This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft File: 5LEwYQHMnsn86YUoDB2w83wTWjo.mft (raw, json) Hash identifier: SHrJzn9P2qneej+b6s+KveAbdtiiPTUPQDpWlAjhZrs= Subject key identifier: B6:D9:AE:97:3A:42:5B:E6:CB:74:86:92:0B:92:AE:D0:D3:FF:97:03 Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A Certificate issuer: /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a Certificate serial: 019AF68A24D7465A3BF56A936721CC53EEB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft Manifest number: 12A6 Signing time: Sun 07 Dec 2025 02:00:39 +0000 Manifest this update: Sun 07 Dec 2025 02:00:39 +0000 Manifest next update: Mon 08 Dec 2025 02:00:39 +0000 Files and hashes: 1: 5LEwYQHMnsn86YUoDB2w83wTWjo.crl (hash: Tr3baXGbl+u9gKxHte//7GQA3af8xfE+Xx7oFafC4bs=) 2: kI0vHB0itKLKV54MYG6cGrVo0eY.roa (hash: C5TgalX0uC/rPE4DDIN7aoT3cFXmNAi4cZYsmZl5eDw=) 3: u8V02AIoZzOPfjpi5j7wtSWVgSg.roa (hash: 9pvkolnrpZjRfbBA2Q8IhG+FM5X8l0p9e5PvDFmhqmQ=) 4: y-M_EBDyqDFIVawFxida8qjR5Co.roa (hash: OVypj78ZSdDN2W9JmlOfV0llyXCESZchLL8yqQ85v9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:24:d7:46:5a:3b:f5:6a:93:67:21:cc:53:ee:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a Validity Not Before: Dec 7 02:00:39 2025 GMT Not After : Dec 8 02:00:39 2025 GMT Subject: CN=b6d9ae973a425be6cb7486920b92aed0d3ff9703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4f:0e:75:3e:dd:62:45:b7:d4:59:35:3a:d0: da:8e:dd:39:4c:a7:bd:98:c5:6e:39:07:f6:1b:8e: f8:c5:31:a0:47:49:bc:ca:cb:90:17:9f:bf:5d:db: 45:35:df:9f:aa:c3:64:6f:8d:22:9d:7f:2d:23:a1: 34:4f:14:3d:af:1a:ae:ea:e5:a9:28:61:de:6a:02: 63:49:49:90:2e:3c:15:2d:79:54:75:a9:1d:f4:44: 5b:95:66:7f:9f:e0:64:ae:fa:6b:60:b5:98:0b:80: 17:66:0a:18:76:d9:02:28:fb:d9:f5:d0:8d:ca:1b: bc:51:18:89:c4:16:be:b9:3b:56:57:b0:46:c3:a3: af:26:8b:ad:01:69:8c:db:89:f2:c4:83:31:f4:1b: 97:52:6f:a1:43:d8:78:1f:63:89:1c:da:9f:da:8c: a9:7f:6d:84:74:d2:6f:b7:3d:15:33:de:4b:c3:a0: a8:e1:2f:70:26:8e:b6:8d:12:47:68:00:45:32:b5: 9e:14:97:1a:af:17:dc:72:04:35:dc:43:3e:8b:4b: 66:fc:69:ed:b8:3a:d5:e2:ae:c8:ab:c8:5b:a6:29: 5d:2c:d9:24:43:01:e5:c6:29:36:7f:4b:21:9b:7f: 55:ad:a4:5c:82:c1:8b:c5:31:0e:83:88:cf:42:56: a6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D9:AE:97:3A:42:5B:E6:CB:74:86:92:0B:92:AE:D0:D3:FF:97:03 X509v3 Authority Key