This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft File: An5YWPpUP-P_R02NdquXAeoBCws.mft (raw, json) Hash identifier: yih/VBDz4y3XzsfSgjfAwvGUEBbQzuaa1xHdWmdJpLE= Subject key identifier: C3:D9:67:8B:78:2C:82:AE:24:AC:76:08:DD:BE:37:59:A0:27:18:AB Authority key identifier: 02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B Certificate issuer: /CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b Certificate serial: 019AF509A6385134219B1E9310CB3658135B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft Manifest number: 0524 Signing time: Sat 06 Dec 2025 19:00:41 +0000 Manifest this update: Sat 06 Dec 2025 19:00:41 +0000 Manifest next update: Sun 07 Dec 2025 19:00:41 +0000 Files and hashes: 1: An5YWPpUP-P_R02NdquXAeoBCws.crl (hash: lU2HKrYmoq16Opt4pwJ7V2/SjZlHxk0TuQ/E7+errkk=) 2: M5q-y_pSOaw-LnhCtgtI_cxU90s.roa (hash: EkxFUEnDMMrgIyFYsLlI4yCORNtS7fa6ZKub0vDM94A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:a6:38:51:34:21:9b:1e:93:10:cb:36:58:13:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b Validity Not Before: Dec 6 19:00:41 2025 GMT Not After : Dec 7 19:00:41 2025 GMT Subject: CN=c3d9678b782c82ae24ac7608ddbe3759a02718ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:71:df:4e:93:4e:d0:da:3d:99:75:97:d3:45: f4:8f:97:05:af:a2:cd:29:02:07:95:39:e7:bb:90: 23:05:dd:d8:fa:d1:b2:91:b3:99:2c:6e:c8:c7:64: cf:2f:fe:c1:15:b8:01:57:1d:c7:09:d4:db:5f:f7: 3a:13:c2:ad:60:e7:04:f3:0e:59:0e:de:35:8b:3d: 3c:df:f8:2a:eb:6f:df:5d:6b:10:81:9b:c1:4c:1b: e4:c6:1a:e2:d6:e1:20:ef:14:86:7a:3c:32:68:7a: 72:9c:6c:34:19:55:8b:2e:dd:02:34:51:51:97:b4: 42:14:39:10:df:74:75:8e:72:08:dc:7c:4b:b4:de: bf:b3:a2:3b:93:12:60:a1:97:81:ae:d6:1d:84:9f: 60:1e:76:fe:f1:9b:3b:7a:43:d9:c9:6f:fd:85:16: cf:f1:e8:b5:32:bf:b7:2c:13:8a:24:f3:10:0b:78: af:1a:a7:68:9f:da:b4:05:ea:95:79:fd:41:89:1f: 1c:d6:f1:e9:6a:c6:2d:62:b1:f1:48:70:b3:c9:e8: 33:20:96:01:17:4c:2c:74:99:d8:d2:c0:fd:23:d8: 4d:7f:61:d8:97:03:da:8b:52:52:ce:3c:48:77:3d: 34:94:9b:75:c3:7d:ad:df:7a:2d:49:54:19:48:b6: fb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D9:67:8B:78:2C:82:AE:24:AC:76:08:DD:BE:37:59:A0:27:18:AB X509v3 Authority Key Identifier: keyid:02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:75:ec:83:dd:c8:04:16:53:b2:dd:c0:96:d5:af:30:97:be: 23:4a:14:54:98:6e:8d:b4:f6:63:c0:09:29:06:7f:85:00:78: dc:17:d1:d8:6d:e5:24:de:f5:48:bd:be:da:c7:f0:60:89:79: aa:c2:e0:3b:9d:f4:d9:49:73:5f:4a:1f:79:fa:0b:1b:6b:73: f0:fa:39:9c:7a:fc:32:35:03:44:f5:5a:ee:1e:aa:c3:87:ce: de:30:ba:8e:91:89:6e:1e:9e:96:b3:c7:b8:dd:9a:2d:62:1b: 65:ba:97:9b:6f:49:ad:e8:0d:4d:b0:23:d1:03:7a:9e:f9:39: cd:d4:e2:12:c1:38:c9:79:a1:22:87:ff:8f:f0:16:2e:3c:1a: a9:84:ba:b1:92:b9:4d:7f:71:21:06:d5:39:6c:4f:ee:f6:c5: 0b:58:68:47:c7:38:0e:f8:98:f0:e9:5e:c7:48:b3:22:65:97: 53:5e:75:7f:fe:23:5f:e9:89:21:90:72:d5:6c:c6:c9:2d:cd: 1a:5f:d1:5c:d5:4e:ee:b1:bd:a0:91:f0:17:af:32:d4:a3:40: 04:66:cf:8e:8a:80:6c:88:6f:03:d8:25:f0:25:19:79:43:96: ac:8e:2f:6d:c7:1a:33:ae:cf:be:5e:d2:31:22:d0:f1:28:2a: e6:33:20:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CaY4UTQhmx6TEMs2WBNbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyN2U1ODU4ZmE1NDNmZTNmZjQ3NGQ4ZDc2YWI5NzAxZWEw MTBiMGIwHhcNMjUxMjA2MTkwMDQxWhcNMjUxMjA3MTkwMDQxWjAzMTEwLwYDVQQD EyhjM2Q5Njc4Yjc4MmM4MmFlMjRhYzc2MDhkZGJlMzc1OWEwMjcxOGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnHfTpNO0No9mXWX00X0j5cFr6LN KQIHlTnnu5AjBd3Y+tGykbOZLG7Ix2TPL/7BFbgBVx3HCdTbX/c6E8KtYOcE8w5Z Dt41iz083/gq62/fXWsQgZvBTBvkxhri1uEg7xSGejwyaHpynGw0GVWLLt0CNFFR l7RCFDkQ33R1jnII3HxLtN6/s6I7kxJgoZeBrtYdhJ9gHnb+8Zs7ekPZyW/9hRbP 8ei1Mr+3LBOKJPMQC3ivGqdon9q0BeqVef1BiR8c1vHpasYtYrHxSHCzyegzIJYB F0wsdJnY0sD9I9hNf2HYlwPai1JSzjxIdz00lJt1w32t33otSVQZSLb7oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPZZ4t4LIKuJKx2CN2+N1mgJxirMB8GA1UdIwQY MBaAFAJ+WFj6VD/j/0dNjXarlwHqAQsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW41WVdQcFVQLVBfUjAyTmRxdVhBZW9CQ3dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82N2JiYzUtNjRhZS00MWQ1LTkzZDMt M2IyODk0ZjBlNjljLzEvQW41WVdQcFVQLVBfUjAyTmRxdVhBZW9CQ3dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi82N2JiYzUtNjRhZS00MWQ1LTkzZDMtM2IyODk0ZjBlNjlj LzEvQW41WVdQcFVQLVBfUjAyTmRxdVhBZW9CQ3dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXXsg93I BBZTst3AltWvMJe+I0oUVJhujbT2Y8AJKQZ/hQB43BfR2G3lJN71SL2+2sfwYIl5 qsLgO5302UlzX0ofefoLG2tz8Po5nHr8MjUDRPVa7h6qw4fO3jC6jpGJbh6elrPH uN2aLWIbZbqXm29JregNTbAj0QN6nvk5zdTiEsE4yXmhIof/j/AWLjwaqYS6sZK5 TX9xIQbVOWxP7vbFC1hoR8c4DviY8Olex0izImWXU151f/4jX+mJIZBy1WzGyS3N Gl/RXNVO7rG9oJHwF68y1KNABGbPjoqAbIhvA9gl8CUZeUOWrI4vbccaM67Pvl7S MSLQ8Sgq5jMgxg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:53:39 2025 by rpki-client