This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json) Hash identifier: C+9CcSJhG043i6d1zX6TC5qCVCseP+bcb6P90LKOVn8= Subject key identifier: C8:A4:C5:D4:C2:A7:55:6E:F5:C1:3E:A3:94:9E:6C:42:5A:70:68:82 Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0 Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0 Certificate serial: 019AF389613EB87598934D0087FE20DF4779 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 12:00:58 +0000 Manifest this update: Sat 06 Dec 2025 12:00:58 +0000 Manifest next update: Sun 07 Dec 2025 12:00:58 +0000 Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: BLvtzzYd2X9FMHJWWqmVgu4CAY/o85Agcfi1TdUyriY=) 2: dq4NGDrJihdpAYEQ3owreA6iQU4.roa (hash: 1bpSRQ6nEHSR6H3DF+6pLQte0es+3qQ4qeng8ZdjLzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:61:3e:b8:75:98:93:4d:00:87:fe:20:df:47:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0 Validity Not Before: Dec 6 12:00:58 2025 GMT Not After : Dec 7 12:00:58 2025 GMT Subject: CN=c8a4c5d4c2a7556ef5c13ea3949e6c425a706882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:21:d6:2d:e6:40:32:87:c6:06:1b:99:24:53: 45:07:ce:dd:26:9f:78:93:16:5f:ac:f9:9e:57:0b: 49:8e:30:af:f2:b7:fb:b6:d2:c2:fe:fc:1b:21:17: 94:61:ed:40:ed:86:ba:1e:1d:bd:79:e5:08:c2:a6: f9:04:45:b1:cf:92:98:3a:09:d6:3a:29:05:45:ec: c4:0a:46:dd:ae:8a:31:7b:e8:b4:0d:a7:4f:54:6e: 50:78:94:97:27:0e:a8:90:6c:b3:f9:fe:27:ab:d7: 76:f8:8e:91:a9:bc:db:59:a4:91:7a:c8:95:f4:d0: db:e1:59:49:79:ef:4b:b0:54:93:99:6b:1e:4f:f3: ce:42:3d:fc:db:b6:e9:8b:7a:cf:fe:32:fe:33:b7: ec:e8:cf:b5:47:63:53:8d:bf:43:11:86:bf:b3:4c: a0:46:3d:c2:77:58:2f:1c:08:97:0d:30:65:87:e9: d8:9d:6e:2b:d8:43:66:61:bf:5b:19:46:55:d0:1c: 56:00:54:99:c6:87:b6:0e:21:01:bf:c0:47:11:d2: 61:36:81:47:22:64:9e:c5:e9:5f:f1:fd:c8:dd:a2: 48:1e:65:30:7b:b7:25:ef:18:15:35:47:51:4a:e9: 5b:f4:2d:d0:9f:65:81:34:04:aa:0e:24:3d:31:90: 68:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A4:C5:D4:C2:A7:55:6E:F5:C1:3E:A3:94:9E:6C:42:5A:70:68:82 X509v3 Authority Key Identifier: keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e5:63:25:2b:1f:ad:ce:90:e8:59:72:47:28:17:99:e5:4d: 6c:6e:0d:c8:6d:11:9c:c7:26:4c:cb:93:bb:b1:6b:f5:a8:ec: 13:34:35:10:ff:ae:46:f4:ac:aa:8a:06:b3:74:79:76:e8:b0: 01:60:fb:0e:29:c8:bc:de:46:56:36:38:9e:c3:a5:99:64:fe: f6:3a:e0:e1:87:39:3a:6f:6b:3b:1f:3d:10:41:6b:a6:71:20: fd:85:6d:74:14:2b:27:84:70:cf:45:e1:27:44:13:41:44:15: 6a:8d:12:9c:70:bf:0c:4e:67:a3:1e:60:72:1a:b8:1a:4d:df: df:93:8e:03:b9:63:4d:c0:d1:d0:63:1b:a9:fc:79:f0:b3:d7: 54:81:cb:18:56:f5:ec:90:41:81:5e:6d:7e:55:eb:e8:40:64: 4d:53:1d:cc:1a:d0:ec:f4:e7:4b:a0:fb:24:18:6c:2b:c6:71: 42:92:64:3d:0d:b1:d0:89:d2:e7:4a:9b:72:18:83:0a:e5:65: 30:86:d9:b0:2d:f1:14:1d:89:26:b9:80:5f:df:42:0f:b7:92: 17:d6:4b:7f:0b:1b:5e:fc:7d:7a:5c:c8:0e:8a:77:b0:1e:1f: 68:b6:a3:0a:54:de:b9:55:9e:3a:6b:51:13:18:fd:61:c7:42: eb:eb:51:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWE+uHWYk00Ah/4g30d5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NDY4MmFkYjAyMzhjYzc3MmQxYzViNDk4NmM3YTMzOTg2 MzY0YTAwHhcNMjUxMjA2MTIwMDU4WhcNMjUxMjA3MTIwMDU4WjAzMTEwLwYDVQQD EyhjOGE0YzVkNGMyYTc1NTZlZjVjMTNlYTM5NDllNmM0MjVhNzA2ODgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSHWLeZAMofGBhuZJFNFB87dJp94 kxZfrPmeVwtJjjCv8rf7ttLC/vwbIReUYe1A7Ya6Hh29eeUIwqb5BEWxz5KYOgnW OikFRezECkbdrooxe+i0DadPVG5QeJSXJw6okGyz+f4nq9d2+I6RqbzbWaSResiV 9NDb4VlJee9LsFSTmWseT/POQj3827bpi3rP/jL+M7fs6M+1R2NTjb9DEYa/s0yg Rj3Cd1gvHAiXDTBlh+nYnW4r2ENmYb9bGUZV0BxWAFSZxoe2DiEBv8BHEdJhNoFH ImSexelf8f3I3aJIHmUwe7cl7xgVNUdRSulb9C3Qn2WBNASqDiQ9MZBoXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMikxdTCp1Vu9cE+o5SebEJacGiCMB8GA1UdIwQY MBaAFOZGgq2wI4zHctHFtJhsejOYY2SgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWthQ3JiQWpqTWR5MGNXMG1HeDZNNWhqWktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hOWNlYjgtMGM4Ni00OWFjLWEzOTIt YWNlY2FkNTNjODE1LzEvNWthQ3JiQWpqTWR5MGNXMG1HeDZNNWhqWktBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9hOWNlYjgtMGM4Ni00OWFjLWEzOTItYWNlY2FkNTNjODE1 LzEvNWthQ3JiQWpqTWR5MGNXMG1HeDZNNWhqWktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOVjJSsf rc6Q6FlyRygXmeVNbG4NyG0RnMcmTMuTu7Fr9ajsEzQ1EP+uRvSsqooGs3R5duiw AWD7DinIvN5GVjY4nsOlmWT+9jrg4Yc5Om9rOx89EEFrpnEg/YVtdBQrJ4Rwz0Xh J0QTQUQVao0SnHC/DE5nox5gchq4Gk3f35OOA7ljTcDR0GMbqfx58LPXVIHLGFb1 7JBBgV5tflXr6EBkTVMdzBrQ7PTnS6D7JBhsK8ZxQpJkPQ2x0InS50qbchiDCuVl MIbZsC3xFB2JJrmAX99CD7eSF9ZLfwsbXvx9elzIDop3sB4faLajClTeuVWeOmtR Exj9YcdC6+tR8w== -----END CERTIFICATE-----Generated at Sat Dec 6 22:27:02 2025 by rpki-client