This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft File: 5oBHj67Itn3f7OY1fPJc8sodhdA.mft (raw, json) Hash identifier: tP88+BRwLWCTxN34NHQqnfvuY7TSGH1EVX0ehdUwWaI= Subject key identifier: A2:F8:2F:89:4E:61:42:A0:67:97:5E:47:81:A4:AD:3C:DD:EC:E4:CD Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0 Certificate issuer: /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0 Certificate serial: 019AF12EFAC6E6B6FF5CF73D144C3F9A8E83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 01:02:59 +0000 Manifest this update: Sat 06 Dec 2025 01:02:59 +0000 Manifest next update: Sun 07 Dec 2025 01:02:59 +0000 Files and hashes: 1: 5oBHj67Itn3f7OY1fPJc8sodhdA.crl (hash: +OOj7CYq8yCMWsVt1ekmnxO7Jw98xq13+sZtCKpjTGQ=) 2: tRzSJb7DVEfQEAa9U4BrDqM_SWA.roa (hash: XZPt+PoWwjSkw1pIWuwBcMWbKd9UU7K0EsDZzwNXa5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:fa:c6:e6:b6:ff:5c:f7:3d:14:4c:3f:9a:8e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0 Validity Not Before: Dec 6 01:02:59 2025 GMT Not After : Dec 7 01:02:59 2025 GMT Subject: CN=a2f82f894e6142a067975e4781a4ad3cddece4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:90:a7:97:ed:05:36:76:25:d9:64:fd:1a:d7: 94:d5:47:a5:48:82:f0:01:68:8c:d5:85:4e:2f:e9: 80:ce:09:4b:a1:78:59:a6:da:fe:48:65:42:74:6d: 2b:80:0c:26:2f:ab:eb:bf:fd:f8:9e:f8:39:94:be: 43:49:3e:b5:c2:cb:fd:cf:9a:90:e2:71:ad:11:bc: eb:8c:fb:4a:91:68:4c:08:67:81:37:c1:2e:7a:4d: 2c:77:56:8c:92:5e:6e:ba:53:75:2e:3f:99:39:8f: 6c:8f:a4:34:27:19:db:7a:cc:ab:9b:77:7f:7a:26: 93:a8:03:a0:01:bb:8b:9d:a0:78:21:3d:68:66:09: 56:2f:f1:d3:8c:0c:27:22:47:99:39:a3:f2:05:d1: 48:03:d2:d4:3f:97:77:1e:1a:b7:17:57:10:4c:01: c7:72:9c:19:e7:34:5b:06:42:c8:d3:dd:12:d2:95: 81:37:80:e8:bf:ba:e3:f5:e9:e0:88:62:f5:fa:21: f2:f1:a9:d9:28:24:fd:90:de:da:9c:f4:41:fe:07: 81:21:88:43:57:bc:2e:d1:dc:44:ec:e8:b0:e2:0b: ab:11:ca:00:fa:97:51:05:3d:f7:e5:d3:ef:a9:2d: 93:03:17:55:36:31:fb:6c:ef:61:41:ba:ac:59:c2: 18:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F8:2F:89:4E:61:42:A0:67:97:5E:47:81:A4:AD:3C:DD:EC:E4:CD X509v3 Authority Key Identifier: keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:db:9b:19:23:44:ef:b7:29:c5:3c:8e:f8:17:40:35:9f:5f: 42:37:8b:a0:7b:0e:c9:7b:88:55:aa:66:93:28:75:6d:08:57: 72:c6:18:80:9e:68:e8:c1:c4:ce:fa:f2:a9:a6:a6:33:d2:78: 