This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft File: i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json) Hash identifier: PsKxSMYFQIZ9wouZf7xkViuZoKFaifeixAJ3L4X35Z0= Subject key identifier: E5:D1:EC:5E:DB:75:BB:1C:0A:0F:A2:16:BC:EE:58:1F:E2:B4:34:FA Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac Certificate serial: 019AF23FF10AEB8EBA5CB198366C9A2C8E19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft Manifest number: 0590 Signing time: Sat 06 Dec 2025 06:01:07 +0000 Manifest this update: Sat 06 Dec 2025 06:01:07 +0000 Manifest next update: Sun 07 Dec 2025 06:01:07 +0000 Files and hashes: 1: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: IRB/JIgYrXWF9u+IgiyTTFE98I18z/N67ZkCz06akv8=) 2: tCW9fwISpjkcZibIaKBsjXs7N7A.roa (hash: NwxiC6aogmrL5itM5Y4be2nBp9O9LLOH8w2QrDP5u38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f1:0a:eb:8e:ba:5c:b1:98:36:6c:9a:2c:8e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac Validity Not Before: Dec 6 06:01:07 2025 GMT Not After : Dec 7 06:01:07 2025 GMT Subject: CN=e5d1ec5edb75bb1c0a0fa216bcee581fe2b434fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e0:91:69:bb:c0:22:48:8c:80:ec:80:e1:3c: ee:27:52:8c:8c:d9:2b:6e:0b:0d:59:ee:a7:6b:67: 30:56:99:c5:a5:36:68:b6:77:1c:a7:bd:72:2a:72: d5:6b:46:2c:5a:75:87:92:ce:47:a2:51:6b:12:03: fd:e5:34:0a:f3:6b:ca:83:21:b4:b9:51:b7:e2:c1: 5c:89:59:f4:fb:7e:39:5e:8f:85:3b:3b:ef:37:e8: cf:e2:0a:c0:7c:bc:91:7a:7b:a8:ee:b8:27:65:ec: 07:79:57:43:28:6b:c1:50:56:f9:12:6e:b3:2a:cd: 73:42:27:af:61:0e:42:25:72:e7:57:e7:e6:7d:fb: cf:a5:a2:38:1e:c5:cc:e8:e9:f3:db:4c:bc:1b:8e: 55:b2:7a:6f:a5:85:2d:e9:31:c9:68:51:b0:33:d3: 85:b0:f0:2f:64:48:95:b4:a0:47:fd:b6:2d:49:9e: 63:32:7f:18:f5:ec:2b:30:22:e8:bb:68:73:e9:21: a8:f8:7e:16:e1:14:1d:a1:dd:17:d9:95:8d:1e:35: 51:e9:b5:db:70:3f:8b:2b:3f:9b:55:1f:5f:2c:9d: 48:0e:b7:7e:3d:68:a9:47:50:ed:39:24:8f:22:4d: f0:7d:7c:f6:8b:16:1b:ca:2f:20:94:07:b7:27:4d: ef:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D1:EC:5E:DB:75:BB:1C:0A:0F:A2:16:BC:EE:58:1F:E2:B4:34:FA X509v3 Authority Key Identifier: keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:f2:15:cc:5c:19:be:d5:79:d2:1f:ad:1c:37:3d:8a:92:bc: 75:70:42:89:4b:49:d5:cc:9c:ee:a9:31:66:79:93:37:ad:56: 0c:e6:6f:38:fe:e4:4b:dd:f8:18:c0:c6:05:0d:96:37:51:72: c1:71:02:3c:99:cf:4f:f3:f1:19:b2:fd:d6:99:da:d3:c2:69: b3:72:64:ab:f9:a1:1d:07:c8:b6:14:07:93:3a:96:3f:e4:a4: fa:09:89:17:eb:b2:f4:a6:d9:79:a7:58:a8:f0:3f:27:e5:87: 33:06:99:7f:e2:b2:24:b7:c5:a1:e1:6c:bf:97:8d:a4:74:65: 70:53:5d:e5:d1:01:37:24:06:7b:0f:86:83:6f:e4:75:03:ee: a4:aa:9c:9a:a8:1b:08:4c:4e:3d:12:ec:4d:7f:de:61:4b:89: f2:b5:f2:02:ec:1c:f8:9f:c8:f4:44:7e:82:19:ba:b7:f8:cd: db:b5:91:a3:7d:3e:e8:c4:77:29:21:66:e6:36:23:8d:9e:34: c1:e9:35:8a:31:b3:8d:40:5b:bd:a4:0f:85:89:d8:e7:0d:ab: b5:29:3b:9b:b3:34:4e:d4:df:cc:10:d1:1b:38:49:04:bc:ad: c1:ff:ce:de:92:a5:2b:c6:a6:c3:5d:16:8c:ef:0e:5a:38:8e: ef:f2:91:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/EK6466XLGYNmyaLI4ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOWNjNTdjYTg0NzIzYWVjMjg0MTE0NWY2ZjdkMzAxYmRm MzViYWMwHhcNMjUxMjA2MDYwMTA3WhcNMjUxMjA3MDYwMTA3WjAzMTEwLwYDVQQD EyhlNWQxZWM1ZWRiNzViYjFjMGEwZmEyMTZiY2VlNTgxZmUyYjQzNGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOCRabvAIkiMgOyA4TzuJ1KMjNkr bgsNWe6na2cwVpnFpTZotnccp71yKnLVa0YsWnWHks5HolFrEgP95TQK82vKgyG0 uVG34sFciVn0+345Xo+FOzvvN+jP4grAfLyRenuo7rgnZewHeVdDKGvBUFb5Em6z Ks1zQievYQ5CJXLnV+fmffvPpaI4HsXM6Onz20y8G45VsnpvpYUt6THJaFGwM9OF sPAvZEiVtKBH/bYtSZ5jMn8Y9ewrMCLou2hz6SGo+H4W4RQdod0X2ZWNHjVR6bXb cD+LKz+bVR9fLJ1IDrd+PWipR1DtOSSPIk3wfXz2ixYbyi8glAe3J03vhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXR7F7bdbscCg+iFrzuWB/itDT6MB8GA1UdIwQY MBaAFIucxXyoRyOuwoQRRfb30wG981usMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTV6RmZLaEhJNjdDaEJGRjl2ZlRBYjN6VzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zOGU2ZjctNGUzNS00YzJkLTk5Nzct MDk3Y2I4ZGYyYTI0LzEvaTV6RmZLaEhJNjdDaEJGRjl2ZlRBYjN6VzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zOGU2ZjctNGUzNS00YzJkLTk5NzctMDk3Y2I4ZGYyYTI0 LzEvaTV6RmZLaEhJNjdDaEJGRjl2ZlRBYjN6VzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofIVzFwZ vtV50h+tHDc9ipK8dXBCiUtJ1cyc7qkxZnmTN61WDOZvOP7kS934GMDGBQ2WN1Fy wXECPJnPT/PxGbL91pna08Jps3Jkq/mhHQfIthQHkzqWP+Sk+gmJF+uy9KbZeadY qPA/J+WHMwaZf+KyJLfFoeFsv5eNpHRlcFNd5dEBNyQGew+Gg2/kdQPupKqcmqgb CExOPRLsTX/eYUuJ8rXyAuwc+J/I9ER+ghm6t/jN27WRo30+6MR3KSFm5jYjjZ40 wek1ijGzjUBbvaQPhYnY5w2rtSk7m7M0TtTfzBDRGzhJBLytwf/O3pKlK8amw10W jO8OWjiO7/KRxA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:50 2025 by rpki-client