:74:b4:7f:68:50: e1:8a:85:e6:0e:12:69:2e:f6:83:0b:8f:d6:ec:6c: 11:6f:48:7c:f7:9a:e8:6e:af:bc:7d:12:d3:ba:bf: 5c:63:97:2c:f1:ae:44:8e:9d:91:6b:34:04:e6:1e: bd:f6:b8:8f:f0:cf:af:f9:9f:1c:24:44:b5:7d:07: 06:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F7:09:6E:94:53:DB:20:28:D9:C5:77:3B:DC:B1:9D:89:40:CE:50 X509v3 Authority Key Identifier: keyid:E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:63:2e:6c:12:ad:fb:2a:98:5a:89:b7:b2:8d:10:f7:ed:cc: ce:a1:4e:2d:22:02:d9:5d:70:1e:3e:0c:16:e4:f4:57:99:f1: 53:94:79:ec:68:d8:1b:24:7b:a0:f4:08:3d:40:cc:c5:2b:c8: 66:1b:1d:54:24:fd:d6:6b:c9:68:a8:83:14:46:5d:26:2a:a2: ca:80:84:2d:f7:6b:68:b7:81:cb:15:eb:3c:e7:8f:fc:31:bd: 2b:ee:bd:e0:02:07:43:c0:59:5f:a6:78:4c:55:47:a9:8d:86: 61:38:61:d1:d8:58:5c:ce:64:d3:84:e4:6d:49:48:0d:a6:29: 66:45:b7:e9:de:3b:b2:66:7a:29:b6:07:32:a5:1e:5f:9e:62: 31:ac:68:8d:65:9f:6c:1c:46:3c:ff:23:3d:b0:fb:31:d1:da: 98:f7:68:c0:10:b2:09:98:c5:b8:01:ff:d0:9a:6a:d6:35:d8: 25:e7:41:9d:76:7f:ef:49:f2:d8:59:fe:b1:60:29:4d:f5:f5: 42:23:62:c1:33:4c:93:33:69:86:5f:5b:1f:ce:dd:4c:54:fa: d3:7d:b2:c5:ea:ec:5e:03:6e:d2:c9:dc:ec:63:fb:ed:a9:1c: 13:cf:17:90:26:cc:94:a0:ff:59:98:5a:da:32:22:dc:e0:95: fa:66:1b:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZY3hTlkIBNR4KYgG/bNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NGQwOTIwNDdkYmU5YTk2OGExNjBmMzE1ZmFiOWJiOWM4 MzU2ZDcwHhcNMjUxMjA2MTYwMTI3WhcNMjUxMjA3MTYwMTI3WjAzMTEwLwYDVQQD EyhjNmY3MDk2ZTk0NTNkYjIwMjhkOWM1NzczYmRjYjE5ZDg5NDBjZTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/lPFRI7lKJDpuRZM/7JNWBaqyJr jssVIvAJPT4x3sgAbDjW1uKG4zxIB6ITWZ3Ma5CxdH+9J0rnZDsMEO1bTmHchqA1 IOyPIEA2zTJhCrOgh5kGrhOe4fAOqsSzHOzXbj4yKYZ15HNZi7vG/X5SZW0XP+5E fKEF9LgxJCWOp0ySo8SAalaHNgJq1+3pzKH6t5I9f4/tT6eE+SFL7uzSf9e8WwSy 3lpus5Lr7liA/Vy9aQXmlnlZxORNJahXdLR/aFDhioXmDhJpLvaDC4/W7GwRb0h8 95robq+8fRLTur9cY5cs8a5Ejp2RazQE5h699riP8M+v+Z8cJES1fQcGGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMb3CW6UU9sgKNnFdzvcsZ2JQM5QMB8GA1UdIwQY MBaAFOVNCSBH2+mpaKFg8xX6ubucg1bXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVUwSklFZmI2YWxvb1dEekZmcTV1NXlEVnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9mN2M2MzYtMGQxZS00N2YzLWIwNWQt YTdmZDJmOWU3NGNmLzEvNVUwSklFZmI2YWxvb1dEekZmcTV1NXlEVnRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9mN2M2MzYtMGQxZS00N2YzLWIwNWQtYTdmZDJmOWU3NGNm LzEvNVUwSklFZmI2YWxvb1dEekZmcTV1NXlEVnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2MubBKt +yqYWom3so0Q9+3MzqFOLSIC2V1wHj4MFuT0V5nxU5R57GjYGyR7oPQIPUDMxSvI ZhsdVCT91mvJaKiDFEZdJiqiyoCELfdraLeByxXrPOeP/DG9K+694AIHQ8BZX6Z4 TFVHqY2GYThh0dhYXM5k04TkbUlIDaYpZkW36d47smZ6KbYHMqUeX55iMaxojWWf bBxGPP8jPbD7MdHamPdowBCyCZjFuAH/0Jpq1jXYJedBnXZ/70ny2Fn+sWApTfX1 QiNiwTNMkzNphl9bH87dTFT6032yxersXgNu0snc7GP77akcE88XkCbMlKD/WZha 2jIi3OCV+mYbCg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:56:35 2025 by rpki-client