This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft File: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft (raw, json) Hash identifier: w8vUELJ2KaETjU5eRW/T6WyTsE+mr970KUq750jePUQ= Subject key identifier: 05:28:BE:22:D8:D4:E0:0D:96:BB:55:D0:06:14:23:5F:56:4E:26:A6 Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29 Certificate issuer: /CN=e4ff5bbf540c65954b9913a68c24d174de97d829 Certificate serial: 019AF19AA6B8A94799742CDD27B8E2CF780C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft Manifest number: 0EE2 Signing time: Sat 06 Dec 2025 03:00:35 +0000 Manifest this update: Sat 06 Dec 2025 03:00:35 +0000 Manifest next update: Sun 07 Dec 2025 03:00:35 +0000 Files and hashes: 1: 5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl (hash: rKcPjMmPlmmEEfMzsU/20JrgqgwTtJvgJUlHLaOMHpA=) 2: vhYKMa2Z6sRh78styyEQC2ay13Y.roa (hash: q6ISR7QoOYSfixxm6mwluVodtW8Dzcm/t68jGp50cGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a6:b8:a9:47:99:74:2c:dd:27:b8:e2:cf:78:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829 Validity Not Before: Dec 6 03:00:35 2025 GMT Not After : Dec 7 03:00:35 2025 GMT Subject: CN=0528be22d8d4e00d96bb55d00614235f564e26a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:92:e1:85:af:7a:ff:34:af:e4:a9:1f:51:87: ac:4b:3e:9c:9b:39:26:d6:c9:f7:6f:ea:03:0c:85: 55:df:c4:ca:72:dd:98:48:7c:27:85:38:d6:83:11: e1:d9:62:54:bc:70:79:ac:13:20:f5:9d:64:2a:3b: ec:dc:5b:fb:8d:df:04:49:15:aa:54:8c:71:88:3f: 1b:44:cd:12:b6:b8:a0:4c:6f:70:d9:31:17:b3:c2: fd:7b:67:6f:ad:2b:06:2b:33:e0:e0:46:bc:72:1e: ad:84:80:88:97:77:de:4b:71:e0:4d:7e:74:89:7a: a9:fd:72:a4:cd:41:33:95:65:47:0c:03:8d:1c:6a: 74:71:73:9a:94:36:ee:6c:d5:f1:7e:79:01:16:20: 9a:70:77:3c:0f:fd:79:1a:a3:71:72:b0:92:b6:06: ee:d6:5f:19:3c:e0:d5:31:d0:00:7d:79:7e:3b:1c: a5:34:25:7d:15:09:bf:24:43:17:4b:13:7f:66:a9: 60:a7:4f:b8:9b:b6:c1:8c:8c:9e:1d:f0:37:3a:de: 53:f0:7e:0d:21:85:3e:04:0b:a9:50:95:86:30:1e: 52:11:8e:17:ed:72:ea:c9:62:1b:75:d2:4b:03:5c: 3c:e0:d2:43:ed:82:a8:69:39:36:72:0c:21:1e:fa: 26:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:28:BE:22:D8:D4:E0:0D:96:BB:55:D0:06:14:23:5F:56:4E:26:A6 X509v3 Authority Key Identifier: keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:1d:a8:be:1d:f5:c1:9b:5f:f8:17:a1:c9:ca:af:82:8f:3f: 2f:d9:65:c9:a2:9e:d7:a0:de:84:99:82:23:c8:5b:f5:33:49: 83:b3:8a:01:17:2e:73:94:61:0e:b2:ec:50:19:76:81:bc:fc: 20:e1:1d:89:ef:18:f8:0c:b4:22:03:7c:db:4c:53:9b:39:79: 2d:2f:4c:5c:2b:11:22:6e:6e:05:5f:12:27:b1:b4:d1:5c:37: c2:5c:13:67:eb:ae:e2:4b:ed:10:e7:5b:07:df:bc:02:cf:bf: d0:61:92:e3:b1:e7:90:37:be:03:b5:fa:2f:d9:0f:d2:01:4e: a8:31:40:bd:44:73:8b:31:4c:f3:19:81:64:55:1d:75:6c:a7: 17:61:f3:5f:5c:72:5e:49:4c:60:b7:30:9d:5f:48:08:ce:eb: d2:9f:87:d9:27:bf:00:0a:8b:bc:39:ab:1f:3e:72:c2:1f:0e: d7:56:c5:ce:5b:48:f5:5e:59:39:48:95:e7:37:ab:c2:df:c6: d4:41:3c:85:fd:37:1b:ad:be:ae:55:48:7c:ec:dc:0e:f4:f6: 16:5e:74:7a:e2:cf:57:f5:9c:21:49:aa:2a:df:0b:f6:ae:2f: 61:42:f7:32:ee:9a:27:4c:b0:ef:de:3c:b0:89:f8:2d:28:67: a7:d3:50:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqa4qUeZdCzdJ7jiz3gMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZmY1YmJmNTQwYzY1OTU0Yjk5MTNhNjhjMjRkMTc0ZGU5 N2Q4MjkwHhcNMjUxMjA2MDMwMDM1WhcNMjUxMjA3MDMwMDM1WjAzMTEwLwYDVQQD EygwNTI4YmUyMmQ4ZDRlMDBkOTZiYjU1ZDAwNjE0MjM1ZjU2NGUyNmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5Lhha96/zSv5KkfUYesSz6cmzkm 1sn3b+oDDIVV38TKct2YSHwnhTjWgxHh2WJUvHB5rBMg9Z1kKjvs3Fv7jd8ESRWq VIxxiD8bRM0StrigTG9w2TEXs8L9e2dvrSsGKzPg4Ea8ch6thICIl3feS3HgTX50 iXqp/XKkzUEzlWVHDAONHGp0cXOalDbubNXxfnkBFiCacHc8D/15GqNxcrCStgbu 1l8ZPODVMdAAfXl+OxylNCV9FQm/JEMXSxN/Zqlgp0+4m7bBjIyeHfA3Ot5T8H4N IYU+BAupUJWGMB5SEY4X7XLqyWIbddJLA1w84NJD7YKoaTk2cgwhHvomwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUoviLY1OANlrtV0AYUI19WTiamMB8GA1UdIwQY MBaAFOT/W79UDGWVS5kTpowk0XTel9gpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80MzkzZTgtNWY1OS00ZDU3LTgxOTgt NWMwYzQ2ZDA0ZWUxLzEvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC80MzkzZTgtNWY1OS00ZDU3LTgxOTgtNWMwYzQ2ZDA0ZWUx LzEvNVA5YnYxUU1aWlZMbVJPbWpDVFJkTjZYMkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALR2ovh31 wZtf+Behycqvgo8/L9llyaKe16DehJmCI8hb9TNJg7OKARcuc5RhDrLsUBl2gbz8 IOEdie8Y+Ay0IgN820xTmzl5LS9MXCsRIm5uBV8SJ7G00Vw3wlwTZ+uu4kvtEOdb B9+8As+/0GGS47HnkDe+A7X6L9kP0gFOqDFAvURzizFM8xmBZFUddWynF2HzX1xy XklMYLcwnV9ICM7r0p+H2Se/AAqLvDmrHz5ywh8O11bFzltI9V5ZOUiV5zerwt/G 1EE8hf03G62+rlVIfOzcDvT2Fl50euLPV/WcIUmqKt8L9q4vYUL3Mu6aJ0yw7948 sIn4LShnp9NQnw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:16 2025 by rpki-client