This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft File: 5XXe8Yp160XEQHcaziRsUOip0xY.mft (raw, json) Hash identifier: Zw/JkDHcmaLowCUSE25FwaczRHXir/ewjO1zgR6uVsE= Subject key identifier: C6:A1:AB:E7:5E:CA:75:E2:5C:40:80:10:BF:60:B3:8B:5F:99:B5:36 Authority key identifier: E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16 Certificate issuer: /CN=e575def18a75eb45c440771ace246c50e8a9d316 Certificate serial: 019AF240368FA1809EFEE9AA28A9CC8E377D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft Manifest number: 0A6B Signing time: Sat 06 Dec 2025 06:01:25 +0000 Manifest this update: Sat 06 Dec 2025 06:01:25 +0000 Manifest next update: Sun 07 Dec 2025 06:01:25 +0000 Files and hashes: 1: 5XXe8Yp160XEQHcaziRsUOip0xY.crl (hash: 2O6YiIR79ZxsN7Grf2ug1GamWsfCKZmCVQeJv0NZF1o=) 2: OSfCvRDn5rwH2xpcMtEUP0sV1D0.roa (hash: YJd7BM/YO/DejIANNT19DgGaGBCVl/athIJy3uYWmVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:36:8f:a1:80:9e:fe:e9:aa:28:a9:cc:8e:37:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e575def18a75eb45c440771ace246c50e8a9d316 Validity Not Before: Dec 6 06:01:25 2025 GMT Not After : Dec 7 06:01:25 2025 GMT Subject: CN=c6a1abe75eca75e25c408010bf60b38b5f99b536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4e:ca:29:72:ab:24:36:74:fb:91:29:1b:a7: 6d:1e:c4:ff:9b:65:f5:04:65:08:f1:24:2d:b6:01: 6d:87:50:31:c5:df:85:58:40:7c:8f:06:6f:ce:34: 67:cf:7f:f3:22:8d:0a:16:9a:57:99:a7:63:5d:7b: aa:5b:60:ff:91:09:70:bf:c6:3d:58:ca:f4:9a:32: 01:79:ea:e0:c2:5b:48:39:6d:fd:10:d4:96:42:17: c7:8d:a3:03:7c:9f:4e:ba:86:1a:66:a9:9a:96:b1: b5:1c:51:05:52:bf:7c:11:8c:2c:42:6d:a9:6e:be: 0e:1e:fe:0a:c7:41:3a:49:28:03:39:f8:7f:58:cc: 9c:7a:7c:3c:c6:90:3a:dd:0b:16:e5:77:01:f7:72: 9d:5e:21:c4:25:99:2f:21:24:d8:9c:ad:08:86:71: ab:6d:e1:48:74:ea:15:ae:fe:63:ce:d7:63:35:dc: 96:ef:43:9e:3b:2f:b7:92:fa:e3:0d:2b:e6:28:4e: 96:de:48:6a:c3:8a:b4:86:b1:68:53:f1:1e:d1:72: 36:8b:20:e8:59:d1:b4:48:61:4a:dd:08:53:4c:58: fd:82:af:ac:79:d6:7f:2d:39:d9:25:05:b4:79:7c: cf:d4:ef:f8:1f:1e:95:4f:ef:10:be:ae:5a:ab:e6: 34:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A1:AB:E7:5E:CA:75:E2:5C:40:80:10:BF:60:B3:8B:5F:99:B5:36 X509v3 Authority Key Identifier: keyid:E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b0:70:47:45:4a:5b:8b:8f:00:77:81:47:37:a9:8e:d3:30: af:72:78:72:6c:2c:7d:ba:f9:08:3e:91:60:b3:dd:d8:c0:c7: 