This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft File: 5nXaCc0660yTfGP1NfM_1X0MIZE.mft (raw, json) Hash identifier: ug7IZWA4C/2dr22GQZCowoWv+5dvtfVcaQnI6Scf7IA= Subject key identifier: D1:41:56:EC:CB:BF:F2:18:34:6C:37:53:7F:70:EC:FC:0D:13:06:1A Authority key identifier: E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91 Certificate issuer: /CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191 Certificate serial: 019AF16488DE0B809F5DD43FE7A9EEB81EC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft Manifest number: 158D Signing time: Sat 06 Dec 2025 02:01:28 +0000 Manifest this update: Sat 06 Dec 2025 02:01:28 +0000 Manifest next update: Sun 07 Dec 2025 02:01:28 +0000 Files and hashes: 1: 5nXaCc0660yTfGP1NfM_1X0MIZE.crl (hash: 0bU/lim+VVaW9vakpkAJ1nG286yShmPRmUqSR/85nB0=) 2: oxEuvUfcJ-buwPGzC9O9kYsePss.roa (hash: CDgIKWYLWk0SZTYTZrPpXT0JXuPlKzi9XhIJznqGoHY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:88:de:0b:80:9f:5d:d4:3f:e7:a9:ee:b8:1e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191 Validity Not Before: Dec 6 02:01:28 2025 GMT Not After : Dec 7 02:01:28 2025 GMT Subject: CN=d14156eccbbff218346c37537f70ecfc0d13061a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:05:56:d4:c6:c1:41:39:11:63:06:fc:e3: c6:ce:60:99:2b:22:7f:0c:61:34:09:2c:b0:a3:74: 64:2e:e9:89:c9:dd:e7:63:69:cb:4b:53:83:b7:0f: fc:69:9f:41:65:eb:27:17:58:63:01:de:01:fa:a2: 42:36:36:e5:33:aa:e9:cd:dd:ac:d1:e4:a1:36:91: 00:2d:9f:f5:ab:bb:10:1f:73:ce:02:49:bf:e6:27: 50:bb:d2:22:4f:b7:03:4d:b7:0b:c0:1d:8e:27:ba: b3:f4:c6:4d:ea:04:d7:da:d9:06:01:a4:79:f8:86: b6:b9:2a:9b:94:00:8d:91:65:a6:54:52:7c:f0:d4: 0c:9a:1e:91:f6:2c:9e:98:db:5a:97:a4:a3:9e:61: 0d:6e:87:0f:5c:8f:6d:30:87:68:d8:d1:2f:c7:71: b0:34:a0:56:e1:84:8d:ab:bc:3e:e7:09:92:f9:d2: ee:87:80:4b:73:05:2f:cf:b0:16:d9:eb:95:83:0f: 3e:d3:e8:d2:71:78:58:97:28:7b:62:e0:4e:2e:0c: a4:43:7a:a8:2e:1e:51:04:2a:4c:28:85:f2:5c:92: de:66:56:a8:0d:f5:9e:60:cb:9f:f0:1f:3e:be:d0: c4:4a:d7:cb:89:cd:21:9c:ee:b0:78:e6:b7:55:83: 16:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:41:56:EC:CB:BF:F2:18:34:6C:37:53:7F:70:EC:FC:0D:13:06:1A X509v3 Authority Key Identifier: keyid:E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e1:11:96:a9:24:2e:07:49:01:f7:cc:e9:ae:0b:a9:d0:3a: 3e:3c:94:9d:15:48:14:9f:ea:98:7d:6c:36:00:fd:93:96:a5: 