This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft File: 5RgEXPvZajduyY4_Xosq-xTMqTw.mft (raw, json) Hash identifier: 3BbpXpue3o8rrIikYR5C0BGJjMUV534N5Ypr4aAOuTE= Subject key identifier: FA:EF:28:FD:9C:3C:42:4C:77:F7:60:D2:91:E9:D7:77:D7:D6:53:1E Authority key identifier: E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C Certificate issuer: /CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c Certificate serial: 019AF0BF8AC22F521CF2283415975B96ED64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 23:01:15 +0000 Manifest this update: Fri 05 Dec 2025 23:01:15 +0000 Manifest next update: Sat 06 Dec 2025 23:01:15 +0000 Files and hashes: 1: 5RgEXPvZajduyY4_Xosq-xTMqTw.crl (hash: Ue7QZeA808I3070pgQHXDcJ7IyFBZ4oMu9PIk9tXLa0=) 2: OHRptNvQN7btyzlZYvC9PKCpnpY.roa (hash: mAc+fZIgpvpgde9/WLkYrKDLdCBnkog0duL73LIoIB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:8a:c2:2f:52:1c:f2:28:34:15:97:5b:96:ed:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e518045cfbd96a376ec98e3f5e8b2afb14cca93c Validity Not Before: Dec 5 23:01:15 2025 GMT Not After : Dec 6 23:01:15 2025 GMT Subject: CN=faef28fd9c3c424c77f760d291e9d777d7d6531e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:90:97:a3:1c:85:c1:b6:d2:97:1f:50:08:0d: 59:bc:b1:62:cb:7c:91:f5:a1:d8:a9:ae:51:da:ba: 87:90:1d:a6:89:13:af:cc:1d:a2:0d:31:ef:d3:93: e7:8b:91:e9:12:ae:26:2f:50:0c:31:12:4e:17:ab: c4:8d:fc:eb:91:df:a2:16:91:52:b9:85:ff:41:32: 78:3c:8a:87:01:77:6d:0d:32:1d:72:61:62:24:7e: f5:e2:b5:cc:24:99:47:6b:ca:de:2a:01:a9:bf:5c: b3:d1:05:3d:05:26:35:e8:03:95:ac:93:f8:9f:7b: f4:b4:46:e4:cd:e2:03:c3:28:00:f2:41:9b:20:4d: 9d:4f:dc:a7:79:43:90:a8:71:27:4c:5a:44:d2:c4: 35:48:de:68:3c:29:fb:93:b3:04:eb:14:6c:5e:be: 83:d0:eb:2f:a6:4d:6e:3b:a4:48:64:7e:62:c8:4b: 46:18:09:0e:ce:5b:d0:9f:b4:cb:97:98:f9:1a:bf: c7:68:b9:d3:d3:8e:4e:4e:7e:e2:3f:44:8a:a7:70: 88:7d:27:b1:33:2a:b4:3f:13:32:ce:93:10:2b:13: cd:14:16:a5:8e:a6:5d:f3:fa:fc:9c:e5:07:b6:10: 20:ff:c7:a1:4a:06:4d:2e:47:0e:dc:38:93:a1:85: 6f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EF:28:FD:9C:3C:42:4C:77:F7:60:D2:91:E9:D7:77:D7:D6:53:1E X509v3 Authority Key Identifier: keyid:E5:18:04:5C:FB:D9:6A:37:6E:C9:8E:3F:5E:8B:2A:FB:14:CC:A9:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RgEXPvZajduyY4_Xosq-xTMqTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/db8258-2f18-4f48-89a7-fc50566b118f/1/5RgEXPvZajduyY4_Xosq-xTMqTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:6a:cb:c0:46:3a:42:28:5d:e2:03:4a:f8:98:53:02:70:f1: 