This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft File: 5cn_8vjtDWWq0LlPgDby7hru6go.mft (raw, json) Hash identifier: m4zY5khRZivBbce+rgxFoMX9muTn2VpdSgrxf8fyhFY= Subject key identifier: C7:3D:5D:DF:9A:96:BD:C9:4A:BB:E6:2A:1A:77:EC:A5:6F:C4:F2:14 Authority key identifier: E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A Certificate issuer: /CN=e5c9fff2f8ed0d65aad0b94f8036f2ee1aeeea0a Certificate serial: 019B30431A4C55BA223370A1CE5D2C21B417 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft Manifest number: 15C8 Signing time: Thu 18 Dec 2025 07:01:02 +0000 Manifest this update: Thu 18 Dec 2025 07:01:02 +0000 Manifest next update: Fri 19 Dec 2025 07:01:02 +0000 Files and hashes: 1: 5cn_8vjtDWWq0LlPgDby7hru6go.crl (hash: rmbRYD/aZ/6p+kH+3aG5M2HvIK+2VkhNh7pbLU/hv+Y=) 2: taYmShyZEWW4U8j1R_6KnQDOweM.roa (hash: GjJYuf7T9BVgN+aam1ca3lpMWRi293GWW2n+eayTU5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.crl rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 07:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:43:1a:4c:55:ba:22:33:70:a1:ce:5d:2c:21:b4:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5c9fff2f8ed0d65aad0b94f8036f2ee1aeeea0a Validity Not Before: Dec 18 07:01:02 2025 GMT Not After : Dec 19 07:01:02 2025 GMT Subject: CN=c73d5ddf9a96bdc94abbe62a1a77eca56fc4f214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2f:6b:72:98:b2:c8:a2:50:68:27:a0:ef:14: dd:15:aa:f9:d1:46:76:65:e3:36:ca:24:d7:af:1d: fd:aa:66:48:82:f5:c8:ec:9f:5b:d5:71:3f:3f:7f: 4c:54:73:d7:05:4c:ef:ba:90:e5:4a:7f:7a:8a:ca: 66:90:11:b8:af:24:71:52:60:b8:8e:40:b4:e3:4f: 9d:ad:de:19:cb:36:d0:3e:14:32:e8:90:77:ed:0c: 3b:68:be:fb:33:a9:45:ac:cb:be:f1:8a:e3:29:a5: 9f:0b:e9:67:36:94:22:f2:71:54:d8:b8:15:15:36: 52:7a:a9:2f:e2:1e:93:e0:ee:c3:99:b9:2c:67:75: 3b:6b:7a:77:15:7d:42:6f:6f:33:32:37:4d:1c:c0: a2:f7:39:f1:6c:b4:8f:3f:ca:2d:ab:c2:f3:3e:2b: fc:af:d3:88:7c:df:df:bb:ef:6b:84:d0:05:58:b2: 3d:1d:9a:e2:a4:82:3f:01:79:c9:00:40:92:b1:f7: e7:65:68:71:33:67:91:88:0d:19:e5:1a:63:8c:59: f6:e0:4a:02:77:7a:b5:83:80:54:03:8e:26:c0:1e: 76:36:8f:03:da:e6:ee:03:7e:44:01:c6:12:9d:8b: 58:86:56:5a:b6:f7:b8:ac:87:ee:7f:6b:e2:38:06: dc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3D:5D:DF:9A:96:BD:C9:4A:BB:E6:2A:1A:77:EC:A5:6F:C4:F2:14 X509v3 Authority Key Identifier: keyid:E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:8f:5f:de:34:b8:5f:97:d8:c4:65:c1:bb:82:0c:f4:1b:68: 