This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft File: 5fbO0n_GD5APrBt1HbHuS_eFqrM.mft (raw, json) Hash identifier: H5BKNQURi7kuP8YTKTU2aFEhPzGt1mtSpCmcw8Xg/RQ= Subject key identifier: E2:67:0F:9E:04:81:4C:32:12:AB:78:85:11:13:B9:11:95:29:32:93 Authority key identifier: E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3 Certificate issuer: /CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3 Certificate serial: 019B07B4FF6C0E5FA7D2D6D9075ED6E295F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft Manifest number: 1771 Signing time: Wed 10 Dec 2025 10:01:00 +0000 Manifest this update: Wed 10 Dec 2025 10:01:00 +0000 Manifest next update: Thu 11 Dec 2025 10:01:00 +0000 Files and hashes: 1: 5fbO0n_GD5APrBt1HbHuS_eFqrM.crl (hash: BJPbntgv6HmVBdHbMeYZ34M/BDpOJvbkmoMuxpdnydU=) 2: nBqhUdLMvMF3um2Xd5cemRyaDIY.roa (hash: iNrSMpvfd0IaunQuUuNNAQ8NKO2bkt2NnRjfVSrKAzA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b4:ff:6c:0e:5f:a7:d2:d6:d9:07:5e:d6:e2:95:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3 Validity Not Before: Dec 10 10:01:00 2025 GMT Not After : Dec 11 10:01:00 2025 GMT Subject: CN=e2670f9e04814c3212ab78851113b91195293293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:de:38:34:0c:5c:82:61:49:24:7f:ef:9a:c3: ed:c6:f6:7b:f3:18:e4:21:f7:2a:a4:a0:03:42:a4: d9:cf:88:21:12:da:33:38:f4:c1:20:13:03:ba:02: 6c:13:1c:d3:a7:f4:9f:ea:6b:7b:6b:13:60:80:45: ae:a7:63:f6:e0:0a:66:58:4e:4f:45:44:ae:68:89: f2:c1:62:2b:3e:14:c0:ab:41:00:10:74:a0:24:f2: 14:e1:50:01:23:aa:b7:44:7e:3f:fb:19:83:bf:a0: 9c:a8:92:0d:65:28:2e:e4:1c:61:94:8e:3d:f1:20: 8b:4e:6d:ff:14:29:28:97:89:bb:99:12:04:bd:a4: 8b:1d:da:28:df:06:a7:79:73:69:c9:f2:ea:37:88: a0:f6:e0:7b:3f:5b:8b:64:55:cd:f4:27:58:53:59: 96:53:77:cd:d7:3f:fc:56:e4:7c:f9:cc:93:9a:97: b2:bd:4d:8c:1e:fb:cd:9a:16:2d:3c:a7:c7:ca:12: 76:36:d6:ce:08:6c:7e:c9:1f:32:ba:fe:b2:62:2b: d1:8f:ad:07:4d:01:6e:90:8c:53:7c:37:55:bc:29: c0:f2:98:bf:9a:d8:c4:d0:8d:39:3b:4d:ca:37:d6: 06:d8:10:ba:a0:15:9c:cd:4e:cd:a3:88:7e:7c:1a: c9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:67:0F:9E:04:81:4C:32:12:AB:78:85:11:13:B9:11:95:29:32:93 X509v3 Authority Key Identifier: keyid:E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c4:49:de:32:a6:ad:f1:7b:bd:2b:76:cf:83:27:a3:16:cd: a6:81:02:61:fc:d2:af:70:3c:41:20:30:b7:b9:66:4b:f0:3f: 