This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft File: t5VYLHMwLrCpdEd2AwSYUIM70hA.mft (raw, json) Hash identifier: ciFrPR5V+ROVHFbpaayTaSonc/2UzBfQUNBh9v5eYiE= Subject key identifier: 1E:99:6B:86:21:D2:E6:90:0C:70:52:F9:D1:1B:5A:17:8F:20:A1:95 Authority key identifier: B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10 Certificate issuer: /CN=b795582c73302eb0a974477603049850833bd210 Certificate serial: 019AF31CF2339D2BECE8658BD94E19030711 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:02:31 +0000 Manifest this update: Sat 06 Dec 2025 10:02:31 +0000 Manifest next update: Sun 07 Dec 2025 10:02:31 +0000 Files and hashes: 1: BHWwRry-UijUF9-7a9qe-3in6HE.roa (hash: GplxxbcF603HuP5zyFWWBxSgE208s+IGY7yLNmT6LyQ=) 2: t5VYLHMwLrCpdEd2AwSYUIM70hA.crl (hash: bAQYokEONgvJKxIhNvoJQWVwt+iwEVoEO54XaSfyW8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:f2:33:9d:2b:ec:e8:65:8b:d9:4e:19:03:07:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b795582c73302eb0a974477603049850833bd210 Validity Not Before: Dec 6 10:02:31 2025 GMT Not After : Dec 7 10:02:31 2025 GMT Subject: CN=1e996b8621d2e6900c7052f9d11b5a178f20a195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:92:5b:51:89:b7:77:cc:28:39:01:7d:36:93: e7:4c:56:91:b7:eb:3a:00:e2:49:0d:40:76:91:65: 97:a9:86:cc:ae:c8:bf:73:fd:8c:3f:47:53:bd:bd: bb:2d:04:f5:2e:05:73:0a:a7:07:39:3e:d3:26:e2: 02:4a:a5:c1:c6:fd:52:e8:fa:3d:76:d1:0e:81:87: bc:1b:67:95:60:85:4c:c9:81:de:3b:9f:7f:27:3b: 31:82:fc:a0:69:79:78:89:80:b1:0d:c2:3a:bc:27: ab:7c:8f:ed:f2:67:43:16:0b:c2:ca:bd:de:bb:6c: 0c:5c:35:9a:44:8b:26:3b:21:3d:9b:57:eb:bd:56: 5b:6e:f0:27:eb:5b:54:08:3a:14:7d:fc:e7:89:99: 74:42:80:e3:b4:77:ef:8d:36:cc:f1:16:2d:5a:22: 7e:1d:bc:de:79:3e:00:8e:1a:96:b7:ce:09:7b:db: 0d:f9:3b:56:b9:54:7d:7d:32:f2:ef:50:e5:df:27: a1:a3:27:f5:f9:58:da:de:77:34:e9:de:3b:29:36: ec:b2:69:7a:bc:f6:4c:6d:a9:60:ca:54:87:ce:8e: 42:bb:72:70:7d:70:4a:37:9b:8c:8d:ba:03:80:90: 46:ed:98:fa:6e:eb:ec:71:65:f6:54:bd:bd:a5:1f: 4b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:99:6B:86:21:D2:E6:90:0C:70:52:F9:D1:1B:5A:17:8F:20:A1:95 X509v3 Authority Key Identifier: keyid:B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:1d:59:bc:2a:1c:38:4a:d0:8e:bf:e6:4e:ca:bf:4a:50:54: ad:88:f2:0a:f8:e7:7b:12:f4:6e:6c:e8:6a:46:d1:d3:d1:94: