This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft File: 5NJxw_qQOlkP31SJlEnmmPLpxjI.mft (raw, json) Hash identifier: tl+oHXqS6834NV5KtzWiyQtmX75mtM5aTFjL1pR03JU= Subject key identifier: 02:3E:7C:24:07:D5:67:A6:8D:5E:BE:8D:31:69:A2:62:86:78:1C:99 Authority key identifier: E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32 Certificate issuer: /CN=e4d271c3fa903a590fdf54899449e698f2e9c632 Certificate serial: 019AF19ABC0D034FD3ECA1CBCEE3717A2EBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:00:40 +0000 Manifest this update: Sat 06 Dec 2025 03:00:40 +0000 Manifest next update: Sun 07 Dec 2025 03:00:40 +0000 Files and hashes: 1: 5NJxw_qQOlkP31SJlEnmmPLpxjI.crl (hash: +rRQqNCaRqlqowz29KjWXn67V/64VOPEsoCzNVyXc5k=) 2: uY1QhTOWxV4UKC9D82RM9yb0zNE.roa (hash: Bvx8t4Oi0CQUF3Zey6rE/7ccr+hwq753xh5wAVW5P6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:bc:0d:03:4f:d3:ec:a1:cb:ce:e3:71:7a:2e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4d271c3fa903a590fdf54899449e698f2e9c632 Validity Not Before: Dec 6 03:00:40 2025 GMT Not After : Dec 7 03:00:40 2025 GMT Subject: CN=023e7c2407d567a68d5ebe8d3169a26286781c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:08:cd:1e:0d:61:dc:f8:37:ff:41:58:6b: cd:cf:0c:32:0d:2a:8a:dd:cd:39:56:ce:5e:da:2e: 18:23:e6:2d:28:cd:ea:56:98:4f:db:ee:ee:f1:c3: 7c:ef:60:7b:5f:a9:11:2f:1b:a5:bc:05:7e:95:23: 17:1a:a9:25:da:c1:10:0a:78:69:d1:39:04:79:49: 2d:42:0d:74:45:33:2f:19:f7:c8:86:00:5a:7f:ae: 94:b6:66:4f:eb:cd:2c:70:af:0b:82:05:08:f0:0b: 2c:4b:ea:1b:89:27:00:05:93:d1:9e:2d:d6:b4:6c: 35:3f:6f:22:04:81:69:6e:96:9c:cd:c8:94:e6:eb: f7:da:ea:f8:fa:23:76:7e:73:ef:96:c9:60:3f:f4: 8a:93:02:e9:de:74:fb:da:b0:f1:88:7b:37:5c:02: 99:e5:6a:1d:9a:c4:37:b1:53:de:04:70:95:6c:a3: ed:a6:ee:70:a9:26:32:44:47:0c:f1:1b:a1:49:e7: b9:45:75:30:60:fc:b1:72:df:ec:c2:e7:07:cd:46: b8:f2:e7:5d:42:32:32:45:d2:45:52:8e:53:0e:d9: 5b:08:7a:c4:aa:1a:7a:fc:22:11:f2:24:e8:d5:1a: 76:a1:7b:cb:79:9c:39:98:f1:0e:4d:3f:cb:cd:b3: 81:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3E:7C:24:07:D5:67:A6:8D:5E:BE:8D:31:69:A2:62:86:78:1C:99 X509v3 Authority Key Identifier: keyid:E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:0d:d1:59:f8:84:80:99:ab:d3:29:03:23:8c:a2:78:df:89: 29:9a:58:91:13:45:1e:0d:99:75:cd:bd:7a:d1:44:6b:99:fc: 9a:cd:77:5b:bb:75:88:ea:13:39:3a:a1:59:cf:2c:b5:f5:1f: 29:26:f1:ca:53:f8:10:57:4c:a3:fe:72:b1:22:b6:53:ad:45: bd:87:3f:05:56:ce:d6:2d:d2:d9:1b:05:7e:51:9d:f0:1f:f6: fd:91:15:30:9c:11:f2:e8:e0:6c:2d:ec:c1:d7:08:59:66:7e: 34:62:28:bf:95:ff:b4:a2:c1:24:16:56:9d:3c:05:c8:42:74: 3d:69:4a:65:a5:62:3c:3c:f4:a4:4f:39:f1:d3:43:fc:b6:c4: c6:61:0a:5f:36:dd:b5:e5:01:63:cc:d3:6a:96:76:d0:80:0e: b9:b8:da:23:c3:03:21:22:ba:13:53:73:38:8b:99:50:62:ef: 58:c6:df:ff:6d:43:8f:c1:cf:cf:91:d0:23:bb:38:97:13:67: 05:00:ea:ad:74:46:37:56:4b:8d:15:97:38:08:6e:bf:7f:c2: 5b:29:be:44:13:36:46:5a:d4:97:28:94:cf:6f:2a:55:8a:04: a1:bd:98:35:31:0a:8c:74:95:2d:2b:03:1c:ed:45:0e:23:a1: 50:a5:ec:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrwNA0/T7KHLzuNxei66MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZDI3MWMzZmE5MDNhNTkwZmRmNTQ4OTk0NDllNjk4ZjJl OWM2MzIwHhcNMjUxMjA2MDMwMDQwWhcNMjUxMjA3MDMwMDQwWjAzMTEwLwYDVQQD EygwMjNlN2MyNDA3ZDU2N2E2OGQ1ZWJlOGQzMTY5YTI2Mjg2NzgxYzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxloIzR4NYdz4N/9BWGvNzwwyDSqK 3c05Vs5e2i4YI+YtKM3qVphP2+7u8cN872B7X6kRLxulvAV+lSMXGqkl2sEQCnhp 0TkEeUktQg10RTMvGffIhgBaf66UtmZP680scK8LggUI8AssS+obiScABZPRni3W tGw1P28iBIFpbpaczciU5uv32ur4+iN2fnPvlslgP/SKkwLp3nT72rDxiHs3XAKZ 5WodmsQ3sVPeBHCVbKPtpu5wqSYyREcM8RuhSee5RXUwYPyxct/swucHzUa48udd QjIyRdJFUo5TDtlbCHrEqhp6/CIR8iTo1Rp2oXvLeZw5mPEOTT/LzbOB4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAI+fCQH1WemjV6+jTFpomKGeByZMB8GA1UdIwQY MBaAFOTSccP6kDpZD99UiZRJ5pjy6cYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC84OTcwOTItMDc1MC00ZDk2LWIzMmYt NWYyMDUyMzZkZTFmLzEvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC84OTcwOTItMDc1MC00ZDk2LWIzMmYtNWYyMDUyMzZkZTFm LzEvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsA3RWfiE gJmr0ykDI4yieN+JKZpYkRNFHg2Zdc29etFEa5n8ms13W7t1iOoTOTqhWc8stfUf KSbxylP4EFdMo/5ysSK2U61FvYc/BVbO1i3S2RsFflGd8B/2/ZEVMJwR8ujgbC3s wdcIWWZ+NGIov5X/tKLBJBZWnTwFyEJ0PWlKZaViPDz0pE858dND/LbExmEKXzbd teUBY8zTapZ20IAOubjaI8MDISK6E1NzOIuZUGLvWMbf/21Dj8HPz5HQI7s4lxNn BQDqrXRGN1ZLjRWXOAhuv3/CWym+RBM2RlrUlyiUz28qVYoEob2YNTEKjHSVLSsD HO1FDiOhUKXsvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:17:01 2025 by rpki-client