This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft File: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json) Hash identifier: 2fgOgwEyV/ehDk+kMpXgXEXbOAHxOCW8yiPOvzBC60g= Subject key identifier: 09:03:34:28:96:1C:A0:9D:E4:CC:74:6F:E6:EA:93:D0:ED:27:AF:CB Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B Certificate issuer: /CN=e578bc065072b40baf08416e216a1307b24bc44b Certificate serial: 019AF12D6850252780D86E2D60BDE14AA5E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:01:16 +0000 Manifest this update: Sat 06 Dec 2025 01:01:16 +0000 Manifest next update: Sun 07 Dec 2025 01:01:16 +0000 Files and hashes: 1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: ROqWyjkAdOUz5EIW1/zXsep9VA268WO9ryv7+1WFcPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:68:50:25:27:80:d8:6e:2d:60:bd:e1:4a:a5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b Validity Not Before: Dec 6 01:01:16 2025 GMT Not After : Dec 7 01:01:16 2025 GMT Subject: CN=09033428961ca09de4cc746fe6ea93d0ed27afcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:48:e0:db:ae:81:ae:c1:a2:bd:48:24:78:87: 61:57:bd:6a:61:e7:af:ed:d3:87:c7:85:cd:a2:f2: bb:59:12:90:f6:24:37:cf:36:da:6f:79:36:87:fa: 78:cc:97:59:eb:31:00:a5:2b:f2:c1:87:d3:fc:4c: 95:76:97:99:7f:b0:34:d7:83:ca:c7:c9:cf:79:91: 6b:09:ae:b4:89:14:bf:bf:f1:d6:97:b0:26:d2:66: 09:25:cf:96:0e:73:46:8d:1d:bf:60:f6:24:bd:46: f9:d8:5c:15:4e:d3:56:26:d7:b3:24:98:01:a8:f5: ab:be:32:b4:9f:2e:4d:37:8a:70:19:59:ba:bf:6f: 6a:e6:0e:c2:da:a7:6c:8c:73:28:79:25:22:54:26: 4a:60:31:46:3b:49:d0:0f:a8:dc:82:61:e1:1d:73: 57:c4:02:21:ce:00:e1:d2:73:f6:06:a4:ad:e0:d5: 79:8f:a5:16:a9:1f:fd:d0:5a:e2:a1:47:5d:6e:dc: af:4b:09:52:9b:55:ae:1c:6e:d2:de:6f:bd:3b:12: b9:e1:18:a2:8e:b4:7a:cd:f7:12:29:09:94:07:7c: 48:e4:6b:e5:6f:dd:50:66:ee:be:46:7b:fb:e4:b0: 4e:d1:fc:e4:72:a6:c0:1d:c1:1f:75:4e:eb:d0:7d: 54:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:03:34:28:96:1C:A0:9D:E4:CC:74:6F:E6:EA:93:D0:ED:27:AF:CB X509v3 Authority Key Identifier: keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:50:46:79:63:51:75:91:53:db:d3:47:8f:09:c3:c2:43:30: 76:25:00:3f:11:e2:7d:19:cd:d5:73:84:21:10:36:63:60:72: b5:8a:a3:71:0a:72:86:de:4a:f8:60:74:28:e8:ae:71:9c:45: 01:60:b4:1a:ec:2d:1f:d0:a0:9a:03:63:72:a9:f9:39:de:26: 7c:6a:e9:26:11:d4:74:5b:05:1f:1c:1f:d3:93:aa:b6:46:6e: 4e:43:ce:11:e7:3a:9a:0f:e2:40:e0:3b:96:58:46:5a:09:81: 05:3d:68:f8:87:18:fc:81:9f:8b:32:ae:65:31:28:90:8b:de: 74:b4:56:ce:53:ca:38:7f:2b:70:bf:cc:23:c6:f0:2b:d1:11: 29:83:d1:7f:af:58:4d:27:fc:31:21:8d:86:83:f9:f3:dd:0a: c3:dc:9a:68:bb:30:a5:11:b2:94:8a:74:d0:c3:8a:93:3a:45: 51:0a:9a:b6:6a:4f:95:e2:ee:bf:d4:44:11:c0:23:94:40:39: 25:98:a1:10:a5:0a:f2:b0:b7:e7:d6:2e:dc:54:63:3b:cb:19: d9:45:23:4c:c9:c3:d0:7c:67:28:0b:0f:0c:fe:83:6b:bc:b6: ba:1a:05:e9:a7:c1:38:27:b1:74:ea:8b:45:fc:00:30:6f:b9: 9f:d5:9a:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWhQJSeA2G4tYL3hSqXgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NzhiYzA2NTA3MmI0MGJhZjA4NDE2ZTIxNmExMzA3YjI0 YmM0NGIwHhcNMjUxMjA2MDEwMTE2WhcNMjUxMjA3MDEwMTE2WjAzMTEwLwYDVQQD EygwOTAzMzQyODk2MWNhMDlkZTRjYzc0NmZlNmVhOTNkMGVkMjdhZmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkjg266BrsGivUgkeIdhV71qYeev 7dOHx4XNovK7WRKQ9iQ3zzbab3k2h/p4zJdZ6zEApSvywYfT/EyVdpeZf7A014PK x8nPeZFrCa60iRS/v/HWl7Am0mYJJc+WDnNGjR2/YPYkvUb52FwVTtNWJtezJJgB qPWrvjK0ny5NN4pwGVm6v29q5g7C2qdsjHMoeSUiVCZKYDFGO0nQD6jcgmHhHXNX xAIhzgDh0nP2BqSt4NV5j6UWqR/90FrioUddbtyvSwlSm1WuHG7S3m+9OxK54Rii jrR6zfcSKQmUB3xI5Gvlb91QZu6+Rnv75LBO0fzkcqbAHcEfdU7r0H1UIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkDNCiWHKCd5Mx0b+bqk9DtJ6/LMB8GA1UdIwQY MBaAFOV4vAZQcrQLrwhBbiFqEweyS8RLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEt ZmJmZjYwY2ZiOTZhLzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEtZmJmZjYwY2ZiOTZh LzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlBGeWNR dZFT29NHjwnDwkMwdiUAPxHifRnN1XOEIRA2Y2BytYqjcQpyht5K+GB0KOiucZxF AWC0GuwtH9CgmgNjcqn5Od4mfGrpJhHUdFsFHxwf05OqtkZuTkPOEec6mg/iQOA7 llhGWgmBBT1o+IcY/IGfizKuZTEokIvedLRWzlPKOH8rcL/MI8bwK9ERKYPRf69Y TSf8MSGNhoP5890Kw9yaaLswpRGylIp00MOKkzpFUQqatmpPleLuv9REEcAjlEA5 JZihEKUK8rC359Yu3FRjO8sZ2UUjTMnD0HxnKAsPDP6Da7y2uhoF6afBOCexdOqL RfwAMG+5n9Wa6A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:47 2025 by rpki-client