This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft File: 5cePoZk9RRL-JDa4ztqL_JKdZX0.mft (raw, json) Hash identifier: rBIH4sRebJt0x3nna2dw2FLNnQS/W5I9qh1OGqcZjEo= Subject key identifier: 5A:BE:32:E9:CC:F5:D5:C1:F9:F2:DC:DA:CD:9E:33:B9:97:BF:02:13 Authority key identifier: E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D Certificate issuer: /CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d Certificate serial: 019AF1647864AB3630D39AFEB41F1230E366 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft Manifest number: 0AA1 Signing time: Sat 06 Dec 2025 02:01:24 +0000 Manifest this update: Sat 06 Dec 2025 02:01:24 +0000 Manifest next update: Sun 07 Dec 2025 02:01:24 +0000 Files and hashes: 1: 5cePoZk9RRL-JDa4ztqL_JKdZX0.crl (hash: 3baF5mnu5u3DekOgxiDOnvsaGEOWG+OYk3247NsheAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:78:64:ab:36:30:d3:9a:fe:b4:1f:12:30:e3:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d Validity Not Before: Dec 6 02:01:24 2025 GMT Not After : Dec 7 02:01:24 2025 GMT Subject: CN=5abe32e9ccf5d5c1f9f2dcdacd9e33b997bf0213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:56:cc:be:6f:bb:88:a6:74:a8:0f:c9:dd:15: 13:ae:7e:2f:88:c2:f0:35:b5:e9:94:9d:88:1b:7f: 77:fa:68:67:77:a8:e3:f4:98:0f:38:5e:ba:9f:35: ea:42:38:3f:8a:e9:5e:e0:fb:c8:09:0c:f8:fc:56: 98:bd:74:0a:62:af:f1:85:87:43:14:0d:8d:46:99: d8:61:73:39:e4:d0:4e:34:32:d4:9a:90:b4:3c:16: 20:d9:3e:25:61:7d:c6:08:75:a1:45:d6:29:8f:89: 16:42:78:06:e0:6a:67:d0:8a:01:f2:e6:8d:86:75: be:7f:fd:82:b9:4d:ed:7b:5b:ff:ba:3b:8e:f3:2a: 50:10:e8:ec:cb:c2:7e:d7:95:76:f6:a8:3c:b2:8d: 7c:96:84:40:a0:81:7e:2d:5b:39:88:2f:d4:7b:fc: c4:95:d6:bf:68:6a:a2:33:e9:ca:fd:01:98:98:72: 92:f6:80:cb:23:0f:71:67:fb:22:42:6a:26:13:d3: 89:6f:a3:d5:32:65:59:ec:d3:b7:07:a7:91:32:22: 26:c8:54:7e:40:3f:4c:f5:75:d4:1f:97:8a:91:b1: ce:18:8d:01:87:0c:4d:01:d4:15:73:a4:68:f3:1d: a3:30:85:8e:5b:64:b5:bc:0b:84:3e:a5:af:1b:ff: e8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BE:32:E9:CC:F5:D5:C1:F9:F2:DC:DA:CD:9E:33:B9:97:BF:02:13 X509v3 Authority Key Identifier: keyid:E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:e1:63:09:e8:58:4c:8f:ac:0d:a9:19:59:76:75:b8:cb:0f: 04:9f:0b:15:7a:c3:94:33:cd:3d:ac:38:1b:72:dd:72:ce:04: 2a:63:5e:bb:89:72:55:e0:dc:aa:4f:60:16:7a:29:c8:14:46: c3:e5:96:bc:0c:23:ed:d8:e4:49:70:d7:1d:e2:80:35:95:e3: c8:a1:00:22:0a:98:dc:6e:f6:a1:0f:d4:f3:23:7b:75:3d:9f: eb:08:d4:8e:a0:d2:4b:8a:ab:4a:58:4f:f8:d8:f4:84:18:4b: 56:f8:9a:5e:67:13:56:03:82:45:62:53:57:ee:42:9e:f1:a7: 8f:d0:ba:8d:dc:a8:0c:fe:00:79:1c:7b:81:fd:e5:a5:99:ed: ee:fb:69:77:f8:a3:0d:21:22:3c:70:84:35:aa:3c:02:3c:f7: 62:ae:12:13:70:30:e4:48:3f:ae:a9:c0:b6:c5:52:3d:3a:ea: 9f:81:08:82:c1:5b:24:3f:7e:f4:5a:20:0a:01:18:e4:ee:58: 18:d5:bc:c1:66:2b:d9:c2:44:26:68:79:da:dd:18:c8:57:92: 4a:de:65:69:48:ae:8d:22:e4:54:36:d2:60:a5:50:bb:93:09: 83:45:02:a4:5a:d3:cf:92:b6:03:68:54:b7:d5:36:95:35:cd: 2f:73:6f:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHhkqzYw05r+tB8SMONmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1Yzc4ZmExOTkzZDQ1MTJmZTI0MzZiOGNlZGE4YmZjOTI5 ZDY1N2QwHhcNMjUxMjA2MDIwMTI0WhcNMjUxMjA3MDIwMTI0WjAzMTEwLwYDVQQD Eyg1YWJlMzJlOWNjZjVkNWMxZjlmMmRjZGFjZDllMzNiOTk3YmYwMjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFbMvm+7iKZ0qA/J3RUTrn4viMLw NbXplJ2IG393+mhnd6jj9JgPOF66nzXqQjg/iule4PvICQz4/FaYvXQKYq/xhYdD FA2NRpnYYXM55NBONDLUmpC0PBYg2T4lYX3GCHWhRdYpj4kWQngG4Gpn0IoB8uaN hnW+f/2CuU3te1v/ujuO8ypQEOjsy8J+15V29qg8so18loRAoIF+LVs5iC/Ue/zE lda/aGqiM+nK/QGYmHKS9oDLIw9xZ/siQmomE9OJb6PVMmVZ7NO3B6eRMiImyFR+ QD9M9XXUH5eKkbHOGI0BhwxNAdQVc6Ro8x2jMIWOW2S1vAuEPqWvG//o/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFq+MunM9dXB+fLc2s2eM7mXvwITMB8GA1UdIwQY MBaAFOXHj6GZPUUS/iQ2uM7ai/ySnWV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWNlUG9aazlSUkwtSkRhNHp0cUxfSktkWlgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81YmIxZDAtNjM0ZS00NmZjLWE3NWEt MGM5YWE2Njk2YjQ5LzEvNWNlUG9aazlSUkwtSkRhNHp0cUxfSktkWlgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy81YmIxZDAtNjM0ZS00NmZjLWE3NWEtMGM5YWE2Njk2YjQ5 LzEvNWNlUG9aazlSUkwtSkRhNHp0cUxfSktkWlgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApOFjCehY TI+sDakZWXZ1uMsPBJ8LFXrDlDPNPaw4G3Ldcs4EKmNeu4lyVeDcqk9gFnopyBRG w+WWvAwj7djkSXDXHeKANZXjyKEAIgqY3G72oQ/U8yN7dT2f6wjUjqDSS4qrSlhP +Nj0hBhLVviaXmcTVgOCRWJTV+5CnvGnj9C6jdyoDP4AeRx7gf3lpZnt7vtpd/ij DSEiPHCENao8Ajz3Yq4SE3Aw5Eg/rqnAtsVSPTrqn4EIgsFbJD9+9FogCgEY5O5Y GNW8wWYr2cJEJmh52t0YyFeSSt5laUiujSLkVDbSYKVQu5MJg0UCpFrTz5K2A2hU t9U2lTXNL3NvPg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:11 2025 by rpki-client