2e:88:9f:3a:b7:8d:52:ff:f2:59:1d:2a:59:6d:e9:b0:56:8d: 97:5f:2b:ee:73:e0:51:d5:96:de:a1:e5:6a:a6:b8:0d:aa:34: 3c:6c:26:b6:bd:81:b4:d6:aa:af:79:85:04:9a:85:37:eb:23: 1f:8e:75:82:bc:9b:19:06:42:2b:ac:e0:9b:56:22:a9:6c:70: db:77:d7:65:f3:2f:c6:d8:6a:e7:0a:6c:b6:25:0f:08:92:ca: 62:d1:f7:20:09:4e:ba:57:cf:c2:c8:47:37:a5:82:7b:f2:66: 6a:8a:ad:4c:63:71:81:39:02:b0:13:c5:73:42:71:6f:05:00: 7f:8d:3e:9b:5d:d5:74:a0:da:74:97:8d:5a:72:35:ee:16:a9: 5b:dc:df:b2:48:ed:97:cd:b7:5b:2b:48:74:e2:58:c0:1b:78: 17:cf:67:47:16:7f:f2:2a:b8:0f:60:66:1a:2f:63:8a:2f:14: 8a:78:da:9f:02:e7:d6:d5:c9:3b:7e:97:f2:8b:17:0b:b7:09: 21:e7:2c:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLvrG5rb/XPc9FEw/mo6DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ODA0NzhmYWVjOGI2N2RkZmVjZTYzNTdjZjI1Y2YyY2Ex ZDg1ZDAwHhcNMjUxMjA2MDEwMjU5WhcNMjUxMjA3MDEwMjU5WjAzMTEwLwYDVQQD EyhhMmY4MmY4OTRlNjE0MmEwNjc5NzVlNDc4MWE0YWQzY2RkZWNlNGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35Cnl+0FNnYl2WT9GteU1UelSILw AWiM1YVOL+mAzglLoXhZptr+SGVCdG0rgAwmL6vrv/34nvg5lL5DST61wsv9z5qQ 4nGtEbzrjPtKkWhMCGeBN8Euek0sd1aMkl5uulN1Lj+ZOY9sj6Q0Jxnbesyrm3d/ eiaTqAOgAbuLnaB4IT1oZglWL/HTjAwnIkeZOaPyBdFIA9LUP5d3Hhq3F1cQTAHH cpwZ5zRbBkLI090S0pWBN4Dov7rj9engiGL1+iHy8anZKCT9kN7anPRB/geBIYhD V7wu0dxE7Oiw4gurEcoA+pdRBT335dPvqS2TAxdVNjH7bO9hQbqsWcIYOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKL4L4lOYUKgZ5deR4GkrTzd7OTNMB8GA1UdIwQY MBaAFOaAR4+uyLZ93+zmNXzyXPLKHYXQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW9CSGo2N0l0bjNmN09ZMWZQSmM4c29kaGRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yNWEwMWItNWZiMC00NDRlLWEyYzct MzM5YzlkNDg3NzRjLzEvNW9CSGo2N0l0bjNmN09ZMWZQSmM4c29kaGRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8yNWEwMWItNWZiMC00NDRlLWEyYzctMzM5YzlkNDg3NzRj LzEvNW9CSGo2N0l0bjNmN09ZMWZQSmM4c29kaGRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9ubGSNE 77cpxTyO+BdANZ9fQjeLoHsOyXuIVapmkyh1bQhXcsYYgJ5o6MHEzvryqaamM9J4 LoifOreNUv/yWR0qWW3psFaNl18r7nPgUdWW3qHlaqa4Dao0PGwmtr2BtNaqr3mF BJqFN+sjH451grybGQZCK6zgm1YiqWxw23fXZfMvxthq5wpstiUPCJLKYtH3IAlO ulfPwshHN6WCe/JmaoqtTGNxgTkCsBPFc0JxbwUAf40+m13VdKDadJeNWnI17hap W9zfskjtl823WytIdOJYwBt4F89nRxZ/8iq4D2BmGi9jii8UinjanwLn1tXJO36X 8osXC7cJIecsFA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:36 2025 by rpki-client