This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft File: 5vOOPoarVh-g3TywmnDWGyykR0A.mft (raw, json) Hash identifier: qu6B8I5pz7LjoXzX9bpACkB3wjg35z9DG3rFTgppBQM= Subject key identifier: AF:DB:3B:F7:9E:FC:C1:BE:90:BB:B2:35:BA:C8:3A:B9:1A:99:26:F7 Authority key identifier: E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40 Certificate issuer: /CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740 Certificate serial: 019AF3898C41AAD9047AA8C4679D06A9CB87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft Manifest number: 0508 Signing time: Sat 06 Dec 2025 12:01:09 +0000 Manifest this update: Sat 06 Dec 2025 12:01:09 +0000 Manifest next update: Sun 07 Dec 2025 12:01:09 +0000 Files and hashes: 1: 5vOOPoarVh-g3TywmnDWGyykR0A.crl (hash: J9HycJE1NeZsOn+GZjgIkGn+1qQSrktO8jIHCqmvvOg=) 2: l3aNToPytPwYHgxWfH_Fxe7l9-8.roa (hash: rud0x/u1K9V6C61gkvZO4dPUmEXcZ8EJf2+cgfvlR5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:8c:41:aa:d9:04:7a:a8:c4:67:9d:06:a9:cb:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740 Validity Not Before: Dec 6 12:01:09 2025 GMT Not After : Dec 7 12:01:09 2025 GMT Subject: CN=afdb3bf79efcc1be90bbb235bac83ab91a9926f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d6:cd:8b:03:97:b0:84:e2:53:07:ef:7f:db: 27:79:38:06:08:a2:f5:43:b0:c4:88:d6:72:ba:41: 87:00:fc:07:a1:74:c5:f9:3a:5c:c8:67:89:d6:b8: 23:fc:02:3d:c5:50:e8:3e:9f:32:1f:e5:f0:d0:2f: 41:46:a3:48:cf:97:97:0d:f3:f6:5a:53:38:fd:88: 4a:22:e3:91:b0:1b:78:5e:58:f3:56:10:59:fc:9b: 59:6f:03:36:9a:71:10:9d:26:94:4b:f1:e1:25:c1: 8a:15:d7:e1:5c:31:9d:be:c3:c0:d1:20:50:27:d0: 22:f7:8b:11:04:89:45:b1:00:70:03:76:bf:37:96: cf:96:59:7e:48:ee:29:4f:bd:28:76:8a:e7:ae:3c: 23:16:1f:01:cb:6b:7c:0c:81:5a:2d:33:ff:de:b8: 90:b7:b3:ca:6a:85:12:44:90:e2:72:d8:01:3d:2e: 67:c8:6e:d3:27:a4:bb:b1:5f:b9:81:b3:01:bb:58: 10:27:0b:9e:dd:10:71:79:71:ed:e1:ff:7f:30:0d: fd:e7:5e:68:47:49:68:e4:97:d4:fe:3f:64:fe:a0: 38:8c:2c:d0:a3:ff:7d:a8:49:8c:2f:3e:d3:72:bf: b4:04:93:96:cd:2a:a7:12:02:d3:c3:a7:c6:20:a5: af:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DB:3B:F7:9E:FC:C1:BE:90:BB:B2:35:BA:C8:3A:B9:1A:99:26:F7 X509v3 Authority Key Identifier: keyid:E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a2:32:c6:c5:79:3c:fd:de:c7:a4:c4:27:9b:a0:34:b6:d1: 25:30:15:5b:c5:61:a5:8a:95:4f:b4:e6:91:4a:66:15:b7:8e: 