This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft File: 5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json) Hash identifier: 3zVgkY4GiDXdSwX8Lv5wuZVCefRghZV+BSbMcwGXd7E= Subject key identifier: B9:F3:2B:96:4B:06:94:9A:47:36:D8:AC:61:D1:D0:01:F2:75:FF:57 Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78 Certificate issuer: /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778 Certificate serial: 019AF50B156F5B9AC4F554A51909083EC128 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 19:02:15 +0000 Manifest this update: Sat 06 Dec 2025 19:02:15 +0000 Manifest next update: Sun 07 Dec 2025 19:02:15 +0000 Files and hashes: 1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: GbDhw7NmPs5vT2QcQAhpXcxdUFqHoflIIyo6GmXxEDs=) 2: LeXJLi-TLu5NLRkSo2hJnEK9QDQ.roa (hash: 1KfkyTUePDTOuHMENqew1KmyeJrolI/GoAGN74JhXHQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:15:6f:5b:9a:c4:f5:54:a5:19:09:08:3e:c1:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778 Validity Not Before: Dec 6 19:02:15 2025 GMT Not After : Dec 7 19:02:15 2025 GMT Subject: CN=b9f32b964b06949a4736d8ac61d1d001f275ff57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d8:4c:c4:a9:51:37:36:dc:09:e4:88:73:28: 7a:11:84:1a:55:a7:c2:07:52:84:8c:58:20:3c:3f: e6:40:b3:0f:1d:97:98:d6:f8:bb:68:55:59:a0:b2: b2:7f:f7:e0:7f:27:f4:85:24:77:2a:c9:bd:c5:66: 05:eb:b9:b7:d9:e2:63:3a:b7:fc:54:61:d4:bb:6d: 9a:46:24:21:0e:21:ec:67:d9:8b:22:fc:fd:87:ad: af:c6:ac:98:15:b9:1c:fb:8d:de:5d:c3:a9:83:6a: 43:d7:c3:d4:92:04:24:9d:dd:38:8d:03:1e:75:36: 30:f8:4e:5b:60:fb:c7:e3:19:95:40:25:80:69:95: b8:56:30:6e:4f:7d:44:9c:6e:c3:a1:f0:59:cb:13: 5d:67:32:b0:18:58:79:72:0f:dc:e7:c6:94:78:c4: 34:2e:eb:51:28:32:53:79:59:70:d9:e1:81:82:54: b0:17:e7:3e:4a:8f:90:b6:8e:2e:2c:63:3e:36:6c: e8:79:1a:c0:a1:2f:17:5e:52:51:30:01:95:24:88: 78:1d:28:77:51:33:7a:1d:ac:bd:86:00:97:cf:f6: c5:cd:2a:52:7a:aa:0d:35:c1:cd:b0:3b:94:ad:4d: 4a:81:64:46:23:83:25:cf:cf:f3:be:44:6c:93:1b: 36:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F3:2B:96:4B:06:94:9A:47:36:D8:AC:61:D1:D0:01:F2:75:FF:57 X509v3 Authority Key Identifier: keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:4b:12:c6:c4:a3:ad:4f:d9:94:f7:6b:76:5e:2f:c1:ec:27: fa:f9:e5:a7:17:b5:69:dd:73:79:68:2b:9d:8d:64:5f:7d:9f: 1d:f1:3e:b6:3d:4b:ab:1c:c0:fe:b1:2c:4b:61:23:32:8d:9a: 16:64:e2:a6:6a:6b:41:22:79:8b:79:d1:59:53:e2:44:e8:f1: fd:d2:1f:28:1d:61:75:2c:d0:ad:70:a6:98:38:99:36:5d:14: 74:c4:61:f2:08:e9:76:77:2b:55:64:15:38:3c:3a:00:ba:da: a1:7c:b9:3e:0a:62:cb:20:b5:d4:80:37:76:61:b1:98:53:55: aa:5c:8c:50:8a:6f:d1:b1:3f:07:9b:7c:cc:19:c6:7b:52:e2: 53:9a:0e:23:10:34:4d:d5:be:74:86:9f:5e:60:49:4a:bf:6c: 2e:8d:80:95:1b:8a:17:1d:ee:54:4d:2e:9c:cb:da:35:b7:73: c8:ed:fa:16:13:c2:89:bd:3f:c1:46:e0:e3:59:e8:a1:eb:83: 6c:6a:57:d6:a1:47:9e:5b:59:e6:5c:fa:e8:1e:25:45:e3:9c: 1a:4c:ff:32:ce:dc:0a:24:32:dd:5b:48:de:ac:25:4f:c8:15: f3:44:99:ba:b7:ab:93:87:54:23:e4:78:87:41:ee:2f:f4:61: a5:55:ca:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CxVvW5rE9VSlGQkIPsEoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NDRlMjY2ZDRlYjljYzdkZWQyOTJjMTJiMDZiMWNhN2Jj ZWE3NzgwHhcNMjUxMjA2MTkwMjE1WhcNMjUxMjA3MTkwMjE1WjAzMTEwLwYDVQQD EyhiOWYzMmI5NjRiMDY5NDlhNDczNmQ4YWM2MWQxZDAwMWYyNzVmZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNhMxKlRNzbcCeSIcyh6EYQaVafC B1KEjFggPD/mQLMPHZeY1vi7aFVZoLKyf/fgfyf0hSR3Ksm9xWYF67m32eJjOrf8 VGHUu22aRiQhDiHsZ9mLIvz9h62vxqyYFbkc+43eXcOpg2pD18PUkgQknd04jQMe dTYw+E5bYPvH4xmVQCWAaZW4VjBuT31EnG7DofBZyxNdZzKwGFh5cg/c58aUeMQ0 LutRKDJTeVlw2eGBglSwF+c+So+Qto4uLGM+NmzoeRrAoS8XXlJRMAGVJIh4HSh3 UTN6Hay9hgCXz/bFzSpSeqoNNcHNsDuUrU1KgWRGI4Mlz8/zvkRskxs2GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnzK5ZLBpSaRzbYrGHR0AHydf9XMB8GA1UdIwQY MBaAFOVE4mbU65zH3tKSwSsGscp7zqd4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVVUaVp0VHJuTWZlMHBMQkt3YXh5bnZPcDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iZmY3OTktOWUzMi00M2JlLTg1Y2Qt ODI0NzYwNzE0ZGZiLzEvNVVUaVp0VHJuTWZlMHBMQkt3YXh5bnZPcDNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9iZmY3OTktOWUzMi00M2JlLTg1Y2QtODI0NzYwNzE0ZGZi LzEvNVVUaVp0VHJuTWZlMHBMQkt3YXh5bnZPcDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUksSxsSj rU/ZlPdrdl4vwewn+vnlpxe1ad1zeWgrnY1kX32fHfE+tj1LqxzA/rEsS2EjMo2a FmTipmprQSJ5i3nRWVPiROjx/dIfKB1hdSzQrXCmmDiZNl0UdMRh8gjpdncrVWQV ODw6ALraoXy5PgpiyyC11IA3dmGxmFNVqlyMUIpv0bE/B5t8zBnGe1LiU5oOIxA0 TdW+dIafXmBJSr9sLo2AlRuKFx3uVE0unMvaNbdzyO36FhPCib0/wUbg41nooeuD bGpX1qFHnltZ5lz66B4lReOcGkz/Ms7cCiQy3VtI3qwlT8gV80SZurerk4dUI+R4 h0HuL/RhpVXKjw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:02 2025 by rpki-client