This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft File: 5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft (raw, json) Hash identifier: VzXMZrIMUMeHR8k7onNjYoPcIdrbgGUZ0RPYop6f8vs= Subject key identifier: 40:82:9C:0F:67:0C:C0:9C:F4:63:22:AF:11:4D:B2:2E:92:8C:55:82 Authority key identifier: E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD Certificate issuer: /CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad Certificate serial: 019AF12E00E140B24680BDE2F571781A2674 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 01:01:55 +0000 Manifest this update: Sat 06 Dec 2025 01:01:55 +0000 Manifest next update: Sun 07 Dec 2025 01:01:55 +0000 Files and hashes: 1: 2OeHcKfmsEyG-2LRs0NWXFV5C60.roa (hash: jZteFmx9inEQsnxXi9EJKFlZraBJ0Xs80P+ZZvDXyxY=) 2: 5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl (hash: OCqHb62Rv1gSJemSYw1Zh0hcLSzI4VdewhY0zlVeoBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:00:e1:40:b2:46:80:bd:e2:f5:71:78:1a:26:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad Validity Not Before: Dec 6 01:01:55 2025 GMT Not After : Dec 7 01:01:55 2025 GMT Subject: CN=40829c0f670cc09cf46322af114db22e928c5582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:00:4a:5a:2b:68:e8:06:61:b9:79:71:32:e5: 94:a1:e6:68:6b:b2:fc:bf:0c:ed:90:9b:af:75:98: 2b:3e:36:8a:3e:e3:8f:d6:25:e5:52:7e:ef:ae:e1: e5:df:66:e0:94:06:8f:9b:f1:4b:d3:95:42:04:2c: 71:f6:6b:bb:be:c7:6d:75:55:c7:4d:ef:2e:a7:fe: e5:14:a6:6e:04:f0:2d:ae:6f:dd:c7:78:ca:69:20: 13:fc:68:49:0e:e6:e7:23:02:99:e1:81:1c:6f:7e: fb:54:d9:f4:6d:af:25:83:ec:75:b9:69:a9:bc:5b: 33:5a:88:21:be:44:dc:03:8c:26:71:8b:28:47:2d: 49:fd:38:8c:1f:a7:55:95:89:e1:0b:76:e9:a3:86: b7:20:73:0e:68:67:3a:e5:3c:93:10:32:52:29:81: a7:8b:f9:94:19:33:d5:e9:31:0e:f2:bd:57:1f:f3: 7d:c6:f0:2a:59:60:9f:a9:a5:1d:65:db:30:08:45: 34:65:9f:93:37:ca:fa:7d:58:85:b3:f6:89:dc:0b: 49:a0:ac:4a:66:ff:5e:a8:ed:f6:22:99:cb:55:81: 22:09:7e:8a:5e:b5:bc:f4:18:4f:ac:2e:3d:6f:aa: 6e:1b:24:f0:a0:20:95:10:23:6f:fe:99:58:d4:49: c7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:82:9C:0F:67:0C:C0:9C:F4:63:22:AF:11:4D:B2:2E:92:8C:55:82 X509v3 Authority Key Identifier: keyid:E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f3:98:7a:d2:a2:92:27:eb:43:30:41:d6:f0:9c:85:1d:f5: 02:3d:fa:4a:fb:63:96:bf:25:fd:c4:f4:cc:59:bd:81:55:85: e7:7d:7b:64:09:b0:16:00:8b:1c:05:af:a6:cf:d2:1d:f5:89: 7c:6d:b4:e5:16:a7:37:12:32:0f:4d:76:9d:98:8d:72:d5:a0: 03:0c:7e:a7:35:bd:cc:10:c7:a7:37:71:b5:d6:68:7b:a9:f5: f4:d4:45:d0:74:b6:99:50:26:03:78:e1:03:8e:21:4f:ed:df: b1:34:a1:2c:22:5a:c2:6c:c8:a9:c2:1f:67:5f:04:3a:3d:5c: df:40:c8:2b:3e:ee:22:d3:dc:d4:7f:2e:a1:f0:7d:61:63:75: ce:c9:28:3b:e1:65:cd:d7:c2:55:9f:7a:ea:f3:35:94:f4:b4: e9:89:98:3f:a5:ca:aa:60:3f:7b:9d:28:04:4c:04:0b:4f:1a: 50:5f:71:35:fe:3a:74:f1:0f:e8:7e:30:cd:38:5f:b7:86:07: 58:6e:07:03:cb:2e:21:75:be:44:31:ee:3c:55:47:8b:86:a2: 39:a0:0f:86:83:13:04:71:a2:ce:8a:ea:39:d9:e9:21:d4:40: 19:f1:f6:51:b2:77:d8:85:f7:6b:21:61:72:2f:8b:a5:c6:d5: 6f:94:57:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgDhQLJGgL3i9XF4GiZ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NjczZTZkNmUxY2Y2ZjYwMTE1ZTMwNTA4YmUxNWJiYmZl NWVhYWQwHhcNMjUxMjA2MDEwMTU1WhcNMjUxMjA3MDEwMTU1WjAzMTEwLwYDVQQD Eyg0MDgyOWMwZjY3MGNjMDljZjQ2MzIyYWYxMTRkYjIyZTkyOGM1NTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QBKWito6AZhuXlxMuWUoeZoa7L8 vwztkJuvdZgrPjaKPuOP1iXlUn7vruHl32bglAaPm/FL05VCBCxx9mu7vsdtdVXH Te8up/7lFKZuBPAtrm/dx3jKaSAT/GhJDubnIwKZ4YEcb377VNn0ba8lg+x1uWmp vFszWoghvkTcA4wmcYsoRy1J/TiMH6dVlYnhC3bpo4a3IHMOaGc65TyTEDJSKYGn i/mUGTPV6TEO8r1XH/N9xvAqWWCfqaUdZdswCEU0ZZ+TN8r6fViFs/aJ3AtJoKxK Zv9eqO32IpnLVYEiCX6KXrW89BhPrC49b6puGyTwoCCVECNv/plY1EnHxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECCnA9nDMCc9GMirxFNsi6SjFWCMB8GA1UdIwQY MBaAFORnPm1uHPb2ARXjBQi+Fbu/5eqtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUdjLWJXNGM5dllCRmVNRkNMNFZ1N19sNnEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xYjUzMDEtZTgwNy00Nzk1LWI5OGMt YzE1OTRmNjA5NjhlLzEvNUdjLWJXNGM5dllCRmVNRkNMNFZ1N19sNnEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8xYjUzMDEtZTgwNy00Nzk1LWI5OGMtYzE1OTRmNjA5Njhl LzEvNUdjLWJXNGM5dllCRmVNRkNMNFZ1N19sNnEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/OYetKi kifrQzBB1vCchR31Aj36Svtjlr8l/cT0zFm9gVWF5317ZAmwFgCLHAWvps/SHfWJ fG205RanNxIyD012nZiNctWgAwx+pzW9zBDHpzdxtdZoe6n19NRF0HS2mVAmA3jh A44hT+3fsTShLCJawmzIqcIfZ18EOj1c30DIKz7uItPc1H8uofB9YWN1zskoO+Fl zdfCVZ966vM1lPS06YmYP6XKqmA/e50oBEwEC08aUF9xNf46dPEP6H4wzThft4YH WG4HA8suIXW+RDHuPFVHi4aiOaAPhoMTBHGizorqOdnpIdRAGfH2UbJ32IX3ayFh ci+LpcbVb5RX/w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:56:14 2025 by rpki-client