This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft File: 5Mx247VHf_1CoP5LjHg6rS-W_nA.mft (raw, json) Hash identifier: JxgHvu88UKV53cO86cSPCCKomyJa5mT81GOlZ/sd7oA= Subject key identifier: 7E:54:CB:2D:E8:5B:8C:33:01:1F:27:80:6D:9D:25:86:F0:69:65:03 Authority key identifier: E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70 Certificate issuer: /CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70 Certificate serial: 019AF50A086B012D162B5A2FE046B9FF6FDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft Manifest number: 0A85 Signing time: Sat 06 Dec 2025 19:01:06 +0000 Manifest this update: Sat 06 Dec 2025 19:01:06 +0000 Manifest next update: Sun 07 Dec 2025 19:01:06 +0000 Files and hashes: 1: 1tTKxE7bwQfchkwslQXxnYbzsJg.roa (hash: 5+EJxKuD23N+Q8WaFwzZJ+wyeA6DdNR0OHPQg7+6ADs=) 2: 5Mx247VHf_1CoP5LjHg6rS-W_nA.crl (hash: rU8ChNpUb9thrvokIRYRGX/TE5O94qkP9rMVmivzZqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:08:6b:01:2d:16:2b:5a:2f:e0:46:b9:ff:6f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70 Validity Not Before: Dec 6 19:01:06 2025 GMT Not After : Dec 7 19:01:06 2025 GMT Subject: CN=7e54cb2de85b8c33011f27806d9d2586f0696503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:71:33:a6:ae:17:69:2e:4f:bf:62:cd:b7:ea: dd:29:5f:eb:5d:0a:69:2f:da:d9:01:31:77:ab:5d: e8:d6:d5:b2:20:86:f4:8c:74:1e:97:f6:a3:6e:92: 36:a9:0b:0d:08:38:0b:86:4b:8b:c5:c6:f5:35:6f: ca:29:2f:32:80:a6:28:54:29:84:ae:31:89:a0:a6: f0:35:ef:b2:43:11:c1:a4:a5:30:fd:c7:98:03:5f: a8:f0:35:75:1c:b6:03:08:e6:ac:a1:84:0e:cc:f7: cc:fc:87:87:c7:78:47:f2:9d:99:be:bb:0a:71:eb: 9a:05:ec:2a:6c:6e:c5:71:a8:58:0c:d6:98:b8:8a: 9b:e6:89:0a:f4:27:0e:6f:b8:d3:12:06:cd:3f:e8: f5:53:8d:3d:0d:8d:b5:73:ee:58:f2:96:c8:4c:3b: fa:83:fb:c6:72:bc:f2:62:e4:54:ce:de:7f:bc:fe: 61:71:e4:58:af:6c:df:05:cc:09:fe:4b:d8:78:07: a6:ea:d7:6f:64:a6:2e:55:e5:fc:70:60:c5:95:fc: 51:c0:1e:00:94:d9:43:63:a9:38:e1:26:64:4d:59: 56:a4:c4:21:40:95:10:77:cf:d9:19:80:f3:76:63: e9:ac:ef:be:a9:45:f7:17:75:2d:e3:0f:ee:a9:57: 02:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:54:CB:2D:E8:5B:8C:33:01:1F:27:80:6D:9D:25:86:F0:69:65:03 X509v3 Authority Key Identifier: keyid:E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a2:84:47:c3:b2:88:d7:2f:4c:aa:de:d6:97:de:3b:8a:2d: 96:fd:f6:f5:19:6f:0c:73:a3:6c:28:6c:73:81:9e:41:d2:db: