This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft File: 1e5A9FidahGyT3u8wpq5-a5olxk.mft (raw, json) Hash identifier: +zS+s5gGgPZh2Rl/pjRbngAmsd0/JpmOb8U0WGfJ3WU= Subject key identifier: CB:37:1D:58:42:CF:24:DA:76:65:27:CB:92:C8:06:B0:39:57:2A:1E Authority key identifier: D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19 Certificate issuer: /CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719 Certificate serial: 019AF50A1DAE0FDCC0D24B80ACEFA3154EB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft Manifest number: 0B8F Signing time: Sat 06 Dec 2025 19:01:12 +0000 Manifest this update: Sat 06 Dec 2025 19:01:12 +0000 Manifest next update: Sun 07 Dec 2025 19:01:12 +0000 Files and hashes: 1: 1e5A9FidahGyT3u8wpq5-a5olxk.crl (hash: H6kxPFjhmv7W5omQN9EMMutUA2FhX02dMdpdOT/klS0=) 2: XjL_VzQpHSFAWpxr8LGCRwpbqdA.roa (hash: Brx7GKcJBpG7UwHG4ArWnTWvC9k75AexdudLOh9h/Pw=) 3: _iMkYM2SlDhb8BiWpSMXooueyD8.roa (hash: S5QL6kGITU62oZ1okwVbSjZ25wXtKrDyDz3OlnPy3eo=) 4: r8lD_AoxI_vqECkRvj5MGM36UnA.roa (hash: 3Vhj0OvbLDXudkl6wnwYXZg0rj1sNr06FqG4dJbW2C4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:1d:ae:0f:dc:c0:d2:4b:80:ac:ef:a3:15:4e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719 Validity Not Before: Dec 6 19:01:12 2025 GMT Not After : Dec 7 19:01:12 2025 GMT Subject: CN=cb371d5842cf24da766527cb92c806b039572a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cf:67:3f:2c:3f:c4:ab:97:c5:59:84:6f:2b: ae:22:86:39:5c:05:da:d2:65:ba:8e:d0:d8:af:62: 91:7b:0c:cc:be:b4:a1:9a:14:1b:d7:f9:05:7e:36: d0:81:0b:0c:13:d4:8f:9f:a8:27:ab:54:bd:6a:1d: 09:85:49:42:cc:66:27:26:5f:5a:fd:2f:e8:23:9d: 75:73:61:73:27:00:5d:2f:4e:18:74:29:97:db:b2: bf:d8:b4:89:c0:a6:c4:ee:b7:2a:2e:3e:b3:52:fa: 1c:f6:ab:c7:5e:14:c5:6e:e0:da:23:df:1b:50:6c: 54:ed:c1:f5:3d:5b:54:47:d9:b7:4f:51:b0:9d:52: ac:7a:16:a7:c5:7f:ed:02:1e:27:f1:69:0e:4b:03: 2f:27:a5:86:8f:9f:b3:9a:73:ff:5e:47:2c:dd:a7: 2c:7f:28:62:0b:7b:d4:d8:28:d7:2d:d7:9d:1a:96: 20:08:d3:88:17:56:3a:80:fd:6a:cb:36:ec:b9:80: d0:7a:05:51:76:a1:db:86:db:90:c5:85:2e:e7:bd: 53:49:cf:7c:4d:6f:5a:46:bb:a3:73:85:2e:ae:9f: ba:57:de:d9:a9:83:1c:12:f9:54:a9:60:fe:0b:ce: 38:b3:7d:22:3b:a9:2d:ba:fe:54:11:5a:0f:20:93: d3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:37:1D:58:42:CF:24:DA:76:65:27:CB:92:C8:06:B0:39:57:2A:1E X509v3 Authority Key Identifier: keyid:D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:70:a0:44:78:a6:7d:aa:8f:f9:6d:8b:1a:d3:79:6c:aa:48: 