This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft File: 5dasEgU_FIaz3nfxyHC1a538ORM.mft (raw, json) Hash identifier: /G1lEYOxECCztK8IeMgOYWRqlcVihX/rl1kkl+Ahg98= Subject key identifier: C2:18:D5:E9:7A:32:41:51:99:88:7B:B7:6B:DC:A8:34:3C:A3:8B:35 Authority key identifier: E5:D6:AC:12:05:3F:14:86:B3:DE:77:F1:C8:70:B5:6B:9D:FC:39:13 Certificate issuer: /CN=e5d6ac12053f1486b3de77f1c870b56b9dfc3913 Certificate serial: 019AF12E697FB519C272D48779FFF13229A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dasEgU_FIaz3nfxyHC1a538ORM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:02:21 +0000 Manifest this update: Sat 06 Dec 2025 01:02:21 +0000 Manifest next update: Sun 07 Dec 2025 01:02:21 +0000 Files and hashes: 1: 5dasEgU_FIaz3nfxyHC1a538ORM.crl (hash: mb4m0J0A1KD4mfW3FoK/BNiWWtGfCWfuPXIomaJ8fYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft rsync://rpki.ripe.net/repository/DEFAULT/5dasEgU_FIaz3nfxyHC1a538ORM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:69:7f:b5:19:c2:72:d4:87:79:ff:f1:32:29:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5d6ac12053f1486b3de77f1c870b56b9dfc3913 Validity Not Before: Dec 6 01:02:21 2025 GMT Not After : Dec 7 01:02:21 2025 GMT Subject: CN=c218d5e97a32415199887bb76bdca8343ca38b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:42:5d:fd:f7:af:08:22:4c:d9:87:43:d0:fc: 2e:96:d0:90:e5:27:e8:35:49:ea:34:91:36:0b:82: d4:d4:a1:59:fe:50:2a:37:a6:ec:13:c3:95:3e:85: fe:33:52:46:c2:95:c7:20:29:ae:0a:3b:ee:5b:b0: ee:be:ea:32:2e:b3:78:32:22:9e:f7:82:2b:0f:fb: 6e:f3:71:44:3a:e1:ca:54:b7:ef:42:f0:51:68:19: 05:81:45:78:70:f5:12:76:3a:8c:2c:37:8e:e9:93: 24:7f:4e:1c:8b:1c:04:a9:ab:c6:3b:6e:0a:f8:36: 93:be:97:0a:f7:02:62:53:25:ec:a0:8f:f4:b9:8d: 96:2e:6c:0d:9d:df:75:05:7b:39:fd:20:fb:32:25: 0b:83:79:fa:1e:24:f5:65:7d:50:50:47:c1:62:2a: 2b:2c:d1:de:f3:93:3e:11:f5:3f:44:d9:f7:60:3d: 77:5f:d7:4e:8a:56:3a:e4:be:7b:dc:f0:a0:83:f4: eb:89:c3:3f:dd:b1:00:61:6e:2a:fb:83:be:a0:25: 50:07:eb:f2:85:f7:c1:09:e0:f1:81:0b:1f:41:57: 69:a4:bb:f2:b9:2c:53:97:e9:62:06:66:1d:7d:15: 8e:e2:c5:6c:10:4a:82:a7:28:b2:d2:fe:02:74:66: bc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:18:D5:E9:7A:32:41:51:99:88:7B:B7:6B:DC:A8:34:3C:A3:8B:35 X509v3 Authority Key Identifier: keyid:E5:D6:AC:12:05:3F:14:86:B3:DE:77:F1:C8:70:B5:6B:9D:FC:39:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dasEgU_FIaz3nfxyHC1a538ORM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:db:38:b6:fe:f7:aa:68:4d:4b:88:a2:9c:39:d7:e0:74:c5: ae:00:e3:ba:07:99:14:fa:4d:0e:64:3e:7c:2a:c3:9a:76:1f: 41:fe:61:3e:d9:5c:a1:74:4e:20:52:e5:a3:9f:77:2f:36:2f: e9:df:06:bc:16:ec:51:21:f0:20:1e:cd:37:cb:b4:ad:90:02: 6c:ec:fb:be:dd:e4:ee:29:04:a9:70:2f:e4:b7:e6:87:9c:1b: 3e:fb:e7:7a:f4:97:d5:6d:81:8b:02:b6:e1:96:2a:a8:bc:11: eb:86:c1:0b:6b:2a:7f:ab:76:1c:35:7f:59:90:b5:f6:11:d9: 08:5e:d0:a4:3c:b8:a0:07:fb:c2:8d:a0:6c:81:81:24:b4:83: 08:94:e4:2f:09:13:4b:9e:40:12:55:0d:d9:cd:06:db:3b:51: d6:82:6c:4e:eb:08:71:0d:2d:69:63:4c:82:64:1b:86:39:6c: ed:a3:b8:9d:70:61:e5:e9:7e:12:6f:0d:e9:c7:d5:52:9b:9f: 15:6b:9d:3d:4a:ea:0e:3d:df:9c:fb:3f:ad:41:9b:20:65:93: 71:51:58:0c:fb:aa:ac:ff:2b:05:07:c0:80:a5:d9:b0:3d:98: c9:7e:9b:e6:35:e6:7d:b8:e3:a5:97:eb:8d:e0:51:5e:93:ef: 1e:d9:4a:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLml/tRnCctSHef/xMimpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZDZhYzEyMDUzZjE0ODZiM2RlNzdmMWM4NzBiNTZiOWRm YzM5MTMwHhcNMjUxMjA2MDEwMjIxWhcNMjUxMjA3MDEwMjIxWjAzMTEwLwYDVQQD EyhjMjE4ZDVlOTdhMzI0MTUxOTk4ODdiYjc2YmRjYTgzNDNjYTM4YjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10Jd/fevCCJM2YdD0PwultCQ5Sfo NUnqNJE2C4LU1KFZ/lAqN6bsE8OVPoX+M1JGwpXHICmuCjvuW7DuvuoyLrN4MiKe 94IrD/tu83FEOuHKVLfvQvBRaBkFgUV4cPUSdjqMLDeO6ZMkf04cixwEqavGO24K +DaTvpcK9wJiUyXsoI/0uY2WLmwNnd91BXs5/SD7MiULg3n6HiT1ZX1QUEfBYior LNHe85M+EfU/RNn3YD13X9dOilY65L573PCgg/TricM/3bEAYW4q+4O+oCVQB+vy hffBCeDxgQsfQVdppLvyuSxTl+liBmYdfRWO4sVsEEqCpyiy0v4CdGa8OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIY1el6MkFRmYh7t2vcqDQ8o4s1MB8GA1UdIwQY MBaAFOXWrBIFPxSGs9538chwtWud/DkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWRhc0VnVV9GSWF6M25meHlIQzFhNTM4T1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lNjJjNGYtNWVlMi00ZmUwLTk1NDAt YjEwM2ZhNDc0M2I5LzEvNWRhc0VnVV9GSWF6M25meHlIQzFhNTM4T1JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9lNjJjNGYtNWVlMi00ZmUwLTk1NDAtYjEwM2ZhNDc0M2I5 LzEvNWRhc0VnVV9GSWF6M25meHlIQzFhNTM4T1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAids4tv73 qmhNS4iinDnX4HTFrgDjugeZFPpNDmQ+fCrDmnYfQf5hPtlcoXROIFLlo593LzYv 6d8GvBbsUSHwIB7NN8u0rZACbOz7vt3k7ikEqXAv5Lfmh5wbPvvnevSX1W2BiwK2 4ZYqqLwR64bBC2sqf6t2HDV/WZC19hHZCF7QpDy4oAf7wo2gbIGBJLSDCJTkLwkT S55AElUN2c0G2ztR1oJsTusIcQ0taWNMgmQbhjls7aO4nXBh5el+Em8N6cfVUpuf FWudPUrqDj3fnPs/rUGbIGWTcVFYDPuqrP8rBQfAgKXZsD2YyX6b5jXmfbjjpZfr jeBRXpPvHtlKgw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:42 2025 by rpki-client