This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft File: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft (raw, json) Hash identifier: UDzGe/A3e4HJc2G/OGW6Z8yT5IHs35WyvMtXpoyuYcY= Subject key identifier: BD:DD:6F:54:A5:84:E9:9C:D9:B2:E0:B7:7B:BA:08:3B:A8:E2:96:3B Authority key identifier: FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4 Certificate issuer: /CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4 Certificate serial: 019AF19A952BACFFBD5A3A64D9598131AF90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:00:31 +0000 Manifest this update: Sat 06 Dec 2025 03:00:31 +0000 Manifest next update: Sun 07 Dec 2025 03:00:31 +0000 Files and hashes: 1: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl (hash: el8ecaEQ6GYdyhJFhmqAyLITRQWy5H2YxSzLef6JK5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:95:2b:ac:ff:bd:5a:3a:64:d9:59:81:31:af:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4 Validity Not Before: Dec 6 03:00:31 2025 GMT Not After : Dec 7 03:00:31 2025 GMT Subject: CN=bddd6f54a584e99cd9b2e0b77bba083ba8e2963b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:62:76:83:a4:ee:94:cc:cc:20:7c:8b:7a:2f: c6:65:cf:d1:c3:7e:26:87:92:ec:2a:62:b5:e8:ec: 42:40:88:27:b9:3e:e1:20:af:c9:ae:bc:f6:50:98: 7e:18:26:6a:4e:fc:cf:50:df:b9:57:8a:6f:83:83: c6:8c:c4:bb:6a:6e:5c:c9:d3:71:5b:31:e4:72:4d: c3:96:b6:24:29:4f:b5:e8:d8:cb:33:c5:c6:43:19: 2f:79:b7:d7:b9:e1:d8:00:1a:d0:15:bd:65:7c:b1: c6:ab:7d:e4:26:a5:e0:07:83:72:71:61:91:26:98: ab:35:70:99:90:69:20:a3:60:25:39:35:b0:d4:f5: d4:cd:5f:59:b5:23:c7:c5:f8:1e:b5:6a:a5:47:06: 72:02:49:cf:d3:d7:98:97:45:33:a8:34:25:52:92: b9:5e:39:4c:c2:16:42:5d:50:34:70:88:e2:73:b5: c8:9f:11:a0:f3:ba:6a:16:1c:28:ca:0a:f7:86:c3: db:09:84:8c:44:75:6e:94:e2:3b:8e:bc:71:01:71: 0b:f8:93:e3:ec:87:67:c0:19:fb:c3:de:5c:76:f7: fa:33:38:90:bc:fa:8b:a1:da:7f:66:0c:e0:c0:19: 9a:55:73:1d:6d:4e:07:b7:bd:4e:ad:70:21:94:d4: c9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DD:6F:54:A5:84:E9:9C:D9:B2:E0:B7:7B:BA:08:3B:A8:E2:96:3B X509v3 Authority Key Identifier: keyid:FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:bb:45:f5:3b:5d:33:4a:62:89:12:53:e0:20:23:dc:61:23: c3:68:15:39:26:4a:fb:47:fc:2e:14:52:0d:1c:9b:f2:ad:a1: 3e:9f:5d:fc:87:b5:77:9d:8b:e9:8a:69:24:5b:a9:59:3c:27: b1:7a:1d:c7:73:7b:15:3a:2b:c6:e9:5e:83:6a:7c:7d:1c:b7: 35:a5:73:28:aa:17:6d:75:a3:76:84:6c:37:ca:11:21:e9:0c: 31:14:50:7f:c6:26:b5:48:48:a7:b4:b8:6e:5e:46:f7:08:e8: 8a:f4:ff:50:ee:d5:bb:80:f4:17:17:74:82:58:d5:fe:c4:cf: 90:d2:b6:da:8c:f9:d7:f5:20:1d:dc:00:e6:52:9a:af:e2:c6: 9c:c4:cd:c7:be:7e:af:c3:b4:25:3b:d3:e7:34:cf:4d:8a:74: d5:46:ed:34:fb:52:01:20:b0:d8:c8:c6:55:83:ab:e6:49:11: 01:f2:a5:8c:e1:b1:00:59:17:45:94:5f:43:2c:e4:64:67:bb: 1e:9d:a0:d7:ef:5c:03:41:e9:83:9b:90:37:4c:bf:a0:a2:ff: d7:9b:f0:ee:8e:bb:19:1c:8e:84:68:dd:67:48:b4:f6:5a:b3: 9a:03:f9:66:36:10:80:34:22:94:ec:31:fc:1c:33:3e:17:c0: b6:ca:2e:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpUrrP+9Wjpk2VmBMa+QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOTdmMWVjYTRjOGM0ZjAwYzI2NTUzMjU3ZGNkMjJiZTYw OTMyZTQwHhcNMjUxMjA2MDMwMDMxWhcNMjUxMjA3MDMwMDMxWjAzMTEwLwYDVQQD EyhiZGRkNmY1NGE1ODRlOTljZDliMmUwYjc3YmJhMDgzYmE4ZTI5NjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2J2g6TulMzMIHyLei/GZc/Rw34m h5LsKmK16OxCQIgnuT7hIK/Jrrz2UJh+GCZqTvzPUN+5V4pvg4PGjMS7am5cydNx WzHkck3DlrYkKU+16NjLM8XGQxkvebfXueHYABrQFb1lfLHGq33kJqXgB4NycWGR JpirNXCZkGkgo2AlOTWw1PXUzV9ZtSPHxfgetWqlRwZyAknP09eYl0UzqDQlUpK5 XjlMwhZCXVA0cIjic7XInxGg87pqFhwoygr3hsPbCYSMRHVulOI7jrxxAXEL+JPj 7IdnwBn7w95cdvf6MziQvPqLodp/ZgzgwBmaVXMdbU4Ht71OrXAhlNTJ8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3db1SlhOmc2bLgt3u6CDuo4pY7MB8GA1UdIwQY MBaAFP+X8eykyMTwDCZVMlfc0ivmCTLkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzVmeDdLVEl4UEFNSmxVeVY5elNLLVlKTXVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lNTgzODYtYmNmOC00ODI2LTk1ZWMt ZjljNzVhZDNhZWQzLzEvXzVmeDdLVEl4UEFNSmxVeVY5elNLLVlKTXVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9lNTgzODYtYmNmOC00ODI2LTk1ZWMtZjljNzVhZDNhZWQz LzEvXzVmeDdLVEl4UEFNSmxVeVY5elNLLVlKTXVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLtF9Ttd M0piiRJT4CAj3GEjw2gVOSZK+0f8LhRSDRyb8q2hPp9d/Ie1d52L6YppJFupWTwn sXodx3N7FTorxuleg2p8fRy3NaVzKKoXbXWjdoRsN8oRIekMMRRQf8YmtUhIp7S4 bl5G9wjoivT/UO7Vu4D0Fxd0gljV/sTPkNK22oz51/UgHdwA5lKar+LGnMTNx75+ r8O0JTvT5zTPTYp01UbtNPtSASCw2MjGVYOr5kkRAfKljOGxAFkXRZRfQyzkZGe7 Hp2g1+9cA0Hpg5uQN0y/oKL/15vw7o67GRyOhGjdZ0i09lqzmgP5ZjYQgDQilOwx /BwzPhfAtsouGA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:38:46 2025 by rpki-client