This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft File: E5YC73YK3ApbekhYPPv5tg_LcTA.mft (raw, json) Hash identifier: ao5ng57Oq2sDTAAfW5C52pdzCA/E9Hy7WfcGa0jVlM8= Subject key identifier: 48:1B:07:00:33:44:DE:DA:C7:07:E1:A3:37:D3:11:E7:22:B1:EC:E4 Authority key identifier: 13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30 Certificate issuer: /CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130 Certificate serial: 019AF49BE63C0644C6EF7D82975F9631E984 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft Manifest number: 0FD6 Signing time: Sat 06 Dec 2025 17:00:48 +0000 Manifest this update: Sat 06 Dec 2025 17:00:48 +0000 Manifest next update: Sun 07 Dec 2025 17:00:48 +0000 Files and hashes: 1: E5YC73YK3ApbekhYPPv5tg_LcTA.crl (hash: lt9GUTLPXTIwTioF4bRHWNi4KxRq5MuHRRhfIFF306g=) 2: p0QXsp4w5wGQ69G08TDsPy1mPRM.roa (hash: viuANp3uqgANQPYvajNcRDfYwh8Tr9E4g9FS/j0tP9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:e6:3c:06:44:c6:ef:7d:82:97:5f:96:31:e9:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130 Validity Not Before: Dec 6 17:00:48 2025 GMT Not After : Dec 7 17:00:48 2025 GMT Subject: CN=481b07003344dedac707e1a337d311e722b1ece4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:66:46:90:9a:18:dd:f9:cc:83:80:6b:bd:c8: c9:77:d1:5f:e7:43:ae:e3:c2:68:64:00:0c:38:30: 78:2a:ab:c4:b7:c5:0d:d2:26:3d:a4:42:cd:e0:04: 90:df:75:c4:1c:b2:c1:81:f9:51:fa:e2:da:b9:7b: 09:59:f0:7d:7d:82:a2:61:d7:45:ea:d2:e8:d1:a6: d2:8c:93:6a:af:4f:ba:ae:45:5b:43:64:00:83:98: af:e7:53:18:49:63:e1:b3:7a:c8:01:6a:3d:05:fa: 3e:e1:f2:1a:48:85:93:a4:e9:e7:f2:b7:e2:82:8d: db:39:ab:dd:6e:00:87:6b:45:b9:43:ce:65:8d:36: 50:80:46:6b:1a:aa:00:09:46:16:95:a7:55:b8:fb: 2f:58:c2:8a:de:9b:cd:7e:64:f3:da:da:2d:1e:cb: b5:72:ef:db:b5:09:4b:ee:b4:db:59:b8:b7:03:37: e1:95:1a:47:42:46:3c:47:2b:34:da:e3:88:db:e2: 36:d4:53:ac:4a:09:98:84:cf:c6:c3:07:f7:14:ab: f2:0e:23:8e:33:a8:2a:d9:83:42:e5:3c:5e:e9:52: fb:f6:ad:b2:2c:55:58:fb:de:d4:c0:86:f2:d9:da: f1:de:7b:ea:e3:a4:6e:5a:39:ae:df:c2:5c:d9:3e: d2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1B:07:00:33:44:DE:DA:C7:07:E1:A3:37:D3:11:E7:22:B1:EC:E4 X509v3 Authority Key Identifier: keyid:13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:aa:17:fc:48:d3:0f:d6:45:5b:f4:eb:5f:d7:c8:d4:0a:a7: 0d:48:1d:de:74:74:d0:5b:fe:81:6e:a8:88:26:a9:92:f1:a5: 