This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft File: 00_-5-di-aBv4vR-eh5S2eun-v0.mft (raw, json) Hash identifier: sDTeVML9DYqeIdftmQ8IERPF5S868LRxyrWfPnp5HSY= Subject key identifier: 57:20:50:38:87:11:E5:F9:24:C0:AD:0D:B4:F9:CE:DE:53:01:EA:9E Authority key identifier: D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD Certificate issuer: /CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd Certificate serial: 019AF051C09AE0F73803A71ED0721247E047 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft Manifest number: 11AD Signing time: Fri 05 Dec 2025 21:01:20 +0000 Manifest this update: Fri 05 Dec 2025 21:01:20 +0000 Manifest next update: Sat 06 Dec 2025 21:01:20 +0000 Files and hashes: 1: 00_-5-di-aBv4vR-eh5S2eun-v0.crl (hash: rZcUYCLUr2F7avmH/4HaS40qZpXOSrQ/b/wI1H0ZlsA=) 2: RTZF1pckQ5UHtLDFfMIz6CKlCQM.roa (hash: OSpIkZE/LwbO5i/Rwo6y7sjYoRsMMhhcextuc6NzOpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:c0:9a:e0:f7:38:03:a7:1e:d0:72:12:47:e0:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd Validity Not Before: Dec 5 21:01:20 2025 GMT Not After : Dec 6 21:01:20 2025 GMT Subject: CN=572050388711e5f924c0ad0db4f9cede5301ea9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:75:fd:4a:04:f3:c9:8d:1c:60:36:82:be:fd: 3b:b5:f6:10:f3:8f:d7:dc:ba:72:b2:bd:ef:2c:b5: 26:a2:66:03:18:76:2a:fd:1d:9a:fa:5c:db:1e:97: 0d:fd:37:a9:18:f6:6e:21:f3:c4:b8:14:0d:28:f0: a5:16:b9:c1:af:e4:09:4a:d1:ce:f6:4b:66:b9:d1: 3e:84:0a:ef:3b:37:8c:1d:c2:71:68:68:42:54:a0: 4a:95:01:4a:e1:60:87:48:42:d4:78:d2:0c:59:d6: 0e:74:b5:ac:e0:8b:20:89:67:58:f1:06:91:60:68: 52:eb:27:81:dd:57:a7:fb:4a:87:a9:62:fd:77:24: f6:f1:1e:69:4e:92:fc:eb:28:52:a3:f7:71:16:4a: 89:49:11:28:b2:b0:55:bd:08:d3:fb:62:02:1b:34: ec:7f:ea:db:0a:f9:65:da:51:3e:54:11:1e:46:b7: af:56:8c:3f:3e:39:bd:2a:6f:07:28:ad:94:0a:2a: fb:bd:c1:5d:5d:63:f3:97:30:4c:19:f5:38:92:ae: 59:54:46:04:71:92:0e:bd:6e:9a:3c:fa:0a:54:b3: 40:7c:7f:56:fe:dd:70:50:d1:bc:27:d7:f9:ab:e5: 9f:ee:7d:cb:51:92:32:a1:9a:60:ba:1a:3e:a3:b7: 2f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:20:50:38:87:11:E5:F9:24:C0:AD:0D:B4:F9:CE:DE:53:01:EA:9E X509v3 Authority Key Identifier: keyid:D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f3:c4:d4:29:93:6b:98:21:d8:84:29:35:39:fd:b9:9d:d3: f5:46:41:b8:66:a5:80:6c:e2:40:55:83:db:07:f3:fc:15:33: 