This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft File: 5H78nMPZxL0porvBVVH4LyXPEbo.mft (raw, json) Hash identifier: /GJ0Bu40I1PyUAieBd6m//yG0ah6t/aT2V1VzMkwenA= Subject key identifier: 34:29:B5:15:D9:06:6D:62:13:26:90:7B:ED:CB:FB:32:94:76:2F:B9 Authority key identifier: E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA Certificate issuer: /CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba Certificate serial: 019AF5E5A00AD157075ACFC574F6DC94648E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft Manifest number: 0F16 Signing time: Sat 06 Dec 2025 23:00:57 +0000 Manifest this update: Sat 06 Dec 2025 23:00:57 +0000 Manifest next update: Sun 07 Dec 2025 23:00:57 +0000 Files and hashes: 1: 5H78nMPZxL0porvBVVH4LyXPEbo.crl (hash: HrSRq+htF+rYnwUWXEQ5qd2rULvlAaq7+7mSToTnCoQ=) 2: SOdbfA4k2rHns_9FeEf2o6kdRPA.roa (hash: UCxkRGVqhqrA5LNMsKBYYs+r3jtWXwOD0Dbnu0MtoW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:a0:0a:d1:57:07:5a:cf:c5:74:f6:dc:94:64:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba Validity Not Before: Dec 6 23:00:57 2025 GMT Not After : Dec 7 23:00:57 2025 GMT Subject: CN=3429b515d9066d621326907bedcbfb3294762fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:18:31:ba:c4:a2:12:b8:9f:61:fb:cf:a5:28: c7:50:a6:40:be:34:c3:e3:62:bc:55:ca:27:fc:a1: 61:91:86:f0:ee:fb:18:da:cc:d3:a6:8a:2c:37:73: eb:7a:6f:29:d2:8b:d2:d4:ad:e9:fb:e1:ac:3a:27: 09:79:df:c5:25:85:bd:c7:1d:57:25:83:69:3e:be: 11:50:b4:27:92:a5:b9:4d:de:b9:2c:4c:39:99:d3: b4:3e:fd:66:39:5a:8f:9f:81:d6:30:9f:64:e6:f7: f0:31:cc:18:6f:6f:ed:07:78:17:5c:da:62:cb:4c: 20:ec:d1:60:88:2d:43:9b:62:0e:cf:f1:fa:f2:61: 18:53:f9:47:dc:42:62:c4:37:47:aa:6e:f0:6e:de: c4:59:b9:fe:36:84:8a:a5:ac:87:36:10:93:10:77: 7a:d4:96:df:56:73:96:6c:7d:24:1b:55:85:a8:ce: 6a:b2:4b:8d:4d:b1:8e:7e:05:23:4f:60:69:89:de: 23:27:5f:1a:45:2f:fa:01:21:d7:7a:e2:5b:09:0d: 51:5f:49:0f:be:09:47:54:e7:3f:89:ea:f9:c0:a0: b5:b6:11:cc:0d:08:37:8b:3b:42:c0:dc:ca:a0:fa: dd:4c:b6:2e:e7:fd:6b:2c:b9:dc:81:f5:9d:83:99: 81:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:29:B5:15:D9:06:6D:62:13:26:90:7B:ED:CB:FB:32:94:76:2F:B9 X509v3 Authority Key Identifier: keyid:E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:98:7f:d6:10:6b:21:4d:75:47:be:1e:ab:b7:21:ad:74:35: 26:39:b5:5d:57:57:d0:7c:cc:e2:c1:a1:a7:c3:c7:f0:57:69: 