This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.mft File: 5hjv-SPjW_g3kjU8RjPKIwD3W2w.mft (raw, json) Hash identifier: HfbAaRuPYqpJrARLWYQPhgjwrzsTpyvy/tbYD+qBrvs= Subject key identifier: 35:4B:7C:ED:73:D2:87:0C:32:30:BE:94:8B:81:45:74:1B:6F:78:D9 Authority key identifier: E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C Certificate issuer: /CN=e618eff923e35bf83792353c4633ca2300f75b6c Certificate serial: 019AF23FDE087F3EE837C11DF08E3F52F196 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.mft Manifest number: 0B0B Signing time: Sat 06 Dec 2025 06:01:03 +0000 Manifest this update: Sat 06 Dec 2025 06:01:03 +0000 Manifest next update: Sun 07 Dec 2025 06:01:03 +0000 Files and hashes: 1: 5hjv-SPjW_g3kjU8RjPKIwD3W2w.crl (hash: aJ7ga5aez7R9cCmjZs3h6MZCZG6sECBEp4qL/Vponf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.crl rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.mft rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:de:08:7f:3e:e8:37:c1:1d:f0:8e:3f:52:f1:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e618eff923e35bf83792353c4633ca2300f75b6c Validity Not Before: Dec 6 06:01:03 2025 GMT Not After : Dec 7 06:01:03 2025 GMT Subject: CN=354b7ced73d2870c3230be948b8145741b6f78d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ad:71:2d:d1:55:73:13:13:97:1f:21:de:85: 15:e6:3c:9a:8c:8f:35:bc:68:8a:14:d2:bc:8a:cd: 0e:41:70:37:22:7c:e8:9a:75:6e:62:7f:3f:1b:2d: 18:b1:a7:12:2c:2b:2c:5e:4b:c4:9c:7e:8e:0c:ff: d2:d6:26:ac:98:9c:ba:fc:2f:e6:f6:64:7b:b3:76: b2:38:c5:50:ec:15:1c:0e:18:d4:ad:bb:ec:0c:a8: bb:4c:ff:51:96:0d:c5:c2:e0:9a:3b:ae:dc:df:d1: 17:c5:b6:8e:3e:ba:08:21:ee:35:32:c0:cf:17:54: 91:f4:af:6c:aa:4a:62:26:d7:b6:eb:6d:99:25:ac: 55:c2:71:2a:bb:1a:0b:dc:02:e7:2b:6a:be:21:0d: 3f:78:9f:84:1a:ec:9e:91:d7:e0:ac:fb:e3:32:c9: d0:35:f2:46:b7:f6:13:71:1c:4c:1b:5d:f2:85:77: 6d:e0:f1:42:00:e0:0c:90:e5:33:c2:01:49:17:92: cc:94:7a:f0:36:90:5b:17:7b:fa:a3:91:fa:84:62: 41:ae:8a:9d:15:31:db:bb:99:08:6f:58:78:b0:92: 07:c3:64:3d:1a:cf:87:72:e0:47:e2:20:2b:94:1b: 48:ff:5f:95:4e:74:a1:a7:a8:ed:5c:35:e6:7d:16: d2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4B:7C:ED:73:D2:87:0C:32:30:BE:94:8B:81:45:74:1B:6F:78:D9 X509v3 Authority Key Identifier: keyid:E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:93:b6:b7:ea:8d:32:c0:3a:ff:03:25:82:ea:0b:8b:bd:f2: 87:1b:f0:cf:5a:e3:27:70:5a:c4:c4:2f:36:86:3f:cf:83:8c: 