This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft File: 5oS0UXk_YkGGF7yTT16CUT_Daok.mft (raw, json) Hash identifier: tbqMV0Addp7eTwlhgzeS6KHdOYzlFIHEQF7yGb2oDlQ= Subject key identifier: 18:B9:28:66:F7:3A:13:D2:77:23:EB:8C:3E:FE:C5:E6:04:AE:20:5B Authority key identifier: E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89 Certificate issuer: /CN=e684b451793f62418617bc934f5e82513fc36a89 Certificate serial: 019AF23FC0E76DF32C7235CCD297BD9EABAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft Manifest number: 166E Signing time: Sat 06 Dec 2025 06:00:55 +0000 Manifest this update: Sat 06 Dec 2025 06:00:55 +0000 Manifest next update: Sun 07 Dec 2025 06:00:55 +0000 Files and hashes: 1: 5oS0UXk_YkGGF7yTT16CUT_Daok.crl (hash: 8yZj+6b8MwoGnuLoRR+objN5eExeEcXk6k/CyfQ4o98=) 2: VxHZXRxJTRxl_GAJfXRGk4eUbgQ.roa (hash: h1782ABvZxcb8lHBxbC/bEHNiNxIT1YjharjivSSmh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.crl rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c0:e7:6d:f3:2c:72:35:cc:d2:97:bd:9e:ab:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e684b451793f62418617bc934f5e82513fc36a89 Validity Not Before: Dec 6 06:00:55 2025 GMT Not After : Dec 7 06:00:55 2025 GMT Subject: CN=18b92866f73a13d27723eb8c3efec5e604ae205b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2a:50:c9:ff:9d:5c:bb:e7:1c:07:dc:a4:f7: c5:77:14:1b:f4:e1:39:86:27:d7:c5:a1:20:82:c8: 2c:5c:81:47:ef:b0:78:73:91:d9:9b:2c:ec:fe:f8: eb:79:98:91:03:71:6d:c2:94:c2:e8:a5:f7:de:47: d9:12:3a:92:7a:b8:93:1f:0c:7f:d9:3c:3b:99:02: 66:00:0a:71:1d:1e:25:dd:a6:48:1c:04:61:a7:de: 4c:c6:0d:66:12:f6:a4:42:d4:b7:7e:fc:64:0f:8f: 05:45:96:9e:17:ad:06:f7:16:07:07:49:4f:04:ae: 97:2c:f4:35:09:d9:f2:07:e3:a4:e8:d1:ee:39:7e: f8:70:4b:d8:32:96:2b:85:5a:97:63:41:2d:38:b2: bd:17:7a:11:a0:1b:9d:fa:3b:8b:ed:03:77:90:6d: 35:af:8d:87:b9:6a:b1:da:1f:ce:9e:9e:35:2a:81: 94:ad:1b:f7:70:8f:f8:fa:b6:b1:ab:e8:62:93:df: 40:fb:8f:8f:4d:84:89:96:78:c3:f8:69:dc:8e:60: a4:aa:61:8f:32:8c:c0:2d:40:4f:46:b6:45:0f:f8: 96:4d:77:3c:fa:5a:3f:99:2c:30:84:a8:da:00:13: 85:2f:ec:d2:4f:56:c8:6e:fd:09:12:6d:af:b2:f7: 47:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B9:28:66:F7:3A:13:D2:77:23:EB:8C:3E:FE:C5:E6:04:AE:20:5B X509v3 Authority Key Identifier: keyid:E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:bb:fa:f8:b3:e6:1a:9c:ed:eb:0d:43:39:af:36:d3:ba:06: 