38:b6:69:9b:9f:5c:03:88:5c:17:65:03:d2:71:d7:73:45:dc: e4:55:8c:8b:f9:b7:1b:4d:6c:0d:36:6a:35:05:6c:93:95:7a: ce:db:48:03:38:16:97:0f:a4:fa:c8:18:d2:d5:09:73:73:c0: 3b:af:31:5b:7c:38:71:b7:44:90:67:8d:e7:21:b1:5b:cd:ff: 10:c4:b4:ec:e2:91:1f:1c:b5:3b:ef:53:df:9c:0f:cc:06:37: 52:52:c3:f7:d2:bd:bb:e7:c5:ad:5c:76:43:73:6c:f5:a2:3a: 01:b7:72:42:25:54:bb:50:cf:04:82:41:99:84:fd:05:d8:05: c9:cc:dc:f7:e3:9c:e4:1c:f6:b0:68:45:25:81:69:8c:a7:3a: cb:b4:3e:6d:f8:da:5e:58:46:33:fb:10:f6:7b:e0:dc:5c:d0: 71:f2:41:68:81:30:d9:4b:0c:dd:9d:b0:8d:07:df:b7:a5:7d: 65:d2:fa:7c:59:30:b6:ea:8d:1f:23:bd:c4:63:85:87:dd:3e: fb:9f:1c:b3:1d:fb:6e:20:d4:83:f4:e6:af:c6:75:c1:ed:89: 54:3e:d4:8b:da:42:ad:17:a2:11:05:52:7f:3c:ce:9b:02:eb: 8f:05:62:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4rCL1Ic8ig0FZdblu1kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MTgwNDVjZmJkOTZhMzc2ZWM5OGUzZjVlOGIyYWZiMTRj Y2E5M2MwHhcNMjUxMjA1MjMwMTE1WhcNMjUxMjA2MjMwMTE1WjAzMTEwLwYDVQQD EyhmYWVmMjhmZDljM2M0MjRjNzdmNzYwZDI5MWU5ZDc3N2Q3ZDY1MzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZCXoxyFwbbSlx9QCA1ZvLFiy3yR 9aHYqa5R2rqHkB2miROvzB2iDTHv05Pni5HpEq4mL1AMMRJOF6vEjfzrkd+iFpFS uYX/QTJ4PIqHAXdtDTIdcmFiJH714rXMJJlHa8reKgGpv1yz0QU9BSY16AOVrJP4 n3v0tEbkzeIDwygA8kGbIE2dT9yneUOQqHEnTFpE0sQ1SN5oPCn7k7ME6xRsXr6D 0Osvpk1uO6RIZH5iyEtGGAkOzlvQn7TLl5j5Gr/HaLnT045OTn7iP0SKp3CIfSex Myq0PxMyzpMQKxPNFBaljqZd8/r8nOUHthAg/8ehSgZNLkcO3DiToYVvbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrvKP2cPEJMd/dg0pHp13fX1lMeMB8GA1UdIwQY MBaAFOUYBFz72Wo3bsmOP16LKvsUzKk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVJnRVhQdlphamR1eVk0X1hvc3EteFRNcVR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kYjgyNTgtMmYxOC00ZjQ4LTg5YTct ZmM1MDU2NmIxMThmLzEvNVJnRVhQdlphamR1eVk0X1hvc3EteFRNcVR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9kYjgyNTgtMmYxOC00ZjQ4LTg5YTctZmM1MDU2NmIxMThm LzEvNVJnRVhQdlphamR1eVk0X1hvc3EteFRNcVR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGrLwEY6 Qihd4gNK+JhTAnDxOLZpm59cA4hcF2UD0nHXc0Xc5FWMi/m3G01sDTZqNQVsk5V6 zttIAzgWlw+k+sgY0tUJc3PAO68xW3w4cbdEkGeN5yGxW83/EMS07OKRHxy1O+9T 35wPzAY3UlLD99K9u+fFrVx2Q3Ns9aI6AbdyQiVUu1DPBIJBmYT9BdgFyczc9+Oc 5Bz2sGhFJYFpjKc6y7Q+bfjaXlhGM/sQ9nvg3FzQcfJBaIEw2UsM3Z2wjQfft6V9 ZdL6fFkwtuqNHyO9xGOFh90++58csx37biDUg/Tmr8Z1we2JVD7Ui9pCrReiEQVS fzzOmwLrjwViBw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:55 2025 by rpki-client