32:64:e2:4f:61:dc:2d:e9:a9:b6:61:2d:ee:e5:2f:c7:24:8e: 24:69:f2:98:a1:7e:a6:4f:4d:2a:05:60:b8:db:24:f2:59:65: d8:60:10:5a:ed:73:64:91:b5:29:d4:36:cd:3b:8e:64:91:3b: ba:a7:46:ed:34:9b:00:61:79:52:92:0c:ba:88:4b:c6:c3:4d: 53:e4:d5:b2:4b:69:e8:77:c0:89:e8:1b:31:36:75:e2:08:5b: f7:c3:8f:7b:94:b1:6e:90:36:91:e1:0f:c3:60:69:14:d0:7c: ab:6c:4a:9b:2a:1b:fb:01:b5:ce:83:cf:1f:14:6e:12:ed:aa: 26:fd:38:a6:f1:e6:ce:3b:5a:8f:04:d2:2f:b8:08:a6:70:f1: a6:7e:1a:3b:b6:43:ba:2f:6c:9a:8c:6d:5a:a2:60:52:6e:3a: 59:03:47:40:ae:8e:0e:8c:df:07:eb:40:c0:f1:59:26:4b:7f: c4:73:af:ae:b6:9c:05:ba:2a:77:cf:d2:69:a1:6a:c8:03:e6: 39:95:2c:10:ab:2f:c2:82:bc:df:ec:ef:b9:1e:db:be:e4:34: ac:0b:98:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP94Ifz7oN8Ed8I4/UvGWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MThlZmY5MjNlMzViZjgzNzkyMzUzYzQ2MzNjYTIzMDBm NzViNmMwHhcNMjUxMjA2MDYwMTAzWhcNMjUxMjA3MDYwMTAzWjAzMTEwLwYDVQQD EygzNTRiN2NlZDczZDI4NzBjMzIzMGJlOTQ4YjgxNDU3NDFiNmY3OGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK1xLdFVcxMTlx8h3oUV5jyajI81 vGiKFNK8is0OQXA3InzomnVuYn8/Gy0YsacSLCssXkvEnH6ODP/S1iasmJy6/C/m 9mR7s3ayOMVQ7BUcDhjUrbvsDKi7TP9Rlg3FwuCaO67c39EXxbaOProIIe41MsDP F1SR9K9sqkpiJte2622ZJaxVwnEquxoL3ALnK2q+IQ0/eJ+EGuyekdfgrPvjMsnQ NfJGt/YTcRxMG13yhXdt4PFCAOAMkOUzwgFJF5LMlHrwNpBbF3v6o5H6hGJBroqd FTHbu5kIb1h4sJIHw2Q9Gs+HcuBH4iArlBtI/1+VTnShp6jtXDXmfRbSWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVLfO1z0ocMMjC+lIuBRXQbb3jZMB8GA1UdIwQY MBaAFOYY7/kj41v4N5I1PEYzyiMA91tsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWhqdi1TUGpXX2cza2pVOFJqUEtJd0QzVzJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kNTA5MTItMGI4ZC00M2NjLThiZWUt ZGVkYzVhNjk2NGZjLzEvNWhqdi1TUGpXX2cza2pVOFJqUEtJd0QzVzJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9kNTA5MTItMGI4ZC00M2NjLThiZWUtZGVkYzVhNjk2NGZj LzEvNWhqdi1TUGpXX2cza2pVOFJqUEtJd0QzVzJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5O2t+qN MsA6/wMlguoLi73yhxvwz1rjJ3BaxMQvNoY/z4OMMmTiT2HcLemptmEt7uUvxySO JGnymKF+pk9NKgVguNsk8lll2GAQWu1zZJG1KdQ2zTuOZJE7uqdG7TSbAGF5UpIM uohLxsNNU+TVsktp6HfAiegbMTZ14ghb98OPe5SxbpA2keEPw2BpFNB8q2xKmyob +wG1zoPPHxRuEu2qJv04pvHmzjtajwTSL7gIpnDxpn4aO7ZDui9smoxtWqJgUm46 WQNHQK6ODozfB+tAwPFZJkt/xHOvrracBboqd8/SaaFqyAPmOZUsEKsvwoK83+zv uR7bvuQ0rAuYkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:07:40 2025 by rpki-client