This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft File: 5TmMlveEeBsu3CA8dRxOh5h4X6E.mft (raw, json) Hash identifier: MLRnUTOr7aAuTUtndLmPtpjmPXZDtn5XhEX8TxCBx2Q= Subject key identifier: CB:2B:07:70:E3:17:FF:14:F1:AC:20:44:18:FF:1B:85:56:30:E0:1F Authority key identifier: E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1 Certificate issuer: /CN=e5398c96f784781b2edc203c751c4e8798785fa1 Certificate serial: 019AF19B63EAA2B3E84ED656F990357C3FF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft Manifest number: 0382 Signing time: Sat 06 Dec 2025 03:01:23 +0000 Manifest this update: Sat 06 Dec 2025 03:01:23 +0000 Manifest next update: Sun 07 Dec 2025 03:01:23 +0000 Files and hashes: 1: 4lG6f_Qt9ke663aj3CqWxLBjD4Y.roa (hash: Ce0xfqYvAYGmg5KwQIRuXB3GqTBWuYg+7c4t6KVIetg=) 2: 5TmMlveEeBsu3CA8dRxOh5h4X6E.crl (hash: Qg9e49ueABJemyuc7/sNBECSAdcfVzi2vswNOHCg+Pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:63:ea:a2:b3:e8:4e:d6:56:f9:90:35:7c:3f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5398c96f784781b2edc203c751c4e8798785fa1 Validity Not Before: Dec 6 03:01:23 2025 GMT Not After : Dec 7 03:01:23 2025 GMT Subject: CN=cb2b0770e317ff14f1ac204418ff1b855630e01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a8:51:f5:76:cf:cc:44:53:4c:cb:a6:e4:45: de:b9:28:3b:46:82:c0:37:87:a9:2b:f9:0a:9f:cd: b1:8f:c7:71:68:9f:d4:eb:e5:86:16:27:30:c8:99: 94:4c:17:ac:24:19:b4:22:00:53:b2:2b:6e:4f:d0: 00:51:4e:a8:e9:09:a5:1d:fe:1d:cc:f6:43:0c:72: a5:3b:e9:d3:35:76:90:19:0c:78:00:09:d7:15:8f: cc:eb:78:d4:3a:ad:29:3c:38:ba:30:96:7b:84:32: 9c:a9:ce:3a:0e:6e:79:72:6b:78:bf:db:4b:62:fa: 0d:84:8e:76:60:78:4b:31:ba:79:56:73:96:02:b9: 06:8a:c9:06:f9:86:9a:a2:61:3c:ef:ba:0c:a2:05: 64:1a:3e:65:74:9c:95:18:14:09:a2:7d:24:3f:4e: 54:c8:73:5d:53:f5:9c:87:0b:a9:54:60:e6:9c:6d: 1d:99:7c:8c:9d:86:d4:08:b1:e1:2b:70:7b:56:90: 74:2e:e7:18:6e:bf:4a:b2:1f:bd:65:31:d3:4a:cd: 60:b6:3e:a2:b2:f6:c7:cb:d2:d9:bc:9a:26:06:9f: da:1b:0a:7d:a4:eb:5a:80:01:8f:9c:f2:af:2b:1c: 45:7a:94:3e:54:fd:27:fa:36:a6:dd:79:d7:3e:60: 78:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2B:07:70:E3:17:FF:14:F1:AC:20:44:18:FF:1B:85:56:30:E0:1F X509v3 Authority Key Identifier: keyid:E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:43:5d:b4:12:a4:7e:2b:62:6d:fb:c0:64:3f:e8:2f:f2:8c: 51:b9:a5:e8:47:60:14:db:61:dc:e8:7c:7e:d1:55:40:bb:2b: 