This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft File: 5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft (raw, json) Hash identifier: z2OM3no82LTr4TFnxXcP5thBEO+MRCnlqz6cTO0CGS0= Subject key identifier: AC:DC:1F:F4:1B:79:63:4D:27:7B:7A:A0:55:BB:A0:FD:D4:2F:EA:E8 Authority key identifier: E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94 Certificate issuer: /CN=e6157528a9cce92518f36bf0a81b7901a650ae94 Certificate serial: 019AF3C001E65E1C74A82A8FC4C493B90561 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft Manifest number: 16F1 Signing time: Sat 06 Dec 2025 13:00:38 +0000 Manifest this update: Sat 06 Dec 2025 13:00:38 +0000 Manifest next update: Sun 07 Dec 2025 13:00:38 +0000 Files and hashes: 1: 5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl (hash: UvPeDBYAb0/QK9PY1p+9nMxGV6mO82qHFsbc7mtqRjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:01:e6:5e:1c:74:a8:2a:8f:c4:c4:93:b9:05:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6157528a9cce92518f36bf0a81b7901a650ae94 Validity Not Before: Dec 6 13:00:38 2025 GMT Not After : Dec 7 13:00:38 2025 GMT Subject: CN=acdc1ff41b79634d277b7aa055bba0fdd42feae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:82:c3:f5:7f:c2:52:ed:58:5e:11:3c:f0: aa:59:f5:0d:63:f5:ae:ca:96:e7:51:1c:81:9a:d6: 94:03:bb:b5:2b:80:df:f7:77:93:df:8b:8f:c6:fb: 6d:56:ea:c2:49:1a:7d:1b:0c:9e:77:bc:46:df:8f: 78:a3:4f:15:b8:87:12:36:9a:00:85:99:40:9a:76: aa:e8:ec:e2:ea:4e:b2:8a:2a:69:d4:2c:32:bb:28: b1:df:71:18:4e:d1:71:6a:42:8d:65:67:f0:63:ca: 91:ff:99:ab:4e:a7:72:af:d6:4a:29:ef:ae:b8:b8: 63:e6:2a:d1:b2:1d:9c:0d:0b:b0:b5:e7:dd:d7:b5: cb:1f:0a:00:42:e7:78:39:6f:64:a2:4e:5a:15:45: 86:fd:47:39:d1:af:19:66:43:44:3d:9f:85:37:10: bb:71:00:fa:1d:32:21:7e:71:0e:c8:29:32:34:3a: 71:d7:0b:31:f7:25:41:4a:6e:02:92:85:54:2d:a2: 13:91:45:a1:c9:46:fa:88:bf:44:17:ff:fd:37:31: 5a:b1:a1:82:4a:61:52:be:bd:39:04:9e:f2:e9:d7: 58:a8:6b:04:86:c8:0b:29:b0:7e:96:5a:e0:a3:e5: c3:ee:7b:04:36:c8:da:b0:42:30:8a:22:1a:71:8e: d3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DC:1F:F4:1B:79:63:4D:27:7B:7A:A0:55:BB:A0:FD:D4:2F:EA:E8 X509v3 Authority Key Identifier: keyid:E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:41:3a:0d:79:80:84:9b:93:88:e5:96:0f:8b:99:22:32:41: cd:fb:2a:fc:cc:37:e2:b3:77:0f:ff:7f:58:cd:82:33:94:b9: a5:17:db:c4:e1:7d:89:c6:f9:e8:ee:02:89:56:c6:43:b4:b3: e3:38:47:4a:b9:a2:1e:f4:0a:5a:3e:17:91:8f:8d:f5:a8:4e: d2:e0:33:51:e3:d7:5b:ab:86:ab:09:a3:53:99:f8:51:fd:f3: af:77:e9:ba:c6:8c:84:bb:ca:6f:b2:88:bb:49:4f:99:b9:13: 38:b6:40:fa:3a:f8:a3:22:7a:b4:23:a8:4b:97:b5:bf:69:a0: 6e:db:3c:32:04:bd:c0:ba:a1:2e:5b:80:dd:04:14:fc:fd:9c: 70:84:e3:fa:52:07:8c:19:94:96:31:38:b2:aa:a9:2f:f9:8e: b0:d2:c1:ce:a2:c6:d8:ad:35:44:9e:48:4d:f5:43:1b:f0:74: f8:5c:45:3a:f4:79:8f:a9:fb:a5:36:4e:69:ae:08:66:8b:3d: 23:ee:74:b0:98:15:7d:72:00:a0:f3:48:90:71:cb:63:26:98: 4a:a4:89:0d:1e:bd:c8:01:ab:a1:32:72:7f:3f:f3:1f:6e:02: 97:29:b2:00:ef:b2:ff:7b:22:98:1e:d5:c7:54:38:a9:5c:bc: ca:fa:ad:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwAHmXhx0qCqPxMSTuQVhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MTU3NTI4YTljY2U5MjUxOGYzNmJmMGE4MWI3OTAxYTY1 MGFlOTQwHhcNMjUxMjA2MTMwMDM4WhcNMjUxMjA3MTMwMDM4WjAzMTEwLwYDVQQD EyhhY2RjMWZmNDFiNzk2MzRkMjc3YjdhYTA1NWJiYTBmZGQ0MmZlYWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGGCw/V/wlLtWF4RPPCqWfUNY/Wu ypbnURyBmtaUA7u1K4Df93eT34uPxvttVurCSRp9Gwyed7xG3494o08VuIcSNpoA hZlAmnaq6Ozi6k6yiipp1Cwyuyix33EYTtFxakKNZWfwY8qR/5mrTqdyr9ZKKe+u uLhj5irRsh2cDQuwtefd17XLHwoAQud4OW9kok5aFUWG/Uc50a8ZZkNEPZ+FNxC7 cQD6HTIhfnEOyCkyNDpx1wsx9yVBSm4CkoVULaITkUWhyUb6iL9EF//9NzFasaGC SmFSvr05BJ7y6ddYqGsEhsgLKbB+llrgo+XD7nsENsjasEIwiiIacY7TkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzcH/QbeWNNJ3t6oFW7oP3UL+roMB8GA1UdIwQY MBaAFOYVdSipzOklGPNr8KgbeQGmUK6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWhWMUtLbk02U1VZODJ2d3FCdDVBYVpRcnBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lYjg0ODQtODkzZi00MDBkLTkwODEt N2QxYjJkOWEyNDA1LzEvNWhWMUtLbk02U1VZODJ2d3FCdDVBYVpRcnBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9lYjg0ODQtODkzZi00MDBkLTkwODEtN2QxYjJkOWEyNDA1 LzEvNWhWMUtLbk02U1VZODJ2d3FCdDVBYVpRcnBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkE6DXmA hJuTiOWWD4uZIjJBzfsq/Mw34rN3D/9/WM2CM5S5pRfbxOF9icb56O4CiVbGQ7Sz 4zhHSrmiHvQKWj4XkY+N9ahO0uAzUePXW6uGqwmjU5n4Uf3zr3fpusaMhLvKb7KI u0lPmbkTOLZA+jr4oyJ6tCOoS5e1v2mgbts8MgS9wLqhLluA3QQU/P2ccITj+lIH jBmUljE4sqqpL/mOsNLBzqLG2K01RJ5ITfVDG/B0+FxFOvR5j6n7pTZOaa4IZos9 I+50sJgVfXIAoPNIkHHLYyaYSqSJDR69yAGroTJyfz/zH24ClymyAO+y/3simB7V x1Q4qVy8yvqtQA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:57 2025 by rpki-client