3c:85:d0:76:f6:e7:2c:59:f7:9e:be:e5:94:5d:b1:ea:d1:d3: ec:45:f7:ff:3a:23:50:83:06:19:f6:b1:3b:40:18:0f:55:64: a3:81:6f:1c:81:46:c1:f3:49:c4:7d:ba:a7:89:37:c1:a0:33: 3d:6c:22:38:8d:29:58:57:b8:bd:48:cd:ac:9b:90:81:5c:b4: 9a:65:90:18:d1:74:ec:3c:7f:6f:6c:a9:a7:ff:fd:a9:05:20: 77:77:c4:bf:d2:5a:17:89:f0:3e:93:77:2b:b3:3b:0f:7a:50: 03:ff:e8:f3:7e:7b:af:fd:71:4f:cf:b0:96:b9:c5:f6:46:53: b3:09:0f:38:08:58:33:16:2c:70:59:eb:90:f4:46:72:09:43: 9f:6d:16:f3:5e:04:db:5d:27:ab:35:f2:da:4d:57:65:a9:bc: fe:cc:26:6f:0c:7c:48:c1:b3:f7:63:07:ab:71:8f:ab:c4:b9: 4a:dd:ec:1c:87:ec:df:4f:90:f7:3f:8d:38:5a:8d:a8:55:34: e0:e6:ad:3e:c5:5e:fb:f3:ca:33:a5:8f:e9:c9:5d:02:7c:64: d7:21:00:27:4e:ed:bc:92:e3:ed:40:52:20:85:83:8b:26:5d: bb:ae:48:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQxpMVboiM3Chzl0sIbQXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YzlmZmYyZjhlZDBkNjVhYWQwYjk0ZjgwMzZmMmVlMWFl ZWVhMGEwHhcNMjUxMjE4MDcwMTAyWhcNMjUxMjE5MDcwMTAyWjAzMTEwLwYDVQQD EyhjNzNkNWRkZjlhOTZiZGM5NGFiYmU2MmExYTc3ZWNhNTZmYzRmMjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC9rcpiyyKJQaCeg7xTdFar50UZ2 ZeM2yiTXrx39qmZIgvXI7J9b1XE/P39MVHPXBUzvupDlSn96ispmkBG4ryRxUmC4 jkC040+drd4ZyzbQPhQy6JB37Qw7aL77M6lFrMu+8YrjKaWfC+lnNpQi8nFU2LgV FTZSeqkv4h6T4O7DmbksZ3U7a3p3FX1Cb28zMjdNHMCi9znxbLSPP8otq8LzPiv8 r9OIfN/fu+9rhNAFWLI9HZripII/AXnJAECSsffnZWhxM2eRiA0Z5RpjjFn24EoC d3q1g4BUA44mwB52No8D2ubuA35EAcYSnYtYhlZatve4rIfuf2viOAbc4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMc9Xd+alr3JSrvmKhp37KVvxPIUMB8GA1UdIwQY MBaAFOXJ//L47Q1lqtC5T4A28u4a7uoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWNuXzh2anREV1dxMExsUGdEYnk3aHJ1NmdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hZjIzYzYtZWZlYy00OTFiLTg3Y2Qt OWZhYTYyYTFmMTc4LzEvNWNuXzh2anREV1dxMExsUGdEYnk3aHJ1NmdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9hZjIzYzYtZWZlYy00OTFiLTg3Y2QtOWZhYTYyYTFmMTc4 LzEvNWNuXzh2anREV1dxMExsUGdEYnk3aHJ1NmdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbo9f3jS4 X5fYxGXBu4IM9BtoPIXQdvbnLFn3nr7llF2x6tHT7EX3/zojUIMGGfaxO0AYD1Vk o4FvHIFGwfNJxH26p4k3waAzPWwiOI0pWFe4vUjNrJuQgVy0mmWQGNF07Dx/b2yp p//9qQUgd3fEv9JaF4nwPpN3K7M7D3pQA//o8357r/1xT8+wlrnF9kZTswkPOAhY MxYscFnrkPRGcglDn20W814E210nqzXy2k1XZam8/swmbwx8SMGz92MHq3GPq8S5 St3sHIfs30+Q9z+NOFqNqFU04OatPsVe+/PKM6WP6cldAnxk1yEAJ07tvJLj7UBS IIWDiyZdu65IbA== -----END CERTIFICATE-----Generated at Thu Dec 18 14:22:45 2025 by rpki-client