1f:c1:af:81:46:00:ca:b4:39:1c:11:f8:aa:8b:00:1a:48:c9: 53:68:f8:5c:b4:44:7b:24:12:3d:85:27:af:b0:8c:6e:f7:aa: ab:ca:df:aa:02:f9:35:14:a4:44:65:94:f6:60:5b:a9:d8:89: 8e:96:cc:62:fb:03:aa:d0:a4:6a:d2:a0:bc:4b:3a:b4:7c:fb: 73:49:e7:e4:d8:30:e2:65:99:87:55:86:27:1a:61:0f:6a:ba: b2:0c:cd:d9:3d:f3:4c:92:1b:db:08:bf:ba:41:4f:d3:1a:89: 12:1c:82:e1:24:b1:5e:ca:b3:5e:79:36:a7:0c:11:7e:7a:50: 64:f3:a6:ae:cb:9d:19:94:78:bb:f1:f8:2c:74:c5:ab:c5:c8: f4:cc:86:92:e4:b2:37:e4:93:ca:b6:91:01:33:c1:ea:52:8d: d0:c8:52:54:d0:22:b3:a1:ca:47:eb:59:a8:be:fa:ed:9c:03: 7d:1a:7c:32:e9:70:15:cc:23:2b:c1:b3:15:ea:94:37:da:90: a9:b7:7a:07:c5:14:a2:52:a1:63:90:36:e9:b3:16:43:26:84: 11:59:cf:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m+Y8BkTG732Cl1+WMemEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzOTYwMmVmNzYwYWRjMGE1YjdhNDg1ODNjZmJmOWI2MGZj YjcxMzAwHhcNMjUxMjA2MTcwMDQ4WhcNMjUxMjA3MTcwMDQ4WjAzMTEwLwYDVQQD Eyg0ODFiMDcwMDMzNDRkZWRhYzcwN2UxYTMzN2QzMTFlNzIyYjFlY2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGZGkJoY3fnMg4BrvcjJd9Ff50Ou 48JoZAAMODB4KqvEt8UN0iY9pELN4ASQ33XEHLLBgflR+uLauXsJWfB9fYKiYddF 6tLo0abSjJNqr0+6rkVbQ2QAg5iv51MYSWPhs3rIAWo9Bfo+4fIaSIWTpOnn8rfi go3bOavdbgCHa0W5Q85ljTZQgEZrGqoACUYWladVuPsvWMKK3pvNfmTz2totHsu1 cu/btQlL7rTbWbi3AzfhlRpHQkY8Rys02uOI2+I21FOsSgmYhM/Gwwf3FKvyDiOO M6gq2YNC5Txe6VL79q2yLFVY+97UwIby2drx3nvq46RuWjmu38Jc2T7SCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgbBwAzRN7axwfhozfTEecisezkMB8GA1UdIwQY MBaAFBOWAu92CtwKW3pIWDz7+bYPy3EwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTVZQzczWUszQXBiZWtoWVBQdjV0Z19MY1RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82NTU4YmMtN2QzYS00ZjZmLWI3M2Et NjJhMzU2MmM3MmJhLzEvRTVZQzczWUszQXBiZWtoWVBQdjV0Z19MY1RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi82NTU4YmMtN2QzYS00ZjZmLWI3M2EtNjJhMzU2MmM3MmJh LzEvRTVZQzczWUszQXBiZWtoWVBQdjV0Z19MY1RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbaoX/EjT D9ZFW/TrX9fI1AqnDUgd3nR00Fv+gW6oiCapkvGlH8GvgUYAyrQ5HBH4qosAGkjJ U2j4XLREeyQSPYUnr7CMbveqq8rfqgL5NRSkRGWU9mBbqdiJjpbMYvsDqtCkatKg vEs6tHz7c0nn5Ngw4mWZh1WGJxphD2q6sgzN2T3zTJIb2wi/ukFP0xqJEhyC4SSx XsqzXnk2pwwRfnpQZPOmrsudGZR4u/H4LHTFq8XI9MyGkuSyN+STyraRATPB6lKN 0MhSVNAis6HKR+tZqL767ZwDfRp8MulwFcwjK8GzFeqUN9qQqbd6B8UUolKhY5A2 6bMWQyaEEVnPJw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:51:39 2025 by rpki-client