This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft File: 5wVXsySVkhfZJZvs0aBUm2_6n2U.mft (raw, json) Hash identifier: 2GwH4akj0K39AEb3BbenF1Rq9eV0xK4OLhL1AdXcp9M= Subject key identifier: CF:0D:EE:E5:53:91:05:34:37:60:22:39:B4:6B:84:F2:60:BE:4B:9B Authority key identifier: E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65 Certificate issuer: /CN=e70557b324959217d9259becd1a0549b6ffa9f65 Certificate serial: 019B30434B2B85269F1DA5E1A8702502CDAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft Manifest number: 04E0 Signing time: Thu 18 Dec 2025 07:01:14 +0000 Manifest this update: Thu 18 Dec 2025 07:01:14 +0000 Manifest next update: Fri 19 Dec 2025 07:01:14 +0000 Files and hashes: 1: 5wVXsySVkhfZJZvs0aBUm2_6n2U.crl (hash: haoyD+Qx1tkKeAMMdqsWYXeeOPNhfEV8351/MNXhqnI=) 2: LC4E7CVdqve2s0imFECZpSxeumc.roa (hash: ctBI7RM04uAc4w/A50VeS7LJSTWUarW03NaBD0t5f6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 07:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:43:4b:2b:85:26:9f:1d:a5:e1:a8:70:25:02:cd:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e70557b324959217d9259becd1a0549b6ffa9f65 Validity Not Before: Dec 18 07:01:14 2025 GMT Not After : Dec 19 07:01:14 2025 GMT Subject: CN=cf0deee55391053437602239b46b84f260be4b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e9:5e:4f:8a:52:67:f2:1a:52:02:23:13:6d: 2f:04:ae:e1:88:79:b1:83:ed:4d:dc:e1:3f:e4:6f: 32:37:40:ac:c1:7d:9f:86:61:a6:de:d4:6e:56:a8: fa:4a:68:85:76:07:b7:dd:53:db:eb:88:6c:a3:a2: 22:4d:c1:35:96:1f:cd:cc:93:0c:d5:48:40:36:ee: b8:d1:1a:d1:6d:80:fb:06:67:51:49:bd:73:bc:fa: f8:8e:02:3f:e8:98:88:f0:31:7d:cb:52:6c:b2:b0: bb:d1:e4:72:c3:b6:78:21:69:14:3a:30:f7:95:93: e0:41:e4:f5:76:36:5b:77:ea:20:34:d2:4a:d1:af: e4:8e:33:e6:e5:55:46:8a:a5:ec:65:21:54:04:54: f6:df:c6:9c:60:01:d3:64:bc:5a:5b:ca:90:3a:d5: c0:d5:39:4e:d0:4a:18:43:aa:70:6b:56:01:60:4a: 1c:12:d0:fb:89:9d:7d:21:36:03:3a:1a:6c:43:19: 92:c5:41:27:d9:cb:6c:0b:ce:88:d0:f3:9a:03:14: 80:78:1e:f0:35:8b:67:2f:1d:85:68:b0:0d:41:2b: 18:8e:d7:03:53:75:73:40:08:f1:e7:58:c9:61:93: f5:d9:e0:a1:ca:0a:de:66:4e:aa:2d:81:85:dd:e9: 84:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0D:EE:E5:53:91:05:34:37:60:22:39:B4:6B:84:F2:60:BE:4B:9B X509v3 Authority Key Identifier: keyid:E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:0c:8e:02:d7:6c:4a:d1:c4:31:e0:b2:d1:17:60:ae:49:c0: 