This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft File: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft (raw, json) Hash identifier: DEN2YPxwGLXLSAOC6xsIyaiqzG4lhiN8wdclDg1xYaQ= Subject key identifier: AA:DC:5D:3F:7C:21:41:99:B6:31:22:80:5C:C3:B4:EF:5D:71:E0:0E Authority key identifier: E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61 Certificate issuer: /CN=e43957deba816c9600ce0a4d07fca7d306efee61 Certificate serial: 019AF277198515182766988B6BDA2259E27F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft Manifest number: 0217 Signing time: Sat 06 Dec 2025 07:01:22 +0000 Manifest this update: Sat 06 Dec 2025 07:01:22 +0000 Manifest next update: Sun 07 Dec 2025 07:01:22 +0000 Files and hashes: 1: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl (hash: rK62PvTPpfuCZNLJJSt6K7jOqiJs5Uvf6F6EI6A6LUI=) 2: NM7UvKaTOGBhqz3Waw4Aop_d3I8.roa (hash: CuECrw6IivHOvgLxpf0LZMc5frIWOtpPKmC4FcLgXSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:19:85:15:18:27:66:98:8b:6b:da:22:59:e2:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e43957deba816c9600ce0a4d07fca7d306efee61 Validity Not Before: Dec 6 07:01:22 2025 GMT Not After : Dec 7 07:01:22 2025 GMT Subject: CN=aadc5d3f7c214199b63122805cc3b4ef5d71e00e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6e:f8:fb:d2:e8:41:20:5d:b8:71:e3:f8:c5: 53:1c:df:7b:c0:d8:38:55:4c:3e:d7:1b:0f:44:28: d1:a6:c6:6c:db:f0:92:9a:62:d6:1f:af:9a:2e:cb: 97:78:b9:b5:d4:29:f1:95:11:67:0e:d8:c4:a9:c6: f0:34:65:d1:b3:d1:e1:96:34:d4:52:0b:d3:ba:19: fb:eb:2d:70:0c:de:16:2d:62:11:08:cd:ac:4f:fb: d9:7e:0a:42:7f:90:43:58:a2:3d:2e:02:52:47:62: 6d:19:44:0d:76:9f:c8:a1:e7:47:54:e6:3d:60:c2: f6:4d:38:c1:d9:21:38:55:17:6c:27:43:ca:f3:52: 2c:ac:b9:84:29:55:a6:8b:5f:e2:11:fe:4f:68:ea: 51:7e:51:d3:25:82:d9:32:69:27:04:05:d3:5a:f8: e9:d0:60:7a:20:94:3a:52:64:d5:93:97:a1:8a:b3: 88:76:b2:10:4d:cd:26:a8:65:74:dc:dd:db:0a:0f: 1e:3b:98:f9:e0:7e:06:6f:09:27:32:7e:0d:a2:cc: cc:ec:5a:59:1f:a8:21:45:18:5b:71:a4:35:0d:ae: 02:cb:9e:73:0d:e3:d4:f2:74:15:1b:92:30:86:94: cf:82:5b:6f:df:c7:81:69:f4:df:05:fa:3c:7b:f5: 12:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DC:5D:3F:7C:21:41:99:B6:31:22:80:5C:C3:B4:EF:5D:71:E0:0E X509v3 Authority Key Identifier: keyid:E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:6f:ef:1c:0b:90:10:b9:6d:6d:08:63:85:34:8a:44:2d:6a: 