af:02:05:e4:7b:87:e7:b8:98:23:53:54:cd:c6:76:41:53:85: 67:5f:99:29:7f:7d:3f:8a:98:e1:4e:bb:de:f1:34:8d:5b:7f: b3:bc:60:b4:0d:6a:b1:2d:eb:83:bb:55:7a:ad:5b:b7:cf:e8: bf:f1:c1:e2:04:01:84:b2:71:4f:ac:c2:e7:65:cf:36:f2:55: c6:a0:11:8e:d9:50:59:d2:20:a9:a6:03:9d:8f:22:a9:41:50: 86:cb:26:f9:fa:77:5b:9e:21:bd:d7:87:56:c0:74:31:44:3b: 00:52:b5:8c:ae:55:92:25:03:7d:67:d8:51:cd:c1:b3:08:bc: 01:38:79:fb:bc:e5:31:4c:63:1a:dd:53:20:c9:2d:a6:14:89: 64:2f:4f:9b:09:d2:23:f7:7b:30:fc:2f:da:6d:98:58:67:13: 7c:cd:d1:04:f7:b8:46:fb:ab:a3:51:87:74:46:9a:83:47:32: 88:63:9f:bf:5b:be:7b:cd:27:97:3f:4a:ed:e7:f9:5b:60:15: 59:0c:72:d8:59:08:6f:11:ec:57:67:48:83:9b:85:f5:c3:ae: 4d:50:a4:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHPIznSvs6GWL2U4ZAwcRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OTU1ODJjNzMzMDJlYjBhOTc0NDc3NjAzMDQ5ODUwODMz YmQyMTAwHhcNMjUxMjA2MTAwMjMxWhcNMjUxMjA3MTAwMjMxWjAzMTEwLwYDVQQD EygxZTk5NmI4NjIxZDJlNjkwMGM3MDUyZjlkMTFiNWExNzhmMjBhMTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZJbUYm3d8woOQF9NpPnTFaRt+s6 AOJJDUB2kWWXqYbMrsi/c/2MP0dTvb27LQT1LgVzCqcHOT7TJuICSqXBxv1S6Po9 dtEOgYe8G2eVYIVMyYHeO59/JzsxgvygaXl4iYCxDcI6vCerfI/t8mdDFgvCyr3e u2wMXDWaRIsmOyE9m1frvVZbbvAn61tUCDoUffzniZl0QoDjtHfvjTbM8RYtWiJ+ HbzeeT4AjhqWt84Je9sN+TtWuVR9fTLy71Dl3yehoyf1+Vja3nc06d47KTbssml6 vPZMbalgylSHzo5Cu3JwfXBKN5uMjboDgJBG7Zj6buvscWX2VL29pR9LpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6Za4Yh0uaQDHBS+dEbWhePIKGVMB8GA1UdIwQY MBaAFLeVWCxzMC6wqXRHdgMEmFCDO9IQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDVWWUxITXdMckNwZEVkMkF3U1lVSU03MGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81N2QzMGEtMDU1Mi00NWY2LTllYmMt YzJiZDVmYzA0NDI0LzEvdDVWWUxITXdMckNwZEVkMkF3U1lVSU03MGhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS81N2QzMGEtMDU1Mi00NWY2LTllYmMtYzJiZDVmYzA0NDI0 LzEvdDVWWUxITXdMckNwZEVkMkF3U1lVSU03MGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWh1ZvCoc OErQjr/mTsq/SlBUrYjyCvjnexL0bmzoakbR09GUrwIF5HuH57iYI1NUzcZ2QVOF Z1+ZKX99P4qY4U673vE0jVt/s7xgtA1qsS3rg7tVeq1bt8/ov/HB4gQBhLJxT6zC 52XPNvJVxqARjtlQWdIgqaYDnY8iqUFQhssm+fp3W54hvdeHVsB0MUQ7AFK1jK5V kiUDfWfYUc3Bswi8ATh5+7zlMUxjGt1TIMktphSJZC9PmwnSI/d7MPwv2m2YWGcT fM3RBPe4Rvuro1GHdEaag0cyiGOfv1u+e80nlz9K7ef5W2AVWQxy2FkIbxHsV2dI g5uF9cOuTVCkRA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:20:54 2025 by rpki-client