64:c0:4b:2d:13:9f:7c:df:42:49:92:0b:d8:bc:e1:6a:83:ec: 66:3d:e4:d7:61:cb:e9:b7:5f:31:7d:e1:d2:4f:35:bb:9e:b9: d1:59:eb:ec:4a:c0:76:df:5b:32:d0:9b:fd:81:3b:9e:3d:24: 69:ce:0a:71:69:68:5a:cf:f4:3f:44:cc:c5:72:65:9b:40:c6: 4e:8d:8e:95:bc:98:d4:68:59:5d:a4:73:23:fa:7c:22:99:67: 81:51:26:8e:1b:bc:ad:62:85:e8:de:2e:cf:15:d3:bc:57:f0: 06:ed:fe:9f:10:5b:9d:70:eb:59:e8:5e:37:a7:5c:b4:24:f4: 6b:a0:0b:6c:d3:ef:29:c8:69:84:f8:02:b2:41:13:f9:68:32: 5c:3a:23:f2:ec:f8:84:0b:f9:c6:15:0a:6b:4b:8a:fb:2b:29: c8:a0:ab:2f:7b:e1:54:bb:e8:af:73:db:6a:66:6a:d8:13:50: 3c:12:05:82:ab:86:0c:16:20:c0:c7:94:d5:b1:73:98:52:e9: 24:18:2a:09:fb:6a:a6:f8:85:00:a8:14:92:f1:89:ee:82:06: 3b:37:c7:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUcCa4Pc4A6ce0HISR+BHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNGZmZWU3ZTc2MmY5YTA2ZmUyZjQ3ZTdhMWU1MmQ5ZWJh N2ZhZmQwHhcNMjUxMjA1MjEwMTIwWhcNMjUxMjA2MjEwMTIwWjAzMTEwLwYDVQQD Eyg1NzIwNTAzODg3MTFlNWY5MjRjMGFkMGRiNGY5Y2VkZTUzMDFlYTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnX9SgTzyY0cYDaCvv07tfYQ84/X 3Lpysr3vLLUmomYDGHYq/R2a+lzbHpcN/TepGPZuIfPEuBQNKPClFrnBr+QJStHO 9ktmudE+hArvOzeMHcJxaGhCVKBKlQFK4WCHSELUeNIMWdYOdLWs4IsgiWdY8QaR YGhS6yeB3Ven+0qHqWL9dyT28R5pTpL86yhSo/dxFkqJSREosrBVvQjT+2ICGzTs f+rbCvll2lE+VBEeRrevVow/Pjm9Km8HKK2UCir7vcFdXWPzlzBMGfU4kq5ZVEYE cZIOvW6aPPoKVLNAfH9W/t1wUNG8J9f5q+Wf7n3LUZIyoZpguho+o7cvhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcgUDiHEeX5JMCtDbT5zt5TAeqeMB8GA1UdIwQY MBaAFNNP/ufnYvmgb+L0fnoeUtnrp/r9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDBfLTUtZGktYUJ2NHZSLWVoNVMyZXVuLXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYjhkOTItZTE1Ny00MTQxLTgyYzkt ODdlMWYzODY2MzYyLzEvMDBfLTUtZGktYUJ2NHZSLWVoNVMyZXVuLXYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xYjhkOTItZTE1Ny00MTQxLTgyYzktODdlMWYzODY2MzYy LzEvMDBfLTUtZGktYUJ2NHZSLWVoNVMyZXVuLXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbPPE1CmT a5gh2IQpNTn9uZ3T9UZBuGalgGziQFWD2wfz/BUzZMBLLROffN9CSZIL2LzhaoPs Zj3k12HL6bdfMX3h0k81u5650Vnr7ErAdt9bMtCb/YE7nj0kac4KcWloWs/0P0TM xXJlm0DGTo2OlbyY1GhZXaRzI/p8IplngVEmjhu8rWKF6N4uzxXTvFfwBu3+nxBb nXDrWeheN6dctCT0a6ALbNPvKchphPgCskET+WgyXDoj8uz4hAv5xhUKa0uK+ysp yKCrL3vhVLvor3PbamZq2BNQPBIFgquGDBYgwMeU1bFzmFLpJBgqCftqpviFAKgU kvGJ7oIGOzfHdw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:36 2025 by rpki-client