This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft File: 5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft (raw, json) Hash identifier: flZIXLpyrNx2N4YgNlKpPbimHowH6UJ+wcquPAbwRTc= Subject key identifier: 35:4E:27:C6:54:C5:09:01:F4:4C:45:F1:88:EE:BF:1E:C3:ED:B8:AA Authority key identifier: E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5 Certificate issuer: /CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5 Certificate serial: 019AF3F7330D304CD6E326F2B26AFE60ACA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 14:00:55 +0000 Manifest this update: Sat 06 Dec 2025 14:00:55 +0000 Manifest next update: Sun 07 Dec 2025 14:00:55 +0000 Files and hashes: 1: 5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl (hash: 8ILbmLHaFxSUwybgerXM57Wwg1Lqy68+gq4l9E35p0o=) 2: VGd9KjMwAgOKsTmpV-66ONuVSdc.roa (hash: DDJ2sEHFTQOmIwDAMdVrMbf0vg81gKq/jz/yH3diG9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:33:0d:30:4c:d6:e3:26:f2:b2:6a:fe:60:ac:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5 Validity Not Before: Dec 6 14:00:55 2025 GMT Not After : Dec 7 14:00:55 2025 GMT Subject: CN=354e27c654c50901f44c45f188eebf1ec3edb8aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:75:1f:e2:4f:55:76:ef:d4:2c:0a:01:e7:6e: 99:b0:a1:30:df:3a:4e:bc:0a:1e:de:77:6d:d8:25: ba:bd:db:84:e0:d6:8c:70:59:2c:1e:78:e9:83:4e: e4:0e:24:62:9b:65:f0:ef:f3:a1:0b:23:b2:44:84: 63:7c:5b:05:92:ef:ea:5d:e9:c9:9d:d6:5d:76:b0: 83:ac:58:2a:fd:d1:dc:8d:77:2c:6c:69:16:56:6d: 6f:75:01:b1:57:47:61:2c:30:4d:09:ee:c6:29:4a: 8d:f1:a2:8a:d3:19:76:af:2f:7a:84:57:56:37:41: 6e:54:f9:20:4e:fe:ed:0a:49:cf:6c:7b:8b:1a:be: a6:c6:55:98:aa:d3:44:44:b5:f2:78:2d:ba:20:0b: 55:db:d4:3a:83:ce:eb:fa:62:9e:5d:07:f5:7e:68: e9:8c:21:47:c8:1a:81:35:95:28:d1:c1:a2:8e:a8: f3:81:96:29:8e:6c:c4:e5:d8:d0:b2:7f:19:96:21: 1c:c4:01:5a:e7:47:9d:43:f8:94:ae:b9:e1:47:58: fa:be:c5:28:36:7e:0f:c1:ec:bb:b1:f9:ed:6a:c5: ec:28:18:2c:b6:47:c4:27:83:c8:1d:00:5f:cb:26: 79:20:d3:6d:b6:1d:db:6b:09:b2:be:30:e0:59:b8: a9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4E:27:C6:54:C5:09:01:F4:4C:45:F1:88:EE:BF:1E:C3:ED:B8:AA X509v3 Authority Key Identifier: keyid:E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:3c:4f:b2:7b:e6:32:4d:03:24:60:b2:d7:17:85:0a:54:5f: e3:9e:48:5d:f8:cf:ba:2b:53:33:5d:f4:53:1a:8b:1f:0f:be: 3f:10:9c:07:ee:fd:30:22:4b:06:7b:d8:7b:a7:51:7d:3d:e8: ec:8f:9e:9b:74:08:a5:7f:89:04:cb:9f:1b:7f:dd:49:6b:2b: 34:d9:24:f5:10:bd:5a:af:8d:12:eb:26:0d:8b:bf:29:d2:8a: d9:5f:4d:d8:a6:13:e6:2f:11:33:5f:09:a1:f3:5f:77:2d:a6: e2:88:ae:0f:12:0a:02:04:77:1c:4f:55:2f:b6:c3:c4:96:4f: 5e:a3:13:ea:fc:c6:53:1c:32:41:22:f0:2c:a6:0a:93:fd:6f: 90:fb:5c:7c:ce:a5:ca:ae:65:b5:aa:9f:b8:1d:a9:66:8b:d8: cc:08:5c:0d:3c:e0:06:f7:07:48:fc:57:4f:07:81:30:80:30: f3:ce:31:10:ba:be:e7:f7:e9:c3:95:69:44:b4:c2:ec:74:4f: fb:db:cd:b8:b0:97:ed:a9:60:7c:8c:50:34:9d:5d:15:e0:f6: 14:32:09:d1:4a:ee:1c:bd:d1:9b:42:50:c9:ae:24:74:b3:f7: 7f:0b:23:71:3a:b5:ce:9f:f4:68:2f:50:a3:87:31:03:a9:1d: 0f:be:00:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9zMNMEzW4ybysmr+YKyhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MWYzZWZlZDU3Zjg1YzA3MTdiYTU4NjM4NmJjZDkyZGRj NWM3YjUwHhcNMjUxMjA2MTQwMDU1WhcNMjUxMjA3MTQwMDU1WjAzMTEwLwYDVQQD EygzNTRlMjdjNjU0YzUwOTAxZjQ0YzQ1ZjE4OGVlYmYxZWMzZWRiOGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nUf4k9Vdu/ULAoB526ZsKEw3zpO vAoe3ndt2CW6vduE4NaMcFksHnjpg07kDiRim2Xw7/OhCyOyRIRjfFsFku/qXenJ ndZddrCDrFgq/dHcjXcsbGkWVm1vdQGxV0dhLDBNCe7GKUqN8aKK0xl2ry96hFdW N0FuVPkgTv7tCknPbHuLGr6mxlWYqtNERLXyeC26IAtV29Q6g87r+mKeXQf1fmjp jCFHyBqBNZUo0cGijqjzgZYpjmzE5djQsn8ZliEcxAFa50edQ/iUrrnhR1j6vsUo Nn4Pwey7sfntasXsKBgstkfEJ4PIHQBfyyZ5INNtth3bawmyvjDgWbiplwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVOJ8ZUxQkB9ExF8Yjuvx7D7biqMB8GA1UdIwQY MBaAFOUfPv7Vf4XAcXulhjhrzZLdxce1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVI4LV90Vl9oY0J4ZTZXR09Hdk5rdDNGeDdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iOTU1ZmQtMzllOC00MmU2LWFjNTQt YWY2OTQ4MDA4MGNlLzEvNVI4LV90Vl9oY0J4ZTZXR09Hdk5rdDNGeDdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9iOTU1ZmQtMzllOC00MmU2LWFjNTQtYWY2OTQ4MDA4MGNl LzEvNVI4LV90Vl9oY0J4ZTZXR09Hdk5rdDNGeDdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzxPsnvm Mk0DJGCy1xeFClRf455IXfjPuitTM130UxqLHw++PxCcB+79MCJLBnvYe6dRfT3o 7I+em3QIpX+JBMufG3/dSWsrNNkk9RC9Wq+NEusmDYu/KdKK2V9N2KYT5i8RM18J ofNfdy2m4oiuDxIKAgR3HE9VL7bDxJZPXqMT6vzGUxwyQSLwLKYKk/1vkPtcfM6l yq5ltaqfuB2pZovYzAhcDTzgBvcHSPxXTweBMIAw884xELq+5/fpw5VpRLTC7HRP +9vNuLCX7algfIxQNJ1dFeD2FDIJ0UruHL3Rm0JQya4kdLP3fwsjcTq1zp/0aC9Q o4cxA6kdD74AeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:32:39 2025 by rpki-client