This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft File: _5zoM1_DdnayDsFlXFPWfbyG6LM.mft (raw, json) Hash identifier: CLj8iTqywpndgZwCyMnWvzm2Dk+O+NeUolH3b0cbhKM= Subject key identifier: C6:42:BC:EA:AC:5D:D7:B3:42:E5:42:5F:93:32:81:6A:79:03:E6:F1 Authority key identifier: FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3 Certificate issuer: /CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3 Certificate serial: 019AF276E298103D2F9A2FDE9C1F10CB8FD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft Manifest number: 0FDC Signing time: Sat 06 Dec 2025 07:01:08 +0000 Manifest this update: Sat 06 Dec 2025 07:01:08 +0000 Manifest next update: Sun 07 Dec 2025 07:01:08 +0000 Files and hashes: 1: _5zoM1_DdnayDsFlXFPWfbyG6LM.crl (hash: d/c9f8qgNLJ0yu3etcV8JdM0jXfing28bOiEYTy/w4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e2:98:10:3d:2f:9a:2f:de:9c:1f:10:cb:8f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3 Validity Not Before: Dec 6 07:01:08 2025 GMT Not After : Dec 7 07:01:08 2025 GMT Subject: CN=c642bceaac5dd7b342e5425f9332816a7903e6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a6:7a:2f:1d:98:c2:54:72:86:26:0f:ae:de: 9c:32:55:af:73:ce:61:61:83:df:23:6e:9d:74:9a: 8b:b9:d5:11:bf:d1:5d:7e:b3:a3:3a:79:7a:66:0a: 1a:05:0d:09:b6:26:8b:0e:cf:3d:53:40:03:6a:42: 43:fa:e2:6e:52:67:8f:63:ed:35:7e:bc:7c:ef:c6: 03:55:03:6b:c7:78:1b:2b:4e:f3:fb:2f:f5:39:3e: 84:14:2e:87:8a:ff:8d:2e:c1:15:e3:52:85:68:37: 54:93:bf:7b:f6:b4:fe:b9:5d:f2:f4:b8:03:04:16: dc:47:64:62:b9:e3:5c:32:81:05:06:03:c1:ae:97: f0:ec:16:85:4f:c9:25:31:42:14:20:5a:9d:8d:d3: 7f:bc:83:e8:28:83:60:f6:ed:6e:b5:54:6c:2a:8e: cd:5a:d4:f3:53:1b:ff:a8:17:df:d9:ab:ef:df:53: 99:cb:3d:cb:ba:26:b3:cc:ec:36:14:9f:6e:b6:e8: d5:33:8d:a7:dc:a1:9b:51:bb:37:46:34:a5:e6:00: 3b:e9:5c:c5:4b:9a:d5:3d:e0:38:7a:68:fb:32:a9: fa:e2:19:d8:28:bd:ca:38:52:ff:61:94:24:ae:8c: b8:c8:ee:bf:30:d2:5b:da:d5:00:b7:55:ba:70:cd: c1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:42:BC:EA:AC:5D:D7:B3:42:E5:42:5F:93:32:81:6A:79:03:E6:F1 X509v3 Authority Key Identifier: keyid:FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:1a:87:89:58:b9:fa:c4:4c:91:c9:e7:96:87:8d:45:73:85: 01:45:7f:24:01:06:90:3a:fa:d0:fd:18:b7:2d:0a:5f:c1:2a: 39:cf:6f:49:30:a3:62:dc:0f:da:be:25:60:12:53:2f:db:6c: 6a:c5:15:62:dc:d7:42:df:b0:6c:ce:53:60:b5:11:de:75:98: 17:c4:ad:ab:9b:6e:4b:3a:3a:66:9f:2d:4c:87:3a:3d:4d:d8: 3a:d9:3f:42:66:7c:75:0e:83:4a:10:a3:35:56:f7:b1:fe:ac: 55:2f:6b:6e:a4:60:9c:59:bf:4f:0a:d5:25:13:10:96:02:d9: 57:94:dd:1f:51:64:d4:37:89:07:3e:b5:1a:1f:74:11:17:8b: d1:6b:5c:89:15:9f:58:a6:ae:06:3e:95:9c:5a:18:6c:0c:d2: 7c:67:25:6f:df:5d:91:6e:ae:b9:3a:a4:c0:4f:f9:29:aa:bc: 0e:d7:5f:66:bd:02:cc:5b:e7:d1:7e:7c:d0:ab:21:59:58:2f: 5f:2e:25:3c:cf:dc:b9:7e:82:8a:11:49:3d:28:1f:4d:22:a6: 1c:63:1f:6b:b8:0a:2a:b1:9c:94:22:e4:db:55:4b:31:80:0b: 50:8d:3b:b6:88:ea:cb:70:34:26:36:3f:dd:8b:d1:c6:39:d9: c3:cc:7e:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryduKYED0vmi/enB8Qy4/VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOWNlODMzNWZjMzc2NzZiMjBlYzE2NTVjNTNkNjdkYmM4 NmU4YjMwHhcNMjUxMjA2MDcwMTA4WhcNMjUxMjA3MDcwMTA4WjAzMTEwLwYDVQQD EyhjNjQyYmNlYWFjNWRkN2IzNDJlNTQyNWY5MzMyODE2YTc5MDNlNmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaZ6Lx2YwlRyhiYPrt6cMlWvc85h YYPfI26ddJqLudURv9FdfrOjOnl6ZgoaBQ0JtiaLDs89U0ADakJD+uJuUmePY+01 frx878YDVQNrx3gbK07z+y/1OT6EFC6Hiv+NLsEV41KFaDdUk7979rT+uV3y9LgD BBbcR2RiueNcMoEFBgPBrpfw7BaFT8klMUIUIFqdjdN/vIPoKINg9u1utVRsKo7N WtTzUxv/qBff2avv31OZyz3LuiazzOw2FJ9utujVM42n3KGbUbs3RjSl5gA76VzF S5rVPeA4emj7Mqn64hnYKL3KOFL/YZQkroy4yO6/MNJb2tUAt1W6cM3B/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZCvOqsXdezQuVCX5MygWp5A+bxMB8GA1UdIwQY MBaAFP+c6DNfw3Z2sg7BZVxT1n28huizMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzV6b00xX0RkbmF5RHNGbFhGUFdmYnlHNkxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9kNzM1NDEtM2I0ZC00NGE5LTgyYWMt MjllNTNlZGE2ZTFjLzEvXzV6b00xX0RkbmF5RHNGbFhGUFdmYnlHNkxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9kNzM1NDEtM2I0ZC00NGE5LTgyYWMtMjllNTNlZGE2ZTFj LzEvXzV6b00xX0RkbmF5RHNGbFhGUFdmYnlHNkxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBqHiVi5 +sRMkcnnloeNRXOFAUV/JAEGkDr60P0Yty0KX8EqOc9vSTCjYtwP2r4lYBJTL9ts asUVYtzXQt+wbM5TYLUR3nWYF8Stq5tuSzo6Zp8tTIc6PU3YOtk/QmZ8dQ6DShCj NVb3sf6sVS9rbqRgnFm/TwrVJRMQlgLZV5TdH1Fk1DeJBz61Gh90EReL0WtciRWf WKauBj6VnFoYbAzSfGclb99dkW6uuTqkwE/5Kaq8DtdfZr0CzFvn0X580KshWVgv Xy4lPM/cuX6CihFJPSgfTSKmHGMfa7gKKrGclCLk21VLMYALUI07tojqy3A0JjY/ 3YvRxjnZw8x+fg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:48:49 2025 by rpki-client