41:01:f3:c3:4b:fc:6b:ec:7b:f4:d0:4b:0d:21:5b:96:28:a4: 29:0a:fb:02:38:2d:6c:db:70:a2:5f:9c:78:c7:70:25:2a:5c: 9d:e4:cf:5e:19:bf:06:8d:8a:53:22:47:ec:87:74:f8:21:b9: b3:08:ed:a3:e7:fa:70:e3:ed:b2:28:67:3f:3f:b8:94:c9:4d: 28:c2:fa:68:d3:2a:3b:c5:a6:93:25:37:8c:3d:6c:6f:27:5d: a3:0f:fc:2d:f4:33:da:4f:1b:ee:9a:78:c8:6c:46:b0:18:b5: f3:6c:e9:9d:02:f3:e1:a0:29:40:8c:c3:16:c9:e1:18:ee:70: 0d:0c:66:35:14:c8:b6:1e:77:bd:22:7a:c8:bd:b8:b8:d9:18: ce:ba:98:01:29:d7:ab:b3:6a:b0:f8:8e:c6:17:54:74:75:07: 7f:09:3c:06:10:45:89:d7:d8:94:59:73:99:e2:70:62:59:de: 90:01:56:52:f3:b7:30:64:34:8b:de:d9:00:bf:16:1e:12:78: 86:b2:4b:ed:8e:7e:d6:92:ad:dc:32:51:b6:a4:e3:a9:a4:b9: dc:70:17:98:7e:22:40:12:13:84:d1:e0:31:f5:a0:67:68:ba: 1a:2a:41:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8DnbfMscjXM0pe9nquvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ODRiNDUxNzkzZjYyNDE4NjE3YmM5MzRmNWU4MjUxM2Zj MzZhODkwHhcNMjUxMjA2MDYwMDU1WhcNMjUxMjA3MDYwMDU1WjAzMTEwLwYDVQQD EygxOGI5Mjg2NmY3M2ExM2QyNzcyM2ViOGMzZWZlYzVlNjA0YWUyMDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtipQyf+dXLvnHAfcpPfFdxQb9OE5 hifXxaEggsgsXIFH77B4c5HZmyzs/vjreZiRA3FtwpTC6KX33kfZEjqSeriTHwx/ 2Tw7mQJmAApxHR4l3aZIHARhp95Mxg1mEvakQtS3fvxkD48FRZaeF60G9xYHB0lP BK6XLPQ1CdnyB+Ok6NHuOX74cEvYMpYrhVqXY0EtOLK9F3oRoBud+juL7QN3kG01 r42HuWqx2h/Onp41KoGUrRv3cI/4+raxq+hik99A+4+PTYSJlnjD+GncjmCkqmGP MozALUBPRrZFD/iWTXc8+lo/mSwwhKjaABOFL+zST1bIbv0JEm2vsvdHWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBi5KGb3OhPSdyPrjD7+xeYEriBbMB8GA1UdIwQY MBaAFOaEtFF5P2JBhhe8k09eglE/w2qJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW9TMFVYa19Za0dHRjd5VFQxNkNVVF9EYW9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jNTRmMzItMjU4ZS00YmIzLWI4ZDUt NzFiNzA5ZWY1ZjViLzEvNW9TMFVYa19Za0dHRjd5VFQxNkNVVF9EYW9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9jNTRmMzItMjU4ZS00YmIzLWI4ZDUtNzFiNzA5ZWY1ZjVi LzEvNW9TMFVYa19Za0dHRjd5VFQxNkNVVF9EYW9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOrv6+LPm Gpzt6w1DOa8207oGQQHzw0v8a+x79NBLDSFbliikKQr7AjgtbNtwol+ceMdwJSpc neTPXhm/Bo2KUyJH7Id0+CG5swjto+f6cOPtsihnPz+4lMlNKML6aNMqO8WmkyU3 jD1sbyddow/8LfQz2k8b7pp4yGxGsBi182zpnQLz4aApQIzDFsnhGO5wDQxmNRTI th53vSJ6yL24uNkYzrqYASnXq7NqsPiOxhdUdHUHfwk8BhBFidfYlFlzmeJwYlne kAFWUvO3MGQ0i97ZAL8WHhJ4hrJL7Y5+1pKt3DJRtqTjqaS53HAXmH4iQBIThNHg MfWgZ2i6GipBdA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:53 2025 by rpki-client