This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json) Hash identifier: oqSx7CwesKYAggBgY7EDIpc2h4bSIMdiSvv0K9H2/ao= Subject key identifier: F7:36:1F:54:62:0F:57:6A:9F:1A:BC:C0:B0:EA:D8:07:FA:35:69:31 Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0 Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0 Certificate serial: 019AF57877EDEB8E6D58B3176B05FB7A3D07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 21:01:44 +0000 Manifest this update: Sat 06 Dec 2025 21:01:44 +0000 Manifest next update: Sun 07 Dec 2025 21:01:44 +0000 Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: nahbF4cynGVVWSvDKZEIfaIEfTOYUlTuFy75uKxDUos=) 2: dq4NGDrJihdpAYEQ3owreA6iQU4.roa (hash: 1bpSRQ6nEHSR6H3DF+6pLQte0es+3qQ4qeng8ZdjLzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:77:ed:eb:8e:6d:58:b3:17:6b:05:fb:7a:3d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0 Validity Not Before: Dec 6 21:01:44 2025 GMT Not After : Dec 7 21:01:44 2025 GMT Subject: CN=f7361f54620f576a9f1abcc0b0ead807fa356931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:39:c6:79:5b:1c:2e:3b:aa:58:82:bb:91:a8: f2:30:6c:9f:5d:d4:a9:c9:b8:b5:07:99:39:d6:2e: 25:fa:88:d6:72:6b:26:03:1c:cb:63:c7:23:2e:52: ab:81:b5:5e:75:4c:7f:75:27:35:db:4a:8b:0a:00: fe:f9:53:e7:55:7e:11:f6:f2:fe:0d:bd:39:49:b7: 62:73:bd:16:f0:04:43:9f:05:76:49:dd:fa:9b:a1: 1b:67:17:73:9c:3a:78:11:57:41:9f:d3:cc:c4:de: 03:23:08:0c:9b:9a:78:a5:13:79:67:04:2c:05:ba: b0:c0:59:d0:17:70:6f:8c:5e:d8:4b:6f:ea:74:0a: aa:8c:8e:78:05:e2:1e:9e:a1:69:1c:4e:4a:d6:cd: 3d:45:8f:17:fe:cb:3e:bb:54:9a:d4:e1:79:36:d9: 89:6f:35:8e:92:6a:da:2a:c1:8e:33:1c:4e:e1:e6: 4e:bb:1d:69:a7:ca:22:1b:e5:15:de:ce:14:d0:96: 28:37:dd:38:d6:b2:c1:35:f3:6c:94:1b:5a:90:d9: 31:ad:84:a7:74:fc:ae:20:bc:43:ae:84:aa:5d:4f: 2c:f2:bc:2a:46:22:f4:66:63:7c:18:92:82:0d:1b: 9b:d8:ca:64:59:2a:e1:7a:4d:0c:a9:14:c7:06:6c: 09:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:36:1F:54:62:0F:57:6A:9F:1A:BC:C0:B0:EA:D8:07:FA:35:69:31 X509v3 Authority Key Identifier: keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:2d:6f:9d:ff:8d:f9:3a:f7:f3:1b:73:5c:4b:d0:e4:e9:6b: a3:ea:95:38:29:3a:d7:96:d7:e9:48:b0:39:0d:e7:b4:b2:56: cf:54:40:b1:99:15:1a:d7:b0:e8:92:42:75:77:38:0a:cd:6b: f7:6d:23:15:97:4f:7e:12:e5:93:f8:08:97:e7:69:4c:ad:04: 60:88:69:2f:51:99:4c:d3:d0:1a:b2:44:33:4b:3d:21:62:17: ee:52:60:4a:66:41:45:ad:b6:6f:5b:91:c3:a1:c4:e1:4c:a5: 4d:3f:22:a3:9f:c1:95:f3:51:43:87:1a:1e:40:49:5b:9e:72: 1e:72:0e:3e:e1:64:64:8a:7c:29:09:87:d5:89:e4:8a:f3:ac: a5:f9:bb:ad:ae:fd:e3:11:a9:49:a0:cf:6f:05:81:d8:93:91: 56:70:a4:c8:de:15:1a:0e:7a:73:c2:5f:90:f3:71:34:10:41: 2c:77:c6:ad:7a:a3:a6:9f:30:8d:7c:c6:19:2b:18:a2:0d:b6: 65:94:a0:ff:52:8c:e3:7d:73:43:25:ea:c7:26:68:26:c6:d4: d7:a7:fd:d0:fd:9c:e5:1e:bf:be:2f:1a:c6:02:4f:db:48:c1: 80:b6:20:26:76:6b:0f:2b:a2:8a:7c:00:32:74:42:26:96:14: 39:4d:43:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eHft645tWLMXawX7ej0HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NDY4MmFkYjAyMzhjYzc3MmQxYzViNDk4NmM3YTMzOTg2 MzY0YTAwHhcNMjUxMjA2MjEwMTQ0WhcNMjUxMjA3MjEwMTQ0WjAzMTEwLwYDVQQD EyhmNzM2MWY1NDYyMGY1NzZhOWYxYWJjYzBiMGVhZDgwN2ZhMzU2OTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjnGeVscLjuqWIK7kajyMGyfXdSp ybi1B5k51i4l+ojWcmsmAxzLY8cjLlKrgbVedUx/dSc120qLCgD++VPnVX4R9vL+ Db05Sbdic70W8ARDnwV2Sd36m6EbZxdznDp4EVdBn9PMxN4DIwgMm5p4pRN5ZwQs BbqwwFnQF3BvjF7YS2/qdAqqjI54BeIenqFpHE5K1s09RY8X/ss+u1Sa1OF5NtmJ bzWOkmraKsGOMxxO4eZOux1pp8oiG+UV3s4U0JYoN9041rLBNfNslBtakNkxrYSn dPyuILxDroSqXU8s8rwqRiL0ZmN8GJKCDRub2MpkWSrhek0MqRTHBmwJnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPc2H1RiD1dqnxq8wLDq2Af6NWkxMB8GA1UdIwQY MBaAFOZGgq2wI4zHctHFtJhsejOYY2SgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWthQ3JiQWpqTWR5MGNXMG1HeDZNNWhqWktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hOWNlYjgtMGM4Ni00OWFjLWEzOTIt YWNlY2FkNTNjODE1LzEvNWthQ3JiQWpqTWR5MGNXMG1HeDZNNWhqWktBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9hOWNlYjgtMGM4Ni00OWFjLWEzOTItYWNlY2FkNTNjODE1 LzEvNWthQ3JiQWpqTWR5MGNXMG1HeDZNNWhqWktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACS1vnf+N +Tr38xtzXEvQ5Olro+qVOCk615bX6UiwOQ3ntLJWz1RAsZkVGtew6JJCdXc4Cs1r 920jFZdPfhLlk/gIl+dpTK0EYIhpL1GZTNPQGrJEM0s9IWIX7lJgSmZBRa22b1uR w6HE4UylTT8io5/BlfNRQ4caHkBJW55yHnIOPuFkZIp8KQmH1YnkivOspfm7ra79 4xGpSaDPbwWB2JORVnCkyN4VGg56c8JfkPNxNBBBLHfGrXqjpp8wjXzGGSsYog22 ZZSg/1KM431zQyXqxyZoJsbU16f90P2c5R6/vi8axgJP20jBgLYgJnZrDyuiinwA MnRCJpYUOU1DXQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:04:04 2025 by rpki-client