This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json) Hash identifier: hcBYckH78QwmllXlIH2l4e7E5C0FM5fNxcqaWRPa468= Subject key identifier: 53:8E:62:3A:6D:5B:ED:A7:83:1A:C2:85:3A:C5:A8:4F:5E:EA:F9:26 Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f Certificate serial: 019AF163F811100A69D1A1D97A68D07AEE09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 02:00:51 +0000 Manifest this update: Sat 06 Dec 2025 02:00:51 +0000 Manifest next update: Sun 07 Dec 2025 02:00:51 +0000 Files and hashes: 1: L07o_vv656M9OEJjc4BFj7rpTc8.roa (hash: RSQDee8PToqw8SZNKDk+n8QFVV+DzoM0xmaXuyUh35A=) 2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: qLimjICIuKW8jpAnSEXMaL6tDzQtdOY0NIrIk/gfnjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f8:11:10:0a:69:d1:a1:d9:7a:68:d0:7a:ee:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f Validity Not Before: Dec 6 02:00:51 2025 GMT Not After : Dec 7 02:00:51 2025 GMT Subject: CN=538e623a6d5beda7831ac2853ac5a84f5eeaf926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ed:3e:cb:b0:1a:6a:6a:46:ba:b1:ee:1f:35: 25:bd:cf:88:e6:c9:87:fd:ba:6c:b3:e6:49:5c:95: 29:49:1e:d4:74:04:78:06:9b:98:b9:2f:1f:49:3c: 72:10:d6:71:b7:da:38:6f:64:cb:52:9e:c0:cb:96: 6f:ff:fd:b7:02:63:2e:42:10:4b:2e:9a:65:87:22: 96:41:a6:00:dc:45:03:86:68:df:c5:26:6f:5f:d1: 03:e1:3b:1a:db:b1:05:5e:b1:ae:48:bf:c0:61:19: 63:96:be:73:98:e0:30:93:de:58:55:98:b3:31:0b: 31:a6:71:08:0c:37:e8:77:23:c7:5b:ea:88:37:5d: 7a:84:8a:01:6f:cf:9c:bd:1d:13:f4:16:ff:74:29: 9c:55:db:81:b2:b2:58:56:f3:84:d7:aa:7b:a6:e8: 3c:94:0b:8c:d4:e5:2d:0f:b0:91:dc:1d:9a:66:05: 89:6a:e3:f1:7f:6f:c8:6a:35:49:79:23:dd:74:26: f2:5c:2f:ce:4f:01:54:f1:5c:fc:af:a9:9f:c9:a7: 3c:b1:c3:b8:8c:c6:d8:68:ae:26:f4:a5:4d:f3:98: b4:c7:aa:ee:84:c7:dc:cc:8f:13:29:d4:30:4a:bf: f4:3a:bc:7e:22:54:10:be:a6:ee:39:d3:dc:4a:f1: 0b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:8E:62:3A:6D:5B:ED:A7:83:1A:C2:85:3A:C5:A8:4F:5E:EA:F9:26 X509v3 Authority Key Identifier: keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:8b:7d:19:9f:2c:af:e8:93:76:3b:80:ff:13:c8:09:77:f4: 75:0a:3b:f7:15:d4:9c:f1:9d:df:98:9d:d1:a7:a9:8e:10:c7: b2:a6:17:5b:8d:a3:ba:e0:41:5d:b9:df:c5:c8:81:ba:bb:f9: 1f:b9:d4:e5:c6:44:cc:ee:97:31:97:20:f2:6a:ae:22:57:54: 13:e0:fb:35:4b:7d:08:5e:b1:97:11:81:24:c6:1e:5f:6a:f3: 62:17:e2:9a:83:49:f1:f4:5c:3b:d1:3a:b3:af:89:c2:f5:ee: 7d:26:75:80:f5:77:fb:cb:25:bf:bb:ec:0f:26:70:90:c2:a9: 7d:08:e8:1b:e8:ce:d0:33:23:df:bf:05:dd:75:07:ac:a1:29: 77:c8:49:55:d6:e8:46:9a:78:bb:aa:dc:5a:64:f8:39:03:7a: 73:37:b5:23:3f:f2:5a:20:55:6e:51:26:49:ad:46:e0:5f:3c: fe:b0:3a:f6:09:62:8f:87:95:6a:d7:a5:9e:e2:92:1f:e1:b2: aa:7e:32:43:3a:3a:90:27:58:1b:22:eb:9a:01:15:21:a4:ec: bc:01:51:bf:a9:17:62:db:60:8e:2c:71:63:74:5b:db:3c:f5: d4:f3:b9:a1:69:71:48:7c:33:87:03:7c:d2:d5:73:29:7e:80: 11:af:8f:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/gREApp0aHZemjQeu4JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzOTBlMTA0MmJhZGQ4OGU5NmU2MzllYWEwYWQwMjMyODdl YTUwN2YwHhcNMjUxMjA2MDIwMDUxWhcNMjUxMjA3MDIwMDUxWjAzMTEwLwYDVQQD Eyg1MzhlNjIzYTZkNWJlZGE3ODMxYWMyODUzYWM1YTg0ZjVlZWFmOTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9u0+y7AaampGurHuHzUlvc+I5smH /bpss+ZJXJUpSR7UdAR4BpuYuS8fSTxyENZxt9o4b2TLUp7Ay5Zv//23AmMuQhBL LpplhyKWQaYA3EUDhmjfxSZvX9ED4Tsa27EFXrGuSL/AYRljlr5zmOAwk95YVZiz MQsxpnEIDDfodyPHW+qIN116hIoBb8+cvR0T9Bb/dCmcVduBsrJYVvOE16p7pug8 lAuM1OUtD7CR3B2aZgWJauPxf2/IajVJeSPddCbyXC/OTwFU8Vz8r6mfyac8scO4 jMbYaK4m9KVN85i0x6ruhMfczI8TKdQwSr/0Orx+IlQQvqbuOdPcSvEL1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOOYjptW+2ngxrChTrFqE9e6vkmMB8GA1UdIwQY MBaAFIOQ4QQrrdiOluY56qCtAjKH6lB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kODA4YzUtNDA2NC00ZThjLTg3NjYt NDlmYTU4ZmVkZmYzLzEvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kODA4YzUtNDA2NC00ZThjLTg3NjYtNDlmYTU4ZmVkZmYz LzEvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1Yt9GZ8s r+iTdjuA/xPICXf0dQo79xXUnPGd35id0aepjhDHsqYXW42juuBBXbnfxciBurv5 H7nU5cZEzO6XMZcg8mquIldUE+D7NUt9CF6xlxGBJMYeX2rzYhfimoNJ8fRcO9E6 s6+JwvXufSZ1gPV3+8slv7vsDyZwkMKpfQjoG+jO0DMj378F3XUHrKEpd8hJVdbo Rpp4u6rcWmT4OQN6cze1Iz/yWiBVblEmSa1G4F88/rA69glij4eVatelnuKSH+Gy qn4yQzo6kCdYGyLrmgEVIaTsvAFRv6kXYttgjixxY3Rb2zz11PO5oWlxSHwzhwN8 0tVzKX6AEa+Pqg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:17 2025 by rpki-client