This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft File: 5OF-B7BNx2ydbJH6_C1ahALGS44.mft (raw, json) Hash identifier: 8KSkU910K9E4tN8AjifIVQ54IpzhuPQFjviFHKxoeE8= Subject key identifier: C9:69:84:C3:A5:7E:2F:29:6D:6F:CA:79:EC:51:8D:94:21:E5:E4:63 Authority key identifier: E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E Certificate issuer: /CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e Certificate serial: 019AF23FA5FE8ADB425E5864A7A9C2893658 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft Manifest number: 14EA Signing time: Sat 06 Dec 2025 06:00:48 +0000 Manifest this update: Sat 06 Dec 2025 06:00:48 +0000 Manifest next update: Sun 07 Dec 2025 06:00:48 +0000 Files and hashes: 1: 5OF-B7BNx2ydbJH6_C1ahALGS44.crl (hash: W54F25Fe+Kbc6WDNY3/MTMoTxQ11ZWsimrGry+BSgdM=) 2: c7QJZpcKw5JtI5FMoVTzm0WUSCk.roa (hash: eFh5B28aZqPEyGFrbmBU9Qj8kztn04oOd68LadOBOHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a5:fe:8a:db:42:5e:58:64:a7:a9:c2:89:36:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e Validity Not Before: Dec 6 06:00:48 2025 GMT Not After : Dec 7 06:00:48 2025 GMT Subject: CN=c96984c3a57e2f296d6fca79ec518d9421e5e463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:db:e8:be:65:3a:53:52:aa:b7:9b:d8:58:41: 57:99:17:64:2d:04:e6:63:4a:a6:84:e9:c5:0c:79: 60:19:a2:43:02:ac:e2:34:15:96:29:d1:fa:f1:a7: d6:72:9c:75:75:37:2b:a8:f4:63:fd:c3:5b:1d:94: 99:53:18:55:24:fe:2f:a9:52:79:ce:90:ac:cf:1e: fd:3e:64:f2:ef:1c:63:70:9f:92:79:d5:54:06:06: ad:e6:84:ee:89:84:4b:7e:61:6b:4a:a2:9e:cd:31: 7d:58:e9:06:f6:64:5b:e1:19:1a:fb:12:1f:95:40: d6:9c:ec:a9:d5:e6:72:bd:87:69:d3:dd:0a:dd:ed: f6:7e:1e:36:c9:50:f5:dd:bd:62:93:d1:b0:f1:6b: 40:cb:46:e6:ea:fc:13:98:b2:52:90:67:9e:e4:f2: 30:0f:2c:6b:a7:97:a4:9f:8e:12:bb:4c:2a:58:f1: bc:ed:83:ce:01:86:a7:7f:a4:22:ca:c8:8b:4a:c8: 75:d5:a3:f9:58:e0:07:50:9b:c3:c1:14:73:46:23: d6:c3:94:57:10:d4:b7:74:1c:a4:46:ca:ce:fb:df: 7c:a6:00:bb:73:a6:4f:03:a3:fc:f6:96:56:08:82: 33:cc:53:4a:f4:99:31:91:cb:b0:58:c4:d1:fd:c0: 22:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:69:84:C3:A5:7E:2F:29:6D:6F:CA:79:EC:51:8D:94:21:E5:E4:63 X509v3 Authority Key Identifier: keyid:E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:13:8c:8e:ec:f6:e4:55:8e:ed:a5:14:5f:1b:ec:e0:07:ff: 41:8b:78:21:6d:0a:b9:40:73:a9:b7:12:9d:51:d6:7e:95:69: