This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft File: _5lGMPx0VWzlCAJocJAVRft7BM0.mft (raw, json) Hash identifier: wt484glCLRi+bO6rq1sl6PPnYyIuCehdLQQPVIDcPzQ= Subject key identifier: 9B:97:1A:9E:DE:88:63:8B:31:04:F0:02:F2:CF:BF:B4:DA:07:47:71 Authority key identifier: FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD Certificate issuer: /CN=ff994630fc74556ce508026870901545fb7b04cd Certificate serial: 019AF31BD5630C677EB26F8190AD2CCCE369 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:01:18 +0000 Manifest this update: Sat 06 Dec 2025 10:01:18 +0000 Manifest next update: Sun 07 Dec 2025 10:01:18 +0000 Files and hashes: 1: _5lGMPx0VWzlCAJocJAVRft7BM0.crl (hash: 4cf5ihuLdIxZAt0qA7PBTxl2zci/LFN+DLAaOJMjSS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:d5:63:0c:67:7e:b2:6f:81:90:ad:2c:cc:e3:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff994630fc74556ce508026870901545fb7b04cd Validity Not Before: Dec 6 10:01:18 2025 GMT Not After : Dec 7 10:01:18 2025 GMT Subject: CN=9b971a9ede88638b3104f002f2cfbfb4da074771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:96:9b:f6:d2:9f:77:36:a8:ce:a8:a7:7c:0a: 7b:69:80:2c:01:d6:02:0f:20:19:30:03:0a:7f:dd: ee:27:f1:74:26:d5:05:dd:f1:c7:22:06:18:fa:7d: 5a:6c:5a:1f:91:ee:b8:1e:fa:66:59:a0:27:ab:2b: 3b:2b:cb:ec:53:19:d7:31:13:31:43:9a:c3:61:ec: 1d:15:54:1f:44:d7:19:21:fb:d2:54:dd:28:72:57: d7:fc:48:88:e3:72:4b:9b:b3:13:a9:a6:9b:ae:02: 3e:b5:15:45:cb:4d:ef:ef:65:d8:31:a1:a8:11:72: c4:c6:ab:ab:4c:8e:d2:a8:e5:c4:b3:cc:ae:ff:f2: 69:0e:a5:6d:8f:e9:8c:60:64:8a:11:a5:8d:85:1b: 13:37:23:3c:37:77:5a:a2:2c:65:7d:c5:a2:da:f2: 8a:2a:33:0d:a7:da:ab:de:5b:33:cd:2b:4a:29:23: 6c:7c:3d:d9:ea:cd:44:02:63:ed:af:dd:3d:42:5a: 62:48:0f:aa:87:4b:b2:88:77:75:80:2c:45:61:8c: 89:93:e3:03:10:7d:9c:6a:75:f7:5d:9f:d9:83:e0: f1:ef:06:93:8c:f6:67:09:77:d1:ff:c5:4c:fa:8c: c2:51:ea:b4:62:8c:01:8f:89:7b:3d:f7:d5:1c:11: 11:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:97:1A:9E:DE:88:63:8B:31:04:F0:02:F2:CF:BF:B4:DA:07:47:71 X509v3 Authority Key Identifier: keyid:FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:32:1b:4c:0b:88:d6:e5:8d:c2:7f:5f:46:0b:93:75:cd:39: 77:d5:a3:18:72:72:53:92:82:3e:a9:05:bb:77:df:c1:fc:de: a5:e9:c5:66:48:44:4b:9d:19:52:c5:35:45:9d:87:65:7b:3d: 3c:2e:4f:f5:6e:38:55:09:5d:29:b6:32:d4:78:15:00:e8:5e: 6d:eb:be:39:56:2e:33:c7:cf:7e:fe:52:68:55:dc:26:2b:7c: 53:06:bd:53:88:42:96:79:a8:be:03:60:97:30:b5:0c:4b:d0: 87:4b:c9:29:3f:92:7d:0d:77:9c:0c:67:b2:d8:5b:26:82:97: 9d:c1:4c:28:34:89:cd:af:4a:6c:a5:e0:ca:d5:5e:63:87:36: e7:e7:37:71:4b:ff:60:f1:b6:43:d5:58:b5:1f:0f:45:1a:73: fd:70:8f:9d:f4:b9:43:b6:7c:8c:77:1e:7c:15:34:3a:75:0b: 5a:f7:d3:4d:cb:50:28:89:fa:4f:15:49:51:9b:a9:86:06:71: 13:2e:4e:94:10:8f:9c:08:98:24:24:d8:a6:e0:a6:7c:9e:8c: 84:56:1a:16:45:94:75:73:2f:de:be:03:65:38:44:b8:ff:f5: c8:fb:5e:4d:8d:aa:53:30:a5:66:f9:cc:e7:8e:58:06:72:6a: 24:f0:fe:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9VjDGd+sm+BkK0szONpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOTk0NjMwZmM3NDU1NmNlNTA4MDI2ODcwOTAxNTQ1ZmI3 YjA0Y2QwHhcNMjUxMjA2MTAwMTE4WhcNMjUxMjA3MTAwMTE4WjAzMTEwLwYDVQQD Eyg5Yjk3MWE5ZWRlODg2MzhiMzEwNGYwMDJmMmNmYmZiNGRhMDc0NzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJab9tKfdzaozqinfAp7aYAsAdYC DyAZMAMKf93uJ/F0JtUF3fHHIgYY+n1abFofke64HvpmWaAnqys7K8vsUxnXMRMx Q5rDYewdFVQfRNcZIfvSVN0oclfX/EiI43JLm7MTqaabrgI+tRVFy03v72XYMaGo EXLExqurTI7SqOXEs8yu//JpDqVtj+mMYGSKEaWNhRsTNyM8N3daoixlfcWi2vKK KjMNp9qr3lszzStKKSNsfD3Z6s1EAmPtr909QlpiSA+qh0uyiHd1gCxFYYyJk+MD EH2canX3XZ/Zg+Dx7waTjPZnCXfR/8VM+ozCUeq0YowBj4l7PffVHBERrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuXGp7eiGOLMQTwAvLPv7TaB0dxMB8GA1UdIwQY MBaAFP+ZRjD8dFVs5QgCaHCQFUX7ewTNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzVsR01QeDBWV3psQ0FKb2NKQVZSZnQ3Qk0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9kYjU2NTEtOTVmMS00N2MxLWFjZjAt ZWFmY2E1ODU0MjU3LzEvXzVsR01QeDBWV3psQ0FKb2NKQVZSZnQ3Qk0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9kYjU2NTEtOTVmMS00N2MxLWFjZjAtZWFmY2E1ODU0MjU3 LzEvXzVsR01QeDBWV3psQ0FKb2NKQVZSZnQ3Qk0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzIbTAuI 1uWNwn9fRguTdc05d9WjGHJyU5KCPqkFu3ffwfzepenFZkhES50ZUsU1RZ2HZXs9 PC5P9W44VQldKbYy1HgVAOhebeu+OVYuM8fPfv5SaFXcJit8Uwa9U4hClnmovgNg lzC1DEvQh0vJKT+SfQ13nAxnsthbJoKXncFMKDSJza9KbKXgytVeY4c25+c3cUv/ YPG2Q9VYtR8PRRpz/XCPnfS5Q7Z8jHcefBU0OnULWvfTTctQKIn6TxVJUZuphgZx Ey5OlBCPnAiYJCTYpuCmfJ6MhFYaFkWUdXMv3r4DZThEuP/1yPteTY2qUzClZvnM 545YBnJqJPD+Jw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:56:00 2025 by rpki-client