This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft File: 5saSR1gKSIv0YbhL97iyrBN01cU.mft (raw, json) Hash identifier: 2QeM1ixijcJZi8Upy4pSerYTCncRG1BguuwazfwK9L4= Subject key identifier: 4C:5C:48:54:EA:50:26:79:42:2D:7C:15:F5:2A:B7:1A:39:73:CC:8E Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5 Certificate issuer: /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5 Certificate serial: 019AF208E100D0AF2A61D239796FAF7C32A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:00:59 +0000 Manifest this update: Sat 06 Dec 2025 05:00:59 +0000 Manifest next update: Sun 07 Dec 2025 05:00:59 +0000 Files and hashes: 1: 5saSR1gKSIv0YbhL97iyrBN01cU.crl (hash: 7lg+BQgUq+w8gtXP7QzOSUnsTMYxeqWZluO8wpnNpfI=) 2: l7WjKJBoi3ZOMaBwpHnPjLLele8.roa (hash: VuHVVXaHP8BDF2HI+1C+9vRLPuu0QKmIZQUwhxNEcWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e1:00:d0:af:2a:61:d2:39:79:6f:af:7c:32:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5 Validity Not Before: Dec 6 05:00:59 2025 GMT Not After : Dec 7 05:00:59 2025 GMT Subject: CN=4c5c4854ea502679422d7c15f52ab71a3973cc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c2:05:35:e5:43:ff:4c:4b:f0:ed:f7:cb:4b: 42:b0:c1:d7:d8:f6:4d:58:10:59:01:88:d4:12:bf: ef:df:e8:74:44:37:73:a8:86:5d:bb:f1:8d:11:03: ee:45:9d:57:ae:a5:d5:ba:5a:4d:97:27:92:c2:89: 50:3a:03:64:60:0e:92:6d:45:91:75:4e:e8:52:7e: 3e:d2:b2:0d:bb:8b:7a:6e:80:39:d1:04:7c:b8:91: dc:4f:fd:d5:ad:2b:78:ba:f6:84:ee:32:0c:b4:83: 74:3b:82:7d:4a:10:d4:f2:99:87:6f:6d:4a:4e:79: c3:ef:22:a9:c1:74:13:71:a7:0a:97:ff:74:0d:1e: c8:ea:81:87:6b:19:65:29:09:b3:d2:e8:5b:53:fd: d3:c1:b3:f5:7c:d2:94:e4:90:b7:fe:07:9e:24:61: a2:8c:a4:02:a8:30:1d:ab:2a:91:89:08:03:cc:da: 0a:dd:e6:4d:da:42:50:fb:3d:c5:de:24:c9:3d:c2: f5:67:34:3d:d3:7e:10:a0:5f:78:68:f6:30:8f:83: 36:0d:e2:a5:1f:cc:7a:cc:45:09:1b:57:6e:41:37: 84:f0:3e:99:b6:a4:5e:ba:e9:1e:7a:bf:fd:7c:6a: 06:f3:85:cd:73:01:41:bb:97:a5:c2:35:ef:2e:91: f8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5C:48:54:EA:50:26:79:42:2D:7C:15:F5:2A:B7:1A:39:73:CC:8E X509v3 Authority Key Identifier: keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:cc:66:7e:92:62:8c:26:b8:1e:c9:ea:4a:65:ef:41:a5:09: f7:2a:4d:e3:2f:bf:4f:3b:07:60:59:80:89:9f:bf:22:8d:71: 17:f9:0f:eb:82:c3:7a:fe:96:fc:84:38:5d:3c:5e:85:21:d8: ab:ab:a3:8e:b7:ed:9a:82:4c:cc:30:73:fb:73:9d:8e:52:83: 78:49:92:10:8d:99:69:a9:19:2d:14:3c:2c:fa:9f:d0:85:b1: 98:30:f3:40:38:6d:b9:41:82:d2:27:b5:8b:dd:23:3b:05:22: f7:87:ed:0b:35:b7:b8:c2:61:db:13:bf:5a:16:70:8f:0b:e8: 04:da:a6:97:d3:9d:4b:aa:62:76:86:34:3e:31:df:c8:29:03: a1:e9:ce:97:82:68:b8:55:df:d3:06:7f:f1:ff:44:4d:da:d8: fc:95:a2:64:e2:f1:51:22:57:ed:25:0c:9e:28:6e:8c:28:97: 5f:ed:25:9c:85:5c:61:89:08:23:74:f8:ec:92:9b:56:1e:23: 1b:32:b5:d1:fd:1e:d0:04:9c:a3:1c:58:ed:29:87:05:57:93: 1a:35:87:4c:7a:7c:79:df:ce:03:16:0d:a8:09:19:5a:11:8d: 67:7e:cd:31:34:f9:86:03:d9:fd:06:4c:1a:46:ea:3e:28:02: c4:fa:ea:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOEA0K8qYdI5eW+vfDKmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YzY5MjQ3NTgwYTQ4OGJmNDYxYjg0YmY3YjhiMmFjMTM3 NGQ1YzUwHhcNMjUxMjA2MDUwMDU5WhcNMjUxMjA3MDUwMDU5WjAzMTEwLwYDVQQD Eyg0YzVjNDg1NGVhNTAyNjc5NDIyZDdjMTVmNTJhYjcxYTM5NzNjYzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsIFNeVD/0xL8O33y0tCsMHX2PZN WBBZAYjUEr/v3+h0RDdzqIZdu/GNEQPuRZ1XrqXVulpNlyeSwolQOgNkYA6SbUWR dU7oUn4+0rINu4t6boA50QR8uJHcT/3VrSt4uvaE7jIMtIN0O4J9ShDU8pmHb21K TnnD7yKpwXQTcacKl/90DR7I6oGHaxllKQmz0uhbU/3TwbP1fNKU5JC3/geeJGGi jKQCqDAdqyqRiQgDzNoK3eZN2kJQ+z3F3iTJPcL1ZzQ9034QoF94aPYwj4M2DeKl H8x6zEUJG1duQTeE8D6ZtqReuukeer/9fGoG84XNcwFBu5elwjXvLpH4swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExcSFTqUCZ5Qi18FfUqtxo5c8yOMB8GA1UdIwQY MBaAFObGkkdYCkiL9GG4S/e4sqwTdNXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zM2JhNmMtYmVmYi00ZGViLTg5OTgt NTI3YTlhNGVlNjI0LzEvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zM2JhNmMtYmVmYi00ZGViLTg5OTgtNTI3YTlhNGVlNjI0 LzEvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMxmfpJi jCa4HsnqSmXvQaUJ9ypN4y+/TzsHYFmAiZ+/Io1xF/kP64LDev6W/IQ4XTxehSHY q6ujjrftmoJMzDBz+3OdjlKDeEmSEI2ZaakZLRQ8LPqf0IWxmDDzQDhtuUGC0ie1 i90jOwUi94ftCzW3uMJh2xO/WhZwjwvoBNqml9OdS6pidoY0PjHfyCkDoenOl4Jo uFXf0wZ/8f9ETdrY/JWiZOLxUSJX7SUMnihujCiXX+0lnIVcYYkII3T47JKbVh4j GzK10f0e0AScoxxY7SmHBVeTGjWHTHp8ed/OAxYNqAkZWhGNZ37NMTT5hgPZ/QZM GkbqPigCxPrqcw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:20 2025 by rpki-client