This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft File: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft (raw, json) Hash identifier: F4DgwIl3nyap9Y8DzvLyf3Rr7chm6oKLfy3cMuWfvcs= Subject key identifier: A3:89:30:FC:CD:BD:68:FB:1D:73:8C:09:73:81:8A:16:05:87:82:B8 Authority key identifier: E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04 Certificate issuer: /CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04 Certificate serial: 019AF3F79355F6F2FA6FA7B83604E2543D24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 14:01:19 +0000 Manifest this update: Sat 06 Dec 2025 14:01:19 +0000 Manifest next update: Sun 07 Dec 2025 14:01:19 +0000 Files and hashes: 1: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl (hash: re+D+CXonTaPg0LF4vfJJNZZJoVcS2gIatk1c6SGI7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:93:55:f6:f2:fa:6f:a7:b8:36:04:e2:54:3d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04 Validity Not Before: Dec 6 14:01:19 2025 GMT Not After : Dec 7 14:01:19 2025 GMT Subject: CN=a38930fccdbd68fb1d738c0973818a16058782b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:db:b0:5b:2c:75:f3:76:48:50:8d:b7:89:f6: db:5c:27:73:6b:2f:87:cc:a8:3d:06:6e:f6:57:96: 64:76:87:b1:09:ba:d1:71:6e:d6:d6:aa:fa:16:f5: d2:b5:23:2c:57:9a:12:ac:f4:81:cc:20:c5:d7:f2: c5:a5:75:f7:44:c0:0f:f5:2a:0d:e0:27:1f:fa:01: db:cb:5e:8a:12:40:e5:db:1f:bb:b2:4b:a3:f2:cf: d3:af:04:69:24:09:2c:31:44:3d:77:b3:39:8e:ff: c5:fd:ca:90:25:64:ae:d4:90:a8:91:da:dd:b0:fc: 0a:8e:21:a0:76:07:b9:ed:bd:a1:82:fa:80:33:a2: f3:02:f5:7e:3b:51:91:fc:0d:5f:ae:59:bf:76:4e: a2:18:57:df:e5:87:1f:7f:7a:1c:90:97:26:65:d0: 7c:59:a1:5f:ff:27:f7:f7:4e:64:8c:1f:a6:6c:63: 8b:ff:3b:1c:7c:c0:a0:ae:77:c0:02:b6:a7:c8:ac: b1:88:65:7f:bb:46:1f:37:50:57:21:2d:6a:39:a1: 98:1b:b2:df:e7:1b:3b:f0:0b:85:72:a8:f2:ff:0f: 9a:b3:b9:79:4c:b5:6c:c2:2d:8d:b9:4f:bf:0f:22: cb:4b:45:85:09:99:fc:68:fa:0d:be:55:04:01:de: 1b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:89:30:FC:CD:BD:68:FB:1D:73:8C:09:73:81:8A:16:05:87:82:B8 X509v3 Authority Key Identifier: keyid:E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:bb:f9:8c:cb:14:6c:fb:d9:54:ee:e4:4d:8f:fd:58:3f:cc: 0d:b0:24:03:bf:07:e7:3e:9e:db:bd:0a:e8:11:e1:30:4a:38: 06:cb:83:7d:24:e9:06:42:ef:45:90:f8:9b:5d:99:0b:5f:db: 28:80:f7:c6:c5:3e:19:0a:41:43:93:35:84:b1:02:11:7a:a5: 38:fb:9e:49:41:1b:cf:6c:70:c9:91:58:b7:5c:25:42:8c:4c: 6b:ee:28:8b:02:c1:f3:c5:12:21:45:0b:3c:ea:ea:cb:ac:05: ae:9d:38:0d:b8:50:f7:6c:cb:d9:5c:4c:00:41:3b:a0:90:db: d4:d2:b6:f5:90:d7:9f:d6:b1:b1:fa:1c:54:05:0a:9c:ef:e9: 0d:41:bd:7a:16:33:a1:ae:97:71:1d:59:0f:5c:c3:2b:b1:2f: 37:53:39:6b:15:10:1b:4e:e1:ba:18:e8:45:00:8d:7e:61:50: 73:dd:22:48:24:4b:2f:ec:bb:a8:5d:26:0c:78:0e:4a:88:21: 4c:c6:97:c8:d8:94:0a:ef:88:f3:27:d7:ec:c9:25:03:96:7a: da:cb:ca:59:8b:1c:9e:33:b1:3f:68:80:07:4f:79:f6:9d:86: f2:92:b8:dd:be:fd:b1:38:25:49:be:66:f7:6e:06:2b:aa:9f: cf:51:a2:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz95NV9vL6b6e4NgTiVD0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MWI5YTVkNmQ5ODcwM2MzODcyYTFiYjNmOTBkMTAzNjg1 Y2JkMDQwHhcNMjUxMjA2MTQwMTE5WhcNMjUxMjA3MTQwMTE5WjAzMTEwLwYDVQQD EyhhMzg5MzBmY2NkYmQ2OGZiMWQ3MzhjMDk3MzgxOGExNjA1ODc4MmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9uwWyx183ZIUI23ifbbXCdzay+H zKg9Bm72V5ZkdoexCbrRcW7W1qr6FvXStSMsV5oSrPSBzCDF1/LFpXX3RMAP9SoN 4Ccf+gHby16KEkDl2x+7skuj8s/TrwRpJAksMUQ9d7M5jv/F/cqQJWSu1JCokdrd sPwKjiGgdge57b2hgvqAM6LzAvV+O1GR/A1frlm/dk6iGFff5Ycff3ockJcmZdB8 WaFf/yf3905kjB+mbGOL/zscfMCgrnfAAranyKyxiGV/u0YfN1BXIS1qOaGYG7Lf 5xs78AuFcqjy/w+as7l5TLVswi2NuU+/DyLLS0WFCZn8aPoNvlUEAd4bLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOJMPzNvWj7HXOMCXOBihYFh4K4MB8GA1UdIwQY MBaAFOYbml1tmHA8OHKhuz+Q0QNoXL0EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWh1YVhXMlljRHc0Y3FHN1A1RFJBMmhjdlFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYjg3OWItOWM5Ni00MjlhLTliYjMt ZTE4ZDk5OGM2NGVmLzEvNWh1YVhXMlljRHc0Y3FHN1A1RFJBMmhjdlFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jYjg3OWItOWM5Ni00MjlhLTliYjMtZTE4ZDk5OGM2NGVm LzEvNWh1YVhXMlljRHc0Y3FHN1A1RFJBMmhjdlFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbv5jMsU bPvZVO7kTY/9WD/MDbAkA78H5z6e270K6BHhMEo4BsuDfSTpBkLvRZD4m12ZC1/b KID3xsU+GQpBQ5M1hLECEXqlOPueSUEbz2xwyZFYt1wlQoxMa+4oiwLB88USIUUL POrqy6wFrp04DbhQ92zL2VxMAEE7oJDb1NK29ZDXn9axsfocVAUKnO/pDUG9ehYz oa6XcR1ZD1zDK7EvN1M5axUQG07huhjoRQCNfmFQc90iSCRLL+y7qF0mDHgOSogh TMaXyNiUCu+I8yfX7MklA5Z62svKWYscnjOxP2iAB0959p2G8pK43b79sTglSb5m 924GK6qfz1GiTg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:50:21 2025 by rpki-client