This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft File: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft (raw, json) Hash identifier: yVw2L5vj7OV029aVopvy22jCoNi9jG7jTxQ4XvOI89o= Subject key identifier: C7:B9:91:CB:7B:75:60:06:67:C5:F7:E9:88:2D:A3:E1:C5:40:27:EB Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2 Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2 Certificate serial: 019B0CDB6AB43ADB1B730B2421B4BF2B62B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft Manifest number: 177A Signing time: Thu 11 Dec 2025 10:01:04 +0000 Manifest this update: Thu 11 Dec 2025 10:01:04 +0000 Manifest next update: Fri 12 Dec 2025 10:01:04 +0000 Files and hashes: 1: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl (hash: vJZNuNj+X2jcMIApu7T4LdtONJYOr55aDYkBOna7x4k=) 2: Q5lprEAu1AjZg8eC8e9vCRTQc5c.roa (hash: 1TVaYcq6pwwmReP0rlqvmkebRDkja4y3qu5GJXEAYFk=) 3: ScDiG1bEMg_iYAnwZ5RqZ9iuBfE.roa (hash: M8oZJ8Uj/JF9chZaxOYRuKYLCgT5+KWo335qmSJiUXs=) 4: _jwv_lcEjeP6obJDvR7tAaQUU-k.roa (hash: 5K6HFH8TXSLWVxpMWf5RIreFCOahhdZCzVwIY3yAflg=) 5: a3iaEBF86wbe5VjQTp-OMfHJc1E.roa (hash: nuf4ev5fGHCC4PXZAB5L19yGP986oYjP7JfQB1/fdXU=) 6: a9_bN0F2h_Kug5sgN-Kpf5AuF0Y.roa (hash: f6TkQWvmEWMglWzfpXp6gmToVC7S2f1cCbDqMTnyBzg=) 7: lihzuQoSb7FSiRKzRwb1us4H1SM.roa (hash: KHb+Gcf8LKwRqmsQV3Dwa1dFj1b8D+2+U6h0xyQG13I=) 8: qi8JXs2yo200PkF0ybkWzT5gLbA.roa (hash: rDwlWPK/DQ56zjNjEs53TpTRvG/Y0OQ9Sl2iycPDuH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 10:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:db:6a:b4:3a:db:1b:73:0b:24:21:b4:bf:2b:62:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2 Validity Not Before: Dec 11 10:01:04 2025 GMT Not After : Dec 12 10:01:04 2025 GMT Subject: CN=c7b991cb7b75600667c5f7e9882da3e1c54027eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4e:4d:7d:2e:73:9d:d3:3f:80:c6:65:e9:ec: 65:b4:30:a7:46:97:da:f0:06:1b:70:de:38:22:e2: ad:93:2d:8a:ce:c1:02:cc:79:84:63:1e:c3:2e:e6: 38:32:42:9f:85:a0:ee:24:95:e5:c0:b6:7b:86:c4: 89:e9:ab:4d:59:f1:ec:04:25:55:7e:d4:ce:4e:3f: 72:60:ba:29:ee:b0:f2:3b:35:6c:ce:13:30:87:b9: 3f:34:b7:d1:03:91:4b:68:09:1f:06:08:28:25:36: a6:2e:9c:64:10:1b:ae:36:7b:46:51:ed:22:0f:bc: c0:be:bf:cb:97:03:3b:ee:61:81:02:7f:74:6c:d5: 85:b7:42:83:29:3b:c8:96:d2:4a:d3:2c:7d:4b:0c: 53:36:d5:7d:87:d1:a1:45:40:ec:b9:5a:96:07:46: a0:9a:f8:57:8d:21:8b:91:35:56:25:3b:1f:30:28: 9a:ed:58:ad:3f:45:69:7e:e3:7c:60:e1:ae:3b:b5: 1a:7a:39:75:af:d5:8b:7b:28:8c:b4:80:fe:39:9c: cd:d1:6d:e8:b4:7c:2c:d6:40:1c:9a:23:e2:d2:d6: 