This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft File: t5im6ZG5VaKTURGf9312hksNOEo.mft (raw, json) Hash identifier: mFr1YbBDejY/ufwUhVRluycpxqcyRqkTUFWx0QYTmXM= Subject key identifier: F9:A4:E1:7E:59:21:6D:25:2B:FF:28:4C:87:08:29:D7:E2:C7:52:EA Authority key identifier: B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A Certificate issuer: /CN=b798a6e991b955a29351119ff77d76864b0d384a Certificate serial: 019AF12DB4934DF70BD70785ED48FCD21B03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft Manifest number: 0E84 Signing time: Sat 06 Dec 2025 01:01:35 +0000 Manifest this update: Sat 06 Dec 2025 01:01:35 +0000 Manifest next update: Sun 07 Dec 2025 01:01:35 +0000 Files and hashes: 1: t5im6ZG5VaKTURGf9312hksNOEo.crl (hash: Gvux11IGMmm1Yrwwl1ymbGoBqYyO/KyfkONA4B8UI4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:b4:93:4d:f7:0b:d7:07:85:ed:48:fc:d2:1b:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b798a6e991b955a29351119ff77d76864b0d384a Validity Not Before: Dec 6 01:01:35 2025 GMT Not After : Dec 7 01:01:35 2025 GMT Subject: CN=f9a4e17e59216d252bff284c870829d7e2c752ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:89:09:9d:ce:c0:3a:13:0e:7e:2e:6a:d5:32: 02:b2:a8:7e:8f:31:fb:5f:03:b2:3d:3f:44:7f:17: 8d:b3:65:4d:67:7f:fa:3a:53:75:64:ec:df:a5:0c: 77:44:79:6d:f4:b7:3a:71:f8:78:ea:9f:92:5c:67: 68:3b:08:a0:51:0a:49:10:7a:bb:99:62:a7:c3:be: 23:1c:0e:0c:e1:9e:e6:15:72:29:32:a8:aa:b4:31: 8d:b6:68:eb:9a:64:df:be:83:5d:aa:a2:7c:e7:60: 10:90:cc:27:d5:21:2e:a5:97:e3:8c:99:44:bb:66: c0:36:93:56:d4:ce:21:61:d0:1a:f4:ef:b0:7e:14: a7:b1:0f:82:2e:8f:63:e1:17:af:4a:7e:fa:a8:fe: ad:69:8e:f8:2e:48:3b:ac:41:dc:17:19:9f:ae:8b: cf:d7:6f:da:ef:13:7d:16:5a:44:26:f1:00:3a:80: 92:c8:57:01:b4:92:a7:94:c3:08:58:53:83:47:9f: 24:77:c7:a1:e3:f2:22:3d:d5:d1:60:fe:aa:36:f6: 23:d8:44:f5:5b:64:de:65:43:ef:ed:90:20:d0:03: 52:ff:96:85:8a:bb:93:82:77:4e:0f:c5:84:fa:7a: fa:cf:06:d6:a4:52:d7:19:04:f7:f4:d5:08:4b:68: 10:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A4:E1:7E:59:21:6D:25:2B:FF:28:4C:87:08:29:D7:E2:C7:52:EA X509v3 Authority Key Identifier: keyid:B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:95:6d:ac:29:31:14:38:5c:35:53:bb:20:f5:e0:6d:a2:84: 54:f7:30:cd:2e:f6:52:33:72:69:7f:38:46:a7:ff:70:76:7c: ca:71:f0:da:5a:33:01:da:2e:66:cb:dc:0c:51:b1:c8:4c:cd: 02:c9:0b:92:c2:93:55:e1:8d:f3:83:ed:c5:c5:bb:49:a3:02: 95:c0:d8:ee:82:48:9d:95:f1:88:ae:7b:9e:b6:69:70:39:1b: 3e:5e:36:90:44:14:86:e9:b0:f4:0b:51:73:e5:fd:0c:82:d9: 0e:be:f2:dc:dc:c6:1e:70:48:19:f0:a7:d1:6a:99:f8:7d:4d: 73:0a:e3:c0:70:0b:28:31:68:b6:f1:93:ae:bb:68:50:79:50: 05:f9:70:15:96:bc:a6:31:74:b5:c0:70:9c:52:fd:a3:9e:2a: c2:c0:50:90:5a:22:ab:b5:b5:d6:c5:56:76:28:19:5c:fc:18: 15:5d:be:96:4d:1b:8f:96:e3:36:09:62:5a:ae:ee:52:82:9b: 3f:a9:12:cf:64:b0:b9:22:26:4e:5c:ee:df:d1:93:01:ad:c5: de:b0:0a:7e:5b:4a:60:56:ff:8a:c2:35:f5:6e:82:5c:36:9f: 56:de:27:60:73:c0:8e:8e:05:e7:f1:91:08:d4:e1:2d:02:6b: cf:0b:da:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbSTTfcL1weF7Uj80hsDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OThhNmU5OTFiOTU1YTI5MzUxMTE5ZmY3N2Q3Njg2NGIw ZDM4NGEwHhcNMjUxMjA2MDEwMTM1WhcNMjUxMjA3MDEwMTM1WjAzMTEwLwYDVQQD EyhmOWE0ZTE3ZTU5MjE2ZDI1MmJmZjI4NGM4NzA4MjlkN2UyYzc1MmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4kJnc7AOhMOfi5q1TICsqh+jzH7 XwOyPT9EfxeNs2VNZ3/6OlN1ZOzfpQx3RHlt9Lc6cfh46p+SXGdoOwigUQpJEHq7 mWKnw74jHA4M4Z7mFXIpMqiqtDGNtmjrmmTfvoNdqqJ852AQkMwn1SEupZfjjJlE u2bANpNW1M4hYdAa9O+wfhSnsQ+CLo9j4RevSn76qP6taY74Lkg7rEHcFxmfrovP 12/a7xN9FlpEJvEAOoCSyFcBtJKnlMMIWFODR58kd8eh4/IiPdXRYP6qNvYj2ET1 W2TeZUPv7ZAg0ANS/5aFiruTgndOD8WE+nr6zwbWpFLXGQT39NUIS2gQpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmk4X5ZIW0lK/8oTIcIKdfix1LqMB8GA1UdIwQY MBaAFLeYpumRuVWik1ERn/d9doZLDThKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDVpbTZaRzVWYUtUVVJHZjkzMTJoa3NOT0VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS81MzkyYjktN2YyMy00NzQwLTkxMjMt NjljNzJmMTY4Njg5LzEvdDVpbTZaRzVWYUtUVVJHZjkzMTJoa3NOT0VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS81MzkyYjktN2YyMy00NzQwLTkxMjMtNjljNzJmMTY4Njg5 LzEvdDVpbTZaRzVWYUtUVVJHZjkzMTJoa3NOT0VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJVtrCkx FDhcNVO7IPXgbaKEVPcwzS72UjNyaX84Rqf/cHZ8ynHw2lozAdouZsvcDFGxyEzN AskLksKTVeGN84PtxcW7SaMClcDY7oJInZXxiK57nrZpcDkbPl42kEQUhumw9AtR c+X9DILZDr7y3NzGHnBIGfCn0WqZ+H1NcwrjwHALKDFotvGTrrtoUHlQBflwFZa8 pjF0tcBwnFL9o54qwsBQkFoiq7W11sVWdigZXPwYFV2+lk0bj5bjNgliWq7uUoKb P6kSz2SwuSImTlzu39GTAa3F3rAKfltKYFb/isI19W6CXDafVt4nYHPAjo4F5/GR CNThLQJrzwvaqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:24:11 2025 by rpki-client