This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft File: Si5_568rpaMEbhdkT6vo8Di0598.mft (raw, json) Hash identifier: K5kf+n16m5XixsLe121WP8lhupjnQnvevUdrrmL/PLo= Subject key identifier: 5F:99:CA:31:D0:20:28:47:C2:6E:72:DE:6E:FC:B5:D3:DC:6C:3B:1A Authority key identifier: 4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF Certificate issuer: /CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df Certificate serial: 019AF4652F61F4CDAA3D2394C610A870A6BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft Manifest number: 0FE7 Signing time: Sat 06 Dec 2025 16:01:03 +0000 Manifest this update: Sat 06 Dec 2025 16:01:03 +0000 Manifest next update: Sun 07 Dec 2025 16:01:03 +0000 Files and hashes: 1: Si5_568rpaMEbhdkT6vo8Di0598.crl (hash: H7RFUUGl2J3FGAzfdsmS72a3L7tUu0cOLZtDMYN2AbU=) 2: x05kuSTQillWAvYC1VSvIsPJiaU.roa (hash: YaAmDXOkb7npVO3SgdzcRdFaOrP01AvggeHWb2jbRUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:2f:61:f4:cd:aa:3d:23:94:c6:10:a8:70:a6:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df Validity Not Before: Dec 6 16:01:03 2025 GMT Not After : Dec 7 16:01:03 2025 GMT Subject: CN=5f99ca31d0202847c26e72de6efcb5d3dc6c3b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:29:0a:a2:38:07:c4:22:b1:29:33:51:c3:78: 19:a2:bc:cc:4d:5e:52:2b:5b:19:1c:d2:04:ad:5b: fb:eb:b5:e3:3f:3e:3e:06:19:75:7b:17:fd:b2:3d: 26:86:20:43:dc:6a:4b:d6:1b:18:63:d1:e7:80:59: 52:c6:9d:f6:e7:b5:28:b8:0f:48:fb:83:2a:20:53: af:bb:43:f6:4c:5e:d9:47:13:4d:62:53:26:96:aa: 99:ad:41:e1:e7:08:3d:4e:a3:67:2e:5d:a7:3a:49: 7c:e1:59:02:7c:dc:25:f8:ac:39:eb:2c:c2:cc:e9: df:dd:3f:fa:a3:70:fd:67:9b:de:a7:7f:c1:42:7e: 1c:df:82:89:e8:a0:8a:0d:1b:09:3e:15:0f:b0:f3: 19:58:05:65:35:57:83:6d:86:05:76:2b:7d:04:26: 99:03:02:ab:84:3b:13:b8:e3:f0:5d:2c:c2:6f:01: 94:6f:58:b9:6e:ee:9a:dd:b5:bd:2f:90:23:3f:22: a1:50:95:3a:b6:a0:4d:02:f1:79:d2:f9:a7:26:dd: 56:79:62:b8:04:bc:ae:e8:a4:03:d2:86:94:66:96: 17:b5:10:b6:4b:ca:5e:f2:2f:20:1c:81:3e:83:e0: cd:09:00:bd:4f:f1:a4:11:98:8a:90:55:18:4f:a7: b2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:99:CA:31:D0:20:28:47:C2:6E:72:DE:6E:FC:B5:D3:DC:6C:3B:1A X509v3 Authority Key Identifier: keyid:4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:40:10:01:b4:d7:82:4a:f7:27:51:ea:13:5c:ac:09:7a:69: 6c:53:d8:8c:38:b3:60:1b:6c:87:fc:69:7e:3c:1b:1b:9c:d1: dd:a3:df:99:56:64:e5:5c:28:3f:e5:70:c2:7e:74:ac:52:56: d0:36:0e:d9:04:66:a6:64:78:cd:cf:95:bc:76:c4:28:d3:bd: 68:a1:69:2d:43:5d:76:5b:bc:88:d7:68:4a:9b:7c:0f:cc:75: 0e:5f:be:26:ef:94:c8:07:52:85:9e:67:b7:c2:8f:d1:a5:f3: fd:5e:ed:96:24:b6:ce:bb:e8:1b:b9:5f:99:02:14:67:63:17: c9:f4:24:d3:f3:46:16:0b:70:1b:56:72:56:24:9c:5d:94:50: 67:6b:24:ea:41:c6:49:94:2f:5a:0e:95:35:ba:9b:c4:5e:50: 82:af:7d:be:73:70:e6:99:b0:4a:37:b7:9f:e5:a2:0b:f3:a7: 82:ce:05:6d:e1:b8:43:40:68:f3:b3:ad:4d:41:4e:59:a5:de: 88:b0:c3:65:b9:59:0c:a6:17:70:86:db:66:52:e4:fd:61:d8: 31:61:c4:0b:94:87:4e:73:a2:5b:5b:d2:1d:db:70:1f:d1:2a: 45:4d:d9:0a:8d:af:34:7e:01:38:f9:42:e7:92:3c:9f:a2:e7: 35:ae:68:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZS9h9M2qPSOUxhCocKa6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhMmU3ZmU3YWYyYmE1YTMwNDZlMTc2NDRmYWJlOGYwMzhi NGU3ZGYwHhcNMjUxMjA2MTYwMTAzWhcNMjUxMjA3MTYwMTAzWjAzMTEwLwYDVQQD Eyg1Zjk5Y2EzMWQwMjAyODQ3YzI2ZTcyZGU2ZWZjYjVkM2RjNmMzYjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSkKojgHxCKxKTNRw3gZorzMTV5S K1sZHNIErVv767XjPz4+Bhl1exf9sj0mhiBD3GpL1hsYY9HngFlSxp3257UouA9I +4MqIFOvu0P2TF7ZRxNNYlMmlqqZrUHh5wg9TqNnLl2nOkl84VkCfNwl+Kw56yzC zOnf3T/6o3D9Z5vep3/BQn4c34KJ6KCKDRsJPhUPsPMZWAVlNVeDbYYFdit9BCaZ AwKrhDsTuOPwXSzCbwGUb1i5bu6a3bW9L5AjPyKhUJU6tqBNAvF50vmnJt1WeWK4 BLyu6KQD0oaUZpYXtRC2S8pe8i8gHIE+g+DNCQC9T/GkEZiKkFUYT6eyRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+ZyjHQIChHwm5y3m78tdPcbDsaMB8GA1UdIwQY MBaAFEouf+evK6WjBG4XZE+r6PA4tOffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2k1XzU2OHJwYU1FYmhka1Q2dm84RGkwNTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kOWVlYjgtNzkxNC00MDQ3LWI1NzMt ZTY3MGEyZDQ3Yjg2LzEvU2k1XzU2OHJwYU1FYmhka1Q2dm84RGkwNTk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9kOWVlYjgtNzkxNC00MDQ3LWI1NzMtZTY3MGEyZDQ3Yjg2 LzEvU2k1XzU2OHJwYU1FYmhka1Q2dm84RGkwNTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEAQAbTX gkr3J1HqE1ysCXppbFPYjDizYBtsh/xpfjwbG5zR3aPfmVZk5VwoP+Vwwn50rFJW 0DYO2QRmpmR4zc+VvHbEKNO9aKFpLUNddlu8iNdoSpt8D8x1Dl++Ju+UyAdShZ5n t8KP0aXz/V7tliS2zrvoG7lfmQIUZ2MXyfQk0/NGFgtwG1ZyViScXZRQZ2sk6kHG SZQvWg6VNbqbxF5Qgq99vnNw5pmwSje3n+WiC/Ongs4FbeG4Q0Bo87OtTUFOWaXe iLDDZblZDKYXcIbbZlLk/WHYMWHEC5SHTnOiW1vSHdtwH9EqRU3ZCo2vNH4BOPlC 55I8n6LnNa5oYw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:35:36 2025 by rpki-client