9c:f5:a4:1c:3f:aa:e9:41:08:7a:99:20:3a:6c:30:0a:69:97: 10:b7:41:66:75:0c:b4:56:2f:71:5d:37:9c:09:cd:44:70:0c: a5:82:44:d5:98:48:42:5d:f8:a4:1f:84:98:56:7c:89:cd:9c: 01:cf:a4:97:d2:a6:77:85:ec:7d:39:bd:66:b9:28:38:0a:b9: f5:6a:97:2e:d4:93:05:8a:20:34:ec:1b:09:36:19:9c:b0:d9: c8:a2:79:4c:76:c5:09:90:5e:8e:9c:92:8b:25:51:14:a1:12: 99:bc:0b:55:a4:79:56:3f:d2:37:ac:2f:2d:3b:a7:66:c1:18: 31:ae:6d:14:83:da:4d:32:07:9b:60:c6:4e:de:e5:e8:10:79: 0b:9f:0a:5a:35:c3:4d:aa:05:43:94:f9:53:1d:21:16:83:6d: ea:dd:0d:26:af:30:78:a2:06:b7:d0:77:58:66:92:29:7f:6c: e0:d5:19:7a:a9:bf:65:ca:d0:0d:96:75:01:c8:b7:3b:47:97: c7:ba:cf:1a:8d:52:d2:3c:73:ca:a8:49:28:a8:ec:2e:b1:2b: 86:24:b1:6a:5b:85:91:bd:61:72:a7:cd:72:ad:85:9c:ab:8d: 27:14:f5:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQ0srhSafHaXhqHAlAs2rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MDU1N2IzMjQ5NTkyMTdkOTI1OWJlY2QxYTA1NDliNmZm YTlmNjUwHhcNMjUxMjE4MDcwMTE0WhcNMjUxMjE5MDcwMTE0WjAzMTEwLwYDVQQD EyhjZjBkZWVlNTUzOTEwNTM0Mzc2MDIyMzliNDZiODRmMjYwYmU0YjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuleT4pSZ/IaUgIjE20vBK7hiHmx g+1N3OE/5G8yN0CswX2fhmGm3tRuVqj6SmiFdge33VPb64hso6IiTcE1lh/NzJMM 1UhANu640RrRbYD7BmdRSb1zvPr4jgI/6JiI8DF9y1JssrC70eRyw7Z4IWkUOjD3 lZPgQeT1djZbd+ogNNJK0a/kjjPm5VVGiqXsZSFUBFT238acYAHTZLxaW8qQOtXA 1TlO0EoYQ6pwa1YBYEocEtD7iZ19ITYDOhpsQxmSxUEn2ctsC86I0POaAxSAeB7w NYtnLx2FaLANQSsYjtcDU3VzQAjx51jJYZP12eChygreZk6qLYGF3emELQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8N7uVTkQU0N2AiObRrhPJgvkubMB8GA1UdIwQY MBaAFOcFV7MklZIX2SWb7NGgVJtv+p9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXdWWHN5U1ZraGZaSlp2czBhQlVtMl82bjJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lY2QxNGItZDJhOS00MGY5LWI2MzEt ZDVjMjA4ZWE3ZTdlLzEvNXdWWHN5U1ZraGZaSlp2czBhQlVtMl82bjJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9lY2QxNGItZDJhOS00MGY5LWI2MzEtZDVjMjA4ZWE3ZTdl LzEvNXdWWHN5U1ZraGZaSlp2czBhQlVtMl82bjJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkAyOAtds StHEMeCy0RdgrknAnPWkHD+q6UEIepkgOmwwCmmXELdBZnUMtFYvcV03nAnNRHAM pYJE1ZhIQl34pB+EmFZ8ic2cAc+kl9Kmd4XsfTm9ZrkoOAq59WqXLtSTBYogNOwb CTYZnLDZyKJ5THbFCZBejpySiyVRFKESmbwLVaR5Vj/SN6wvLTunZsEYMa5tFIPa TTIHm2DGTt7l6BB5C58KWjXDTaoFQ5T5Ux0hFoNt6t0NJq8weKIGt9B3WGaSKX9s 4NUZeqm/ZcrQDZZ1Aci3O0eXx7rPGo1S0jxzyqhJKKjsLrErhiSxaluFkb1hcqfN cq2FnKuNJxT1GQ== -----END CERTIFICATE-----Generated at Thu Dec 18 16:12:49 2025 by rpki-client