3d:06:85:5d:43:71:9a:d0:f9:cc:99:01:0a:c9:63:20:a7:96: 9c:f9:ef:fc:0d:a5:f6:35:69:c4:01:1a:22:f0:f5:e3:d1:cf: 03:01:c9:f5:cf:5d:48:41:9f:29:ec:fe:fe:1b:36:a9:5e:f6: a1:f8:45:2b:82:0f:d6:df:3d:51:03:35:ec:a2:68:dc:0b:1e: fa:7d:79:37:ac:b9:ae:59:06:00:8a:f3:92:cf:a1:34:aa:ab: 54:b0:3c:6a:89:f5:66:10:ed:af:be:1f:45:1b:a1:fb:fc:6f: c7:4e:16:6f:81:1e:28:e2:05:c2:b3:6e:eb:18:60:9d:ef:7d: 62:36:3e:a3:c5:92:dc:81:bb:55:ec:4c:51:ed:e1:8b:c8:bc: 4d:1b:2a:7f:6a:cc:aa:34:76:4c:79:15:22:21:45:00:90:01: 53:79:32:43:08:98:00:9e:ca:77:cd:6e:b0:22:c8:5d:70:64: 1f:66:6e:e1:8e:39:c6:fb:19:1f:4b:d9:7d:76:73:fb:41:70: 63:36:f2:f3:d5:84:5c:87:eb:83:28:0f:18:57:f0:54:82:45: b0:74:fa:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtP9sDl+n0tbZB17W4pX3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZjZjZWQyN2ZjNjBmOTAwZmFjMWI3NTFkYjFlZTRiZjc4 NWFhYjMwHhcNMjUxMjEwMTAwMTAwWhcNMjUxMjExMTAwMTAwWjAzMTEwLwYDVQQD EyhlMjY3MGY5ZTA0ODE0YzMyMTJhYjc4ODUxMTEzYjkxMTk1MjkzMjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9N44NAxcgmFJJH/vmsPtxvZ78xjk IfcqpKADQqTZz4ghEtozOPTBIBMDugJsExzTp/Sf6mt7axNggEWup2P24ApmWE5P RUSuaInywWIrPhTAq0EAEHSgJPIU4VABI6q3RH4/+xmDv6CcqJINZSgu5BxhlI49 8SCLTm3/FCkol4m7mRIEvaSLHdoo3waneXNpyfLqN4ig9uB7P1uLZFXN9CdYU1mW U3fN1z/8VuR8+cyTmpeyvU2MHvvNmhYtPKfHyhJ2NtbOCGx+yR8yuv6yYivRj60H TQFukIxTfDdVvCnA8pi/mtjE0I05O03KN9YG2BC6oBWczU7No4h+fBrJKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJnD54EgUwyEqt4hRETuRGVKTKTMB8GA1UdIwQY MBaAFOX2ztJ/xg+QD6wbdR2x7kv3haqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWZiTzBuX0dENUFQckJ0MUhiSHVTX2VGcXJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9mMzlhMTctODM4Ny00ZmJhLTllZDAt M2VhZDc3OTIwNzNjLzEvNWZiTzBuX0dENUFQckJ0MUhiSHVTX2VGcXJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9mMzlhMTctODM4Ny00ZmJhLTllZDAtM2VhZDc3OTIwNzNj LzEvNWZiTzBuX0dENUFQckJ0MUhiSHVTX2VGcXJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8RJ3jKm rfF7vSt2z4MnoxbNpoECYfzSr3A8QSAwt7lmS/A/PQaFXUNxmtD5zJkBCsljIKeW nPnv/A2l9jVpxAEaIvD149HPAwHJ9c9dSEGfKez+/hs2qV72ofhFK4IP1t89UQM1 7KJo3Ase+n15N6y5rlkGAIrzks+hNKqrVLA8aon1ZhDtr74fRRuh+/xvx04Wb4Ee KOIFwrNu6xhgne99YjY+o8WS3IG7VexMUe3hi8i8TRsqf2rMqjR2THkVIiFFAJAB U3kyQwiYAJ7Kd81usCLIXXBkH2Zu4Y45xvsZH0vZfXZz+0FwYzby89WEXIfrgygP GFfwVIJFsHT61w== -----END CERTIFICATE-----Generated at Wed Dec 10 17:45:04 2025 by rpki-client