4d:ee:f8:0b:ad:a4:1f:60:c2:6b:f0:63:78:dd:36:b6:98:37: 5e:f0:6d:f8:5d:c8:2c:8a:b5:02:d3:dd:56:25:60:82:cb:bd: 86:6c:99:92:f8:1e:f4:6f:0c:d4:d6:ab:24:0c:ef:f9:b8:84: 59:dc:55:19:1e:80:04:17:f1:67:98:fa:65:6f:5c:28:79:3f: 97:c7:e8:d3:19:0c:d2:fc:66:d9:7b:0d:8e:36:05:2e:11:ce: 0b:eb:c0:54:d5:d9:2b:85:19:3b:18:5e:d2:f9:12:f2:46:09: d3:36:a7:2c:5c:63:10:05:ab:d5:f6:75:e5:1b:fb:79:bf:c9: a2:8b:81:c9:f1:3d:a5:2c:25:4a:48:b8:66:bb:10:6c:43:b4: 62:00:a6:b9:3c:55:8f:dd:48:a7:77:76:99:45:40:5a:38:24: 1f:8f:13:3f:92:1f:87:8a:87:00:9d:a4:4b:82:09:87:4e:73: 35:6f:d2:0b:d7:0c:7d:f5:fc:d6:c6:4d:68:04:fa:32:50:7b: fa:d4:08:d6:5b:45:db:46:2e:3a:b8:89:d6:e2:0f:dd:3f:27: 5a:1b:13:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2PqorPoTtZW+ZA1fD/wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1Mzk4Yzk2Zjc4NDc4MWIyZWRjMjAzYzc1MWM0ZTg3OTg3 ODVmYTEwHhcNMjUxMjA2MDMwMTIzWhcNMjUxMjA3MDMwMTIzWjAzMTEwLwYDVQQD EyhjYjJiMDc3MGUzMTdmZjE0ZjFhYzIwNDQxOGZmMWI4NTU2MzBlMDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkahR9XbPzERTTMum5EXeuSg7RoLA N4epK/kKn82xj8dxaJ/U6+WGFicwyJmUTBesJBm0IgBTsituT9AAUU6o6QmlHf4d zPZDDHKlO+nTNXaQGQx4AAnXFY/M63jUOq0pPDi6MJZ7hDKcqc46Dm55cmt4v9tL YvoNhI52YHhLMbp5VnOWArkGiskG+YaaomE877oMogVkGj5ldJyVGBQJon0kP05U yHNdU/WchwupVGDmnG0dmXyMnYbUCLHhK3B7VpB0LucYbr9Ksh+9ZTHTSs1gtj6i svbHy9LZvJomBp/aGwp9pOtagAGPnPKvKxxFepQ+VP0n+jam3XnXPmB4swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsrB3DjF/8U8awgRBj/G4VWMOAfMB8GA1UdIwQY MBaAFOU5jJb3hHgbLtwgPHUcToeYeF+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVRtTWx2ZUVlQnN1M0NBOGRSeE9oNWg0WDZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS85ZjU0YjUtYTM5YS00ZTYwLThiMWMt ZDFlNDYwNTE4NDgzLzEvNVRtTWx2ZUVlQnN1M0NBOGRSeE9oNWg0WDZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS85ZjU0YjUtYTM5YS00ZTYwLThiMWMtZDFlNDYwNTE4NDgz LzEvNVRtTWx2ZUVlQnN1M0NBOGRSeE9oNWg0WDZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0NdtBKk fitibfvAZD/oL/KMUbml6EdgFNth3Oh8ftFVQLsrTe74C62kH2DCa/BjeN02tpg3 XvBt+F3ILIq1AtPdViVggsu9hmyZkvge9G8M1NarJAzv+biEWdxVGR6ABBfxZ5j6 ZW9cKHk/l8fo0xkM0vxm2XsNjjYFLhHOC+vAVNXZK4UZOxhe0vkS8kYJ0zanLFxj EAWr1fZ15Rv7eb/JoouByfE9pSwlSki4ZrsQbEO0YgCmuTxVj91Ip3d2mUVAWjgk H48TP5Ifh4qHAJ2kS4IJh05zNW/SC9cMffX81sZNaAT6MlB7+tQI1ltF20YuOriJ 1uIP3T8nWhsTIw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:33 2025 by rpki-client