This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft File: 5gSc-H3Y8f1MgCS1psnqlPF7b70.mft (raw, json) Hash identifier: tyaWgizJXsBGLtG7rwj1OWM5GUZQpFIDRHa73aEj0as= Subject key identifier: CD:28:E9:09:8A:B5:D3:08:B5:65:2C:A7:E2:53:C5:A1:FF:75:11:F2 Authority key identifier: E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD Certificate issuer: /CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd Certificate serial: 019B2EFA8556AAEF30C4FA8F6DBA4A4277E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft Manifest number: 1714 Signing time: Thu 18 Dec 2025 01:02:08 +0000 Manifest this update: Thu 18 Dec 2025 01:02:08 +0000 Manifest next update: Fri 19 Dec 2025 01:02:08 +0000 Files and hashes: 1: 5gSc-H3Y8f1MgCS1psnqlPF7b70.crl (hash: lpgQPNW+TNHPMtM0MK5cMx2Wd1phi7+W7RTebBPNE9A=) 2: cu8xrGCLqiGHp1db_MgiG0UxHW8.roa (hash: giP9e0QpRuK7Urrt2Hhvj2cOHwVCXlF67CRutRL96MA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:85:56:aa:ef:30:c4:fa:8f:6d:ba:4a:42:77:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd Validity Not Before: Dec 18 01:02:08 2025 GMT Not After : Dec 19 01:02:08 2025 GMT Subject: CN=cd28e9098ab5d308b5652ca7e253c5a1ff7511f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b9:8b:54:40:6b:08:80:80:94:30:e6:15:d0: 9b:84:fb:3b:44:ad:15:5d:f6:6d:fc:03:fa:3e:93: c5:b3:f7:96:b9:f9:7d:89:e7:a6:89:45:f1:b6:ce: cb:b4:29:54:42:c2:73:8e:24:4b:23:2e:e5:70:34: e8:89:5d:49:44:ad:2a:7f:5d:6f:c4:4d:96:ce:87: d1:7d:ee:0f:61:7f:93:8b:08:35:f1:a4:97:67:0e: 61:2f:6b:85:9b:45:c1:ed:a3:8c:48:13:d4:e7:65: 9a:09:66:68:ac:e1:d6:5b:2b:1e:c1:bc:65:d7:4e: bd:05:ae:d5:f9:00:58:c6:15:54:de:bc:49:a4:32: 93:9f:17:32:1e:83:29:6f:95:58:06:f9:99:8b:8f: 3d:52:d5:30:33:f0:7b:28:08:77:2b:7a:25:7a:b6: 3f:02:f7:95:a2:c0:43:6b:3e:24:ca:1b:36:f0:38: 77:5c:fc:9c:52:a3:41:f9:bd:e9:f6:97:60:9a:62: 5d:96:39:76:8f:b9:1e:15:47:93:29:1b:12:13:c4: f9:67:85:29:7e:f8:b5:93:57:c7:02:b6:90:c4:51: 4b:ce:67:f6:45:c7:95:5e:e4:04:d5:6e:df:0f:ee: f1:7b:6e:35:54:ea:99:d9:45:31:04:12:4a:1f:e7: de:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:28:E9:09:8A:B5:D3:08:B5:65:2C:A7:E2:53:C5:A1:FF:75:11:F2 X509v3 Authority Key Identifier: keyid:E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:7e:05:85:98:28:d2:19:f0:36:6a:fd:26:8e:7d:aa:13:09: b4:bd:6d:84:ae:73:06:2d:43:9e:c5:6f:90:93:fb:7d:a4:cd: ec:cc:71:25:5f:c7:ad:49:e5:3f:ba:97:0a:5c:2a:23:6c:1f: 33:6f:a2:90:5a:5c:c4:f4:67:75:7b:20:ab:01:fd:6b:fd:39: 6d:a5:15:3d:c7:d2:1d:e1:91:83:68:e5:d5:37:17:d5:eb:e7: 83:c6:a2:c3:95:fb:81:f0:06:a0:00:33:ae:9c:de:bc:71:28: 4f:37:b2:79:5b:44:28:08:28:b3:74:dc:d1:6a:18:ad:9d:5d: 66:82:67:ce:20:99:0b:37:81:78:dc:ae:25:f5:a7:9e:a5:05: 4f:a5:66:b9:3f:7b:b0:55:6b:8c:80:41:92:6f:88:2c:3b:1a: a2:41:2d:c3:13:3b:dd:44:5d:16:db:f2:2f:83:b7:29:84:d0: 83:b2:3b:eb:98:ce:5c:46:6d:81:9c:9e:09:ba:a8:65:6a:ed: 30:86:5a:d2:c7:0a:44:91:01:70:4a:8c:90:05:77:c4:d3:44: ae:01:14:e9:d5:7d:8f:5a:36:91:d1:86:00:4f:b7:58:a2:04: 80:88:8f:86:5a:27:1b:25:37:a7:92:55:14:5b:f1:ad:39:20: d2:0a:8e:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+oVWqu8wxPqPbbpKQnflMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MDQ5Y2Y4N2RkOGYxZmQ0YzgwMjRiNWE2YzllYTk0ZjE3 YjZmYmQwHhcNMjUxMjE4MDEwMjA4WhcNMjUxMjE5MDEwMjA4WjAzMTEwLwYDVQQD EyhjZDI4ZTkwOThhYjVkMzA4YjU2NTJjYTdlMjUzYzVhMWZmNzUxMWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrmLVEBrCICAlDDmFdCbhPs7RK0V XfZt/AP6PpPFs/eWufl9ieemiUXxts7LtClUQsJzjiRLIy7lcDToiV1JRK0qf11v xE2WzofRfe4PYX+Tiwg18aSXZw5hL2uFm0XB7aOMSBPU52WaCWZorOHWWysewbxl 1069Ba7V+QBYxhVU3rxJpDKTnxcyHoMpb5VYBvmZi489UtUwM/B7KAh3K3olerY/ AveVosBDaz4kyhs28Dh3XPycUqNB+b3p9pdgmmJdljl2j7keFUeTKRsSE8T5Z4Up fvi1k1fHAraQxFFLzmf2RceVXuQE1W7fD+7xe241VOqZ2UUxBBJKH+feQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0o6QmKtdMItWUsp+JTxaH/dRHyMB8GA1UdIwQY MBaAFOYEnPh92PH9TIAktabJ6pTxe2+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWdTYy1IM1k4ZjFNZ0NTMXBzbnFsUEY3YjcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wNjBjZWEtZTkyMC00MGRlLTkwZGEt OGQ0OWViY2FlOWIzLzEvNWdTYy1IM1k4ZjFNZ0NTMXBzbnFsUEY3YjcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8wNjBjZWEtZTkyMC00MGRlLTkwZGEtOGQ0OWViY2FlOWIz LzEvNWdTYy1IM1k4ZjFNZ0NTMXBzbnFsUEY3YjcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjX4FhZgo 0hnwNmr9Jo59qhMJtL1thK5zBi1DnsVvkJP7faTN7MxxJV/HrUnlP7qXClwqI2wf M2+ikFpcxPRndXsgqwH9a/05baUVPcfSHeGRg2jl1TcX1evng8aiw5X7gfAGoAAz rpzevHEoTzeyeVtEKAgos3Tc0WoYrZ1dZoJnziCZCzeBeNyuJfWnnqUFT6VmuT97 sFVrjIBBkm+ILDsaokEtwxM73URdFtvyL4O3KYTQg7I765jOXEZtgZyeCbqoZWrt MIZa0scKRJEBcEqMkAV3xNNErgEU6dV9j1o2kdGGAE+3WKIEgIiPhlonGyU3p5JV FFvxrTkg0gqO0Q== -----END CERTIFICATE-----Generated at Thu Dec 18 07:09:36 2025 by rpki-client