This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft File: g5JNIiU91reGmbxdCgEQJ5E-X3A.mft (raw, json) Hash identifier: Ih32sDrbzGEAgQkUvzGJKQ+cSnEL+dngX48who30ilY= Subject key identifier: 14:4E:6E:5F:FC:3E:2A:6F:39:AA:66:03:D3:26:FC:EF:13:E9:8E:05 Authority key identifier: 83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70 Certificate issuer: /CN=83924d22253dd6b78699bc5d0a011027913e5f70 Certificate serial: 019AF5411425F83F776C10E92AC97AA40ED1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft Manifest number: 069A Signing time: Sat 06 Dec 2025 20:01:14 +0000 Manifest this update: Sat 06 Dec 2025 20:01:14 +0000 Manifest next update: Sun 07 Dec 2025 20:01:14 +0000 Files and hashes: 1: g5JNIiU91reGmbxdCgEQJ5E-X3A.crl (hash: ouy6lxIxmatPfyDROtX2gcE6o6x1ElhhQZ4hoEdzOE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:14:25:f8:3f:77:6c:10:e9:2a:c9:7a:a4:0e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83924d22253dd6b78699bc5d0a011027913e5f70 Validity Not Before: Dec 6 20:01:14 2025 GMT Not After : Dec 7 20:01:14 2025 GMT Subject: CN=144e6e5ffc3e2a6f39aa6603d326fcef13e98e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7e:87:2f:3b:f4:49:f3:f6:b0:84:40:6f:85: f5:7a:be:57:ce:8e:41:2a:0d:cb:d3:5c:1a:d5:9b: 75:dc:07:66:ae:da:e8:d3:d5:7b:b0:3c:56:a6:fe: 39:8c:c1:57:36:58:a7:65:22:42:bf:52:b0:59:d7: 95:9c:bf:fa:dc:ed:55:d7:fe:0f:45:7d:2b:45:ce: 24:da:52:7b:77:f8:00:8d:a2:a1:af:b4:19:39:c9: ef:54:fd:10:84:b7:2d:89:cd:d3:a0:88:af:7a:6a: 26:a3:dc:96:0f:52:d7:35:fe:2a:1a:8a:09:18:52: f8:6f:ee:aa:0c:22:6c:60:3c:6b:27:f5:9c:63:09: 3e:f6:d8:b5:d0:0e:f0:3b:a4:34:61:f1:58:8c:5d: c5:28:39:ec:6c:e7:a1:41:0d:e0:b3:ab:95:19:36: 78:f1:ca:cc:01:4c:6e:7d:0f:45:60:e1:c6:03:ea: 05:15:6c:3a:7b:f4:d9:c7:7f:b9:93:31:56:2d:87: c2:67:3e:ef:a2:f3:dd:e7:e0:38:f3:83:5d:c5:6e: 30:5c:82:e5:b9:83:db:b4:a6:38:10:f9:dc:58:21: 64:21:1e:10:62:ed:78:05:f5:69:b2:59:d8:78:f4: 61:ff:f0:67:aa:c7:28:24:33:ed:9e:1a:99:fa:e7: 96:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4E:6E:5F:FC:3E:2A:6F:39:AA:66:03:D3:26:FC:EF:13:E9:8E:05 X509v3 Authority Key Identifier: keyid:83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a9:05:35:a5:1b:d8:d0:1c:ae:58:e3:02:cf:05:b2:24:16: ba:db:f1:0f:33:16:94:d4:96:7f:c4:40:82:79:b1:b9:fc:fe: 0d:42:06:e4:d2:86:c6:3b:ad:b8:8d:b8:ee:3c:66:d1:09:6f: dd:ce:cc:d6:3f:db:9e:05:6e:4f:37:17:57:f4:e7:e8:ef:ff: 34:7a:47:f6:9d:6d:f7:f3:08:90:fc:cc:50:44:f1:bf:a7:c7: bc:fe:57:a9:76:ac:dc:ee:9f:db:80:86:77:5f:73:5c:42:b6: 74:17:72:c8:f0:8a:65:8e:f1:99:a1:3a:1d:fb:3d:26:a3:b8: 68:f7:81:4d:f3:3f:42:07:74:2c:fe:67:f8:18:e0:91:06:21: 9a:cf:bc:50:24:e0:65:fb:17:31:be:4c:54:c9:bf:d3:3b:b9: 8f:c2:53:12:2e:98:29:20:b8:21:a8:14:22:f3:af:19:2d:21: 35:b2:4b:9c:b5:47:f3:2a:ca:63:21:1b:cf:45:10:fe:ab:96: f2:ac:02:08:99:8e:5c:57:07:1e:38:2f:31:9e:d5:30:26:da: fc:02:16:05:0a:c5:a0:a8:5f:d7:04:89:53:e5:70:13:95:6b: c3:ab:f4:d4:c1:f6:bf:bd:19:83:71:a0:9d:fd:d0:01:f7:4a: 3c:15:0a:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QRQl+D93bBDpKsl6pA7RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzOTI0ZDIyMjUzZGQ2Yjc4Njk5YmM1ZDBhMDExMDI3OTEz ZTVmNzAwHhcNMjUxMjA2MjAwMTE0WhcNMjUxMjA3MjAwMTE0WjAzMTEwLwYDVQQD EygxNDRlNmU1ZmZjM2UyYTZmMzlhYTY2MDNkMzI2ZmNlZjEzZTk4ZTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH6HLzv0SfP2sIRAb4X1er5Xzo5B Kg3L01wa1Zt13Admrtro09V7sDxWpv45jMFXNlinZSJCv1KwWdeVnL/63O1V1/4P RX0rRc4k2lJ7d/gAjaKhr7QZOcnvVP0QhLctic3ToIivemomo9yWD1LXNf4qGooJ GFL4b+6qDCJsYDxrJ/WcYwk+9ti10A7wO6Q0YfFYjF3FKDnsbOehQQ3gs6uVGTZ4 8crMAUxufQ9FYOHGA+oFFWw6e/TZx3+5kzFWLYfCZz7vovPd5+A484NdxW4wXILl uYPbtKY4EPncWCFkIR4QYu14BfVpslnYePRh//BnqscoJDPtnhqZ+ueWxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRObl/8PipvOapmA9Mm/O8T6Y4FMB8GA1UdIwQY MBaAFIOSTSIlPda3hpm8XQoBECeRPl9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNTFjNzUtZWY3Yi00OGFiLTg3MGYt NDYwY2JlNjg4Y2U1LzEvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNTFjNzUtZWY3Yi00OGFiLTg3MGYtNDYwY2JlNjg4Y2U1 LzEvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHakFNaUb 2NAcrljjAs8FsiQWutvxDzMWlNSWf8RAgnmxufz+DUIG5NKGxjutuI247jxm0Qlv 3c7M1j/bngVuTzcXV/Tn6O//NHpH9p1t9/MIkPzMUETxv6fHvP5XqXas3O6f24CG d19zXEK2dBdyyPCKZY7xmaE6Hfs9JqO4aPeBTfM/Qgd0LP5n+BjgkQYhms+8UCTg ZfsXMb5MVMm/0zu5j8JTEi6YKSC4IagUIvOvGS0hNbJLnLVH8yrKYyEbz0UQ/quW 8qwCCJmOXFcHHjgvMZ7VMCba/AIWBQrFoKhf1wSJU+VwE5Vrw6v01MH2v70Zg3Gg nf3QAfdKPBUK8w== -----END CERTIFICATE-----Generated at Sun Dec 7 02:59:08 2025 by rpki-client