6d:bb:80:41:3e:1d:30:fa:cf:c0:6e:7d:49:cb:74: 90:84:09:f0:b7:4e:1b:a5:e7:d8:ad:23:84:16:42: 32:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B9:91:CB:7B:75:60:06:67:C5:F7:E9:88:2D:A3:E1:C5:40:27:EB X509v3 Authority Key Identifier: keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:0c:18:7b:9d:d2:f4:be:f0:b0:ec:12:cf:f4:c2:d6:43:d2: 61:98:29:03:e3:57:8d:c7:2f:b8:c8:4d:dc:f0:27:09:66:43: be:54:31:d0:06:64:2c:b6:c6:70:92:61:78:40:a3:f0:ca:44: 5b:5d:88:bf:5f:78:2a:64:b1:87:3c:75:e7:b3:d9:2d:6b:44: f5:16:74:6c:7c:e8:79:c2:c1:37:a3:75:2c:38:fa:60:8c:2d: a0:d9:57:23:35:70:f5:5c:89:59:fa:c7:6a:80:02:6c:53:cf: 95:77:9b:ed:c3:2f:1e:80:d6:e7:6a:45:97:1c:48:29:dd:93: 3a:66:9f:3f:7d:82:3d:16:37:ad:ae:6a:c4:3a:8f:17:9b:ec: db:fa:a3:3b:b1:e8:58:51:00:1d:2e:16:7e:52:79:11:78:04: 63:59:0c:b1:66:fc:46:5c:50:68:f6:e1:24:1b:29:13:35:57: 5c:06:af:96:47:64:8c:78:97:0b:9b:4e:ad:00:56:ef:e3:ea: bc:ed:3d:6e:b6:0c:5f:c9:f0:18:46:b3:a8:72:a0:73:78:b2: 80:93:42:72:09:10:c9:84:65:b9:48:4a:e7:94:5a:d8:d6:c1: fc:af:70:8e:02:8a:92:79:d9:61:e8:34:72:5b:79:04:f8:80: 52:5e:30:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsM22q0OtsbcwskIbS/K2KwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTFiMzY1NTJmOWRhY2NiOTJhYzVjM2I0NGI0MjZkNjQz NzQ5ZTIwHhcNMjUxMjExMTAwMTA0WhcNMjUxMjEyMTAwMTA0WjAzMTEwLwYDVQQD EyhjN2I5OTFjYjdiNzU2MDA2NjdjNWY3ZTk4ODJkYTNlMWM1NDAyN2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5E5NfS5zndM/gMZl6exltDCnRpfa 8AYbcN44IuKtky2KzsECzHmEYx7DLuY4MkKfhaDuJJXlwLZ7hsSJ6atNWfHsBCVV ftTOTj9yYLop7rDyOzVszhMwh7k/NLfRA5FLaAkfBggoJTamLpxkEBuuNntGUe0i D7zAvr/LlwM77mGBAn90bNWFt0KDKTvIltJK0yx9SwxTNtV9h9GhRUDsuVqWB0ag mvhXjSGLkTVWJTsfMCia7VitP0VpfuN8YOGuO7Uaejl1r9WLeyiMtID+OZzN0W3o tHws1kAcmiPi0tZtu4BBPh0w+s/Abn1Jy3SQhAnwt04bpefYrSOEFkIyTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMe5kct7dWAGZ8X36Ygto+HFQCfrMB8GA1UdIwQY MBaAFOWhs2VS+drMuSrFw7RLQm1kN0niMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMt YzVlNmQyM2Y4YjA5LzEvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMtYzVlNmQyM2Y4YjA5 LzEvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuwwYe53S 9L7wsOwSz/TC1kPSYZgpA+NXjccvuMhN3PAnCWZDvlQx0AZkLLbGcJJheECj8MpE W12Iv194KmSxhzx157PZLWtE9RZ0bHzoecLBN6N1LDj6YIwtoNlXIzVw9VyJWfrH aoACbFPPlXeb7cMvHoDW52pFlxxIKd2TOmafP32CPRY3ra5qxDqPF5vs2/qjO7Ho WFEAHS4WflJ5EXgEY1kMsWb8RlxQaPbhJBspEzVXXAavlkdkjHiXC5tOrQBW7+Pq vO09brYMX8nwGEazqHKgc3iygJNCcgkQyYRluUhK55Ra2NbB/K9wjgKKknnZYeg0 clt5BPiAUl4wsA== -----END CERTIFICATE-----Generated at Thu Dec 11 15:51:06 2025 by rpki-client