This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft File: 5YJfvufEOimDjqvk_IfXlDScDIA.mft (raw, json) Hash identifier: QHuMO3lviyqwnaMszMljp/3Dt6aI6zhQBP2taDnk4W8= Subject key identifier: 32:56:3E:73:4B:73:5A:2E:08:D7:E8:07:14:7A:0F:AF:17:CE:42:F0 Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80 Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80 Certificate serial: 019AF1D23FDA79F46E1C4B180145700910E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft Manifest number: 14BB Signing time: Sat 06 Dec 2025 04:01:19 +0000 Manifest this update: Sat 06 Dec 2025 04:01:19 +0000 Manifest next update: Sun 07 Dec 2025 04:01:19 +0000 Files and hashes: 1: 243IV1WXDUNyw7rjuRN5vP7IoKY.roa (hash: 0O92Hb85YHbJvLZRlVOgE6xTVbqzeKYfm5ftactSgfc=) 2: 5YJfvufEOimDjqvk_IfXlDScDIA.crl (hash: dKReUgll4LDBzcUWKD7q1CqEK8KmC76/eJWl8wqvCA8=) 3: 9MYfbdEtLjtEuoq4B1OcPGIAtDU.roa (hash: zTkYPMu8h5Z/txGXaV3nKQYC/0+0sqJF536VnkSLAUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3f:da:79:f4:6e:1c:4b:18:01:45:70:09:10:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80 Validity Not Before: Dec 6 04:01:19 2025 GMT Not After : Dec 7 04:01:19 2025 GMT Subject: CN=32563e734b735a2e08d7e807147a0faf17ce42f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:66:db:ad:90:1f:ae:f2:4b:75:e2:e8:63:f7: 92:0b:0c:cb:2e:23:5d:c5:f1:3d:e1:66:5b:86:a1: 25:34:62:8f:e1:36:e5:5c:5f:8d:e1:68:04:50:d8: ac:c9:ee:ba:2e:ee:2b:67:c0:e4:bd:fe:b4:df:17: 11:35:d5:41:38:6f:43:5f:1e:dd:5b:93:e6:cc:bc: de:72:16:a9:5a:f0:85:c7:9f:9e:88:3e:a0:3f:7f: 50:d4:46:fb:15:e5:37:ca:09:c0:eb:dd:ff:ea:7a: d7:ea:29:96:69:dd:1c:91:2f:0b:e1:c7:d5:b9:b8: ff:a9:00:f9:69:eb:b9:43:b1:f5:2d:d2:75:7d:2e: e1:bc:b0:8d:9d:86:02:63:9a:b8:42:b9:f6:83:0d: e1:67:ac:9f:af:01:4d:c9:fe:ab:2f:36:88:c9:15: 4b:76:f8:7b:ec:38:c8:25:b2:df:d3:a2:a1:42:8d: 38:d9:ad:30:e2:ca:cd:5d:4b:3c:1a:6c:9e:f0:23: ce:49:71:78:9f:79:7a:8f:f3:be:a8:32:c5:c0:bf: 46:ff:18:e6:f8:39:6f:66:b9:5b:0a:f0:92:bd:d2: 77:fe:fe:e1:34:cf:66:3a:58:af:3d:a0:45:01:7c: 04:2f:a0:c5:06:91:21:fc:06:5f:3b:34:a2:46:47: 67:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:56:3E:73:4B:73:5A:2E:08:D7:E8:07:14:7A:0F:AF:17:CE:42:F0 X509v3 Authority Key Identifier: keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:76:f0:c9:3d:5d:bf:e5:05:b3:e1:3b:8e:23:a6:a7:01:d6: 59:74:e9:ce:b7:a9:29:1a:2d:f8:a7:19:55:f9:7a:a3:83:60: b5:32:8c:0e:f3:a5:79:5c:e9:7b:37:a7:4a:bb:42:57:70:2a: bd:3b:e6:34:83:cc:84:ee:a2:f8:5a:0f:8f:5d:00:cc:4f:2a: d8:2c:71:c0:59:f4:3a:82:dd:9d:12:57:45:b8:06:22:c8:3e: 35:fd:7e:24:73:fb:fa:4a:89:fb:b4:8b:c7:b8:bd:52:14:f3: ad:e3:d4:70:17:5e:3a:a3:ff:1e:3d:e8:7a:39:f9:a4:1a:d3: 98:44:8f:c5:78:86:35:7a:d1:59:a2:79:74:6b:39:7b:02:b5: aa:dd:1d:18:29:4a:cd:aa:ac:b8:95:29:36:c2:db:80:7e:37: cd:8b:fd:b3:86:18:7d:5e:72:72:e6:74:d2:32:22:c8:96:b9: 8a:16:92:60:34:65:7a:19:13:7d:9f:3a:14:9e:02:dc:d5:8e: 8d:d1:f9:6e:86:a9:b8:4d:ed:46:f1:37:46:52:fe:7c:34:75: 7a:7b:08:25:fa:87:9f:78:82:57:13:58:26:a0:12:40:e9:2e: fd:3c:da:61:43:4f:2c:2a:3f:5b:d3:6f:f9:4c:1b:09:7b:5c: f6:80:c7:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0j/aefRuHEsYAUVwCRDiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODI1ZmJlZTdjNDNhMjk4MzhlYWJlNGZjODdkNzk0MzQ5 YzBjODAwHhcNMjUxMjA2MDQwMTE5WhcNMjUxMjA3MDQwMTE5WjAzMTEwLwYDVQQD EygzMjU2M2U3MzRiNzM1YTJlMDhkN2U4MDcxNDdhMGZhZjE3Y2U0MmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGbbrZAfrvJLdeLoY/eSCwzLLiNd xfE94WZbhqElNGKP4TblXF+N4WgEUNisye66Lu4rZ8Dkvf603xcRNdVBOG9DXx7d W5PmzLzechapWvCFx5+eiD6gP39Q1Eb7FeU3ygnA693/6nrX6imWad0ckS8L4cfV ubj/qQD5aeu5Q7H1LdJ1fS7hvLCNnYYCY5q4Qrn2gw3hZ6yfrwFNyf6rLzaIyRVL dvh77DjIJbLf06KhQo042a0w4srNXUs8Gmye8CPOSXF4n3l6j/O+qDLFwL9G/xjm +DlvZrlbCvCSvdJ3/v7hNM9mOlivPaBFAXwEL6DFBpEh/AZfOzSiRkdnzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJWPnNLc1ouCNfoBxR6D68XzkLwMB8GA1UdIwQY MBaAFOWCX77nxDopg46r5PyH15Q0nAyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2Qt MDQxYWIzMDJjMmY5LzEvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2QtMDQxYWIzMDJjMmY5 LzEvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXbwyT1d v+UFs+E7jiOmpwHWWXTpzrepKRot+KcZVfl6o4NgtTKMDvOleVzpezenSrtCV3Aq vTvmNIPMhO6i+FoPj10AzE8q2CxxwFn0OoLdnRJXRbgGIsg+Nf1+JHP7+kqJ+7SL x7i9UhTzrePUcBdeOqP/Hj3oejn5pBrTmESPxXiGNXrRWaJ5dGs5ewK1qt0dGClK zaqsuJUpNsLbgH43zYv9s4YYfV5ycuZ00jIiyJa5ihaSYDRlehkTfZ86FJ4C3NWO jdH5boapuE3tRvE3RlL+fDR1ensIJfqHn3iCVxNYJqASQOku/TzaYUNPLCo/W9Nv +UwbCXtc9oDHKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:20:26 2025 by rpki-client