76:3d:12:53:e4:74:b3:aa:11:d8:0a:40:c7:48:6c:da:0a:cd: 82:57:22:ef:60:e9:8e:95:ad:8b:da:19:70:08:a7:48:88:21: 18:43:93:03:e5:3b:54:7c:9d:92:22:2a:6a:ed:33:e0:07:e7: 5e:c7:9e:1d:72:dd:9c:59:53:c4:ad:a1:fc:b6:93:4a:9b:80: ca:5c:12:d6:15:ff:5f:42:27:b2:7a:b5:c1:fb:0c:7d:36:80: 39:19:df:9c:07:11:64:94:99:5e:34:08:3a:89:f4:1f:cf:c6: b2:a0:50:59:93:3a:35:25:1c:4b:41:d0:e3:e1:01:fb:e3:bf: 08:21:b7:06:89:57:ee:66:31:aa:da:de:e3:6b:e6:3a:4c:a8: a7:a4:e3:33:ce:08:c7:fe:d2:f6:98:2d:84:23:72:0f:ab:c5: b3:0b:7a:a0:70:36:f7:c6:ed:b7:86:a4:26:5d:e5:f1:91:2d: 5c:3d:31:c7:13:43:28:f5:52:86:4b:be:7e:58:ec:d0:85:ac: b4:58:02:b4:2e:24:c7:73:61:e4:b0:fa:4d:05:fe:35:19:af: b5:62:9f:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQDaPoYCe/umqKKnMjjd9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NzVkZWYxOGE3NWViNDVjNDQwNzcxYWNlMjQ2YzUwZThh OWQzMTYwHhcNMjUxMjA2MDYwMTI1WhcNMjUxMjA3MDYwMTI1WjAzMTEwLwYDVQQD EyhjNmExYWJlNzVlY2E3NWUyNWM0MDgwMTBiZjYwYjM4YjVmOTliNTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE7KKXKrJDZ0+5EpG6dtHsT/m2X1 BGUI8SQttgFth1Axxd+FWEB8jwZvzjRnz3/zIo0KFppXmadjXXuqW2D/kQlwv8Y9 WMr0mjIBeergwltIOW39ENSWQhfHjaMDfJ9OuoYaZqmalrG1HFEFUr98EYwsQm2p br4OHv4Kx0E6SSgDOfh/WMycenw8xpA63QsW5XcB93KdXiHEJZkvISTYnK0IhnGr beFIdOoVrv5jztdjNdyW70OeOy+3kvrjDSvmKE6W3khqw4q0hrFoU/Ee0XI2iyDo WdG0SGFK3QhTTFj9gq+sedZ/LTnZJQW0eXzP1O/4Hx6VT+8Qvq5aq+Y0twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMahq+deynXiXECAEL9gs4tfmbU2MB8GA1UdIwQY MBaAFOV13vGKdetFxEB3Gs4kbFDoqdMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVhYZThZcDE2MFhFUUhjYXppUnNVT2lwMHhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jYTA4OTgtMjk3OS00M2FlLThiODkt ZmI5NzQxMzU5NzI3LzEvNVhYZThZcDE2MFhFUUhjYXppUnNVT2lwMHhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9jYTA4OTgtMjk3OS00M2FlLThiODktZmI5NzQxMzU5NzI3 LzEvNVhYZThZcDE2MFhFUUhjYXppUnNVT2lwMHhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7BwR0VK W4uPAHeBRzepjtMwr3J4cmwsfbr5CD6RYLPd2MDHdj0SU+R0s6oR2ApAx0hs2grN glci72DpjpWti9oZcAinSIghGEOTA+U7VHydkiIqau0z4AfnXseeHXLdnFlTxK2h /LaTSpuAylwS1hX/X0Insnq1wfsMfTaAORnfnAcRZJSZXjQIOon0H8/GsqBQWZM6 NSUcS0HQ4+EB++O/CCG3BolX7mYxqtre42vmOkyop6TjM84Ix/7S9pgthCNyD6vF swt6oHA298btt4akJl3l8ZEtXD0xxxNDKPVShku+fljs0IWstFgCtC4kx3Nh5LD6 TQX+NRmvtWKfvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:43:25 2025 by rpki-client