This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft File: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft (raw, json) Hash identifier: fheLTkHceFtbVI8+q5XFBrb8ops64IfI+67Br5LZC2s= Subject key identifier: A4:0C:08:9D:F1:28:EE:95:01:5D:91:32:D7:63:B4:DC:83:D7:C8:2F Authority key identifier: E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06 Certificate issuer: /CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006 Certificate serial: 019AF23FEC0FC1101C5E6193B30792EC2B6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft Manifest number: 0E41 Signing time: Sat 06 Dec 2025 06:01:06 +0000 Manifest this update: Sat 06 Dec 2025 06:01:06 +0000 Manifest next update: Sun 07 Dec 2025 06:01:06 +0000 Files and hashes: 1: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl (hash: xikJzJwjVdWjUo23HzMSfPAHJ7VXHJ7dRlPmCB/HLaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ec:0f:c1:10:1c:5e:61:93:b3:07:92:ec:2b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006 Validity Not Before: Dec 6 06:01:06 2025 GMT Not After : Dec 7 06:01:06 2025 GMT Subject: CN=a40c089df128ee95015d9132d763b4dc83d7c82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:80:02:3d:0a:d8:a8:4f:7e:cd:c1:61:45:df: e8:bd:da:18:1e:70:bd:09:7c:f0:62:65:53:53:ff: bc:e9:2d:88:75:e8:93:9a:29:f2:0a:3c:15:4f:7a: 69:8c:c1:2b:c0:d9:61:98:c7:06:8f:70:b4:d9:3b: ca:82:6c:a4:a6:2b:72:7a:48:ec:5c:97:95:fe:4e: 4a:e7:37:c4:d1:83:10:9b:80:f5:65:9b:de:b9:41: 95:8f:3e:97:79:da:9f:07:11:f4:c6:2f:ea:3e:48: 8f:77:e2:94:12:f2:5e:cb:b2:d2:ec:5a:e8:66:5d: 12:13:89:df:0a:29:a1:00:1f:a5:88:2c:19:a1:c5: 1d:78:c7:ed:f5:10:03:f3:6c:3b:51:01:55:9d:e5: c1:d5:0f:18:f2:2e:7d:5a:cd:37:8f:b3:4a:27:bd: d9:b3:51:5d:12:b8:1d:c3:f8:bd:51:bb:ca:10:96: 1d:b6:ec:4c:20:ca:1f:e9:ad:4d:d5:aa:62:02:23: ff:f1:73:a2:91:ca:8d:20:44:4d:5f:74:67:7c:82: 10:8b:34:41:fb:bb:59:ea:63:30:da:2d:8f:c5:58: 1e:61:9a:f8:f0:ce:6d:19:90:ac:59:16:54:14:45: fd:e8:02:0b:5a:bd:2b:28:df:0b:99:8d:ae:49:72: 21:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0C:08:9D:F1:28:EE:95:01:5D:91:32:D7:63:B4:DC:83:D7:C8:2F X509v3 Authority Key Identifier: keyid:E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:63:1f:f0:72:55:c1:6c:24:6b:bf:50:bd:e2:f0:3b:07:c7: 0d:82:cb:76:77:27:08:6a:70:a4:83:f9:30:09:14:98:ba:76: 37:2a:a8:b8:e4:9c:f4:fd:07:28:91:71:0e:f4:b3:cc:bb:d3: 9c:77:b8:61:89:60:a3:86:98:41:1b:d2:ec:46:66:85:80:f4: 50:cd:82:24:4c:9d:79:ba:bf:87:26:4e:b3:ad:46:8d:2f:15: aa:d9:7f:a2:60:cd:cd:3f:7c:f7:3a:d9:bf:f0:87:f7:1d:de: 97:67:8f:54:5c:22:5d:1e:86:65:2c:c7:5d:8e:f9:da:8c:c1: 3a:6c:49:68:8e:de:3b:90:91:22:d9:41:82:e8:39:d9:4a:e7: 4f:28:4c:f8:86:ee:1f:12:44:ef:a5:c8:04:2e:92:f8:10:fa: cc:47:45:e0:1b:8a:22:62:e0:27:d7:f7:0d:5c:3e:d6:3f:9f: 41:21:3d:af:a1:0c:b0:0e:a7:87:de:c2:cb:68:88:fc:18:3d: 54:0c:c4:06:04:3a:c0:4e:35:5e:0d:71:c0:04:dd:64:2d:08: dc:25:2d:10:07:3f:01:09:c0:64:87:f0:37:30:3b:e5:1b:71: 49:e7:ca:8a:50:58:3f:82:03:34:7f:bc:5e:ef:e9:17:ca:df: ef:e6:3f:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+wPwRAcXmGTsweS7CtqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YjkxYjE5ZjRiZGJkNmZmMWQ3ZjM3MmQzYTBkZDEzOTAw NTAwMDYwHhcNMjUxMjA2MDYwMTA2WhcNMjUxMjA3MDYwMTA2WjAzMTEwLwYDVQQD EyhhNDBjMDg5ZGYxMjhlZTk1MDE1ZDkxMzJkNzYzYjRkYzgzZDdjODJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIACPQrYqE9+zcFhRd/ovdoYHnC9 CXzwYmVTU/+86S2IdeiTminyCjwVT3ppjMErwNlhmMcGj3C02TvKgmykpityekjs XJeV/k5K5zfE0YMQm4D1ZZveuUGVjz6XedqfBxH0xi/qPkiPd+KUEvJey7LS7Fro Zl0SE4nfCimhAB+liCwZocUdeMft9RAD82w7UQFVneXB1Q8Y8i59Ws03j7NKJ73Z s1FdErgdw/i9UbvKEJYdtuxMIMof6a1N1apiAiP/8XOikcqNIERNX3RnfIIQizRB +7tZ6mMw2i2PxVgeYZr48M5tGZCsWRZUFEX96AILWr0rKN8LmY2uSXIhDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQMCJ3xKO6VAV2RMtdjtNyD18gvMB8GA1UdIwQY MBaAFOa5Gxn0vb1v8dfzctOg3ROQBQAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXJrYkdmUzl2V194MV9OeTA2RGRFNUFGQUFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85MzE1NDUtY2Y3Yi00ZDU4LWJlZDct MDRiNTI4ZmFlMDNhLzEvNXJrYkdmUzl2V194MV9OeTA2RGRFNUFGQUFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS85MzE1NDUtY2Y3Yi00ZDU4LWJlZDctMDRiNTI4ZmFlMDNh LzEvNXJrYkdmUzl2V194MV9OeTA2RGRFNUFGQUFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmMf8HJV wWwka79QveLwOwfHDYLLdncnCGpwpIP5MAkUmLp2NyqouOSc9P0HKJFxDvSzzLvT nHe4YYlgo4aYQRvS7EZmhYD0UM2CJEydebq/hyZOs61GjS8Vqtl/omDNzT989zrZ v/CH9x3el2ePVFwiXR6GZSzHXY752ozBOmxJaI7eO5CRItlBgug52UrnTyhM+Ibu HxJE76XIBC6S+BD6zEdF4BuKImLgJ9f3DVw+1j+fQSE9r6EMsA6nh97Cy2iI/Bg9 VAzEBgQ6wE41Xg1xwATdZC0I3CUtEAc/AQnAZIfwNzA75RtxSefKilBYP4IDNH+8 Xu/pF8rf7+Y/XQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:20:32 2025 by rpki-client