This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft File: 5zqmpwU3TttxYIbqzxppeqLwjmE.mft (raw, json) Hash identifier: oUkcJlKH5va3MQkdfVB/8ZkjWNyioI6JF7r3fhqC524= Subject key identifier: BD:DB:DB:F0:60:D1:3B:1D:D0:75:95:3F:F6:CA:85:78:43:81:7D:E9 Authority key identifier: E7:3A:A6:A7:05:37:4E:DB:71:60:86:EA:CF:1A:69:7A:A2:F0:8E:61 Certificate issuer: /CN=e73aa6a705374edb716086eacf1a697aa2f08e61 Certificate serial: 019AF12DB2DFA4FA8B9768D4A980A24E4F05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zqmpwU3TttxYIbqzxppeqLwjmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft Manifest number: 07AF Signing time: Sat 06 Dec 2025 01:01:35 +0000 Manifest this update: Sat 06 Dec 2025 01:01:35 +0000 Manifest next update: Sun 07 Dec 2025 01:01:35 +0000 Files and hashes: 1: 5zqmpwU3TttxYIbqzxppeqLwjmE.crl (hash: 3iAFDqCmKnhnCQQC77IAAzoGPg6I9Tf6+M+3ayVE31g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.crl rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft rsync://rpki.ripe.net/repository/DEFAULT/5zqmpwU3TttxYIbqzxppeqLwjmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:b2:df:a4:fa:8b:97:68:d4:a9:80:a2:4e:4f:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e73aa6a705374edb716086eacf1a697aa2f08e61 Validity Not Before: Dec 6 01:01:35 2025 GMT Not After : Dec 7 01:01:35 2025 GMT Subject: CN=bddbdbf060d13b1dd075953ff6ca857843817de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:09:ee:76:f4:32:f7:cc:7b:e6:d8:8e:3a:17: 28:e3:ce:a4:3b:e1:ca:9d:da:51:cc:e8:a6:fd:dd: a2:aa:53:e4:9a:68:b1:71:e3:67:a3:38:d4:9e:51: 53:57:c8:f9:b4:83:96:8d:54:7b:ba:69:99:65:67: 46:62:46:3d:b9:38:64:f1:c2:d4:19:4e:04:ac:36: 6e:b1:8d:7f:fc:61:31:f0:b7:af:96:3e:b0:2f:f8: 53:79:28:3a:82:06:f5:c1:00:10:61:6c:de:83:a6: 36:d9:10:65:55:cd:9e:49:e2:f7:ea:9f:52:de:0d: 7b:32:36:2b:8c:0c:ad:0c:03:e0:d0:5b:e6:b8:d6: 58:ea:64:b9:39:ce:86:c5:20:d7:b5:cf:99:61:de: 96:af:76:84:f9:8e:ff:98:e1:bd:3f:b9:84:30:9b: a9:7c:7f:01:db:b1:a6:be:26:0a:cf:7b:53:50:77: 1d:99:71:b3:ba:9d:c4:58:f1:cb:0e:b9:9c:3c:1f: 7e:14:76:81:72:8f:4c:5c:2c:46:80:e8:a6:c3:52: b0:12:81:cf:eb:2d:e5:1b:7c:cf:b7:73:34:3b:be: e0:57:2b:c4:10:f2:af:d4:f8:61:63:74:ca:c2:20: 19:fd:4f:ad:da:3d:aa:c5:b9:5d:2a:ea:fa:47:61: d2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DB:DB:F0:60:D1:3B:1D:D0:75:95:3F:F6:CA:85:78:43:81:7D:E9 X509v3 Authority Key Identifier: keyid:E7:3A:A6:A7:05:37:4E:DB:71:60:86:EA:CF:1A:69:7A:A2:F0:8E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqmpwU3TttxYIbqzxppeqLwjmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c5:fd:68:d8:cf:31:9c:5f:c2:46:94:83:f0:34:a5:eb:6c: 