This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft File: 5jEQtJQcMhHihW_w6K39FXgqyXM.mft (raw, json) Hash identifier: DJgmhNyD89C63y6wt6MQ5U0jBtn13WVT5FHq0Aac5gA= Subject key identifier: 08:E5:F6:E9:6B:B1:0F:3D:BE:5E:B8:7B:AA:0C:A4:B2:F6:A8:CA:D7 Authority key identifier: E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73 Certificate issuer: /CN=e63110b4941c3211e2856ff0e8adfd15782ac973 Certificate serial: 019AF31CC2FF92C0C4B1C25C142D87AC4E30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft Manifest number: 0EC2 Signing time: Sat 06 Dec 2025 10:02:19 +0000 Manifest this update: Sat 06 Dec 2025 10:02:19 +0000 Manifest next update: Sun 07 Dec 2025 10:02:19 +0000 Files and hashes: 1: 5jEQtJQcMhHihW_w6K39FXgqyXM.crl (hash: wjNKWlD5C1dZtNa3wDjmJl/XxMBuixdGWU87UXKxhTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:c2:ff:92:c0:c4:b1:c2:5c:14:2d:87:ac:4e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e63110b4941c3211e2856ff0e8adfd15782ac973 Validity Not Before: Dec 6 10:02:19 2025 GMT Not After : Dec 7 10:02:19 2025 GMT Subject: CN=08e5f6e96bb10f3dbe5eb87baa0ca4b2f6a8cad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:18:30:8b:60:0f:89:ba:8b:1f:c1:31:88:fd: 9d:08:c7:3c:4e:70:45:81:dd:8e:9f:7c:fc:37:5f: fc:84:6a:84:e3:17:5a:26:d1:72:ee:84:e4:19:f2: e6:5d:43:97:b9:7f:21:0e:c5:74:dc:10:37:9d:6c: 1b:f7:61:14:0e:eb:79:0f:16:36:a0:29:bd:b4:03: 10:05:9a:71:c7:bd:e5:4a:78:45:af:ad:7a:18:cb: 97:70:46:72:43:07:1d:6d:06:5a:55:26:8a:9b:10: d7:81:14:6c:91:03:a0:73:2e:27:de:3d:f2:d8:52: f3:97:62:c3:92:49:26:c2:50:cf:18:07:62:84:29: b6:63:cb:35:86:b0:03:d0:79:9d:b5:fd:17:bd:ac: 3a:87:30:4f:1f:4b:79:18:95:c4:d5:63:6e:0b:d7: 92:d2:fa:9d:d5:91:29:58:0a:28:1a:f2:71:3d:25: 9d:0d:95:c9:ca:75:e3:ad:1e:ff:71:f3:cc:59:b7: be:86:44:fd:09:09:e1:5b:e1:4b:c8:84:8b:a6:64: 2b:2f:05:0b:2d:ed:37:f5:dd:8d:f6:8d:04:76:e8: b4:f0:a4:5f:19:98:40:46:1a:37:5b:5d:42:af:24: 77:98:67:4b:75:58:95:be:22:98:fe:0c:42:56:33: 9a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E5:F6:E9:6B:B1:0F:3D:BE:5E:B8:7B:AA:0C:A4:B2:F6:A8:CA:D7 X509v3 Authority Key Identifier: keyid:E6:31:10:B4:94:1C:32:11:E2:85:6F:F0:E8:AD:FD:15:78:2A:C9:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jEQtJQcMhHihW_w6K39FXgqyXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/243fb0-f391-4c96-b03a-915e61433b3b/1/5jEQtJQcMhHihW_w6K39FXgqyXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:50:6b:e4:79:d2:f5:bf:f5:53:0c:5a:e8:2c:3e:dc:8f:c2: 