ec:c6:ba:19:22:53:f5:8a:de:ba:03:de:f2:7b:4c:1b:1c:6c: 76:5f:45:3b:14:ef:52:fe:24:d5:53:54:b6:99:a1:10:44:42: 18:c9:72:6f:20:10:0f:65:58:15:52:64:e3:94:ea:24:29:04: 38:e0:b3:2f:2a:2e:39:2e:c3:bc:d4:c2:99:56:79:ff:c8:11: 77:bc:3c:d0:dd:81:b2:2b:15:63:03:0b:0d:48:dc:8c:c1:a2: d2:1a:58:f1:a7:0f:f7:9e:81:b7:c7:db:0e:af:f6:73:03:a1: 99:60:7c:7b:a8:5f:dd:c8:77:fa:27:75:f2:f2:59:ad:ec:a2: d5:f9:b5:f2:ae:c4:57:dd:36:75:f6:e4:f6:32:49:39:9c:c5: a3:d2:6e:f2:61:f9:c2:e3:06:b5:69:75:57:12:aa:d1:d0:77: 7e:0d:00:58:ff:6a:e2:1a:30:4c:82:d0:7c:b4:5e:a1:d8:33: 93:a4:5d:2a:80:12:6b:6d:18:9f:b0:da:30:3c:88:d9:35:b4: b1:04:7d:73:69:70:95:7f:c1:a0:d2:50:b5:ec:0e:5c:dd:2e: ba:e0:61:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CghrAS0WK1ov4Ea5/2/fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Y2M3NmUzYjU0NzdmZmQ0MmEwZmU0YjhjNzgzYWFkMmY5 NmZlNzAwHhcNMjUxMjA2MTkwMTA2WhcNMjUxMjA3MTkwMTA2WjAzMTEwLwYDVQQD Eyg3ZTU0Y2IyZGU4NWI4YzMzMDExZjI3ODA2ZDlkMjU4NmYwNjk2NTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3Ezpq4XaS5Pv2LNt+rdKV/rXQpp L9rZATF3q13o1tWyIIb0jHQel/ajbpI2qQsNCDgLhkuLxcb1NW/KKS8ygKYoVCmE rjGJoKbwNe+yQxHBpKUw/ceYA1+o8DV1HLYDCOasoYQOzPfM/IeHx3hH8p2ZvrsK ceuaBewqbG7FcahYDNaYuIqb5okK9CcOb7jTEgbNP+j1U409DY21c+5Y8pbITDv6 g/vGcrzyYuRUzt5/vP5hceRYr2zfBcwJ/kvYeAem6tdvZKYuVeX8cGDFlfxRwB4A lNlDY6k44SZkTVlWpMQhQJUQd8/ZGYDzdmPprO++qUX3F3Ut4w/uqVcC8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5Uyy3oW4wzAR8ngG2dJYbwaWUDMB8GA1UdIwQY MBaAFOTMduO1R3/9QqD+S4x4Oq0vlv5wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU14MjQ3VkhmXzFDb1A1TGpIZzZyUy1XX25BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi81Zjg4ODEtOGE0NC00ODQyLTgwMDkt MTE2NWQxZDE1NjRmLzEvNU14MjQ3VkhmXzFDb1A1TGpIZzZyUy1XX25BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi81Zjg4ODEtOGE0NC00ODQyLTgwMDktMTE2NWQxZDE1NjRm LzEvNU14MjQ3VkhmXzFDb1A1TGpIZzZyUy1XX25BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKKER8Oy iNcvTKre1pfeO4otlv329RlvDHOjbChsc4GeQdLb7Ma6GSJT9YreugPe8ntMGxxs dl9FOxTvUv4k1VNUtpmhEERCGMlybyAQD2VYFVJk45TqJCkEOOCzLyouOS7DvNTC mVZ5/8gRd7w80N2BsisVYwMLDUjcjMGi0hpY8acP956Bt8fbDq/2cwOhmWB8e6hf 3ch3+id18vJZreyi1fm18q7EV902dfbk9jJJOZzFo9Ju8mH5wuMGtWl1VxKq0dB3 fg0AWP9q4howTILQfLReodgzk6RdKoASa20Yn7DaMDyI2TW0sQR9c2lwlX/BoNJQ tewOXN0uuuBhrw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:43:59 2025 by rpki-client