9a:ec:5b:30:28:99:69:ec:10:d5:cb:7a:fc:5e:12:e5:4a:3d: 49:54:e9:07:d6:c5:6f:97:66:cb:fd:20:3c:af:54:00:c1:58: 45:d8:23:42:41:b4:fe:55:38:dd:f8:3f:40:90:1a:73:dc:3e: 94:ec:0b:f4:28:3d:5e:26:20:a4:16:7c:c4:06:d3:e9:b0:90: 3b:10:2a:cb:31:37:2a:6b:02:2c:48:b2:c1:ba:1e:0e:6e:c0: ad:41:6f:5a:86:ab:e1:51:18:66:ed:72:64:ad:31:30:13:be: 71:fe:27:fa:64:a9:ac:6c:c3:8e:8c:0a:47:d5:0c:16:71:1a: b0:51:be:f3:0b:25:c7:38:ca:74:35:82:be:e8:f8:50:48:c6: 5d:78:ac:36:27:8f:f2:ab:24:ff:b2:6a:35:ef:36:70:69:0f: 9d:f5:89:23:b5:24:bb:bd:cc:84:f5:dc:73:0f:d0:e4:ff:d6: 2e:eb:f5:24:8e:73:6d:b4:59:57:c0:cb:e5:06:95:88:4b:30: 7c:94:ee:56:21:c0:fa:4a:53:58:bf:21:28:e4:40:fd:88:3e: 20:ab:21:fb:9c:a4:7b:da:cd:6c:22:78:bb:d8:da:e5:aa:3f: 86:c9:da:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbLfpPqLl2jUqYCiTk8FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3M2FhNmE3MDUzNzRlZGI3MTYwODZlYWNmMWE2OTdhYTJm MDhlNjEwHhcNMjUxMjA2MDEwMTM1WhcNMjUxMjA3MDEwMTM1WjAzMTEwLwYDVQQD EyhiZGRiZGJmMDYwZDEzYjFkZDA3NTk1M2ZmNmNhODU3ODQzODE3ZGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgnudvQy98x75tiOOhco486kO+HK ndpRzOim/d2iqlPkmmixceNnozjUnlFTV8j5tIOWjVR7ummZZWdGYkY9uThk8cLU GU4ErDZusY1//GEx8Levlj6wL/hTeSg6ggb1wQAQYWzeg6Y22RBlVc2eSeL36p9S 3g17MjYrjAytDAPg0FvmuNZY6mS5Oc6GxSDXtc+ZYd6Wr3aE+Y7/mOG9P7mEMJup fH8B27GmviYKz3tTUHcdmXGzup3EWPHLDrmcPB9+FHaBco9MXCxGgOimw1KwEoHP 6y3lG3zPt3M0O77gVyvEEPKv1PhhY3TKwiAZ/U+t2j2qxbldKur6R2HShwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3b2/Bg0Tsd0HWVP/bKhXhDgX3pMB8GA1UdIwQY MBaAFOc6pqcFN07bcWCG6s8aaXqi8I5hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXpxbXB3VTNUdHR4WUlicXp4cHBlcUx3am1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xNWQwZjctN2RhYS00Y2U3LWIzZjIt ODYwMDk5ODBlZGY0LzEvNXpxbXB3VTNUdHR4WUlicXp4cHBlcUx3am1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xNWQwZjctN2RhYS00Y2U3LWIzZjItODYwMDk5ODBlZGY0 LzEvNXpxbXB3VTNUdHR4WUlicXp4cHBlcUx3am1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasX9aNjP MZxfwkaUg/A0petsmuxbMCiZaewQ1ct6/F4S5Uo9SVTpB9bFb5dmy/0gPK9UAMFY RdgjQkG0/lU43fg/QJAac9w+lOwL9Cg9XiYgpBZ8xAbT6bCQOxAqyzE3KmsCLEiy wboeDm7ArUFvWoar4VEYZu1yZK0xMBO+cf4n+mSprGzDjowKR9UMFnEasFG+8wsl xzjKdDWCvuj4UEjGXXisNieP8qsk/7JqNe82cGkPnfWJI7Uku73MhPXccw/Q5P/W Luv1JI5zbbRZV8DL5QaViEswfJTuViHA+kpTWL8hKORA/Yg+IKsh+5yke9rNbCJ4 u9ja5ao/hsnaVA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:19 2025 by rpki-client