This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft File: 5dJyqNwEH1rcer0A1k0_MsIE2rI.mft (raw, json) Hash identifier: 5lzuVC+3wnNQ/1DocY2k86nmZ+MQCTzJtTO6FCjv4+I= Subject key identifier: 32:FB:51:E6:78:05:C2:D8:90:49:46:14:DC:EA:48:51:E5:30:39:6E Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2 Certificate issuer: /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2 Certificate serial: 019AF5AEA19B0459756DB9069A2C9E2DBEDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft Manifest number: 0E1D Signing time: Sat 06 Dec 2025 22:00:53 +0000 Manifest this update: Sat 06 Dec 2025 22:00:53 +0000 Manifest next update: Sun 07 Dec 2025 22:00:53 +0000 Files and hashes: 1: 5dJyqNwEH1rcer0A1k0_MsIE2rI.crl (hash: Wo+Khp5kIsw9NWJCB3jEZ767mzrIPBbdAAXWBVO0JBc=) 2: BSxB6YJq2jQPtYNgk4RjDz0LLwo.roa (hash: 0H0jQmEDdYcS0G88hDG7z0fv29sDbdsIXn2r0lKdjdI=) 3: DOxLN4SU2YKVe0VPHjqcaGZlpe0.roa (hash: SrolEIibncQUXL/HWDj/0Ei9nEoCbSOrTFYN2mtGMDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:a1:9b:04:59:75:6d:b9:06:9a:2c:9e:2d:be:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2 Validity Not Before: Dec 6 22:00:53 2025 GMT Not After : Dec 7 22:00:53 2025 GMT Subject: CN=32fb51e67805c2d890494614dcea4851e530396e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1f:b1:e4:c1:bb:03:09:ac:97:7f:d6:d3:f7: 19:f4:27:c9:a4:f6:a5:37:1c:3b:ec:28:4d:91:73: b3:c1:7a:eb:17:de:8e:58:ce:03:dc:6f:3e:71:c7: 7c:1f:7c:23:26:7f:10:0c:4f:3e:82:62:44:4b:7b: 30:b1:85:25:6c:54:bd:65:70:45:c1:78:ac:72:bd: 83:40:30:0a:9c:e3:bc:20:64:2a:5f:3f:96:64:11: 4f:86:62:32:12:e7:c7:4a:05:3c:53:96:00:43:5c: 85:34:70:82:14:2d:d4:1c:49:34:ac:35:e5:81:a3: c0:20:42:e8:c7:55:aa:08:0c:88:39:ea:20:37:7c: d7:e0:0d:14:28:3f:87:09:b6:0c:fd:3b:71:05:b5: 85:f1:b2:5a:e9:c0:f3:dc:e8:55:9e:4c:68:b6:af: a8:79:0c:d3:c2:7f:5e:5b:b2:35:3f:7b:48:06:13: ea:be:62:8f:50:d1:1b:12:20:bf:de:c4:f2:3b:06: 80:cb:d3:82:a1:24:dc:39:3b:d8:72:9c:dc:93:9b: aa:95:d7:91:a8:ac:7b:b2:fe:a5:ff:a5:63:4a:47: 48:10:25:01:8f:39:77:b6:0c:71:d3:a1:d6:7d:31: cb:99:a3:36:6f:4d:3c:e0:d8:63:fa:ea:3f:ec:7b: 07:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FB:51:E6:78:05:C2:D8:90:49:46:14:DC:EA:48:51:E5:30:39:6E X509v3 Authority Key Identifier: keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:52:33:aa:c3:bc:9b:24:8a:0b:f0:65:b3:ae:83:92:25:a2: f1:66:f3:47:3e:68:40:50:ec:f2:fe:37:fd:e0:e5:4f:68:af: 