This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft File: 5NozpY-0djTWFOwJpomN4PWABv4.mft (raw, json) Hash identifier: Ze557h8ZZ12oBTCKEapNvVUTrrM9BcGTdBD8AJoxtws= Subject key identifier: 73:82:4A:91:6C:F7:A8:65:BB:8B:FF:BE:40:93:9C:64:65:38:BE:F4 Authority key identifier: E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE Certificate issuer: /CN=e4da33a58fb47634d614ec09a6898de0f58006fe Certificate serial: 019AF5E5B46DCB339E2EDFA06CBB3865583B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft Manifest number: 0E3A Signing time: Sat 06 Dec 2025 23:01:02 +0000 Manifest this update: Sat 06 Dec 2025 23:01:02 +0000 Manifest next update: Sun 07 Dec 2025 23:01:02 +0000 Files and hashes: 1: 5NozpY-0djTWFOwJpomN4PWABv4.crl (hash: w/TuRWWPMg/eDhf7GNjTUk5d+z1sH+GiWu5fDG0KsIs=) 2: q_FuKEatt0zR6PfM8hStM_OAEUA.roa (hash: 2y3NDWHhYWGNF2joY5nRoFi6Rxr80fn/VSsCMypexYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:b4:6d:cb:33:9e:2e:df:a0:6c:bb:38:65:58:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4da33a58fb47634d614ec09a6898de0f58006fe Validity Not Before: Dec 6 23:01:02 2025 GMT Not After : Dec 7 23:01:02 2025 GMT Subject: CN=73824a916cf7a865bb8bffbe40939c646538bef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:55:85:0f:52:eb:12:f8:2f:00:e7:12:93:df: d1:92:5c:10:16:79:db:27:af:80:e2:82:f6:00:60: 50:05:c6:70:d6:7f:ee:73:46:fd:d3:ed:f6:53:77: f7:39:1a:59:7d:d2:c3:89:3f:1e:f1:b3:d4:38:ba: 7f:e1:a8:7f:a8:59:2d:bd:fc:2c:39:c2:0b:67:85: e1:75:30:f4:d1:93:ff:2b:85:c4:6f:d6:8d:83:8f: 88:85:2b:85:ad:09:43:6d:89:0f:68:33:e4:d8:13: b0:01:69:5e:8d:36:3c:31:be:cc:df:35:5b:0a:24: 06:53:d1:28:fb:41:f5:14:91:b0:af:37:bf:58:21: d6:a8:e7:35:d9:0e:4e:2c:58:ce:01:90:48:cd:49: bb:3f:27:50:b2:5d:54:38:a5:c3:ec:85:d6:3a:9b: bb:06:4d:5f:36:26:39:25:8f:84:ac:36:a6:7c:20: 0a:75:13:ed:3b:9c:ee:73:94:e4:13:79:81:77:ec: 6d:fc:d5:4a:e1:8a:48:c3:2e:21:56:cf:a0:bd:7f: 33:39:37:c5:ea:07:cc:48:4f:47:b9:bc:7a:0b:55: db:8d:aa:d3:d7:fd:55:90:f5:12:7b:5f:60:cc:fc: 4c:4e:42:ba:e1:af:c2:86:aa:8d:51:dc:29:6b:59: 2d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:82:4A:91:6C:F7:A8:65:BB:8B:FF:BE:40:93:9C:64:65:38:BE:F4 X509v3 Authority Key Identifier: keyid:E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:d3:bc:5d:74:21:76:d7:54:f7:b8:d1:15:98:74:09:c4:c1: 04:75:b7:ea:db:8d:4f:7b:82:c8:48:e1:1a:c7:9e:33:68:88: 