55:3b:b6:c5:0b:2a:1d:38:89:55:3b:ed:bd:a2:1a:d7:c8:a6: 23:ab:9d:1a:09:15:2e:c1:8c:4a:54:66:67:c2:f7:87:39:81: bc:cf:4f:ed:4a:b1:92:6f:d5:1e:52:b6:f3:0b:83:15:82:e7: 00:e4:5e:4c:a8:f2:e6:be:cc:a0:e6:40:89:c5:b8:61:25:23: 78:cc:90:47:44:bb:e3:9d:90:ff:be:75:cc:57:37:f8:ed:12: a3:a0:f3:cd:31:33:9a:7f:4d:b8:44:6d:50:0e:bd:0f:48:c2: 5f:32:be:3c:0c:36:51:fb:71:1f:ac:76:ea:94:76:62:4e:db: dc:94:6e:68:0a:53:90:fd:4e:65:94:18:38:cd:10:70:78:c9: 45:d5:25:44:d9:f8:0c:a5:73:c5:9c:91:6c:6d:60:ad:62:f7: 9e:c8:f5:8e:01:db:69:e8:86:47:5c:ef:ca:3a:0a:94:84:e0: 06:3b:8a:1e:fb:59:3e:05:91:1f:0b:49:24:3c:87:0c:cf:67: 91:98:f9:38:cc:c3:11:4d:f9:16:06:d8:19:3b:ac:82:5a:0a: 72:ba:09:dc:3a:82:28:d0:f7:cd:f2:7c:e8:11:a7:22:c3:9b: d3:53:39:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHML/ksDEscJcFC2HrE4wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MzExMGI0OTQxYzMyMTFlMjg1NmZmMGU4YWRmZDE1Nzgy YWM5NzMwHhcNMjUxMjA2MTAwMjE5WhcNMjUxMjA3MTAwMjE5WjAzMTEwLwYDVQQD EygwOGU1ZjZlOTZiYjEwZjNkYmU1ZWI4N2JhYTBjYTRiMmY2YThjYWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBgwi2APibqLH8ExiP2dCMc8TnBF gd2On3z8N1/8hGqE4xdaJtFy7oTkGfLmXUOXuX8hDsV03BA3nWwb92EUDut5DxY2 oCm9tAMQBZpxx73lSnhFr616GMuXcEZyQwcdbQZaVSaKmxDXgRRskQOgcy4n3j3y 2FLzl2LDkkkmwlDPGAdihCm2Y8s1hrAD0Hmdtf0Xvaw6hzBPH0t5GJXE1WNuC9eS 0vqd1ZEpWAooGvJxPSWdDZXJynXjrR7/cfPMWbe+hkT9CQnhW+FLyISLpmQrLwUL Le039d2N9o0Edui08KRfGZhARho3W11CryR3mGdLdViVviKY/gxCVjOaAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjl9ulrsQ89vl64e6oMpLL2qMrXMB8GA1UdIwQY MBaAFOYxELSUHDIR4oVv8Oit/RV4KslzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWpFUXRKUWNNaEhpaFdfdzZLMzlGWGdxeVhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8yNDNmYjAtZjM5MS00Yzk2LWIwM2Et OTE1ZTYxNDMzYjNiLzEvNWpFUXRKUWNNaEhpaFdfdzZLMzlGWGdxeVhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8yNDNmYjAtZjM5MS00Yzk2LWIwM2EtOTE1ZTYxNDMzYjNi LzEvNWpFUXRKUWNNaEhpaFdfdzZLMzlGWGdxeVhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlBr5HnS 9b/1Uwxa6Cw+3I/CVTu2xQsqHTiJVTvtvaIa18imI6udGgkVLsGMSlRmZ8L3hzmB vM9P7Uqxkm/VHlK28wuDFYLnAOReTKjy5r7MoOZAicW4YSUjeMyQR0S7452Q/751 zFc3+O0So6DzzTEzmn9NuERtUA69D0jCXzK+PAw2UftxH6x26pR2Yk7b3JRuaApT kP1OZZQYOM0QcHjJRdUlRNn4DKVzxZyRbG1grWL3nsj1jgHbaeiGR1zvyjoKlITg BjuKHvtZPgWRHwtJJDyHDM9nkZj5OMzDEU35FgbYGTusgloKcroJ3DqCKND3zfJ8 6BGnIsOb01M58A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:39 2025 by rpki-client