6e:5c:47:6f:c2:56:eb:89:fe:d9:df:61:6b:21:b2:e1:3b:18: dd:b1:91:79:54:ea:92:cd:ad:cc:65:b7:e9:17:cb:d4:8c:1d: f8:23:c9:27:5c:9b:fb:26:ac:48:c3:8e:1b:44:03:b6:f6:a4: ee:a0:cb:61:1d:1f:85:fe:16:18:a0:ba:fd:96:17:16:c6:a4: 88:ee:f0:f9:af:5a:ad:e3:60:36:a9:f7:f3:6e:59:7f:9d:f2: 64:6f:c7:93:cc:49:01:c0:14:89:c3:00:eb:47:5d:b6:97:7a: 81:8f:12:cc:75:df:ec:d7:85:af:6f:a4:ac:8d:50:85:af:2a: c0:6f:7d:cd:34:b9:e4:82:22:e7:82:a0:46:83:71:f7:8c:c2: 4b:77:40:93:08:25:ac:e0:5e:8b:ae:c5:2f:ff:e0:53:0a:f0: 48:a6:9e:23:ea:63:15:35:16:36:92:e1:70:0f:e2:7a:68:c0: 3c:87:f3:0b:a0:da:04:aa:34:37:73:2b:53:28:c1:e5:db:d5: 6c:5e:fb:2d:fe:3c:eb:9d:21:74:c1:f6:2a:b1:fb:54:a5:6d: 5c:65:0c:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rqGbBFl1bbkGmiyeLb7dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZDI3MmE4ZGMwNDFmNWFkYzdhYmQwMGQ2NGQzZjMyYzIw NGRhYjIwHhcNMjUxMjA2MjIwMDUzWhcNMjUxMjA3MjIwMDUzWjAzMTEwLwYDVQQD EygzMmZiNTFlNjc4MDVjMmQ4OTA0OTQ2MTRkY2VhNDg1MWU1MzAzOTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR+x5MG7Awmsl3/W0/cZ9CfJpPal Nxw77ChNkXOzwXrrF96OWM4D3G8+ccd8H3wjJn8QDE8+gmJES3swsYUlbFS9ZXBF wXiscr2DQDAKnOO8IGQqXz+WZBFPhmIyEufHSgU8U5YAQ1yFNHCCFC3UHEk0rDXl gaPAIELox1WqCAyIOeogN3zX4A0UKD+HCbYM/TtxBbWF8bJa6cDz3OhVnkxotq+o eQzTwn9eW7I1P3tIBhPqvmKPUNEbEiC/3sTyOwaAy9OCoSTcOTvYcpzck5uqldeR qKx7sv6l/6VjSkdIECUBjzl3tgxx06HWfTHLmaM2b0084Nhj+uo/7HsHuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDL7UeZ4BcLYkElGFNzqSFHlMDluMB8GA1UdIwQY MBaAFOXScqjcBB9a3Hq9ANZNPzLCBNqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWRKeXFOd0VIMXJjZXIwQTFrMF9Nc0lFMnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80MTdjMWQtYTJlNC00NGE2LWFmMjQt ZDRmNTAyNzYwMGFlLzEvNWRKeXFOd0VIMXJjZXIwQTFrMF9Nc0lFMnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi80MTdjMWQtYTJlNC00NGE2LWFmMjQtZDRmNTAyNzYwMGFl LzEvNWRKeXFOd0VIMXJjZXIwQTFrMF9Nc0lFMnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL1IzqsO8 mySKC/Bls66DkiWi8WbzRz5oQFDs8v43/eDlT2ivblxHb8JW64n+2d9hayGy4TsY 3bGReVTqks2tzGW36RfL1Iwd+CPJJ1yb+yasSMOOG0QDtvak7qDLYR0fhf4WGKC6 /ZYXFsakiO7w+a9areNgNqn3825Zf53yZG/Hk8xJAcAUicMA60ddtpd6gY8SzHXf 7NeFr2+krI1Qha8qwG99zTS55IIi54KgRoNx94zCS3dAkwglrOBei67FL//gUwrw SKaeI+pjFTUWNpLhcA/iemjAPIfzC6DaBKo0N3MrUyjB5dvVbF77Lf48650hdMH2 KrH7VKVtXGUMMA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:54:52 2025 by rpki-client