This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft File: 5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json) Hash identifier: sA09GFgBatModU7PfYZW7DVd51w4WpROuJ83/JvllDs= Subject key identifier: 3E:6E:58:00:2D:F5:81:A2:0D:57:BA:A4:5A:5E:F5:7C:67:19:9A:D9 Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62 Certificate issuer: /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062 Certificate serial: 019AF1D1ABF5282C63F3908CFAFBCBF1E998 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 04:00:41 +0000 Manifest this update: Sat 06 Dec 2025 04:00:41 +0000 Manifest next update: Sun 07 Dec 2025 04:00:41 +0000 Files and hashes: 1: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: /Q0bIkLurWeu92ifeywtvq/XzjSegIb1w2OVAUgAZ1w=) 2: mjZQqpBxq3tzElUxwYWj6w8CYqw.roa (hash: xWY5CwFTzA7VILUdMDaL5WQ8VyRltqo8AcwsKQ6Bk2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ab:f5:28:2c:63:f3:90:8c:fa:fb:cb:f1:e9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062 Validity Not Before: Dec 6 04:00:41 2025 GMT Not After : Dec 7 04:00:41 2025 GMT Subject: CN=3e6e58002df581a20d57baa45a5ef57c67199ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cf:bc:2c:81:e3:ba:02:84:02:ec:08:8a:76: 1a:84:db:17:bc:6c:6a:68:2e:87:00:02:61:0b:ed: e4:bb:df:b1:99:ad:9f:37:e8:4f:35:2d:92:c7:bc: 64:75:56:c8:e9:54:ec:03:b9:37:4d:af:cb:11:21: 38:b3:4f:01:f0:18:5d:14:a5:ef:89:72:db:f7:2b: a1:b0:00:a1:36:07:09:2c:67:6d:b9:83:70:7f:ef: 46:e4:a4:9e:ff:ab:bc:6b:bf:8d:af:49:2b:da:1e: e7:14:94:47:22:99:f6:a4:9d:5e:8b:ef:f8:5f:db: 38:0b:08:19:92:b4:d4:ba:30:57:67:48:56:38:10: 74:61:ce:6c:d6:77:39:75:7d:9e:5e:83:79:aa:55: 06:7c:ba:7e:e7:b8:e4:a7:81:87:d8:d4:c6:5b:ab: 2b:8a:de:c7:f0:eb:60:a9:a9:29:30:32:b1:08:f1: 6f:20:75:24:01:c2:e4:fc:74:bc:1f:fb:22:12:28: 1b:8b:b4:cc:53:7a:6a:88:ba:b7:1b:74:0d:8e:e3: 2e:8e:b6:cb:85:60:d3:f0:46:40:24:54:74:0a:de: 52:ad:22:05:a1:bc:19:b1:f4:f7:93:88:81:7d:c5: 63:7c:43:4f:76:6d:75:30:21:db:5b:9e:19:be:c7: ad:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6E:58:00:2D:F5:81:A2:0D:57:BA:A4:5A:5E:F5:7C:67:19:9A:D9 X509v3 Authority Key Identifier: keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:38:63:ef:66:91:2a:56:99:95:9a:1d:69:c5:1c:c1:87:8a: 2a:29:6b:ec:60:64:ca:bf:fb:4a:a5:d0:af:1f:c2:4c:64:fe: 1e:0b:6b:80:58:c7:6f:51:d4:0e:3d:40:66:00:5d:81:5f:ff: 45:a8:ec:af:a7:3e:60:56:36:e8:32:83:15:ba:9a:88:cf:bc: 9b:68:1b:a7:43:a2:47:7f:98:11:41:dd:ee:86:63:98:98:fe: b1:41:f8:d6:7f:fb:ae:79:ca:f9:92:46:2c:18:70:37:8e:22: 2b:90:fc:cd:a2:f9:8f:60:b7:dc:ef:a3:ed:21:a4:b5:86:10: 74:67:11:cc:ef:7b:b8:7e:96:b0:fc:5a:68:4f:5e:11:35:3b: 49:e8:dd:f3:9d:7c:f1:97:7d:37:6c:dd:e7:27:b2:e5:44:ca: 5a:6a:bc:ad:3d:77:d2:74:e3:25:ab:2b:b5:b3:9b:a9:90:e1: de:bf:84:cc:43:fb:ef:74:d7:48:ed:49:3c:8b:9d:de:95:79: 7e:c8:4b:b3:ae:41:9a:4a:7d:b2:f2:be:f0:bd:ba:72:65:96: d0:99:bd:58:eb:53:f7:c7:6e:b8:9c:d2:de:f9:bc:74:5a:07: 81:a0:f0:10:d4:72:be:bd:72:47:ff:44:12:f1:79:1b:77:91: c5:ac:a8:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0av1KCxj85CM+vvL8emYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3M2ZlMzM1MWE1ZTYyNjRhMWY4MTI5YzEwMjUxZDllODk2 ZTgwNjIwHhcNMjUxMjA2MDQwMDQxWhcNMjUxMjA3MDQwMDQxWjAzMTEwLwYDVQQD EygzZTZlNTgwMDJkZjU4MWEyMGQ1N2JhYTQ1YTVlZjU3YzY3MTk5YWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc+8LIHjugKEAuwIinYahNsXvGxq aC6HAAJhC+3ku9+xma2fN+hPNS2Sx7xkdVbI6VTsA7k3Ta/LESE4s08B8BhdFKXv iXLb9yuhsAChNgcJLGdtuYNwf+9G5KSe/6u8a7+Nr0kr2h7nFJRHIpn2pJ1ei+/4 X9s4CwgZkrTUujBXZ0hWOBB0Yc5s1nc5dX2eXoN5qlUGfLp+57jkp4GH2NTGW6sr it7H8OtgqakpMDKxCPFvIHUkAcLk/HS8H/siEigbi7TMU3pqiLq3G3QNjuMujrbL hWDT8EZAJFR0Ct5SrSIFobwZsfT3k4iBfcVjfENPdm11MCHbW54Zvset9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5uWAAt9YGiDVe6pFpe9XxnGZrZMB8GA1UdIwQY MBaAFOc/4zUaXmJkofgSnBAlHZ6JboBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXpfak5ScGVZbVNoLUJLY0VDVWRub2x1Z0dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hZWIyMjQtOGM4OS00NDY2LTliMzgt MDI0YzFlZGQ2MmVjLzEvNXpfak5ScGVZbVNoLUJLY0VDVWRub2x1Z0dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9hZWIyMjQtOGM4OS00NDY2LTliMzgtMDI0YzFlZGQ2MmVj LzEvNXpfak5ScGVZbVNoLUJLY0VDVWRub2x1Z0dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANThj72aR KlaZlZodacUcwYeKKilr7GBkyr/7SqXQrx/CTGT+HgtrgFjHb1HUDj1AZgBdgV// Rajsr6c+YFY26DKDFbqaiM+8m2gbp0OiR3+YEUHd7oZjmJj+sUH41n/7rnnK+ZJG LBhwN44iK5D8zaL5j2C33O+j7SGktYYQdGcRzO97uH6WsPxaaE9eETU7Sejd8518 8Zd9N2zd5yey5UTKWmq8rT130nTjJasrtbObqZDh3r+EzEP773TXSO1JPIud3pV5 fshLs65Bmkp9svK+8L26cmWW0Jm9WOtT98duuJzS3vm8dFoHgaDwENRyvr1yR/9E EvF5G3eRxayorA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:24:18 2025 by rpki-client