This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft File: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft (raw, json) Hash identifier: U1nf6XCroizHyTZP5jmUbDEbwvKx84onGkH1g5/10f8= Subject key identifier: BB:67:4C:1E:CD:1D:D1:BB:E3:70:06:CA:B2:C8:BF:DA:28:F1:17:FF Authority key identifier: E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D Certificate issuer: /CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d Certificate serial: 019AF19B2DEC1DCE55444574539896448300 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft Manifest number: 12BD Signing time: Sat 06 Dec 2025 03:01:10 +0000 Manifest this update: Sat 06 Dec 2025 03:01:10 +0000 Manifest next update: Sun 07 Dec 2025 03:01:10 +0000 Files and hashes: 1: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl (hash: awhnQoBr6A9CQws/FX7yP3BYcxH1D+R6u6Ga0SPr9ik=) 2: aC9h37w9SxJy7YDijl5CtjD_8YI.roa (hash: MHX8Dhiu7ht+UGjx6cFAfN7NE3zuBBwKSz8saWRCYw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:2d:ec:1d:ce:55:44:45:74:53:98:96:44:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d Validity Not Before: Dec 6 03:01:10 2025 GMT Not After : Dec 7 03:01:10 2025 GMT Subject: CN=bb674c1ecd1dd1bbe37006cab2c8bfda28f117ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:33:2a:9c:a4:82:71:61:b8:86:d1:72:30:95: 33:53:6e:19:f7:ed:8a:46:cd:84:e9:b0:71:c3:1a: 23:af:99:86:ca:74:56:19:9d:c3:fe:67:81:ea:fb: 19:f6:5f:3e:bc:a1:cb:5a:7e:9f:c5:55:b5:02:b7: 0e:4c:bc:79:d1:90:ea:95:3b:b3:55:e6:4d:70:d5: a1:3d:22:9c:ca:13:57:b6:3f:a2:9f:ec:f0:43:b0: 6a:0b:d4:45:60:36:82:3c:e5:ef:94:9f:da:db:04: be:99:d4:b8:8a:f0:a1:3d:89:8a:be:a6:00:93:0c: d6:c2:6e:f9:d8:1c:fa:10:20:1f:78:79:31:7a:40: c2:e9:01:e9:38:7d:bb:56:44:86:8a:14:81:50:53: 5a:19:96:62:07:4c:22:01:af:9c:e2:1a:3d:a9:60: 47:e9:2a:09:29:34:5b:dc:a7:14:24:05:1c:aa:9c: 02:1f:3e:37:d0:1b:24:2f:cf:1c:62:b9:83:1a:00: 01:6d:79:e2:2c:9d:17:91:ac:fe:18:93:90:d7:a1: 4a:25:0d:fc:e5:d4:1c:e7:46:6c:b0:a7:6e:44:22: da:2f:64:a6:b2:aa:61:4f:6e:64:0a:78:7e:68:8b: c3:29:73:1b:22:34:59:7f:bc:ca:f2:a4:4c:d6:f1: c5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:67:4C:1E:CD:1D:D1:BB:E3:70:06:CA:B2:C8:BF:DA:28:F1:17:FF X509v3 Authority Key Identifier: keyid:E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:3a:1b:bd:b3:c3:82:14:12:07:67:00:8d:69:a8:42:49:0d: 44:7e:9e:d5:36:a7:ae:c7:d0:8a:21:b1:a3:58:f6:3e:37:e2: 71:fa:55:b4:c0:f4:05:68:7a:83:79:e1:9f:8c:7d:91:16:ff: c7:7c:74:5d:06:3c:95:44:3d:be:66:0f:29:da:f2:32:c9:95: a2:bd:df:ea:ee:1a:06:ad:50:df:0f:ea:91:c4:34:b1:6a:54: 9d:87:17:6b:4d:f8:6c:c3:6c:8e:f2:02:fe:75:8d:66:8b:6e: 63:80:5c:4b:42:7d:c3:1f:03:ad:6a:d0:19:e9:c0:b0:d4:71: b7:60:17:30:16:1f:b8:6f:af:09:cc:b6:3d:86:e8:c0:89:42: ab:be:2e:8c:6f:6e:e7:b8:a4:15:4a:a6:7d:12:a6:2e:f7:a5: 16:8a:77:1f:37:23:5e:a8:5a:64:76:09:f4:24:81:fe:31:ae: 62:dc:ab:33:ae:96:7d:ec:db:34:07:47:3c:a8:82:b9:c8:c7: a7:aa:a1:1d:c5:30:fa:90:16:71:f5:92:4c:bd:37:81:bd:10: 4c:a9:05:9f:69:e7:49:bf:3c:f1:48:9f:35:88:41:8c:5d:d0: 5c:ac:87:64:ff:90:d6:87:91:a0:37:b9:4a:1f:54:e7:4b:8e: 83:cd:00:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmy3sHc5VREV0U5iWRIMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MjAyYTNmYzFhOGU4NWM5ZGZkMmQ2NWQzMTlhODBkZDFm YjkxN2QwHhcNMjUxMjA2MDMwMTEwWhcNMjUxMjA3MDMwMTEwWjAzMTEwLwYDVQQD EyhiYjY3NGMxZWNkMWRkMWJiZTM3MDA2Y2FiMmM4YmZkYTI4ZjExN2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDMqnKSCcWG4htFyMJUzU24Z9+2K Rs2E6bBxwxojr5mGynRWGZ3D/meB6vsZ9l8+vKHLWn6fxVW1ArcOTLx50ZDqlTuz VeZNcNWhPSKcyhNXtj+in+zwQ7BqC9RFYDaCPOXvlJ/a2wS+mdS4ivChPYmKvqYA kwzWwm752Bz6ECAfeHkxekDC6QHpOH27VkSGihSBUFNaGZZiB0wiAa+c4ho9qWBH 6SoJKTRb3KcUJAUcqpwCHz430BskL88cYrmDGgABbXniLJ0Xkaz+GJOQ16FKJQ38 5dQc50ZssKduRCLaL2SmsqphT25kCnh+aIvDKXMbIjRZf7zK8qRM1vHFtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtnTB7NHdG743AGyrLIv9oo8Rf/MB8GA1UdIwQY MBaAFOQgKj/BqOhcnf0tZdMZqA3R+5F9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUNBcVA4R282RnlkX1MxbDB4bW9EZEg3a1gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8wY2Y3YjktOTM4Zi00YzE3LThlYzct ZDE4ZDFlYTU2OGY1LzEvNUNBcVA4R282RnlkX1MxbDB4bW9EZEg3a1gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8wY2Y3YjktOTM4Zi00YzE3LThlYzctZDE4ZDFlYTU2OGY1 LzEvNUNBcVA4R282RnlkX1MxbDB4bW9EZEg3a1gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojobvbPD ghQSB2cAjWmoQkkNRH6e1TanrsfQiiGxo1j2PjficfpVtMD0BWh6g3nhn4x9kRb/ x3x0XQY8lUQ9vmYPKdryMsmVor3f6u4aBq1Q3w/qkcQ0sWpUnYcXa034bMNsjvIC /nWNZotuY4BcS0J9wx8DrWrQGenAsNRxt2AXMBYfuG+vCcy2PYbowIlCq74ujG9u 57ikFUqmfRKmLvelFop3HzcjXqhaZHYJ9CSB/jGuYtyrM66WfezbNAdHPKiCucjH p6qhHcUw+pAWcfWSTL03gb0QTKkFn2nnSb888UifNYhBjF3QXKyHZP+Q1oeRoDe5 Sh9U50uOg80Ahg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:26 2025 by rpki-client