This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft File: 5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft (raw, json) Hash identifier: kr7MuP30aaMFLWYY8g5aP37BQ17OEE62OHHig9o8xpk= Subject key identifier: D8:01:6C:FA:44:26:E4:BD:1C:F0:5D:B9:B9:54:F0:E4:92:71:10:9F Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA Certificate issuer: /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba Certificate serial: 019AF1D1FC444F90EB45AA07A746A7188DDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft Manifest number: 17AD Signing time: Sat 06 Dec 2025 04:01:01 +0000 Manifest this update: Sat 06 Dec 2025 04:01:01 +0000 Manifest next update: Sun 07 Dec 2025 04:01:01 +0000 Files and hashes: 1: 5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl (hash: JXMArlLt2jiwauCYi3YW6nB8McdBVGKZGYQ+tokHEfs=) 2: AGz8FgUVvE3Lvt6ftw3qobdQzrI.roa (hash: cmT93Ok9vnccSbuDE+6sxmO4c4ItItfSqVr3WTEQ4QE=) 3: Kcwvf_LAYIgCUsjZTWJ5jUAjHvs.roa (hash: DBuOCdcgOfeSRZCdhr9N5T6hmZRIvpkgOJLbi6ZyJsY=) 4: nh--frhqfaNDp2sP70p6Evt0KCU.roa (hash: XVgwJ/7fS1oz08R1RRIF3xLtoZdN0qXs+HzhPeh7A/o=) 5: sUzkXd5LwWwY0BXr324HOrp9knE.roa (hash: 9KlN4ytdVrB1XXBuhrFHGGSpHYOeDVdFTdNk2ffdYmY=) 6: y9DhCCOE8BMjbqy5zLi7FW3xy5M.roa (hash: veQZfmM2vQ79LyoIwIgPeLyEYqZZHAzen/nPgRCSK7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:fc:44:4f:90:eb:45:aa:07:a7:46:a7:18:8d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba Validity Not Before: Dec 6 04:01:01 2025 GMT Not After : Dec 7 04:01:01 2025 GMT Subject: CN=d8016cfa4426e4bd1cf05db9b954f0e49271109f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3e:b8:76:6c:a7:a0:9a:7f:f0:e6:86:ce:ba: 70:a7:2f:15:d9:a1:b2:56:44:6c:82:c6:71:6a:6a: 89:a4:22:7c:be:7b:ee:a5:a7:ca:01:db:24:53:66: c2:e0:53:f4:97:bd:ef:d8:ca:2b:6e:cc:a2:2a:6f: f0:eb:ca:6d:fa:e1:9b:09:c4:e4:ec:52:df:e5:e9: 27:d0:6d:d0:01:53:0b:2c:73:37:51:91:59:7e:a6: 68:3d:6c:eb:04:29:1f:bd:ec:b2:79:d1:22:43:79: 38:69:c5:5c:91:1d:df:e9:59:c6:65:96:a5:a4:ba: ca:89:24:5e:81:54:5a:5d:56:ee:2d:d5:0b:52:6e: ac:f3:fb:7a:47:52:81:e9:0b:12:47:2e:66:40:53: 66:08:a1:b0:0d:2f:02:f1:d9:a3:95:11:88:aa:6f: e4:93:33:3a:ea:81:26:c0:89:d5:76:33:01:4f:ca: 80:5a:97:ba:f9:6d:ea:56:a4:07:e1:ab:ee:57:64: ac:ad:49:c7:ed:79:9a:9b:b7:7f:00:ea:ea:5b:b6: 39:30:fe:b2:ea:71:7f:77:51:82:56:82:a5:37:df: b4:2d:d6:23:05:13:19:b4:ce:ea:5c:34:0f:4b:c3: 76:5f:99:a1:be:bb:e6:7b:18:f0:09:f3:1c:85:03: ec:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:01:6C:FA:44:26:E4:BD:1C:F0:5D:B9:B9:54:F0:E4:92:71:10:9F X509v3 Authority