This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft File: rsr5Su3_76Q2a8or65GZLB2zTMw.mft (raw, json) Hash identifier: LlWGes9QNK/inGSzd2NGgaqcVdUXZ8fC/X60CaJa2Po= Subject key identifier: 2D:50:C5:52:6F:03:38:B3:71:48:87:13:88:14:3B:28:48:0E:F0:5E Authority key identifier: AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC Certificate issuer: /CN=aecaf94aedffefa4366bca2beb91992c1db34ccc Certificate serial: 019AF2098578C8FEE17B5BE45BF6B5F3CC97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft Manifest number: 0AF9 Signing time: Sat 06 Dec 2025 05:01:41 +0000 Manifest this update: Sat 06 Dec 2025 05:01:41 +0000 Manifest next update: Sun 07 Dec 2025 05:01:41 +0000 Files and hashes: 1: rsr5Su3_76Q2a8or65GZLB2zTMw.crl (hash: dop2UICwqAeUE4Os1exC+5EC21hmLP1ksENxbn6y1NQ=) 2: ycsxAxwfvi_ZHCMIh-H72E7BXeY.roa (hash: 5XrkDdaM3UebECdsSy+x2CvwywLxmUspYKKtB6gwnm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:85:78:c8:fe:e1:7b:5b:e4:5b:f6:b5:f3:cc:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aecaf94aedffefa4366bca2beb91992c1db34ccc Validity Not Before: Dec 6 05:01:41 2025 GMT Not After : Dec 7 05:01:41 2025 GMT Subject: CN=2d50c5526f0338b37148871388143b28480ef05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:16:cc:e3:80:92:c8:c2:78:3e:00:70:21:3c: 5e:92:5a:bf:aa:93:05:2c:eb:03:ee:7b:77:cf:d4: c2:c1:6c:a9:c9:89:13:3d:cf:b6:e5:5d:67:87:b9: d5:79:cc:bf:9f:55:97:38:48:17:b2:bd:ea:60:39: ee:5c:02:27:a9:6d:5c:02:5a:67:83:4c:73:d1:54: f5:e2:4d:fc:14:3d:f2:9e:7e:29:58:0d:35:12:d6: 18:22:43:cc:18:c0:ae:f7:52:0d:a3:85:af:7d:f2: 55:2d:9f:13:35:66:ed:e1:bd:09:b2:05:4f:88:2c: a0:9e:cb:0b:ee:7f:1a:c5:2c:5e:0e:52:36:de:a6: db:f1:56:9f:ad:be:6e:a4:6f:e7:de:87:c9:57:8e: 57:e6:7c:21:5c:92:c9:09:46:33:26:36:c5:bd:14: d4:fd:f9:1c:e6:f9:1b:ca:6b:5c:7b:9b:83:a4:cb: ac:77:8a:9f:93:ed:cd:ab:4d:59:b6:9b:7e:7f:4f: b0:c1:f7:ac:98:ef:b6:a1:ea:7c:a1:f0:1d:e6:ce: 65:5b:80:97:e1:95:51:85:84:da:70:be:19:a5:95: 47:2c:53:12:b8:6e:9d:fd:00:c3:43:0c:ed:a1:26: 8d:9b:79:8c:f5:1b:51:50:a8:7b:51:c1:34:27:16: a7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:50:C5:52:6F:03:38:B3:71:48:87:13:88:14:3B:28:48:0E:F0:5E X509v3 Authority Key Identifier: keyid:AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:1a:c3:c1:8a:90:80:51:ef:9e:bf:7e:ca:8d:59:d0:de:9b: 4a:73:44:69:e0:00:ee:97:16:d4:2a:82:fb:00:e8:21:e9:e6: 