This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft File: 5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft (raw, json) Hash identifier: 0X2gjIsLOe4jnSnvLSPRFd9Wkfw3TgAViBavWVYPr38= Subject key identifier: D2:CA:44:E9:11:70:C5:6D:D7:82:63:45:07:FB:11:0B:85:1C:F3:01 Authority key identifier: E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98 Certificate issuer: /CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898 Certificate serial: 019AF31BEA97C9B3A9A476CC6A3CE2646FFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 10:01:24 +0000 Manifest this update: Sat 06 Dec 2025 10:01:24 +0000 Manifest next update: Sun 07 Dec 2025 10:01:24 +0000 Files and hashes: 1: 5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl (hash: Afr/wV6zVkX4obHoBLuhqxihMejQt/ZtJj/kJhb7wGo=) 2: N5B5WcceOX8-5008CdVB5Z2Yf_U.roa (hash: N6x2VI2LM0pBE2WvbvROlXs2jZlgeDuNmVuOamFJP3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:ea:97:c9:b3:a9:a4:76:cc:6a:3c:e2:64:6f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898 Validity Not Before: Dec 6 10:01:24 2025 GMT Not After : Dec 7 10:01:24 2025 GMT Subject: CN=d2ca44e91170c56dd782634507fb110b851cf301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:88:2a:2d:77:e0:ad:b1:28:71:32:7f:55:a6: 47:8b:73:78:f7:80:1a:38:81:e2:4c:fb:12:d7:6b: 2c:56:ef:7c:3b:a6:de:a8:54:7d:b1:14:7c:c9:05: 13:91:05:bf:d9:43:ec:f0:39:e4:96:d4:a8:5b:95: af:32:d2:ce:de:66:bf:9e:da:dc:f7:ac:59:dc:b2: 28:c2:3c:1a:18:e2:97:02:ef:43:91:fd:1a:05:4c: c8:66:f2:ad:33:70:bc:c8:e5:c1:8d:7e:60:e3:97: 78:9d:13:67:db:c3:a2:03:11:0a:e7:a8:02:1a:90: b6:43:85:b8:42:09:29:3d:0f:7c:e8:86:2c:21:a5: 4b:35:60:1d:01:10:56:4a:56:56:52:d7:88:8d:a7: ac:6a:d6:a4:56:69:31:eb:5d:0c:8e:83:3f:a6:c6: 35:55:f2:b5:1e:e3:c6:a0:a4:1a:ce:1f:34:6e:bc: 7c:65:c0:6f:aa:5a:8b:61:db:4f:58:68:2f:fc:82: 14:76:d4:5f:ea:a9:7f:7e:e4:2c:6b:5a:1d:58:b2: 24:4f:f3:6a:46:6b:99:9b:1c:d2:85:94:ed:02:37: e0:57:5e:56:24:5e:6c:53:69:81:30:49:59:2f:0a: 8c:ce:d1:68:d2:40:ee:50:86:9e:c6:e5:ca:b2:33: 52:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CA:44:E9:11:70:C5:6D:D7:82:63:45:07:FB:11:0B:85:1C:F3:01 X509v3 Authority Key Identifier: keyid:E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e4:49:68:8a:ee:61:7f:86:2d:6d:89:80:b0:27:f8:db:b3: 9b:7e:54:93:5d:69:93:af:fe:c1:33:85:e7:fe:d1:62:53:9f: 91:83:d2:53:0d:2a:42:d2:32:9e:1f:80:b3:f9:70:10:5e:69: 47:6e:59:71:2b:e5:dc:40:30:1f:44:a3:5e:bb:5b:12:b6:94: b6:aa:fd:ad:e4:15:ac:11:01:c6:2a:cf:c9:92:40:ae:5a:dd: 1c:47:a5:ac:3d:ae:ca:a8:8d:11:11:4c:64:ca:d7:b7:42:27: 73:f4:d3:b5:b7:da:17:2e:e6:8b:e5:43:35:56:6a:40:21:eb: b9:0c:3e:71:4a:6a:1a:fe:02:03:51:9a:a1:6b:2c:e0:1e:4e: 5c:ee:29:93:01:a0:fb:2e:ff:e6:1f:92:1a:8a:e0:74:3b:0b: 86:2c:8d:18:ef:90:9a:1b:03:a6:71:af:ad:b0:6e:a0:eb:52: 51:76:99:83:39:21:fe:fc:b9:a3:5a:a5:c6:34:cb:7d:af:5d: 79:83:43:1c:71:3d:03:98:17:b8:a5:0e:fa:a3:77:57:e9:77: c8:fc:53:93:7e:1d:1d:a9:9b:a3:60:eb:63:eb:b1:52:ef:33: 6a:91:c0:b1:32:92:a4:b9:54:04:a7:fc:1e:b9:bc:7a:2a:01: a4:47:ac:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+qXybOppHbMajziZG/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MDA2NGRjZjcxOWVkODk5OWRhNzkyZjZmYmZjM2ZlOWJj NzA4OTgwHhcNMjUxMjA2MTAwMTI0WhcNMjUxMjA3MTAwMTI0WjAzMTEwLwYDVQQD EyhkMmNhNDRlOTExNzBjNTZkZDc4MjYzNDUwN2ZiMTEwYjg1MWNmMzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhogqLXfgrbEocTJ/VaZHi3N494Aa OIHiTPsS12ssVu98O6beqFR9sRR8yQUTkQW/2UPs8DnkltSoW5WvMtLO3ma/ntrc 96xZ3LIowjwaGOKXAu9Dkf0aBUzIZvKtM3C8yOXBjX5g45d4nRNn28OiAxEK56gC GpC2Q4W4QgkpPQ986IYsIaVLNWAdARBWSlZWUteIjaesatakVmkx610MjoM/psY1 VfK1HuPGoKQazh80brx8ZcBvqlqLYdtPWGgv/IIUdtRf6ql/fuQsa1odWLIkT/Nq RmuZmxzShZTtAjfgV15WJF5sU2mBMElZLwqMztFo0kDuUIaexuXKsjNSAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLKROkRcMVt14JjRQf7EQuFHPMBMB8GA1UdIwQY MBaAFOYAZNz3Ge2Jmdp5L2+/w/6bxwiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWdCazNQY1o3WW1aMm5rdmI3X0RfcHZIQ0pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83MzRlMGMtNzg2ZS00NjMxLWE5MjMt ZThiOGZjYzQxZTg1LzEvNWdCazNQY1o3WW1aMm5rdmI3X0RfcHZIQ0pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy83MzRlMGMtNzg2ZS00NjMxLWE5MjMtZThiOGZjYzQxZTg1 LzEvNWdCazNQY1o3WW1aMm5rdmI3X0RfcHZIQ0pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbeRJaIru YX+GLW2JgLAn+Nuzm35Uk11pk6/+wTOF5/7RYlOfkYPSUw0qQtIynh+As/lwEF5p R25ZcSvl3EAwH0SjXrtbEraUtqr9reQVrBEBxirPyZJArlrdHEelrD2uyqiNERFM ZMrXt0Inc/TTtbfaFy7mi+VDNVZqQCHruQw+cUpqGv4CA1GaoWss4B5OXO4pkwGg +y7/5h+SGorgdDsLhiyNGO+QmhsDpnGvrbBuoOtSUXaZgzkh/vy5o1qlxjTLfa9d eYNDHHE9A5gXuKUO+qN3V+l3yPxTk34dHambo2DrY+uxUu8zapHAsTKSpLlUBKf8 Hrm8eioBpEesyg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:49:30 2025 by rpki-client