This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft File: 5aHlGcnOd1ddifB89xjzsMyG7FU.mft (raw, json) Hash identifier: lny1aApsSQzybYukU/WiKLz7mXIGx86mJc8hYNxVfOU= Subject key identifier: 3B:47:D7:45:6A:87:EA:CD:01:5E:3D:8F:7D:D2:FB:50:33:CE:01:78 Authority key identifier: E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55 Certificate issuer: /CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55 Certificate serial: 019AF12DD45AD019B82AB43A9F8E3EACE5B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:01:43 +0000 Manifest this update: Sat 06 Dec 2025 01:01:43 +0000 Manifest next update: Sun 07 Dec 2025 01:01:43 +0000 Files and hashes: 1: 5aHlGcnOd1ddifB89xjzsMyG7FU.crl (hash: yjWw14W2VqYu32xfuOKWYkxzQsZd/q9RlThyZGa4djE=) 2: uu25l9W5gSZu_tAy5o8jy6VhkvE.roa (hash: Mo0sHJu2Fpws6Go/Wkd7BWgvp/SCXCkUPd0a54ZzbWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d4:5a:d0:19:b8:2a:b4:3a:9f:8e:3e:ac:e5:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55 Validity Not Before: Dec 6 01:01:43 2025 GMT Not After : Dec 7 01:01:43 2025 GMT Subject: CN=3b47d7456a87eacd015e3d8f7dd2fb5033ce0178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:87:3e:2b:6b:e3:e2:18:16:c9:e4:dd:07: ab:9b:3d:0b:4a:69:4c:49:27:9e:3f:d2:35:73:94: bb:b4:2e:5b:f2:5a:c3:c1:0b:04:74:4d:be:8f:ab: 40:63:ac:2b:ee:3b:13:cd:78:4d:14:31:3d:98:b4: e4:24:6b:71:e0:3b:1c:a4:58:7c:6f:4a:a2:1d:1d: f3:14:10:48:3d:a3:0c:2e:f5:e6:71:09:45:67:fb: cd:70:c6:e3:1f:f7:70:27:de:54:66:d9:1c:6a:85: 59:4a:63:25:25:de:87:33:df:6b:0a:72:4e:37:af: 85:a0:96:91:98:03:b0:db:9f:78:1f:4b:8a:db:0b: 05:15:06:06:f2:f1:78:0b:8e:98:19:24:b8:ee:a2: 1c:59:41:9d:f6:ef:15:00:ee:48:46:50:41:55:f8: b5:62:60:1a:5c:2a:2f:61:f1:c1:a4:49:fe:e4:56: b7:d3:e8:07:17:9e:12:02:05:1a:24:08:d4:23:39: af:a6:87:fb:04:2a:2e:15:59:67:b5:1d:45:76:88: 77:21:d8:15:be:da:9d:dc:ce:ef:42:27:4d:10:df: 37:c6:05:ef:44:04:20:df:2d:73:a3:ce:fd:f5:09: d6:9b:95:48:b2:e2:01:10:9a:74:e8:a9:b9:0c:ea: b6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:47:D7:45:6A:87:EA:CD:01:5E:3D:8F:7D:D2:FB:50:33:CE:01:78 X509v3 Authority Key Identifier: keyid:E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:11:9b:e9:7c:42:c2:8b:a2:fb:e7:bb:89:a9:8b:a7:5a:ad: fa:04:40:72:4c:db:4f:c7:6a:2e:02:8d:af:fb:0b:c8:39:32: 32:66:6d:23:2f:ec:91:0c:09:5b:ea:a7:8f:c0:ae:9a:73:7d: 