87:1e:6e:ab:b3:e9:e1:da:5b:8a:32:1c:8d:8c:19:09:1f:89: 62:dc:56:b2:76:1c:4f:cd:b6:a9:9e:f8:23:ba:7f:5a:c9:66: 1c:69:1e:0e:1c:97:87:81:7d:7f:57:30:a0:44:e2:ac:33:30: e6:ba:de:40:6f:00:92:5e:54:e3:36:f0:79:96:ad:e5:64:4c: d7:8e:c9:d5:4f:a4:2d:f8:dc:f7:95:45:0a:94:69:0d:5f:5b: 46:45:16:5a:77:e6:06:8c:11:62:b7:63:33:9f:c5:db:19:65: bc:0d:6b:2e:1b:eb:2f:8a:2a:f1:02:0a:67:4c:12:a4:ee:0a: 09:90:65:ca:f1:73:07:ee:0b:0f:35:ef:7f:31:e0:7f:3b:1c: fb:96:18:d3:32:a5:44:02:d8:17:09:c2:fa:97:03:cd:3c:b4: 27:6f:d4:4e:72:7f:12:db:6b:58:27:28:b6:8d:ad:b2:f7:8d: 57:26:c4:54:89:b1:eb:30:a6:57:35:40:d8:4d:9d:cd:82:34: a7:ba:0c:d1:3c:5b:b4:95:b9:57:8c:a1:4b:e7:60:96:2e:ab: a7:fd:b9:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYV4yP7he1vkW/a188yXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlY2FmOTRhZWRmZmVmYTQzNjZiY2EyYmViOTE5OTJjMWRi MzRjY2MwHhcNMjUxMjA2MDUwMTQxWhcNMjUxMjA3MDUwMTQxWjAzMTEwLwYDVQQD EygyZDUwYzU1MjZmMDMzOGIzNzE0ODg3MTM4ODE0M2IyODQ4MGVmMDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxbM44CSyMJ4PgBwITxeklq/qpMF LOsD7nt3z9TCwWypyYkTPc+25V1nh7nVecy/n1WXOEgXsr3qYDnuXAInqW1cAlpn g0xz0VT14k38FD3ynn4pWA01EtYYIkPMGMCu91INo4WvffJVLZ8TNWbt4b0JsgVP iCygnssL7n8axSxeDlI23qbb8Vafrb5upG/n3ofJV45X5nwhXJLJCUYzJjbFvRTU /fkc5vkbymtce5uDpMusd4qfk+3Nq01Ztpt+f0+wwfesmO+2oep8ofAd5s5lW4CX 4ZVRhYTacL4ZpZVHLFMSuG6d/QDDQwztoSaNm3mM9RtRUKh7UcE0JxanywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1QxVJvAzizcUiHE4gUOyhIDvBeMB8GA1UdIwQY MBaAFK7K+Urt/++kNmvKK+uRmSwds0zMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnNyNVN1M183NlEyYThvcjY1R1pMQjJ6VE13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wNDdkZWMtZDg0NC00NjdhLWEwMWEt ZmMwM2VmNzk0NzE4LzEvcnNyNVN1M183NlEyYThvcjY1R1pMQjJ6VE13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8wNDdkZWMtZDg0NC00NjdhLWEwMWEtZmMwM2VmNzk0NzE4 LzEvcnNyNVN1M183NlEyYThvcjY1R1pMQjJ6VE13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARhrDwYqQ gFHvnr9+yo1Z0N6bSnNEaeAA7pcW1CqC+wDoIenmhx5uq7Pp4dpbijIcjYwZCR+J YtxWsnYcT822qZ74I7p/WslmHGkeDhyXh4F9f1cwoETirDMw5rreQG8Akl5U4zbw eZat5WRM147J1U+kLfjc95VFCpRpDV9bRkUWWnfmBowRYrdjM5/F2xllvA1rLhvr L4oq8QIKZ0wSpO4KCZBlyvFzB+4LDzXvfzHgfzsc+5YY0zKlRALYFwnC+pcDzTy0 J2/UTnJ/EttrWCcoto2tsveNVybEVImx6zCmVzVA2E2dzYI0p7oM0TxbtJW5V4yh S+dgli6rp/25hQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:24 2025 by rpki-client