08:21:30:b5:87:b4:68:4f:e1:66:5b:82:8e:0a:71:8b:5d:63: d4:8f:71:e8:79:7a:22:17:57:1c:eb:84:ab:2e:3d:2e:2d:12: ea:f3:8c:08:b6:ed:56:40:40:98:e5:e3:0d:14:da:6c:ed:cc: 95:01:e7:e8:1e:31:50:3d:25:25:dd:bd:f0:77:5b:25:11:6a: c2:71:d5:95:f5:c1:5f:c3:07:be:f1:06:7c:1a:e5:8b:bb:be: 36:19:eb:e7:cc:ab:1f:de:dd:30:e7:a0:20:28:33:1a:52:a9: 89:a2:96:98:f2:e1:72:88:22:0f:c7:6b:77:f8:29:95:41:b1: 17:eb:72:40:a4:6b:4a:d4:c3:bd:da:32:28:82:53:88:4a:57: a4:f0:af:fc:28:f2:75:9a:1e:ff:ee:7d:d3:c1:9d:fc:05:2a: 82:93:67:ef:1c:42:75:c5:01:7c:cf:de:11:71:e8:b9:cf:75: 32:7e:44:30:7e:c1:87:c5:5d:c6:83:0f:d3:14:00:57:8c:1f: bf:f0:a4:a7:a0:31:56:74:97:7b:63:20:fd:d7:e1:c9:36:72: 87:ff:3e:0d:42:68:0a:49:65:e0:44:ee:e0:34:cb:0f:da:c8: b2:bc:71:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxmFFRgnZpiLa9oiWeJ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Mzk1N2RlYmE4MTZjOTYwMGNlMGE0ZDA3ZmNhN2QzMDZl ZmVlNjEwHhcNMjUxMjA2MDcwMTIyWhcNMjUxMjA3MDcwMTIyWjAzMTEwLwYDVQQD EyhhYWRjNWQzZjdjMjE0MTk5YjYzMTIyODA1Y2MzYjRlZjVkNzFlMDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum74+9LoQSBduHHj+MVTHN97wNg4 VUw+1xsPRCjRpsZs2/CSmmLWH6+aLsuXeLm11CnxlRFnDtjEqcbwNGXRs9HhljTU UgvTuhn76y1wDN4WLWIRCM2sT/vZfgpCf5BDWKI9LgJSR2JtGUQNdp/IoedHVOY9 YML2TTjB2SE4VRdsJ0PK81IsrLmEKVWmi1/iEf5PaOpRflHTJYLZMmknBAXTWvjp 0GB6IJQ6UmTVk5ehirOIdrIQTc0mqGV03N3bCg8eO5j54H4GbwknMn4NoszM7FpZ H6ghRRhbcaQ1Da4Cy55zDePU8nQVG5IwhpTPgltv38eBafTfBfo8e/USJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrcXT98IUGZtjEigFzDtO9dceAOMB8GA1UdIwQY MBaAFOQ5V966gWyWAM4KTQf8p9MG7+5hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNURsWDNycUJiSllBemdwTkJfeW4wd2J2N21FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kOGEwMjQtNmMwNi00Zjk4LWE4MzQt ZTYzMzYyMDk4YzcwLzEvNURsWDNycUJiSllBemdwTkJfeW4wd2J2N21FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9kOGEwMjQtNmMwNi00Zjk4LWE4MzQtZTYzMzYyMDk4Yzcw LzEvNURsWDNycUJiSllBemdwTkJfeW4wd2J2N21FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdW/vHAuQ ELltbQhjhTSKRC1qCCEwtYe0aE/hZluCjgpxi11j1I9x6Hl6IhdXHOuEqy49Li0S 6vOMCLbtVkBAmOXjDRTabO3MlQHn6B4xUD0lJd298HdbJRFqwnHVlfXBX8MHvvEG fBrli7u+Nhnr58yrH97dMOegICgzGlKpiaKWmPLhcogiD8drd/gplUGxF+tyQKRr StTDvdoyKIJTiEpXpPCv/CjydZoe/+5908Gd/AUqgpNn7xxCdcUBfM/eEXHouc91 Mn5EMH7Bh8VdxoMP0xQAV4wfv/Ckp6AxVnSXe2Mg/dfhyTZyh/8+DUJoCkll4ETu 4DTLD9rIsrxxxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:26 2025 by rpki-client