Key Identifier: keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:35:4b:a7:8e:26:c9:8a:71:2d:51:89:81:f1:fb:47:e1:7b: 42:af:84:4f:4f:c3:77:be:11:d4:36:ab:8d:4f:8b:f6:78:e4: 0e:3f:de:3a:5d:d8:a8:3a:a1:13:61:b1:53:6c:47:1c:c6:79: 91:a8:58:9e:df:fa:30:ff:0a:c1:80:bd:25:e9:2a:08:3d:e4: 2d:b0:ca:7a:ca:57:d4:82:4e:7e:b3:49:74:7b:f0:c6:c8:9b: 6d:19:ae:a9:70:23:16:10:29:37:08:1b:57:12:db:b0:01:9e: 4d:18:75:e8:a8:58:a9:7a:df:37:5b:6f:2a:4d:a5:f9:00:55: 67:e4:74:3c:71:6d:00:b4:61:b7:b5:73:1f:a9:59:30:d0:9f: 15:67:16:5d:2d:58:bb:be:03:73:e6:d4:bc:29:b8:85:fd:cf: c0:4e:79:ca:07:07:c2:d9:ab:06:6a:0c:8a:f0:1f:a4:e6:e8: 14:af:91:f5:2b:48:fe:16:4a:13:d2:bf:e8:c0:74:fa:47:53: 06:0f:ab:9a:ba:dc:25:39:5d:92:1e:0d:ac:10:3d:2f:d8:72: f4:2e:6f:fd:e9:c0:a4:46:23:81:a0:be:fc:20:d4:1d:bc:78: 8c:61:76:ab:bd:83:16:9d:a1:02:e5:4a:ed:f3:bb:2e:30:44: e0:8c:0d:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fxET5DrRaoHp0anGI3aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MTMzZGNhZjJiMWViZjVkYWRlNWEzM2FhMWIyZmI5OWQy Njg5YmEwHhcNMjUxMjA2MDQwMTAxWhcNMjUxMjA3MDQwMTAxWjAzMTEwLwYDVQQD EyhkODAxNmNmYTQ0MjZlNGJkMWNmMDVkYjliOTU0ZjBlNDkyNzExMDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T64dmynoJp/8OaGzrpwpy8V2aGy VkRsgsZxamqJpCJ8vnvupafKAdskU2bC4FP0l73v2MorbsyiKm/w68pt+uGbCcTk 7FLf5ekn0G3QAVMLLHM3UZFZfqZoPWzrBCkfveyyedEiQ3k4acVckR3f6VnGZZal pLrKiSRegVRaXVbuLdULUm6s8/t6R1KB6QsSRy5mQFNmCKGwDS8C8dmjlRGIqm/k kzM66oEmwInVdjMBT8qAWpe6+W3qVqQH4avuV2SsrUnH7Xmam7d/AOrqW7Y5MP6y 6nF/d1GCVoKlN9+0LdYjBRMZtM7qXDQPS8N2X5mhvrvmexjwCfMchQPstwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgBbPpEJuS9HPBdublU8OSScRCfMB8GA1UdIwQY MBaAFOcTPcrysev12t5aM6obL7mdJom6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXhNOXl2S3g2X1hhM2xvenFoc3Z1WjBtaWJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81ZTRkZjgtYWU4Yy00NGE3LWJkNmUt MTljZTQ2YTQyZmE0LzEvNXhNOXl2S3g2X1hhM2xvenFoc3Z1WjBtaWJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi81ZTRkZjgtYWU4Yy00NGE3LWJkNmUtMTljZTQ2YTQyZmE0 LzEvNXhNOXl2S3g2X1hhM2xvenFoc3Z1WjBtaWJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTVLp44m yYpxLVGJgfH7R+F7Qq+ET0/Dd74R1DarjU+L9njkDj/eOl3YqDqhE2GxU2xHHMZ5 kahYnt/6MP8KwYC9JekqCD3kLbDKespX1IJOfrNJdHvwxsibbRmuqXAjFhApNwgb VxLbsAGeTRh16KhYqXrfN1tvKk2l+QBVZ+R0PHFtALRht7VzH6lZMNCfFWcWXS1Y u74Dc+bUvCm4hf3PwE55ygcHwtmrBmoMivAfpOboFK+R9StI/hZKE9K/6MB0+kdT Bg+rmrrcJTldkh4NrBA9L9hy9C5v/enApEYjgaC+/CDUHbx4jGF2q72DFp2hAuVK 7fO7LjBE4IwNyg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:35:19 2025 by rpki-client