This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft File: 5gSc-H3Y8f1MgCS1psnqlPF7b70.mft (raw, json) Hash identifier: SHasRd/U9yeiAWBMWU3sWY5kWH+WItS995hFq1T1ukA= Subject key identifier: 02:34:01:1C:2B:C4:EF:56:5C:5D:B1:FF:2C:E2:99:D0:41:4D:69:DF Authority key identifier: E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD Certificate issuer: /CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd Certificate serial: 019AF31B1DCBB335C670DF96FF4D11E0D07B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 10:00:31 +0000 Manifest this update: Sat 06 Dec 2025 10:00:31 +0000 Manifest next update: Sun 07 Dec 2025 10:00:31 +0000 Files and hashes: 1: 5gSc-H3Y8f1MgCS1psnqlPF7b70.crl (hash: FfJ8g1FrRJ1Lf7ikLcj9Th4HPSjQb3WzCEN45l56mDY=) 2: cu8xrGCLqiGHp1db_MgiG0UxHW8.roa (hash: giP9e0QpRuK7Urrt2Hhvj2cOHwVCXlF67CRutRL96MA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:1d:cb:b3:35:c6:70:df:96:ff:4d:11:e0:d0:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd Validity Not Before: Dec 6 10:00:31 2025 GMT Not After : Dec 7 10:00:31 2025 GMT Subject: CN=0234011c2bc4ef565c5db1ff2ce299d0414d69df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:91:ac:3b:ad:29:39:b5:5f:12:c1:1a:4a:a7: fa:c2:66:5a:07:b7:57:48:bb:6e:d1:b2:ae:d2:96: 14:f1:ed:09:1d:2b:2a:b9:32:5d:48:35:5c:6e:64: f9:d1:ab:ef:e3:b8:77:40:77:57:73:2b:8f:d1:b6: 3c:eb:db:7f:83:65:ef:8a:e8:ac:e4:ba:a5:1d:dc: 9e:06:d3:b2:42:59:70:b2:58:4b:5e:70:5d:8f:92: 0c:66:5f:d4:9c:d3:16:31:70:33:f7:a9:6c:13:6f: 89:ef:95:5d:36:78:3a:02:53:78:9c:aa:12:32:54: 20:2e:77:d2:3d:b7:47:f4:b2:4a:e3:51:56:24:57: b5:23:b4:45:4b:fd:63:69:10:23:f3:fe:d4:95:be: 59:05:24:e2:43:8f:dc:5b:7d:0c:85:21:0d:9b:c2: 2f:9d:50:ed:de:09:e6:09:c3:8b:b0:5e:83:ee:4d: 33:7f:d9:db:ac:a1:44:a3:4a:c8:66:1a:27:8e:96: a2:36:54:d6:ee:d9:37:25:17:a6:ce:01:25:2e:60: 1f:33:53:2c:53:d7:96:33:22:95:d5:00:c1:bf:12: eb:c3:80:22:d5:cb:2c:6d:fb:7f:d4:a8:b9:bd:a6: d6:87:57:8f:ff:80:5c:a8:bf:3e:18:cc:61:ce:c9: 81:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:34:01:1C:2B:C4:EF:56:5C:5D:B1:FF:2C:E2:99:D0:41:4D:69:DF X509v3 Authority Key Identifier: keyid:E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:37:26:29:2e:de:91:f8:21:15:d8:44:bf:54:90:44:68:a3: e4:80:b6:c1:8b:48:6d:e1:f6:51:c4:d4:8f:a4:f2:c5:85:f2: 87:5b:c1:af:b6:5c:13:17:4c:3c:79:ae:77:dd:8d:1d:9c:6f: 