This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft File: 5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json) Hash identifier: SsT/ULFqlWu4mA4K762IWU+psN3/zsvgwGeZSxU1q/8= Subject key identifier: A4:A2:6D:0A:13:BB:A3:4F:BA:69:9E:47:5B:B4:7A:F3:B1:77:25:AF Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3 Certificate issuer: /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3 Certificate serial: 019AF2768C27C90A7A20045F4B08535EA2B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft Manifest number: 08BD Signing time: Sat 06 Dec 2025 07:00:46 +0000 Manifest this update: Sat 06 Dec 2025 07:00:46 +0000 Manifest next update: Sun 07 Dec 2025 07:00:46 +0000 Files and hashes: 1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: 3/ypEWb32DdkHjLr5yC3ABLo/UVSryJhNoWbgKzpNGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8c:27:c9:0a:7a:20:04:5f:4b:08:53:5e:a2:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3 Validity Not Before: Dec 6 07:00:46 2025 GMT Not After : Dec 7 07:00:46 2025 GMT Subject: CN=a4a26d0a13bba34fba699e475bb47af3b17725af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:24:20:33:68:43:dd:d6:7e:c8:4f:bc:0b:6e: 40:af:7d:38:ca:73:f0:e9:b9:93:d1:39:e8:b2:8c: 80:29:56:14:1b:02:71:83:bc:b7:8e:55:43:1b:ab: f6:2f:8d:b5:a7:d4:fb:13:f8:5e:f7:7d:a3:81:88: 58:77:a5:e2:0d:c4:86:e5:d6:0d:c0:f9:1c:38:86: b7:80:14:7e:45:cc:69:71:ad:6f:91:d2:84:19:f3: 61:dd:97:bb:ae:16:7a:b4:f1:fc:78:a5:36:6e:e5: 4b:9d:44:91:03:f1:cf:89:f0:e3:a8:ed:7e:87:4c: 97:06:97:be:02:a3:75:fd:23:b7:56:36:a7:ab:db: 30:e2:ff:9f:f9:4f:62:a8:42:d7:62:4d:b9:f3:2d: fd:6b:78:58:17:e5:89:c7:21:13:f1:92:41:b5:7c: 22:f9:14:6d:31:ae:7f:e8:73:4a:5a:14:22:0f:17: da:e3:78:bb:62:64:e0:4c:7e:a2:50:d5:a0:ca:e4: 29:d2:f4:a9:d7:62:07:26:76:5f:4d:b6:ee:32:b2: 0e:22:47:ab:c8:d9:86:fa:fc:43:e4:87:99:06:3c: ea:5f:11:8e:b1:b4:ef:d2:07:3b:5c:f3:f0:be:49: 4d:75:77:b6:5d:e0:80:ba:cf:9b:51:99:0e:62:79: da:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A2:6D:0A:13:BB:A3:4F:BA:69:9E:47:5B:B4:7A:F3:B1:77:25:AF X509v3 Authority Key Identifier: keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:66:4e:70:a2:c7:97:f0:ae:c7:fc:6a:f2:4e:cd:7e:ef:5e: 61:1e:03:a5:a6:33:cc:95:8b:94:64:15:7a:2e:eb:00:56:18: fc:72:01:01:6e:21:09:87:f2:4e:fc:d1:33:1a:88:ee:89:4a: 67:fd:e4:b4:99:13:0d:0e:bd:95:18:bf:be:9f:a7:52:d0:60: 00:96:fa:b0:45:17:fc:fe:c0:3d:36:19:a6:c8:87:23:e4:17: bc:6d:56:ed:6d:93:ff:38:68:ef:16:5b:e9:c0:27:a8:03:25: ab:0a:1d:16:78:cd:2a:c4:77:e0:07:4e:42:22:62:7a:41:57: 83:44:43:5c:54:f1:94:bf:9f:97:8f:af:65:e3:12:f1:4b:5e: f3:89:82:98:e9:1b:bb:05:df:e4:fd:0b:7d:a8:a8:0f:cd:54: 5a:39:7c:d5:a2:a1:7b:33:d5:ae:42:fc:df:00:d3:85:75:09: 57:61:c2:a6:c6:f4:7e:87:13:1d:b0:82:81:0e:26:bb:e0:25: 12:1f:0a:e7:55:0c:13:c9:dd:ed:a9:3b:18:5e:a3:fe:e0:59: 91:4e:a9:03:a4:3f:34:ba:fd:5d:be:c2:5c:24:6f:66:16:29: fc:20:46:66:cd:35:8e:90:6a:57:19:ce:29:97:4c:5e:11:c0: f2:91:3a:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydownyQp6IARfSwhTXqKxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Mzg2YzE3YjQ1NjEwYjU4YmJlMDljZDMwY2E5ZmIwYzE5 NjFmZDMwHhcNMjUxMjA2MDcwMDQ2WhcNMjUxMjA3MDcwMDQ2WjAzMTEwLwYDVQQD EyhhNGEyNmQwYTEzYmJhMzRmYmE2OTllNDc1YmI0N2FmM2IxNzcyNWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCQgM2hD3dZ+yE+8C25Ar304ynPw 6bmT0TnosoyAKVYUGwJxg7y3jlVDG6v2L421p9T7E/he932jgYhYd6XiDcSG5dYN wPkcOIa3gBR+Rcxpca1vkdKEGfNh3Ze7rhZ6tPH8eKU2buVLnUSRA/HPifDjqO1+ h0yXBpe+AqN1/SO3Vjanq9sw4v+f+U9iqELXYk258y39a3hYF+WJxyET8ZJBtXwi +RRtMa5/6HNKWhQiDxfa43i7YmTgTH6iUNWgyuQp0vSp12IHJnZfTbbuMrIOIker yNmG+vxD5IeZBjzqXxGOsbTv0gc7XPPwvklNdXe2XeCAus+bUZkOYnnaawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSibQoTu6NPummeR1u0evOxdyWvMB8GA1UdIwQY MBaAFOc4bBe0VhC1i74JzTDKn7DBlh/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXpoc0Y3UldFTFdMdmduTk1NcWZzTUdXSDlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80YTM2ZGYtNDgwOC00OGU2LTg5NmYt NmJiZDY4NWQ5MjMxLzEvNXpoc0Y3UldFTFdMdmduTk1NcWZzTUdXSDlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC80YTM2ZGYtNDgwOC00OGU2LTg5NmYtNmJiZDY4NWQ5MjMx LzEvNXpoc0Y3UldFTFdMdmduTk1NcWZzTUdXSDlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmZOcKLH l/Cux/xq8k7Nfu9eYR4DpaYzzJWLlGQVei7rAFYY/HIBAW4hCYfyTvzRMxqI7olK Z/3ktJkTDQ69lRi/vp+nUtBgAJb6sEUX/P7APTYZpsiHI+QXvG1W7W2T/zho7xZb 6cAnqAMlqwodFnjNKsR34AdOQiJiekFXg0RDXFTxlL+fl4+vZeMS8Ute84mCmOkb uwXf5P0LfaioD81UWjl81aKhezPVrkL83wDThXUJV2HCpsb0focTHbCCgQ4mu+Al Eh8K51UME8nd7ak7GF6j/uBZkU6pA6Q/NLr9Xb7CXCRvZhYp/CBGZs01jpBqVxnO KZdMXhHA8pE6Vg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:29 2025 by rpki-client