This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json) Hash identifier: pHOKF7HuqthnoDUI6DxfdfQPc8q90wbuWvuoGp6Jryo= Subject key identifier: FB:65:8F:53:EF:00:C7:71:7E:7B:68:76:60:4B:F9:9A:FA:34:67:5D Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af Certificate serial: 019AF38950DBD1C8B721A021856796B3C9C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft Manifest number: 07F5 Signing time: Sat 06 Dec 2025 12:00:53 +0000 Manifest this update: Sat 06 Dec 2025 12:00:53 +0000 Manifest next update: Sun 07 Dec 2025 12:00:53 +0000 Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: ty6WCd6Hx9OYxSW4IZ7xNFP/XxImMCNlreQkFDcHWbo=) 2: FUn2t9ppYu0Wn0pkoCRZ-HiUy7U.roa (hash: IgKhBAHaInAK8D+wEDHgOoVh2qEqWhDFRzWVOdnNaSE=) 3: H4hpUNA2nrrRur4Tk2W8HjJVqu4.roa (hash: oa7awxP7blKcpEGQ8hgbpBoX6kUOq34Ta41x1XECaFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:50:db:d1:c8:b7:21:a0:21:85:67:96:b3:c9:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af Validity Not Before: Dec 6 12:00:53 2025 GMT Not After : Dec 7 12:00:53 2025 GMT Subject: CN=fb658f53ef00c7717e7b6876604bf99afa34675d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:46:8a:b2:39:80:50:42:07:40:41:72:c8:58: 15:9c:e0:2d:34:32:05:67:54:7a:1d:9d:71:29:dd: d2:8a:6d:0d:37:03:03:02:b6:e8:00:4e:97:99:6d: 41:06:5a:36:91:59:cb:03:be:2d:5e:31:9e:15:87: c0:37:b7:42:2a:1d:ac:31:11:4d:ae:9b:7f:0c:32: e0:10:0b:73:d3:6a:bd:61:c9:70:7f:e3:64:03:06: f2:ee:f3:d8:47:da:d3:34:fb:f7:e7:86:b6:14:b5: ac:a9:8f:f2:c2:b6:c1:96:cf:72:3f:aa:6d:76:fc: 31:27:95:88:29:0f:5e:fd:78:9e:86:11:b2:45:80: 7c:d4:35:0c:83:6d:5c:09:26:dd:0e:26:1a:1b:19: b1:36:6f:77:ec:dc:50:ab:47:14:af:50:7f:5c:7d: 95:67:50:a4:96:09:09:5d:c5:9c:9b:90:3e:01:75: 77:95:16:1d:1e:b3:ea:b7:98:60:6b:94:5d:1a:06: 65:14:0c:d4:d7:67:43:6e:86:dc:2d:7a:73:fd:05: c1:44:82:49:b4:33:73:7e:c4:c6:ea:7a:f9:81:6a: 25:22:31:61:fb:23:77:a8:34:46:53:5e:92:89:eb: e8:00:90:18:4e:bd:8e:21:ce:37:0f:22:05:69:79: bf:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:65:8F:53:EF:00:C7:71:7E:7B:68:76:60:4B:F9:9A:FA:34:67:5D X509v3 Authority Key Identifier: keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:b5:5e:d1:7b:f7:5a:f5:d8:e6:61:3c:ee:95:04:95:90:bb: c8:d8:15:ce:b6:70:75:70:28:11:63:2c:5a:84:96:89:08:69: 58:97:d0:fb:6f:e2:b7:e6:23:80:5f:7b:7d:85:fd:11:28:fd: 0c:d3:fe:bc:ee:6b:e1:10:e8:81:3b:1f:79:a9:c2:74:d9:c7: 51:9b:61:93:24:68:65:df:73:8a:2b:f2:f9:0b:17:cb:5e:bb: f8:f8:bf:37:16:29:8e:71:1e:84:2e:c3:e9:58:49:b5:0d:ee: e3:f7:b3:a7:31:3b:b3:0b:10:f5:bd:86:96:a8:ef:2b:37:79: 60:d5:83:6e:8c:68:f2:26:17:e3:ea:df:98:86:d7:02:00:9d: 9b:41:ed:52:24:a4:3e:36:fe:8e:68:7f:39:59:a4:68:c6:13: 95:56:24:09:0a:66:25:f6:1b:09:5b:b6:35:a2:48:76:17:6b: 8a:5a:97:65:89:f2:24:f4:d7:49:f4:ab:e4:19:65:95:91:54: 5c:d4:f5:97:5a:9b:d8:fc:36:8f:31:4f:ac:76:80:fe:10:fd: 01:95:24:95:3d:21:dc:a1:45:fe:51:e5:55:d3:37:cc:90:84: 5f:16:1a:ed:2e:4e:ed:50:23:28:45:68:ed:f4:15:4d:4a:10: af:d3:a0:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziVDb0ci3IaAhhWeWs8nEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0M2JhYWZjNjRiMzNlNDNkYjc4ZGM3YWVkNjA1ZWY3MDQw NmQ5YWYwHhcNMjUxMjA2MTIwMDUzWhcNMjUxMjA3MTIwMDUzWjAzMTEwLwYDVQQD EyhmYjY1OGY1M2VmMDBjNzcxN2U3YjY4NzY2MDRiZjk5YWZhMzQ2NzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EaKsjmAUEIHQEFyyFgVnOAtNDIF Z1R6HZ1xKd3Sim0NNwMDArboAE6XmW1BBlo2kVnLA74tXjGeFYfAN7dCKh2sMRFN rpt/DDLgEAtz02q9Yclwf+NkAwby7vPYR9rTNPv354a2FLWsqY/ywrbBls9yP6pt dvwxJ5WIKQ9e/XiehhGyRYB81DUMg21cCSbdDiYaGxmxNm937NxQq0cUr1B/XH2V Z1CklgkJXcWcm5A+AXV3lRYdHrPqt5hga5RdGgZlFAzU12dDbobcLXpz/QXBRIJJ tDNzfsTG6nr5gWolIjFh+yN3qDRGU16SievoAJAYTr2OIc43DyIFaXm/2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtlj1PvAMdxfntodmBL+Zr6NGddMB8GA1UdIwQY MBaAFOQ7qvxksz5D23jceu1gXvcEBtmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTIt ZTY4MTJkYWI2OTk5LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTItZTY4MTJkYWI2OTk5 LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbVe0Xv3 WvXY5mE87pUElZC7yNgVzrZwdXAoEWMsWoSWiQhpWJfQ+2/it+YjgF97fYX9ESj9 DNP+vO5r4RDogTsfeanCdNnHUZthkyRoZd9ziivy+QsXy167+Pi/NxYpjnEehC7D 6VhJtQ3u4/ezpzE7swsQ9b2GlqjvKzd5YNWDboxo8iYX4+rfmIbXAgCdm0HtUiSk Pjb+jmh/OVmkaMYTlVYkCQpmJfYbCVu2NaJIdhdrilqXZYnyJPTXSfSr5BlllZFU XNT1l1qb2Pw2jzFPrHaA/hD9AZUklT0h3KFF/lHlVdM3zJCEXxYa7S5O7VAjKEVo 7fQVTUoQr9OgCA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:25 2025 by rpki-client