4d:fc:7b:ba:7e:16:da:e7:7a:6d:c1:e0:9a:03:d7:af:85:9d: 91:7f:80:59:a5:92:66:3f:2a:d2:de:08:56:11:c1:5d:5a:23: 91:97:17:72:ac:6e:48:68:bd:dc:a3:e0:b3:f5:ad:38:ee:c8: d7:a6:6b:5b:c5:c4:09:79:e5:00:41:f7:52:d3:fd:fe:be:49: 6c:7b:7f:bc:3d:07:81:ca:30:17:99:2f:8a:27:8e:92:f8:d8: 8f:c7:b9:c4:43:ee:45:1f:58:50:bb:31:6f:63:74:c5:7a:41: ea:cd:c6:e5:2d:0a:3f:43:84:eb:89:bc:7a:64:0d:d4:57:9f: a7:f8:af:21:3d:fa:38:c7:98:4e:e7:09:6a:fc:3c:61:a1:b1: 25:8c:e5:35:ed:32:0d:97:53:72:ff:e1:07:6a:7a:d1:3b:a2: 09:e4:3a:33:3f:a9:84:6a:34:0d:a6:1f:a3:38:01:1c:17:0b: ae:28:3a:82:80:3d:28:b2:86:ea:ac:ab:22:73:db:f7:c5:41: 8d:97:47:fb:5d:58:f9:9a:42:a4:5d:f8:24:c8:b6:cb:b4:58: 37:df:84:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziYxBqtkEeqjEZ50GqcuHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZjM4ZTNlODZhYjU2MWZhMGRkM2NiMDlhNzBkNjFiMmNh NDQ3NDAwHhcNMjUxMjA2MTIwMTA5WhcNMjUxMjA3MTIwMTA5WjAzMTEwLwYDVQQD EyhhZmRiM2JmNzllZmNjMWJlOTBiYmIyMzViYWM4M2FiOTFhOTkyNmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39bNiwOXsITiUwfvf9sneTgGCKL1 Q7DEiNZyukGHAPwHoXTF+TpcyGeJ1rgj/AI9xVDoPp8yH+Xw0C9BRqNIz5eXDfP2 WlM4/YhKIuORsBt4XljzVhBZ/JtZbwM2mnEQnSaUS/HhJcGKFdfhXDGdvsPA0SBQ J9Ai94sRBIlFsQBwA3a/N5bPlll+SO4pT70odornrjwjFh8By2t8DIFaLTP/3riQ t7PKaoUSRJDictgBPS5nyG7TJ6S7sV+5gbMBu1gQJwue3RBxeXHt4f9/MA39515o R0lo5JfU/j9k/qA4jCzQo/99qEmMLz7Tcr+0BJOWzSqnEgLTw6fGIKWvHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/bO/ee/MG+kLuyNbrIOrkamSb3MB8GA1UdIwQY MBaAFObzjj6Gq1YfoN08sJpw1hsspEdAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXZPT1BvYXJWaC1nM1R5d21uRFdHeXlrUjBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjEzOTItMzRmMy00YTYzLTgzYTEt YTA0OTI1OTc1NzU0LzEvNXZPT1BvYXJWaC1nM1R5d21uRFdHeXlrUjBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjEzOTItMzRmMy00YTYzLTgzYTEtYTA0OTI1OTc1NzU0 LzEvNXZPT1BvYXJWaC1nM1R5d21uRFdHeXlrUjBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6IyxsV5 PP3ex6TEJ5ugNLbRJTAVW8VhpYqVT7TmkUpmFbeOTfx7un4W2ud6bcHgmgPXr4Wd kX+AWaWSZj8q0t4IVhHBXVojkZcXcqxuSGi93KPgs/WtOO7I16ZrW8XECXnlAEH3 UtP9/r5JbHt/vD0HgcowF5kviieOkvjYj8e5xEPuRR9YULsxb2N0xXpB6s3G5S0K P0OE64m8emQN1Fefp/ivIT36OMeYTucJavw8YaGxJYzlNe0yDZdTcv/hB2p60Tui CeQ6Mz+phGo0DaYfozgBHBcLrig6goA9KLKG6qyrInPb98VBjZdH+11Y+ZpCpF34 JMi2y7RYN9+EXg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:29:54 2025 by rpki-client