3e:a7:dd:4f:cc:52:c3:63:60:fb:8e:ce:18:3e:c0:38:9b:da: 4f:30:2e:fc:a4:14:f7:10:35:37:16:46:bd:97:e0:13:b6:a5: 02:87:41:4b:e2:7d:4a:65:37:d2:d5:99:55:cc:31:93:5a:b7: 8a:28:0f:46:42:73:57:a8:a8:a2:4d:cb:81:63:61:59:ba:c8: b5:c6:ad:9d:54:13:b7:9e:c4:66:ca:e5:dd:50:6a:71:fb:55: e5:e6:d4:f3:b7:d2:94:08:9b:07:98:52:ad:c6:17:14:33:50: 88:96:21:08:2a:81:66:a4:be:b2:62:d2:13:2a:48:88:64:ec: 10:2f:56:ae:92:9e:18:01:30:d0:3d:2d:0c:10:76:a0:7e:71: 6b:e3:f3:48:d7:af:23:02:38:a3:b5:bf:ec:51:ad:d5:4e:9e: 9f:5e:f4:74:b4:ae:51:f1:8b:28:91:08:27:38:89:55:0a:62: d1:30:5f:63:c4:7d:79:f9:75:e8:39:92:fb:10:a2:d0:ce:a6: 24:01:35:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGx3LszXGcN+W/00R4NB7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MDQ5Y2Y4N2RkOGYxZmQ0YzgwMjRiNWE2YzllYTk0ZjE3 YjZmYmQwHhcNMjUxMjA2MTAwMDMxWhcNMjUxMjA3MTAwMDMxWjAzMTEwLwYDVQQD EygwMjM0MDExYzJiYzRlZjU2NWM1ZGIxZmYyY2UyOTlkMDQxNGQ2OWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZGsO60pObVfEsEaSqf6wmZaB7dX SLtu0bKu0pYU8e0JHSsquTJdSDVcbmT50avv47h3QHdXcyuP0bY869t/g2Xviuis 5LqlHdyeBtOyQllwslhLXnBdj5IMZl/UnNMWMXAz96lsE2+J75VdNng6AlN4nKoS MlQgLnfSPbdH9LJK41FWJFe1I7RFS/1jaRAj8/7Ulb5ZBSTiQ4/cW30MhSENm8Iv nVDt3gnmCcOLsF6D7k0zf9nbrKFEo0rIZhonjpaiNlTW7tk3JRemzgElLmAfM1Ms U9eWMyKV1QDBvxLrw4Ai1cssbft/1Ki5vabWh1eP/4BcqL8+GMxhzsmBMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAI0ARwrxO9WXF2x/yzimdBBTWnfMB8GA1UdIwQY MBaAFOYEnPh92PH9TIAktabJ6pTxe2+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWdTYy1IM1k4ZjFNZ0NTMXBzbnFsUEY3YjcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wNjBjZWEtZTkyMC00MGRlLTkwZGEt OGQ0OWViY2FlOWIzLzEvNWdTYy1IM1k4ZjFNZ0NTMXBzbnFsUEY3YjcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8wNjBjZWEtZTkyMC00MGRlLTkwZGEtOGQ0OWViY2FlOWIz LzEvNWdTYy1IM1k4ZjFNZ0NTMXBzbnFsUEY3YjcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTcmKS7e kfghFdhEv1SQRGij5IC2wYtIbeH2UcTUj6TyxYXyh1vBr7ZcExdMPHmud92NHZxv PqfdT8xSw2Ng+47OGD7AOJvaTzAu/KQU9xA1NxZGvZfgE7alAodBS+J9SmU30tWZ Vcwxk1q3iigPRkJzV6iook3LgWNhWbrItcatnVQTt57EZsrl3VBqcftV5ebU87fS lAibB5hSrcYXFDNQiJYhCCqBZqS+smLSEypIiGTsEC9WrpKeGAEw0D0tDBB2oH5x a+PzSNevIwI4o7W/7FGt1U6en170dLSuUfGLKJEIJziJVQpi0TBfY8R9efl16DmS +xCi0M6mJAE1fw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:58 2025 by rpki-client