6f:01:5b:b4:51:b7:cb:10:13:b6:13:ab:2e:ad:5b:6e:93:ea: 9f:03:d7:81:42:69:ba:51:5e:01:98:e9:8e:15:2b:91:c3:64: 91:15:ba:34:54:71:03:65:09:d3:fc:d4:5b:ee:95:16:72:8f: 55:65:f4:2c:4f:ee:ff:1f:3b:c4:38:28:dd:6a:8a:e3:35:9e: 9e:a8:42:76:b5:14:a2:7b:a1:49:e7:11:60:c7:e9:2b:95:cb: cb:0a:5e:ea:69:c7:21:b2:00:5c:68:a2:96:b4:61:4b:8d:39: d5:2c:d7:ce:ce:09:2e:be:5a:05:ec:51:31:d1:0b:3f:57:49: 7e:fd:a4:94:ba:3e:d2:64:e9:b5:fd:8b:a7:29:02:bf:f3:f3: 98:81:63:94:ae:39:33:a6:54:57:6e:a3:35:93:4d:9b:f8:b8: 83:62:3c:94:31:c3:26:d8:24:29:e3:ff:28:57:ea:89:c8:c2: 39:26:bd:70:4d:e6:5e:ef:87:11:9e:01:d6:25:f8:c0:4e:b1: de:0f:1e:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdRa0Bm4KrQ6n44+rOW2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTFlNTE5YzljZTc3NTc1ZDg5ZjA3Y2Y3MThmM2IwY2M4 NmVjNTUwHhcNMjUxMjA2MDEwMTQzWhcNMjUxMjA3MDEwMTQzWjAzMTEwLwYDVQQD EygzYjQ3ZDc0NTZhODdlYWNkMDE1ZTNkOGY3ZGQyZmI1MDMzY2UwMTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZGHPitr4+IYFsnk3Qermz0LSmlM SSeeP9I1c5S7tC5b8lrDwQsEdE2+j6tAY6wr7jsTzXhNFDE9mLTkJGtx4DscpFh8 b0qiHR3zFBBIPaMMLvXmcQlFZ/vNcMbjH/dwJ95UZtkcaoVZSmMlJd6HM99rCnJO N6+FoJaRmAOw2594H0uK2wsFFQYG8vF4C46YGSS47qIcWUGd9u8VAO5IRlBBVfi1 YmAaXCovYfHBpEn+5Fa30+gHF54SAgUaJAjUIzmvpof7BCouFVlntR1Fdoh3IdgV vtqd3M7vQidNEN83xgXvRAQg3y1zo8799QnWm5VIsuIBEJp06Km5DOq2hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtH10Vqh+rNAV49j33S+1AzzgF4MB8GA1UdIwQY MBaAFOWh5RnJzndXXYnwfPcY87DMhuxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFIbEdjbk9kMWRkaWZCODl4anpzTXlHN0ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yY2MyMmMtMmQ3MS00NmQ2LTkyMTUt MzhjNWIwYzRmMTUyLzEvNWFIbEdjbk9kMWRkaWZCODl4anpzTXlHN0ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yY2MyMmMtMmQ3MS00NmQ2LTkyMTUtMzhjNWIwYzRmMTUy LzEvNWFIbEdjbk9kMWRkaWZCODl4anpzTXlHN0ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRGb6XxC woui++e7iamLp1qt+gRAckzbT8dqLgKNr/sLyDkyMmZtIy/skQwJW+qnj8CumnN9 bwFbtFG3yxATthOrLq1bbpPqnwPXgUJpulFeAZjpjhUrkcNkkRW6NFRxA2UJ0/zU W+6VFnKPVWX0LE/u/x87xDgo3WqK4zWenqhCdrUUonuhSecRYMfpK5XLywpe6mnH IbIAXGiilrRhS4051SzXzs4JLr5aBexRMdELP1dJfv2klLo+0mTptf2LpykCv/Pz mIFjlK45M6ZUV26jNZNNm/i4g2I8lDHDJtgkKeP/KFfqicjCOSa9cE3mXu+HEZ4B 1iX4wE6x3g8eLA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:09:57 2025 by rpki-client