This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft File: 5uitxyAU5Xp04wROsWbnYJaPI5U.mft (raw, json) Hash identifier: EkYnb+OgpR2ehm3uge4AqF6ayLOQtS1o1F+Kh6vZtxc= Subject key identifier: 32:9C:90:B0:68:B4:EE:69:BF:1D:5B:FD:1D:C6:34:3C:D1:7A:FF:D4 Authority key identifier: E6:E8:AD:C7:20:14:E5:7A:74:E3:04:4E:B1:66:E7:60:96:8F:23:95 Certificate issuer: /CN=e6e8adc72014e57a74e3044eb166e760968f2395 Certificate serial: 019AF3C006436DE36B9438D5F2FF81654323 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft Manifest number: 0D33 Signing time: Sat 06 Dec 2025 13:00:39 +0000 Manifest this update: Sat 06 Dec 2025 13:00:39 +0000 Manifest next update: Sun 07 Dec 2025 13:00:39 +0000 Files and hashes: 1: 5uitxyAU5Xp04wROsWbnYJaPI5U.crl (hash: KW1WxB9dUSLEwwv/7KHNDgPOcJbY7V3rVzd7cFtSjRY=) 2: Vd7ep1V7ja8rYIgwKvFOtZq4gy0.roa (hash: qbkrw3ma+AsEEUvI47lqqCL8eAGk/ZsP3EmHAoTEO0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.crl rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:06:43:6d:e3:6b:94:38:d5:f2:ff:81:65:43:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6e8adc72014e57a74e3044eb166e760968f2395 Validity Not Before: Dec 6 13:00:39 2025 GMT Not After : Dec 7 13:00:39 2025 GMT Subject: CN=329c90b068b4ee69bf1d5bfd1dc6343cd17affd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3f:b9:d3:00:1a:93:42:79:9e:d0:0d:db:36: ca:bd:ed:82:1e:91:45:ea:70:c8:e3:fb:9e:80:ae: 44:8f:5e:1b:0c:a5:b0:13:0d:72:9b:33:7f:b5:91: 58:8f:80:d6:3b:d9:5b:7b:3a:6c:b1:b8:3f:dd:f5: 7a:43:e4:dc:85:55:f5:35:7a:2d:b1:0c:90:e5:83: 55:1a:90:03:b2:e4:bb:95:bb:8c:3b:b6:9a:35:17: e5:4b:ea:7f:e9:76:32:96:66:9a:89:64:13:51:2e: cf:70:35:7c:78:35:7f:19:d5:55:49:53:b3:52:cb: 75:15:f7:51:a0:cf:53:e9:c3:87:12:91:f1:5e:08: ff:d4:d6:7c:40:3a:b6:39:0d:54:11:a5:cf:3d:33: 96:cc:06:b0:46:d9:56:2c:3b:af:35:8a:1d:9a:eb: 0d:96:c5:d2:aa:7d:6f:cd:df:3a:0e:07:e2:1e:93: 47:36:ef:d7:7c:ff:cb:9d:23:00:36:38:13:55:51: 15:20:a7:79:d8:3b:99:aa:c9:22:56:3c:98:9b:c9: 86:f6:f8:c6:1a:61:ca:9e:c4:67:3d:bf:55:43:fc: 2d:5c:5a:0e:ae:70:37:3e:13:0d:17:8f:b5:be:cb: 5d:6b:62:55:be:9e:04:4e:48:45:46:d3:a2:be:11: ed:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9C:90:B0:68:B4:EE:69:BF:1D:5B:FD:1D:C6:34:3C:D1:7A:FF:D4 X509v3 Authority Key Identifier: keyid:E6:E8:AD:C7:20:14:E5:7A:74:E3:04:4E:B1:66:E7:60:96:8F:23:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:1a:0a:91:5c:ee:77:f6:55:b4:62:76:8b:84:e8:f3:26:54: 