3e:54:8a:c8:7f:5f:0f:92:48:ae:58:e7:ac:69:0f:44:86:6a: 1a:0c:64:50:7c:7f:b3:fc:a4:8e:0f:c8:96:00:cc:04:b2:91: dc:fb:c6:1e:03:60:30:9d:8a:30:3b:a5:14:b4:f9:74:18:fd: 3c:91:67:79:b3:7b:f1:1e:79:45:7b:0d:20:8c:6c:4f:58:a3: 78:cc:99:80:ee:f0:92:5b:0d:4e:41:02:03:2e:43:58:8e:0d: 43:e0:2a:be:bf:57:2f:b8:c4:46:af:77:29:ab:c1:e7:c4:c6: ec:7b:f0:3a:73:c4:e4:67:a4:ab:d3:73:47:d7:9d:2e:ce:59: 28:36:35:2c:cb:e6:e3:25:40:74:4b:84:11:56:fe:a2:89:1c: 36:9e:a8:8e:a4:22:e8:dc:34:77:13:65:c7:a1:de:fa:29:e7: 70:60:59:1e:95:fa:57:31:a3:a0:12:51:62:47:ab:d4:92:15: 34:fd:08:13:da:7f:9a:92:5f:b9:e1:19:48:a7:7a:09:b0:96: 03:25:53:62:46:34:19:3a:fd:2f:f7:98:c9:95:e8:f0:b5:37: 7b:b6:f5:b7:4d:d6:52:41:98:55:3d:46:9c:a6:cf:8c:c6:6d: d9:9c:98:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ch2uD9zA0kuArO+jFU6zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZWU0MGY0NTg5ZDZhMTFiMjRmN2JiY2MyOWFiOWY5YWU2 ODk3MTkwHhcNMjUxMjA2MTkwMTEyWhcNMjUxMjA3MTkwMTEyWjAzMTEwLwYDVQQD EyhjYjM3MWQ1ODQyY2YyNGRhNzY2NTI3Y2I5MmM4MDZiMDM5NTcyYTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM9nPyw/xKuXxVmEbyuuIoY5XAXa 0mW6jtDYr2KRewzMvrShmhQb1/kFfjbQgQsME9SPn6gnq1S9ah0JhUlCzGYnJl9a /S/oI511c2FzJwBdL04YdCmX27K/2LSJwKbE7rcqLj6zUvoc9qvHXhTFbuDaI98b UGxU7cH1PVtUR9m3T1GwnVKsehanxX/tAh4n8WkOSwMvJ6WGj5+zmnP/Xkcs3acs fyhiC3vU2CjXLdedGpYgCNOIF1Y6gP1qyzbsuYDQegVRdqHbhtuQxYUu571TSc98 TW9aRrujc4Uurp+6V97ZqYMcEvlUqWD+C844s30iO6ktuv5UEVoPIJPThQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMs3HVhCzyTadmUny5LIBrA5VyoeMB8GA1UdIwQY MBaAFNXuQPRYnWoRsk97vMKaufmuaJcZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWU1QTlGaWRhaEd5VDN1OHdwcTUtYTVvbHhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84YzEzMDYtNzgwNS00MTdkLWJlNjMt OWVhMmE2ZmI2YTgxLzEvMWU1QTlGaWRhaEd5VDN1OHdwcTUtYTVvbHhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy84YzEzMDYtNzgwNS00MTdkLWJlNjMtOWVhMmE2ZmI2YTgx LzEvMWU1QTlGaWRhaEd5VDN1OHdwcTUtYTVvbHhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXCgRHim faqP+W2LGtN5bKpIPlSKyH9fD5JIrljnrGkPRIZqGgxkUHx/s/ykjg/IlgDMBLKR 3PvGHgNgMJ2KMDulFLT5dBj9PJFnebN78R55RXsNIIxsT1ijeMyZgO7wklsNTkEC Ay5DWI4NQ+Aqvr9XL7jERq93KavB58TG7HvwOnPE5Gekq9NzR9edLs5ZKDY1LMvm 4yVAdEuEEVb+ookcNp6ojqQi6Nw0dxNlx6He+inncGBZHpX6VzGjoBJRYker1JIV NP0IE9p/mpJfueEZSKd6CbCWAyVTYkY0GTr9L/eYyZXo8LU3e7b1t03WUkGYVT1G nKbPjMZt2ZyYvA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:18:08 2025 by rpki-client