This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft File: 5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json) Hash identifier: msdQaGAl2OJ/66NcnLupXqchQPQbu+XPzkCmxsTB5Y8= Subject key identifier: 60:B0:CC:14:81:BB:9E:97:D2:63:6A:5A:8A:3D:E6:7C:14:25:C6:E5 Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2 Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2 Certificate serial: 019AF1D1F5D93CCD69A433E10117477E73AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft Manifest number: 1347 Signing time: Sat 06 Dec 2025 04:01:00 +0000 Manifest this update: Sat 06 Dec 2025 04:01:00 +0000 Manifest next update: Sun 07 Dec 2025 04:01:00 +0000 Files and hashes: 1: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: eELzA+feQb20G4Cv/ggG6Z2QDQRUzMxLT2V5Ssj7dM4=) 2: Hhlf2TMcsBbO8FDcjvrbEjaLNJk.roa (hash: ZLATPH9bmMVI2zAzUVqtDm2hTynFHZLFVRo0ph7khAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f5:d9:3c:cd:69:a4:33:e1:01:17:47:7e:73:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2 Validity Not Before: Dec 6 04:01:00 2025 GMT Not After : Dec 7 04:01:00 2025 GMT Subject: CN=60b0cc1481bb9e97d2636a5a8a3de67c1425c6e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3c:ee:35:7d:4d:86:ac:30:8f:cb:61:4e:52: 60:da:bc:8a:a7:64:5f:73:66:b4:db:a6:10:7e:a1: 69:31:54:60:58:69:3d:e7:ca:db:f7:74:6a:6d:46: d0:6d:63:c4:53:f8:bb:a8:49:f4:17:40:a3:43:17: 21:37:b0:cf:b3:2d:b8:de:8d:d7:f6:16:87:6e:92: 49:e0:4f:75:98:f6:8a:3b:a6:28:e7:6f:f8:41:17: 7d:bb:b4:4d:21:55:da:b9:05:9f:0d:71:cc:66:c1: 69:57:83:77:47:0e:be:ff:58:7b:59:e1:44:43:c4: e2:fb:f4:c5:0f:ef:1c:6f:98:a6:28:49:c9:2c:86: b5:19:6e:dc:8a:92:bc:96:ec:a8:6e:4f:4b:c0:f5: 98:85:73:68:01:70:49:de:bb:f6:6b:0e:94:4b:57: 36:87:91:42:37:15:30:7b:e0:cc:c8:d4:01:08:8b: e7:40:c7:94:49:84:d7:1c:10:b6:e1:2b:2a:56:b4: 1a:31:9b:00:f0:89:c8:33:d0:23:e7:9b:99:e1:9e: 48:c3:18:9e:4c:2f:77:4d:de:39:7a:56:15:41:e5: 0f:22:a3:4a:9d:1a:5c:59:47:15:fd:ca:f9:cb:f7: 27:67:cb:94:dd:e2:aa:6e:9e:6c:d7:9d:45:01:53: a0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B0:CC:14:81:BB:9E:97:D2:63:6A:5A:8A:3D:E6:7C:14:25:C6:E5 X509v3 Authority Key Identifier: keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:7b:e0:d2:1a:76:c8:e8:7c:95:a6:e9:6f:b4:78:16:1f:2b: c4:58:8e:30:24:97:87:c6:9c:58:40:01:fd:76:4e:75:a8:2c: 76:8f:8f:e6:d3:16:b0:d9:f2:49:2b:25:5b:7f:5e:9e:03:a5: 1f:e4:aa:71:52:29:a4:40:c7:3e:db:3a:f5:14:22:6b:53:49: 5c:48:8f:b4:35:3a:fd:3e:a9:08:80:6b:13:43:36:92:77:49: 87:97:fd:00:ce:35:0e:2c:c8:38:63:80:97:00:77:d8:6a:f5: 37:5b:82:30:7f:bd:a9:f3:a8:e0:dd:ec:ee:dc:0d:c9:fa:da: 4a:0e:26:bd:7b:f2:c6:f8:94:5f:f3:3c:c3:02:36:44:05:f4: d6:68:f3:9e:30:8d:ca:1e:ba:01:89:02:d7:2a:79:52:55:70: 6b:a7:02:61:ef:ce:29:bf:21:90:68:41:35:fd:cb:8c:91:e4: b0:e2:9d:81:f9:45:39:3f:47:44:67:2e:4f:49:99:56:d9:0b: 9c:ad:47:82:52:a9:ed:90:b4:5e:e7:60:6d:0c:6b:67:3a:79: 8c:f3:2b:80:90:c2:ab:36:d8:5f:2a:47:ad:9b:80:6e:13:fd: 2f:f4:c5:b7:db:29:5c:76:80:14:f5:b7:03:bd:1c:1c:b2:bc: 84:81:cd:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fXZPM1ppDPhARdHfnOsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZGIwMzAxZmUyNDYxYzZkZTNmNzE4ZDg0N2NiNWRjN2Mw MGIyZDIwHhcNMjUxMjA2MDQwMTAwWhcNMjUxMjA3MDQwMTAwWjAzMTEwLwYDVQQD Eyg2MGIwY2MxNDgxYmI5ZTk3ZDI2MzZhNWE4YTNkZTY3YzE0MjVjNmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDzuNX1Nhqwwj8thTlJg2ryKp2Rf c2a026YQfqFpMVRgWGk958rb93RqbUbQbWPEU/i7qEn0F0CjQxchN7DPsy243o3X 9haHbpJJ4E91mPaKO6Yo52/4QRd9u7RNIVXauQWfDXHMZsFpV4N3Rw6+/1h7WeFE Q8Ti+/TFD+8cb5imKEnJLIa1GW7cipK8luyobk9LwPWYhXNoAXBJ3rv2aw6US1c2 h5FCNxUwe+DMyNQBCIvnQMeUSYTXHBC24SsqVrQaMZsA8InIM9Aj55uZ4Z5Iwxie TC93Td45elYVQeUPIqNKnRpcWUcV/cr5y/cnZ8uU3eKqbp5s151FAVOg9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCwzBSBu56X0mNqWoo95nwUJcblMB8GA1UdIwQY MBaAFOTbAwH+JGHG3j9xjYR8tdx8ALLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82ZTY0MDUtZGJlNy00MmIyLTg4N2Mt ZmZkZWJlYzhmNTA1LzEvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC82ZTY0MDUtZGJlNy00MmIyLTg4N2MtZmZkZWJlYzhmNTA1 LzEvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHvg0hp2 yOh8labpb7R4Fh8rxFiOMCSXh8acWEAB/XZOdagsdo+P5tMWsNnySSslW39engOl H+SqcVIppEDHPts69RQia1NJXEiPtDU6/T6pCIBrE0M2kndJh5f9AM41DizIOGOA lwB32Gr1N1uCMH+9qfOo4N3s7twNyfraSg4mvXvyxviUX/M8wwI2RAX01mjznjCN yh66AYkC1yp5UlVwa6cCYe/OKb8hkGhBNf3LjJHksOKdgflFOT9HRGcuT0mZVtkL nK1HglKp7ZC0XudgbQxrZzp5jPMrgJDCqzbYXypHrZuAbhP9L/TFt9spXHaAFPW3 A70cHLK8hIHNbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:55 2025 by rpki-client