70:6e:d3:b4:59:65:96:19:eb:79:f3:7e:8c:70:9c:4d:19:d3: 45:94:43:ad:d6:e4:fb:09:f6:32:88:44:d5:f8:0c:d5:05:44: 81:ec:be:26:fb:11:07:0f:77:63:7b:a4:1e:d8:6c:51:46:cc: 2a:43:78:e9:25:b1:2f:10:38:b7:58:ac:cd:62:9c:e6:cb:df: f1:63:17:92:11:8b:cd:bd:bb:db:a2:dc:19:7e:f8:07:d9:e0: be:ca:d3:51:9f:d6:f2:84:81:b7:86:ac:49:d2:b4:ec:ae:9a: 2c:5f:c7:94:ac:62:57:b1:43:fe:83:12:70:40:13:b1:ae:b3: de:65:af:ce:1d:d6:a4:78:31:20:2e:3f:52:4c:93:f0:73:6e: 91:1e:dc:82:42:e2:fd:74:58:12:4b:d7:b7:32:78:77:58:c9: 39:10:42:9c:1b:d5:dd:a5:47:f2:81:05:ce:ec:f0:99:ee:b1: 59:d4:38:65:30:a9:f5:5d:24:1a:42:a2:a1:6a:16:5e:87:a0: 5b:0c:bd:64:55:74:42:be:39:93:81:61:fd:df:1a:7e:e5:d1: 95:9e:ac:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15aAK0VcHWs/FdPbclGSOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0N2VmYzljYzNkOWM0YmQyOWEyYmJjMTU1NTFmODJmMjVj ZjExYmEwHhcNMjUxMjA2MjMwMDU3WhcNMjUxMjA3MjMwMDU3WjAzMTEwLwYDVQQD EygzNDI5YjUxNWQ5MDY2ZDYyMTMyNjkwN2JlZGNiZmIzMjk0NzYyZmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBgxusSiErifYfvPpSjHUKZAvjTD 42K8Vcon/KFhkYbw7vsY2szTpoosN3Prem8p0ovS1K3p++GsOicJed/FJYW9xx1X JYNpPr4RULQnkqW5Td65LEw5mdO0Pv1mOVqPn4HWMJ9k5vfwMcwYb2/tB3gXXNpi y0wg7NFgiC1Dm2IOz/H68mEYU/lH3EJixDdHqm7wbt7EWbn+NoSKpayHNhCTEHd6 1JbfVnOWbH0kG1WFqM5qskuNTbGOfgUjT2Bpid4jJ18aRS/6ASHXeuJbCQ1RX0kP vglHVOc/ier5wKC1thHMDQg3iztCwNzKoPrdTLYu5/1rLLncgfWdg5mB+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQptRXZBm1iEyaQe+3L+zKUdi+5MB8GA1UdIwQY MBaAFOR+/JzD2cS9KaK7wVVR+C8lzxG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUg3OG5NUFp4TDBwb3J2QlZWSDRMeVhQRWJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yNDgxMzMtODY3MC00MTY3LWExOTUt NmUyZjU4OGMwYzdlLzEvNUg3OG5NUFp4TDBwb3J2QlZWSDRMeVhQRWJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8yNDgxMzMtODY3MC00MTY3LWExOTUtNmUyZjU4OGMwYzdl LzEvNUg3OG5NUFp4TDBwb3J2QlZWSDRMeVhQRWJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZh/1hBr IU11R74eq7chrXQ1Jjm1XVdX0HzM4sGhp8PH8FdpcG7TtFlllhnrefN+jHCcTRnT RZRDrdbk+wn2MohE1fgM1QVEgey+JvsRBw93Y3ukHthsUUbMKkN46SWxLxA4t1is zWKc5svf8WMXkhGLzb2726LcGX74B9ngvsrTUZ/W8oSBt4asSdK07K6aLF/HlKxi V7FD/oMScEATsa6z3mWvzh3WpHgxIC4/UkyT8HNukR7cgkLi/XRYEkvXtzJ4d1jJ ORBCnBvV3aVH8oEFzuzwme6xWdQ4ZTCp9V0kGkKioWoWXoegWwy9ZFV0Qr45k4Fh /d8afuXRlZ6syQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:58:55 2025 by rpki-client