30:6c:aa:fd:89:3c:b7:e1:46:dc:a7:b2:35:2c:b4:c6:1e:22: 45:62:29:ba:c3:c9:f4:29:43:94:c8:fc:ca:52:92:ae:68:8b: 0c:1d:66:f1:7b:6b:77:c3:97:86:3b:19:2d:40:18:8d:33:69: ad:0a:7c:e3:6d:3e:26:bb:b5:37:f0:f3:dd:b3:c4:5b:e5:47: fa:5c:ed:7c:22:50:ec:af:0d:01:c0:b5:67:36:3d:b3:1e:d8: db:d4:40:f4:05:92:63:19:8c:40:2a:51:97:10:c0:df:91:e5: 0e:10:a4:3c:82:d0:da:87:b5:af:b1:a6:68:27:a8:2e:25:e1: 25:c1:90:3a:9c:3d:9f:18:b0:e3:5c:af:bf:1c:af:0d:8b:19: 85:29:4e:e6:db:06:6c:14:e0:75:22:92:21:3c:a0:2c:11:b0: 98:0c:4d:fb:3f:04:e9:ca:4b:10:7e:64:47:ef:62:8e:02:5c: fc:e0:2f:4e:1d:21:62:2e:1e:40:c7:28:c8:00:b6:93:fb:77: 1e:d3:10:0b:4a:6d:41:09:27:97:38:51:42:6f:f3:06:b4:17: 37:ca:d0:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15bRtyzOeLt+gbLs4ZVg7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZGEzM2E1OGZiNDc2MzRkNjE0ZWMwOWE2ODk4ZGUwZjU4 MDA2ZmUwHhcNMjUxMjA2MjMwMTAyWhcNMjUxMjA3MjMwMTAyWjAzMTEwLwYDVQQD Eyg3MzgyNGE5MTZjZjdhODY1YmI4YmZmYmU0MDkzOWM2NDY1MzhiZWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVWFD1LrEvgvAOcSk9/RklwQFnnb J6+A4oL2AGBQBcZw1n/uc0b90+32U3f3ORpZfdLDiT8e8bPUOLp/4ah/qFktvfws OcILZ4XhdTD00ZP/K4XEb9aNg4+IhSuFrQlDbYkPaDPk2BOwAWlejTY8Mb7M3zVb CiQGU9Eo+0H1FJGwrze/WCHWqOc12Q5OLFjOAZBIzUm7PydQsl1UOKXD7IXWOpu7 Bk1fNiY5JY+ErDamfCAKdRPtO5zuc5TkE3mBd+xt/NVK4YpIwy4hVs+gvX8zOTfF 6gfMSE9Hubx6C1XbjarT1/1VkPUSe19gzPxMTkK64a/ChqqNUdwpa1ktHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOCSpFs96hlu4v/vkCTnGRlOL70MB8GA1UdIwQY MBaAFOTaM6WPtHY01hTsCaaJjeD1gAb+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU5venBZLTBkalRXRk93SnBvbU40UFdBQnY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8yZDBjYTItOGMzZS00ZjhjLTkwNmMt NmNlNjAyMjZhOWU4LzEvNU5venBZLTBkalRXRk93SnBvbU40UFdBQnY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8yZDBjYTItOGMzZS00ZjhjLTkwNmMtNmNlNjAyMjZhOWU4 LzEvNU5venBZLTBkalRXRk93SnBvbU40UFdBQnY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItO8XXQh dtdU97jRFZh0CcTBBHW36tuNT3uCyEjhGseeM2iIMGyq/Yk8t+FG3KeyNSy0xh4i RWIpusPJ9ClDlMj8ylKSrmiLDB1m8Xtrd8OXhjsZLUAYjTNprQp8420+Jru1N/Dz 3bPEW+VH+lztfCJQ7K8NAcC1ZzY9sx7Y29RA9AWSYxmMQCpRlxDA35HlDhCkPILQ 2oe1r7GmaCeoLiXhJcGQOpw9nxiw41yvvxyvDYsZhSlO5tsGbBTgdSKSITygLBGw mAxN+z8E6cpLEH5kR+9ijgJc/OAvTh0hYi4eQMcoyAC2k/t3HtMQC0ptQQknlzhR Qm/zBrQXN8rQew== -----END CERTIFICATE-----Generated at Sun Dec 7 03:58:50 2025 by rpki-client