This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft File: 5wn3YuCC6tPW1-TK4p77tNEvV14.mft (raw, json) Hash identifier: +m2E3FyeQarZ3LaeOTxi1+MYnbwjLauV+diF2wLqelA= Subject key identifier: 09:D1:5D:10:63:42:E5:39:23:C5:D5:F3:6B:55:5B:C8:BE:A9:F5:60 Authority key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E Certificate issuer: /CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e Certificate serial: 019AF16407B48EFA827F15FE7B4EB6285B27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft Manifest number: 0DB8 Signing time: Sat 06 Dec 2025 02:00:55 +0000 Manifest this update: Sat 06 Dec 2025 02:00:55 +0000 Manifest next update: Sun 07 Dec 2025 02:00:55 +0000 Files and hashes: 1: 0I90jYLDsjsh8A1WdLN05NbEjj4.roa (hash: Kf+mfo5G5myFzzGKcZGygmTNr3GGZjTxsLuEcsJyKBc=) 2: 5wn3YuCC6tPW1-TK4p77tNEvV14.crl (hash: tzJASkAzT7xYZm2psDi023vRqDcyPiU5Kvy8L/GzQss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:07:b4:8e:fa:82:7f:15:fe:7b:4e:b6:28:5b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e Validity Not Before: Dec 6 02:00:55 2025 GMT Not After : Dec 7 02:00:55 2025 GMT Subject: CN=09d15d106342e53923c5d5f36b555bc8bea9f560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:11:02:f7:99:dc:59:1e:9b:06:2c:81:e9:51: 16:76:5c:21:99:33:05:68:5e:38:34:e1:83:9a:39: 7e:3f:a6:45:0c:8d:fa:2e:d4:ab:fc:19:d6:95:13: ee:3a:a1:06:ec:5f:50:40:22:7f:47:f5:12:5b:ad: a8:91:90:ec:fd:58:fd:0c:50:8f:07:01:7d:ff:7d: d2:d7:f1:a2:c8:89:14:71:56:2f:1c:ff:8b:05:be: 3a:ac:b4:27:c1:02:7a:d4:da:ed:52:cf:41:af:d3: 75:19:22:ff:a9:d5:2a:f0:a6:05:7e:0c:a6:fa:f6: 36:d8:5f:c0:79:40:b2:de:45:77:95:13:33:16:a6: e5:28:00:4f:2e:f6:08:e4:3d:19:4e:c4:81:46:c1: 3d:ea:96:91:37:86:42:6b:d8:b8:b2:84:e7:f3:34: 36:4f:10:ca:3f:52:94:df:bd:68:84:31:8f:89:f8: 33:d3:ec:95:52:49:a4:f6:dd:e0:65:55:e2:c9:35: 32:e4:d8:ec:62:8c:cf:0f:5b:c7:a0:70:f3:10:02: 86:cb:61:ea:d1:df:a7:c3:84:a6:3b:28:6a:c5:a8: ec:fa:e8:4c:94:d8:d0:e6:7a:93:3f:e6:dd:2a:0b: d6:a2:c8:8c:f1:db:0e:27:a6:17:60:9e:b6:3b:5c: a8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D1:5D:10:63:42:E5:39:23:C5:D5:F3:6B:55:5B:C8:BE:A9:F5:60 X509v3 Authority Key Identifier: keyid:E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e2:16:27:d7:2f:f7:4b:07:e8:74:01:30:35:fb:a9:17:bf: a9:fc:a3:e2:1f:9b:03:c7:16:f5:d9:da:fc:5b:0f:35:36:27: 12:d6:45:59:27:fb:56:42:2a:6f:77:8b:da:66:fa:a1:23:74: a2:ba:c7:49:14:72:8e:a5:ae:26:f1:b5:c8:ff:b0:05:92:94: 10:4c:ae:d6:c2:d4:b8:9a:86:f0:11:4d:0d:6d:38:b8:dc:91: e5:95:a8:25:4c:19:4f:58:a5:74:b3:70:c5:10:e8:b8:d4:4e: eb:5e:9b:0a:b6:29:d0:dd:96:8e:5a:80:49:38:f4:d1:aa:c7: 6b:97:c1:20:60:01:b8:b0:85:40:f3:2b:e9:0b:89:40:e5:ec: 05:63:b7:31:0e:da:70:be:dd:e8:6b:12:e1:aa:9c:22:87:31: f5:b3:7c:29:8b:81:a1:dc:62:95:3d:36:2a:5a:64:01:38:34: 05:33:ed:2a:41:a2:ab:1f:db:92:07:f8:0d:5d:94:8c:17:cd: fe:55:fa:e3:80:a7:fd:a2:98:41:b6:a9:f5:9d:81:9d:f9:9a: 4a:7c:80:32:30:ae:9b:c4:52:a6:6d:ac:b9:92:5a:26:5d:33: 7c:08:e9:6d:2a:d8:f0:6b:e9:56:e6:97:25:99:ad:b6:71:b1: a4:5f:a1:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAe0jvqCfxX+e062KFsnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MDlmNzYyZTA4MmVhZDNkNmQ3ZTRjYWUyOWVmYmI0ZDEy ZjU3NWUwHhcNMjUxMjA2MDIwMDU1WhcNMjUxMjA3MDIwMDU1WjAzMTEwLwYDVQQD EygwOWQxNWQxMDYzNDJlNTM5MjNjNWQ1ZjM2YjU1NWJjOGJlYTlmNTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihEC95ncWR6bBiyB6VEWdlwhmTMF aF44NOGDmjl+P6ZFDI36LtSr/BnWlRPuOqEG7F9QQCJ/R/USW62okZDs/Vj9DFCP BwF9/33S1/GiyIkUcVYvHP+LBb46rLQnwQJ61NrtUs9Br9N1GSL/qdUq8KYFfgym +vY22F/AeUCy3kV3lRMzFqblKABPLvYI5D0ZTsSBRsE96paRN4ZCa9i4soTn8zQ2 TxDKP1KU371ohDGPifgz0+yVUkmk9t3gZVXiyTUy5NjsYozPD1vHoHDzEAKGy2Hq 0d+nw4SmOyhqxajs+uhMlNjQ5nqTP+bdKgvWosiM8dsOJ6YXYJ62O1yo4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnRXRBjQuU5I8XV82tVW8i+qfVgMB8GA1UdIwQY MBaAFOcJ92LggurT1tfkyuKe+7TRL1deMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjIt YWU0ZmE3ZjE3ZjljLzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjItYWU0ZmE3ZjE3Zjlj LzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeIWJ9cv 90sH6HQBMDX7qRe/qfyj4h+bA8cW9dna/FsPNTYnEtZFWSf7VkIqb3eL2mb6oSN0 orrHSRRyjqWuJvG1yP+wBZKUEEyu1sLUuJqG8BFNDW04uNyR5ZWoJUwZT1ildLNw xRDouNRO616bCrYp0N2WjlqASTj00arHa5fBIGABuLCFQPMr6QuJQOXsBWO3MQ7a cL7d6GsS4aqcIocx9bN8KYuBodxilT02KlpkATg0BTPtKkGiqx/bkgf4DV2UjBfN /lX644Cn/aKYQbap9Z2BnfmaSnyAMjCum8RSpm2suZJaJl0zfAjpbSrY8GvpVuaX JZmttnGxpF+hcA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:49:32 2025 by rpki-client