This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft File: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft (raw, json) Hash identifier: b02+G3AF6m0Bbyi8w8S8fpgmcINOqvpaXj0NcTyUkdc= Subject key identifier: 2A:00:92:9D:2D:E3:7F:F5:0A:AD:32:C9:D1:D7:37:47:4F:1A:51:DA Authority key identifier: E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9 Certificate issuer: /CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9 Certificate serial: 019AF31B68A7D710E15C532DEFB354311E10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft Manifest number: 0546 Signing time: Sat 06 Dec 2025 10:00:51 +0000 Manifest this update: Sat 06 Dec 2025 10:00:51 +0000 Manifest next update: Sun 07 Dec 2025 10:00:51 +0000 Files and hashes: 1: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl (hash: xvPjLEeBCOiSBc8ySC5trLBWbsESxWaPyNRhzKmIPHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:68:a7:d7:10:e1:5c:53:2d:ef:b3:54:31:1e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9 Validity Not Before: Dec 6 10:00:51 2025 GMT Not After : Dec 7 10:00:51 2025 GMT Subject: CN=2a00929d2de37ff50aad32c9d1d737474f1a51da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:73:be:65:a3:41:68:25:36:b5:b6:3c:16:a2: a1:a0:20:3d:be:65:08:14:20:e6:cb:1b:64:3c:18: fe:98:0f:d3:f9:9d:53:95:92:d0:b5:ea:16:6a:c2: 9c:41:e2:e3:d6:f2:40:61:2d:61:e6:46:b8:49:36: 9f:9b:23:a1:be:9d:b0:28:62:31:9e:45:c1:f3:4f: 69:cb:66:22:0f:4f:ad:8b:75:ee:ce:fd:bf:a1:92: 4c:f3:d1:62:f8:52:71:9e:dd:ff:3f:45:c0:27:1c: 8b:17:6d:27:71:ec:ed:5c:1e:27:b5:9e:17:e1:84: b6:c7:58:39:d0:4e:4e:7b:66:cd:83:9f:ff:94:14: a0:29:64:d9:d9:4a:81:fd:85:3f:ff:d7:c5:c8:17: 1e:85:ca:90:d2:54:8d:35:78:e5:81:2a:74:34:c1: b5:13:c0:c8:92:4b:13:cd:54:a6:d9:43:2d:37:2b: fa:72:8d:63:12:7e:d2:86:b3:f3:3f:38:d5:5b:6c: d4:03:c4:a8:98:44:23:46:fc:0c:d3:57:c0:8a:b6: bb:f2:56:5b:44:2c:37:7b:d8:a6:d6:bc:e7:11:f4: 43:e4:2d:bd:a6:d6:ca:20:a9:e6:37:f7:06:d2:a7: a6:2e:5f:c2:9b:2b:e4:83:d6:8e:fc:4b:1f:97:9b: 4b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:00:92:9D:2D:E3:7F:F5:0A:AD:32:C9:D1:D7:37:47:4F:1A:51:DA X509v3 Authority Key Identifier: keyid:E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:c8:c0:0f:a9:db:3e:99:85:f5:81:0b:94:4d:ab:31:2c:71: bc:ac:ca:bf:c6:1e:3c:91:ca:58:07:74:16:c1:d5:6a:82:0a: 78:74:b3:7f:17:9c:f6:58:35:70:22:99:40:f3:25:9f:78:12: 55:0f:98:5f:bc:ea:e9:e5:a9:b5:6f:28:95:f8:21:bf:67:e3: 1b:a6:83:54:81:7b:12:fa:72:89:db:fd:7c:ca:c4:95:8b:29: 05:b5:41:9f:08:48:ae:4d:3c:67:52:37:49:57:68:ac:e5:3b: 84:cd:a3:18:8a:75:ef:24:b0:e5:9b:13:2c:29:88:9c:e5:d3: 8d:fe:1b:cf:ee:6e:6f:5b:11:1c:75:2f:87:0a:01:ae:f5:27: 90:11:88:ab:0b:65:19:c8:e8:0a:bd:86:69:64:56:17:9e:1d: 9b:df:7a:49:cb:eb:c1:3f:b3:20:ec:45:80:9b:c7:9f:29:6f: a4:04:a6:18:06:5e:fc:c7:57:60:f3:cc:d5:37:13:85:da:30: f1:76:56:a2:75:90:eb:fc:d0:b7:49:c1:95:e6:ce:d9:3d:fc: 2a:ce:59:f6:8b:80:41:c0:51:23:78:59:2a:19:4d:f5:2e:eb: 1f:3b:b3:6a:cc:a7:7c:da:9d:64:1f:d8:6b:9a:90:e0:7a:de: de:13:88:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2in1xDhXFMt77NUMR4QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MThjZGRjMzlkMzQ3NTYzYzZkYzFlNWVjNWU1OTYyMWU0 MGU0ZDkwHhcNMjUxMjA2MTAwMDUxWhcNMjUxMjA3MTAwMDUxWjAzMTEwLwYDVQQD EygyYTAwOTI5ZDJkZTM3ZmY1MGFhZDMyYzlkMWQ3Mzc0NzRmMWE1MWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHO+ZaNBaCU2tbY8FqKhoCA9vmUI FCDmyxtkPBj+mA/T+Z1TlZLQteoWasKcQeLj1vJAYS1h5ka4STafmyOhvp2wKGIx nkXB809py2YiD0+ti3Xuzv2/oZJM89Fi+FJxnt3/P0XAJxyLF20nceztXB4ntZ4X 4YS2x1g50E5Oe2bNg5//lBSgKWTZ2UqB/YU//9fFyBcehcqQ0lSNNXjlgSp0NMG1 E8DIkksTzVSm2UMtNyv6co1jEn7ShrPzPzjVW2zUA8SomEQjRvwM01fAira78lZb RCw3e9im1rznEfRD5C29ptbKIKnmN/cG0qemLl/Cmyvkg9aO/Esfl5tLBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoAkp0t43/1Cq0yydHXN0dPGlHaMB8GA1UdIwQY MBaAFOQYzdw500dWPG3B5exeWWIeQOTZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUJqTjNEblRSMVk4YmNIbDdGNVpZaDVBNU5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zZWVkMjgtMjMwYy00YjlmLTkwNGMt Nzc3ZTZjYTRlZmY2LzEvNUJqTjNEblRSMVk4YmNIbDdGNVpZaDVBNU5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zZWVkMjgtMjMwYy00YjlmLTkwNGMtNzc3ZTZjYTRlZmY2 LzEvNUJqTjNEblRSMVk4YmNIbDdGNVpZaDVBNU5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacjAD6nb PpmF9YELlE2rMSxxvKzKv8YePJHKWAd0FsHVaoIKeHSzfxec9lg1cCKZQPMln3gS VQ+YX7zq6eWptW8olfghv2fjG6aDVIF7Evpyidv9fMrElYspBbVBnwhIrk08Z1I3 SVdorOU7hM2jGIp17ySw5ZsTLCmInOXTjf4bz+5ub1sRHHUvhwoBrvUnkBGIqwtl GcjoCr2GaWRWF54dm996ScvrwT+zIOxFgJvHnylvpASmGAZe/MdXYPPM1TcThdow 8XZWonWQ6/zQt0nBlebO2T38Ks5Z9ouAQcBRI3hZKhlN9S7rHzuzasynfNqdZB/Y a5qQ4Hre3hOIHw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:30:29 2025 by rpki-client