This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft File: 5_X6RuHGsFy_7JdpIQyxUUer4jE.mft (raw, json) Hash identifier: /2F1qB16EB8bOMUfbtcD71BRyAmNpQzmUNrFgWw3Jl0= Subject key identifier: FD:3D:3A:39:C4:3A:8A:04:32:DA:BC:12:94:05:E9:E6:04:AA:F4:FF Authority key identifier: E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31 Certificate issuer: /CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231 Certificate serial: 019AF12DEE6E0A98234ED38699C9EB756CB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft Manifest number: 16EF Signing time: Sat 06 Dec 2025 01:01:50 +0000 Manifest this update: Sat 06 Dec 2025 01:01:50 +0000 Manifest next update: Sun 07 Dec 2025 01:01:50 +0000 Files and hashes: 1: 5_X6RuHGsFy_7JdpIQyxUUer4jE.crl (hash: KS6viS0cNmrbu6IZ8n9lsdpTB61sJ4bLkog4hr/MuO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ee:6e:0a:98:23:4e:d3:86:99:c9:eb:75:6c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231 Validity Not Before: Dec 6 01:01:50 2025 GMT Not After : Dec 7 01:01:50 2025 GMT Subject: CN=fd3d3a39c43a8a0432dabc129405e9e604aaf4ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bc:6f:35:10:f4:f4:2e:3c:b5:b4:26:77:85: a1:b0:46:9c:94:53:e6:f4:4a:ae:65:df:a6:32:e2: a2:21:0d:03:b7:d7:bb:65:8a:b4:5e:66:67:4b:37: 08:74:55:9c:0f:23:0a:bb:ac:5d:e7:b5:68:8f:5a: 71:6d:77:06:f0:c6:12:17:eb:06:97:c7:a8:66:61: 40:a9:ab:f6:4f:20:2a:56:fd:81:b7:ef:65:77:db: c5:51:42:a4:2e:65:8a:e3:c3:93:d9:3e:2c:98:b9: 30:27:c1:21:b2:4d:41:df:6a:f2:64:7c:ad:0d:62: a7:f2:27:52:6a:0e:9a:d0:18:4b:53:c8:d0:48:01: 19:83:f3:ec:bc:c0:fb:36:a8:60:ca:e3:85:06:64: fc:4a:a8:1c:f8:e7:59:9b:11:cf:f4:27:fb:c4:c8: 3a:15:52:14:43:a6:ee:c7:07:5c:02:82:cf:a3:b8: bc:0f:82:f9:39:71:81:2b:7c:24:5e:99:4a:fb:26: 25:2c:c9:f1:47:83:2a:44:3f:ce:bb:2c:b0:21:29: 72:c6:ed:18:68:1c:bd:27:21:dc:c7:8f:f6:13:4b: 9c:24:2d:52:31:3b:db:48:0f:df:ea:6a:ef:58:94: 92:db:5d:07:6c:90:0f:8f:27:b4:68:d4:e0:0a:f0: 6e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3D:3A:39:C4:3A:8A:04:32:DA:BC:12:94:05:E9:E6:04:AA:F4:FF X509v3 Authority Key Identifier: keyid:E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:9e:35:1c:1f:d4:c5:79:5d:f2:c5:80:3d:62:2e:7f:9f:be: 52:cb:59:f8:c5:b7:de:78:8e:87:b6:51:b9:44:23:cc:d7:25: 58:53:13:ef:25:82:05:44:a0:c5:7a:e5:78:40:5a:70:fd:78: 72:51:d6:32:11:57:71:d7:8d:17:e1:00:0a:d8:0f:e4:30:1b: e7:67:fe:27:50:5a:b4:f0:c8:b9:b6:b3:05:5c:d6:a7:5e:76: b3:a9:5d:00:9f:4b:e5:0c:eb:e6:b8:eb:44:47:8c:1b:61:b0: 6c:95:8f:f2:62:f6:aa:6c:6b:10:76:5d:7b:ba:8e:40:e5:10: 94:1d:90:c4:26:87:eb:38:92:85:26:c3:86:84:72:81:62:49: 5f:fe:94:68:d7:8d:cf:33:b7:ac:e6:89:43:11:22:f7:36:45: 22:b7:ec:64:05:70:cd:c6:92:97:26:0b:fc:0c:49:7c:1c:48: 23:d5:8c:fa:c4:10:54:1c:c0:59:58:96:27:6f:4e:cb:8c:1d: b7:17:bd:5e:1b:f5:2a:86:e2:61:d0:9c:64:7e:e6:f9:44:00: 85:0d:71:c2:08:17:22:67:3d:71:36:fc:9a:c1:0a:9b:ad:c3: 0c:6b:4e:e6:97:13:56:80:87:ec:59:fb:c5:35:1e:e0:35:10: 74:0d:be:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLe5uCpgjTtOGmcnrdWyzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZjVmYTQ2ZTFjNmIwNWNiZmVjOTc2OTIxMGNiMTUxNDdh YmUyMzEwHhcNMjUxMjA2MDEwMTUwWhcNMjUxMjA3MDEwMTUwWjAzMTEwLwYDVQQD EyhmZDNkM2EzOWM0M2E4YTA0MzJkYWJjMTI5NDA1ZTllNjA0YWFmNGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rxvNRD09C48tbQmd4WhsEaclFPm 9EquZd+mMuKiIQ0Dt9e7ZYq0XmZnSzcIdFWcDyMKu6xd57Voj1pxbXcG8MYSF+sG l8eoZmFAqav2TyAqVv2Bt+9ld9vFUUKkLmWK48OT2T4smLkwJ8Ehsk1B32ryZHyt DWKn8idSag6a0BhLU8jQSAEZg/PsvMD7NqhgyuOFBmT8Sqgc+OdZmxHP9Cf7xMg6 FVIUQ6buxwdcAoLPo7i8D4L5OXGBK3wkXplK+yYlLMnxR4MqRD/OuyywISlyxu0Y aBy9JyHcx4/2E0ucJC1SMTvbSA/f6mrvWJSS210HbJAPjye0aNTgCvBu5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP09OjnEOooEMtq8EpQF6eYEqvT/MB8GA1UdIwQY MBaAFOf1+kbhxrBcv+yXaSEMsVFHq+IxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9YNlJ1SEdzRnlfN0pkcElReXhVVWVyNGpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MDQzMjItNmY4YS00NGJiLTg5MmMt MGM0MTdlZmY0NzIwLzEvNV9YNlJ1SEdzRnlfN0pkcElReXhVVWVyNGpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi84MDQzMjItNmY4YS00NGJiLTg5MmMtMGM0MTdlZmY0NzIw LzEvNV9YNlJ1SEdzRnlfN0pkcElReXhVVWVyNGpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOp41HB/U xXld8sWAPWIuf5++UstZ+MW33niOh7ZRuUQjzNclWFMT7yWCBUSgxXrleEBacP14 clHWMhFXcdeNF+EACtgP5DAb52f+J1BatPDIubazBVzWp152s6ldAJ9L5Qzr5rjr REeMG2GwbJWP8mL2qmxrEHZde7qOQOUQlB2QxCaH6ziShSbDhoRygWJJX/6UaNeN zzO3rOaJQxEi9zZFIrfsZAVwzcaSlyYL/AxJfBxII9WM+sQQVBzAWViWJ29Oy4wd txe9Xhv1KobiYdCcZH7m+UQAhQ1xwggXImc9cTb8msEKm63DDGtO5pcTVoCH7Fn7 xTUe4DUQdA2+SQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:21:42 2025 by rpki-client