This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft File: 5_2MB2tTpxIbVBePW2p-KRNbzOw.mft (raw, json) Hash identifier: 5mrJpNGg1Mmb3WTnBphdO7Lwbg71I8OXCSeH8ySSugg= Subject key identifier: A3:9B:99:8B:39:3F:53:80:8F:0C:F7:5A:D8:E0:BA:FA:3A:4A:68:8C Authority key identifier: E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC Certificate issuer: /CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec Certificate serial: 019AF164506434843B94C5FDC8BB5A816C51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft Manifest number: 0211 Signing time: Sat 06 Dec 2025 02:01:14 +0000 Manifest this update: Sat 06 Dec 2025 02:01:14 +0000 Manifest next update: Sun 07 Dec 2025 02:01:14 +0000 Files and hashes: 1: 5_2MB2tTpxIbVBePW2p-KRNbzOw.crl (hash: /2aadokh9bpHicU1nLOeOF/iNw7cjDGo0AgxqRuhFXg=) 2: G8yJSDi_qI6C3zmPW3k-kpCis5w.roa (hash: qlE3sGxxzJA/T2NGOl/URoTdfcV9KKmY+S6/Dr5mN74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:50:64:34:84:3b:94:c5:fd:c8:bb:5a:81:6c:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec Validity Not Before: Dec 6 02:01:14 2025 GMT Not After : Dec 7 02:01:14 2025 GMT Subject: CN=a39b998b393f53808f0cf75ad8e0bafa3a4a688c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7e:0c:3c:9b:48:4d:5b:54:78:f3:7a:33:83: 4b:78:a6:98:40:54:f1:14:7b:72:74:70:e3:b6:e2: 49:27:6d:e2:ba:92:fb:82:75:6e:f4:0d:94:39:d4: 4f:16:7d:3c:e3:80:2f:c0:89:ed:e9:33:f0:51:e8: 5d:f6:b5:90:9c:e7:89:8e:85:78:3d:91:9a:55:e9: 89:00:b8:54:da:64:57:b0:35:0d:51:a9:de:77:11: 72:d6:6e:39:69:90:16:e0:d7:f1:cb:22:21:15:b4: 5a:7e:d3:03:d3:e7:87:64:98:64:4d:3d:6f:78:fb: 69:79:6b:d7:2f:1f:98:ee:2c:02:f1:ea:4c:18:04: 05:91:e0:33:a2:02:4b:28:73:68:c6:3a:fe:70:ce: 89:f1:da:70:3f:c0:9f:33:09:a8:91:4c:15:5c:49: f0:e9:16:a6:4d:99:0f:2a:be:e9:44:10:28:88:f9: 19:6f:e4:a6:af:2f:38:d6:05:53:8e:ef:9b:9b:df: 01:06:7b:2e:d7:05:df:25:b9:57:e8:35:bb:59:b0: 3c:08:ce:a8:60:6a:8a:f0:00:5c:5a:b0:22:82:14: 21:26:63:5b:3d:8f:37:ea:4f:8d:5f:90:b7:09:d5: 35:b2:7a:f9:84:f7:10:43:4b:b3:42:fb:12:90:8b: 13:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9B:99:8B:39:3F:53:80:8F:0C:F7:5A:D8:E0:BA:FA:3A:4A:68:8C X509v3 Authority Key Identifier: keyid:E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:df:e0:55:09:04:87:72:ba:9c:b1:9d:6c:9d:57:15:c8:2c: a3:ad:07:45:1d:e0:04:27:c5:e1:41:8f:f9:60:27:11:bf:eb: bb:02:2b:9b:47:68:ee:b6:f1:9e:38:1a:a0:2c:6a:dc:08:0a: 0a:25:11:ca:13:b5:d5:05:d2:f1:ef:1e:7b:98:a1:0d:ad:7c: a0:c4:e6:3f:d5:33:24:fd:57:31:8b:c5:48:f7:0a:1f:d9:24: 24:09:df:8a:d5:af:43:5d:69:15:5e:bb:9a:b5:45:ee:06:8e: ed:89:b2:4d:ee:c2:b6:e9:21:92:32:f8:dd:e1:4a:ac:96:b1: 79:96:48:7a:fb:69:71:f9:f4:aa:a8:3a:a3:cd:3a:01:ed:96: 23:68:1f:b3:55:7f:b9:2c:0c:96:22:1e:49:a3:9c:03:62:8d: 2d:8f:f8:ac:eb:26:82:2b:83:2e:f0:2a:69:fa:1b:23:f6:45: 37:57:d9:48:3a:d7:0a:69:0f:aa:1b:f5:01:ce:60:27:29:7a: 65:19:6a:d1:19:4f:60:38:ab:4e:0f:0b:38:89:5c:19:8c:e0: c9:4b:cc:fc:e4:29:09:cc:45:ab:4e:b3:fb:78:d9:69:d4:cb: 64:ab:c2:23:c8:e3:3d:52:4c:02:a1:fc:41:a1:6c:26:05:bd: 12:f1:3d:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFBkNIQ7lMX9yLtagWxRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZmQ4YzA3NmI1M2E3MTIxYjU0MTc4ZjViNmE3ZTI5MTM1 YmNjZWMwHhcNMjUxMjA2MDIwMTE0WhcNMjUxMjA3MDIwMTE0WjAzMTEwLwYDVQQD EyhhMzliOTk4YjM5M2Y1MzgwOGYwY2Y3NWFkOGUwYmFmYTNhNGE2ODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA034MPJtITVtUePN6M4NLeKaYQFTx FHtydHDjtuJJJ23iupL7gnVu9A2UOdRPFn0844AvwInt6TPwUehd9rWQnOeJjoV4 PZGaVemJALhU2mRXsDUNUanedxFy1m45aZAW4NfxyyIhFbRaftMD0+eHZJhkTT1v ePtpeWvXLx+Y7iwC8epMGAQFkeAzogJLKHNoxjr+cM6J8dpwP8CfMwmokUwVXEnw 6RamTZkPKr7pRBAoiPkZb+Smry841gVTju+bm98BBnsu1wXfJblX6DW7WbA8CM6o YGqK8ABcWrAighQhJmNbPY836k+NX5C3CdU1snr5hPcQQ0uzQvsSkIsTTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKObmYs5P1OAjwz3Wtjguvo6SmiMMB8GA1UdIwQY MBaAFOf9jAdrU6cSG1QXj1tqfikTW8zsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9iNmFiN2ItYjM0OC00NzYzLTk3ZWMt MTZjNjNjNDI2YzMzLzEvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9iNmFiN2ItYjM0OC00NzYzLTk3ZWMtMTZjNjNjNDI2YzMz LzEvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9/gVQkE h3K6nLGdbJ1XFcgso60HRR3gBCfF4UGP+WAnEb/ruwIrm0do7rbxnjgaoCxq3AgK CiURyhO11QXS8e8ee5ihDa18oMTmP9UzJP1XMYvFSPcKH9kkJAnfitWvQ11pFV67 mrVF7gaO7YmyTe7CtukhkjL43eFKrJaxeZZIevtpcfn0qqg6o806Ae2WI2gfs1V/ uSwMliIeSaOcA2KNLY/4rOsmgiuDLvAqafobI/ZFN1fZSDrXCmkPqhv1Ac5gJyl6 ZRlq0RlPYDirTg8LOIlcGYzgyUvM/OQpCcxFq06z+3jZadTLZKvCI8jjPVJMAqH8 QaFsJgW9EvE92w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:09:44 2025 by rpki-client