a3:a3:96:4f:3a:a4:53:9a:e6:5e:a7:bf:8d:7d:ca:69:50:e5: a9:59:fb:7b:59:74:b4:39:3d:90:bf:26:99:33:90:31:b7:83: 6a:2a:a4:91:52:ec:a5:b5:8e:e6:2f:b8:f0:e5:55:a9:98:f0: 19:69:3c:8f:00:af:b4:bc:f5:91:57:33:e5:c2:33:a9:69:5e: f1:e4:b5:da:9b:8b:08:6f:85:55:06:dc:94:4f:fe:ab:6d:ba: f2:cf:c9:6e:30:9b:ad:41:fe:1d:c6:03:1b:83:88:28:db:2c: 30:49:c8:30:d3:92:2e:b0:95:fe:e6:e5:5d:e8:b5:55:1d:63: 06:37:a1:18:9c:6d:af:69:c9:32:09:17:88:28:53:8b:ba:f8: 6d:09:7e:e4:5f:06:e4:08:78:fb:b8:1a:5c:67:f2:2a:3f:da: 51:73:bf:0d:6f:9f:0b:30:fc:0f:d5:5f:2d:1b:bb:6c:98:7e: d6:8e:ba:69:58:d0:b2:83:0e:da:92:b0:19:9e:04:f6:c5:60: 24:4f:b4:08:38:dc:fa:ef:6e:ea:db:b9:d2:e0:1f:6a:86:2b: e5:31:be:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6X+ittCXlhkp6nCiTZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZTE3ZTA3YjA0ZGM3NmM5ZDZjOTFmYWZjMmQ1YTg0MDJj NjRiOGUwHhcNMjUxMjA2MDYwMDQ4WhcNMjUxMjA3MDYwMDQ4WjAzMTEwLwYDVQQD EyhjOTY5ODRjM2E1N2UyZjI5NmQ2ZmNhNzllYzUxOGQ5NDIxZTVlNDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldvovmU6U1Kqt5vYWEFXmRdkLQTm Y0qmhOnFDHlgGaJDAqziNBWWKdH68afWcpx1dTcrqPRj/cNbHZSZUxhVJP4vqVJ5 zpCszx79PmTy7xxjcJ+SedVUBgat5oTuiYRLfmFrSqKezTF9WOkG9mRb4Rka+xIf lUDWnOyp1eZyvYdp090K3e32fh42yVD13b1ik9Gw8WtAy0bm6vwTmLJSkGee5PIw Dyxrp5ekn44Su0wqWPG87YPOAYanf6QiysiLSsh11aP5WOAHUJvDwRRzRiPWw5RX ENS3dBykRsrO+998pgC7c6ZPA6P89pZWCIIzzFNK9JkxkcuwWMTR/cAiZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlphMOlfi8pbW/KeexRjZQh5eRjMB8GA1UdIwQY MBaAFOThfgewTcdsnWyR+vwtWoQCxkuOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU9GLUI3Qk54MnlkYkpINl9DMWFoQUxHUzQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC80MmJlNWYtMjQzMi00ODk5LWE0ZmYt MTk4YWRkYTVhMjgxLzEvNU9GLUI3Qk54MnlkYkpINl9DMWFoQUxHUzQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC80MmJlNWYtMjQzMi00ODk5LWE0ZmYtMTk4YWRkYTVhMjgx LzEvNU9GLUI3Qk54MnlkYkpINl9DMWFoQUxHUzQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhOMjuz2 5FWO7aUUXxvs4Af/QYt4IW0KuUBzqbcSnVHWfpVpo6OWTzqkU5rmXqe/jX3KaVDl qVn7e1l0tDk9kL8mmTOQMbeDaiqkkVLspbWO5i+48OVVqZjwGWk8jwCvtLz1kVcz 5cIzqWle8eS12puLCG+FVQbclE/+q2268s/JbjCbrUH+HcYDG4OIKNssMEnIMNOS LrCV/ublXei1VR1jBjehGJxtr2nJMgkXiChTi7r4bQl+5F8G5Ah4+7gaXGfyKj/a UXO/DW+fCzD8D9VfLRu7bJh+1o66aVjQsoMO2pKwGZ4E9sVgJE+0CDjc+u9u6tu5 0uAfaoYr5TG+lw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:48 2025 by rpki-client