Identifier: keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:1e:0d:32:46:25:4b:ec:fb:78:88:e4:4a:9c:a6:6b:86:be: 2f:5b:05:b7:70:11:b3:c2:15:e7:d6:a9:ee:a9:bf:2b:be:1d: 60:70:b1:1d:6c:a2:39:02:3e:dc:64:cc:0d:70:60:d6:92:c2: 28:9b:9a:32:3d:6c:2f:2a:58:e4:ea:bf:33:31:0a:e6:68:d5: 88:12:ca:35:2f:2c:b3:c4:bb:d8:54:5a:a1:a0:07:c4:0c:69: cc:00:75:25:51:c2:0a:95:a4:b6:63:a0:a5:eb:14:8e:01:d3: 63:0e:d6:67:c4:05:12:a8:61:97:12:09:90:18:63:25:3d:ef: a3:2f:ad:72:45:7b:1a:12:cc:7c:66:1b:04:b3:c7:a8:88:14: 3a:b5:99:d3:4e:8c:22:f0:60:e9:4a:1f:83:e5:c9:eb:39:58: 32:8a:d8:1c:42:40:64:9a:58:66:c6:7a:6a:90:ad:71:5a:2a: e6:ee:b6:34:6b:c6:52:35:21:8b:c8:44:11:e0:e3:e0:e4:ba: c6:77:0a:fa:61:5e:00:5f:62:12:de:17:65:43:24:3f:a1:dd: 1a:01:61:5d:81:0d:fd:bc:31:ec:d7:06:9f:9a:1c:3a:c6:54: 71:b9:8d:8f:cd:73:29:b9:5e:6f:a4:8c:30:84:3d:c2:ff:6a: ed:a5:78:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2iiTXRlo79WqTZyHMU+6xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YjEzMDYxMDFjYzllYzlmY2U5ODUyODBjMWRiMGYzN2Mx MzVhM2EwHhcNMjUxMjA3MDIwMDM5WhcNMjUxMjA4MDIwMDM5WjAzMTEwLwYDVQQD EyhiNmQ5YWU5NzNhNDI1YmU2Y2I3NDg2OTIwYjkyYWVkMGQzZmY5NzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk08OdT7dYkW31Fk1OtDajt05TKe9 mMVuOQf2G474xTGgR0m8ysuQF5+/XdtFNd+fqsNkb40inX8tI6E0TxQ9rxqu6uWp KGHeagJjSUmQLjwVLXlUdakd9ERblWZ/n+BkrvprYLWYC4AXZgoYdtkCKPvZ9dCN yhu8URiJxBa+uTtWV7BGw6OvJoutAWmM24nyxIMx9BuXUm+hQ9h4H2OJHNqf2oyp f22EdNJvtz0VM95Lw6Co4S9wJo62jRJHaABFMrWeFJcarxfccgQ13EM+i0tm/Gnt uDrV4q7Iq8hbpildLNkkQwHlxik2f0shm39VraRcgsGLxTEOg4jPQlamTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbZrpc6Qlvmy3SGkguSrtDT/5cDMB8GA1UdIwQY MBaAFOSxMGEBzJ7J/OmFKAwdsPN8E1o6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUt ZmE2MzQ4ZjY5NWI1LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUtZmE2MzQ4ZjY5NWI1 LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkh4NMkYl S+z7eIjkSpyma4a+L1sFt3ARs8IV59ap7qm/K74dYHCxHWyiOQI+3GTMDXBg1pLC KJuaMj1sLypY5Oq/MzEK5mjViBLKNS8ss8S72FRaoaAHxAxpzAB1JVHCCpWktmOg pesUjgHTYw7WZ8QFEqhhlxIJkBhjJT3voy+tckV7GhLMfGYbBLPHqIgUOrWZ006M IvBg6Uofg+XJ6zlYMorYHEJAZJpYZsZ6apCtcVoq5u62NGvGUjUhi8hEEeDj4OS6 xncK+mFeAF9iEt4XZUMkP6HdGgFhXYEN/bwx7NcGn5ocOsZUcbmNj81zKbleb6SM MIQ9wv9q7aV4xA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:38 2025 by rpki-client