7c:5e:da:ab:3a:52:17:15:55:c0:b1:3b:b8:81:a5:e1:0f:dc: 6b:00:89:61:7d:51:ae:40:c1:60:71:46:5d:d6:c1:93:dd:4a: 09:b5:95:bb:81:69:a2:f4:25:4a:0b:bd:6d:18:4c:ec:c3:3b: fb:4f:49:3b:3f:3d:97:13:0f:90:02:35:a3:18:df:96:e5:f1: 72:c7:b2:dc:4c:66:ff:f5:05:76:10:a1:36:80:19:77:18:f7: d6:e8:f6:76:45:d8:46:55:93:fb:7d:c8:cd:18:c8:5f:a5:85: 3f:a6:c7:58:ae:47:e2:c5:c6:1f:fd:40:3c:e5:d6:67:45:15: 0c:83:1b:e0:ec:e5:b7:2c:4b:3b:a6:4f:8e:a7:48:7e:f3:13: ab:f5:a9:bd:61:3c:3c:73:0c:c7:b3:c1:1a:0c:6f:f9:7d:c3: 3f:40:65:89:30:3b:07:f6:ff:4f:0d:20:c5:7d:d0:18:75:81: 38:40:15:a1:7f:33:7a:ae:bb:0b:53:fb:a7:93:b0:0d:cb:89: 60:ef:d0:e0:b1:d2:87:9d:1a:d0:ce:ee:3c:db:03:e8:4b:ab: f8:ad:f6:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIjeC4CfXdQ/56nuuB7CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NzVkYTA5Y2QzYWViNGM5MzdjNjNmNTM1ZjMzZmQ1N2Qw YzIxOTEwHhcNMjUxMjA2MDIwMTI4WhcNMjUxMjA3MDIwMTI4WjAzMTEwLwYDVQQD EyhkMTQxNTZlY2NiYmZmMjE4MzQ2YzM3NTM3ZjcwZWNmYzBkMTMwNjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPYFVtTGwUE5EWMG/OPGzmCZKyJ/ DGE0CSywo3RkLumJyd3nY2nLS1ODtw/8aZ9BZesnF1hjAd4B+qJCNjblM6rpzd2s 0eShNpEALZ/1q7sQH3POAkm/5idQu9IiT7cDTbcLwB2OJ7qz9MZN6gTX2tkGAaR5 +Ia2uSqblACNkWWmVFJ88NQMmh6R9iyemNtal6SjnmENbocPXI9tMIdo2NEvx3Gw NKBW4YSNq7w+5wmS+dLuh4BLcwUvz7AW2euVgw8+0+jScXhYlyh7YuBOLgykQ3qo Lh5RBCpMKIXyXJLeZlaoDfWeYMuf8B8+vtDEStfLic0hnO6weOa3VYMWAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFBVuzLv/IYNGw3U39w7PwNEwYaMB8GA1UdIwQY MBaAFOZ12gnNOutMk3xj9TXzP9V9DCGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW5YYUNjMDY2MHlUZkdQMU5mTV8xWDBNSVpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jYTJhODAtMWQ5MC00ODIzLWIzZjEt NGUyODRjZmYwNzk5LzEvNW5YYUNjMDY2MHlUZkdQMU5mTV8xWDBNSVpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9jYTJhODAtMWQ5MC00ODIzLWIzZjEtNGUyODRjZmYwNzk5 LzEvNW5YYUNjMDY2MHlUZkdQMU5mTV8xWDBNSVpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOERlqkk LgdJAffM6a4LqdA6PjyUnRVIFJ/qmH1sNgD9k5alfF7aqzpSFxVVwLE7uIGl4Q/c awCJYX1RrkDBYHFGXdbBk91KCbWVu4FpovQlSgu9bRhM7MM7+09JOz89lxMPkAI1 oxjfluXxcsey3Exm//UFdhChNoAZdxj31uj2dkXYRlWT+33IzRjIX6WFP6bHWK5H 4sXGH/1APOXWZ0UVDIMb4OzltyxLO6ZPjqdIfvMTq/WpvWE8PHMMx7PBGgxv+X3D P0BliTA7B/b/Tw0gxX3QGHWBOEAVoX8zeq67C1P7p5OwDcuJYO/Q4LHSh50a0M7u PNsD6Eur+K32jw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:13:56 2025 by rpki-client