27:34:22:ce:63:4e:55:37:36:f1:ed:1e:9e:c2:0b:3c:76:d6: 75:87:9b:b6:b0:9f:76:64:ac:2b:00:38:90:8c:6b:4b:7c:f2: 96:ba:0a:1a:0c:b5:35:f2:eb:0d:a0:d4:ad:d4:33:ef:42:f2: 37:1d:16:a5:6a:e4:4b:e1:b1:e2:82:08:17:96:92:c0:43:6e: 5e:cf:e9:5d:6a:51:87:16:25:a7:b3:31:9f:30:9e:70:7e:84: 3f:e1:ef:b3:7b:c5:2d:3b:2e:c5:0f:ff:0a:b1:df:b1:8e:a9: 59:11:25:54:2f:a1:4c:06:86:40:fc:4d:48:f4:e9:3f:9f:82: 12:98:4b:7f:8d:54:27:76:e8:03:22:23:b9:2a:ff:d2:8c:7a: fd:81:24:68:30:4a:d0:a5:1c:fe:97:96:d1:44:0c:03:8e:9d: 48:29:79:2a:ea:65:49:89:c1:87:fe:06:71:30:ac:f0:0f:19: 1a:9f:19:b8:bb:d1:15:07:f4:86:14:f1:01:9d:92:f2:e6:f8: f7:6f:c0:09:08:2b:3f:d4:79:b8:a8:b7:a6:43:32:04:44:3d: 2c:91:61:3b:b8:df:61:67:04:8f:e0:3a:56:a6:c7:f1:ed:31: d1:c0:2a:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwAZDbeNrlDjV8v+BZUMjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZThhZGM3MjAxNGU1N2E3NGUzMDQ0ZWIxNjZlNzYwOTY4 ZjIzOTUwHhcNMjUxMjA2MTMwMDM5WhcNMjUxMjA3MTMwMDM5WjAzMTEwLwYDVQQD EygzMjljOTBiMDY4YjRlZTY5YmYxZDViZmQxZGM2MzQzY2QxN2FmZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj+50wAak0J5ntAN2zbKve2CHpFF 6nDI4/uegK5Ej14bDKWwEw1ymzN/tZFYj4DWO9lbezpssbg/3fV6Q+TchVX1NXot sQyQ5YNVGpADsuS7lbuMO7aaNRflS+p/6XYylmaaiWQTUS7PcDV8eDV/GdVVSVOz Ust1FfdRoM9T6cOHEpHxXgj/1NZ8QDq2OQ1UEaXPPTOWzAawRtlWLDuvNYodmusN lsXSqn1vzd86DgfiHpNHNu/XfP/LnSMANjgTVVEVIKd52DuZqskiVjyYm8mG9vjG GmHKnsRnPb9VQ/wtXFoOrnA3PhMNF4+1vstda2JVvp4ETkhFRtOivhHtzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKckLBotO5pvx1b/R3GNDzRev/UMB8GA1UdIwQY MBaAFOborccgFOV6dOMETrFm52CWjyOVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXVpdHh5QVU1WHAwNHdST3NXYm5ZSmFQSTVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iN2EzNjUtZDQ4Ny00YTI4LTlkN2Ut Y2VjZDhhMTgyYmRmLzEvNXVpdHh5QVU1WHAwNHdST3NXYm5ZSmFQSTVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iN2EzNjUtZDQ4Ny00YTI4LTlkN2UtY2VjZDhhMTgyYmRm LzEvNXVpdHh5QVU1WHAwNHdST3NXYm5ZSmFQSTVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihoKkVzu d/ZVtGJ2i4To8yZUJzQizmNOVTc28e0ensILPHbWdYebtrCfdmSsKwA4kIxrS3zy lroKGgy1NfLrDaDUrdQz70LyNx0WpWrkS+Gx4oIIF5aSwENuXs/pXWpRhxYlp7Mx nzCecH6EP+Hvs3vFLTsuxQ//CrHfsY6pWRElVC+hTAaGQPxNSPTpP5+CEphLf41U J3boAyIjuSr/0ox6/YEkaDBK0KUc/peW0UQMA46dSCl5KuplSYnBh/4GcTCs8A8Z Gp8ZuLvRFQf0hhTxAZ2S8ub492/ACQgrP9R5uKi3pkMyBEQ9LJFhO7jfYWcEj+A6 VqbH8e0x0cAq0g== -----END CERTIFICATE-----Generated at Sat Dec 6 21:03:19 2025 by rpki-client