This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft File: 5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft (raw, json) Hash identifier: Sj3V2XnmZoO60WiCBB3fSL4ezGx+N8NasuvPShWOGPc= Subject key identifier: B4:62:56:8D:60:13:2E:9F:8B:43:92:7F:38:DC:2C:DB:31:FC:76:7D Authority key identifier: E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B Certificate issuer: /CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b Certificate serial: 019AF19B75E6DC7C14297576E0182A26509E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft Manifest number: 0A1B Signing time: Sat 06 Dec 2025 03:01:28 +0000 Manifest this update: Sat 06 Dec 2025 03:01:28 +0000 Manifest next update: Sun 07 Dec 2025 03:01:28 +0000 Files and hashes: 1: 5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl (hash: Aiami7HGUsn3QToqg4E567miglTXmBAmV4HWcrMD6SA=) 2: xKaI03GURyzSZb-rRcYioTYAybk.roa (hash: HlTvUY61ftuf4HfBCvEW2aFKorP77hcqRc1NgwCXzCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:75:e6:dc:7c:14:29:75:76:e0:18:2a:26:50:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b Validity Not Before: Dec 6 03:01:28 2025 GMT Not After : Dec 7 03:01:28 2025 GMT Subject: CN=b462568d60132e9f8b43927f38dc2cdb31fc767d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:84:1d:ad:ee:54:47:af:db:88:1a:6b:5a:9a: ab:dc:5e:75:ca:4e:4d:8c:c2:ce:61:9e:54:8b:d9: 90:cb:ae:a2:63:25:79:99:19:ec:81:40:13:bf:7f: 8b:0a:d5:ee:c6:09:bd:c4:64:dc:e9:eb:96:2e:8d: aa:4f:7d:6a:5f:1b:13:68:c1:77:72:2d:ae:34:08: c1:6a:be:aa:7b:c8:3f:49:81:12:80:4a:21:1b:1a: d5:29:66:a2:2c:68:8f:41:04:4c:07:3a:ec:90:ea: a0:f9:cd:56:19:1b:14:ef:cf:af:7d:77:07:ea:33: 41:ab:84:7f:d3:07:50:1e:b1:7c:51:d5:8e:ec:e4: 34:b7:47:ed:e8:b7:ac:f3:b7:ca:db:74:55:3e:13: f2:b5:3a:2e:db:7a:c6:8e:db:46:1e:c3:b0:a4:1f: b9:59:54:79:c3:4c:19:61:8e:64:e8:d6:36:8c:c6: 46:12:ee:a5:54:1b:ff:dd:6c:b6:af:98:49:80:f4: 0c:76:da:df:3c:c7:b9:82:fb:1f:88:d1:45:b8:90: fe:da:a1:bf:5f:4c:1b:04:75:d5:83:5a:59:2b:ea: 53:45:d6:39:79:f4:5f:d6:d2:49:9a:b0:6c:e9:67: a7:0c:1b:22:47:6a:c4:56:16:5f:52:5f:75:f3:59: c5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:62:56:8D:60:13:2E:9F:8B:43:92:7F:38:DC:2C:DB:31:FC:76:7D X509v3 Authority Key Identifier: keyid:E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:e4:96:60:0a:aa:5e:c5:e1:f8:21:ca:93:e7:c0:1c:33:ac: 2e:eb:d0:d9:74:74:91:c2:96:cc:11:ea:84:79:1b:9f:34:04: 6c:28:c8:2e:9a:00:d2:a1:7b:dc:b6:2a:aa:0f:0f:e7:b6:ac: 58:e1:5c:52:39:f7:66:97:8e:a6:d9:bf:bf:2e:55:53:50:c3: 9f:4f:09:ea:fd:bc:54:18:24:61:6c:89:2c:46:50:96:1e:0e: be:ef:c8:f5:f5:69:08:83:f7:ea:54:42:e4:4a:ce:7e:e3:3a: 26:99:96:f4:95:1f:b4:89:c4:9c:cf:6c:3c:79:93:da:88:82: 74:17:36:46:2b:5d:d5:d8:39:e3:03:78:c1:bf:07:05:08:7e: 65:ce:78:6b:d8:bc:07:4e:e9:5f:1d:3a:53:12:be:dc:ab:56: c0:fc:e1:73:e1:55:aa:7e:d4:03:21:0f:61:e5:e4:60:a2:c1: bf:8b:69:3c:58:8e:e4:07:53:ef:34:99:4f:66:f2:6d:fb:bd: c2:8d:d2:89:dc:74:50:5e:30:6f:3e:69:e6:86:82:41:c3:e3: 7d:b1:2f:aa:06:4f:bf:6a:e3:96:14:4c:a0:7a:80:8e:34:09: da:b5:2b:7a:ed:e9:30:1f:3a:7d:04:80:aa:55:7c:49:bd:3a: 4b:87:1d:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3Xm3HwUKXV24BgqJlCeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0OTVhY2JhZmU0NmVmMmY0ZDZjNTFmY2YyM2JkNzJmNjM5 Y2ZkMGIwHhcNMjUxMjA2MDMwMTI4WhcNMjUxMjA3MDMwMTI4WjAzMTEwLwYDVQQD EyhiNDYyNTY4ZDYwMTMyZTlmOGI0MzkyN2YzOGRjMmNkYjMxZmM3NjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4Qdre5UR6/biBprWpqr3F51yk5N jMLOYZ5Ui9mQy66iYyV5mRnsgUATv3+LCtXuxgm9xGTc6euWLo2qT31qXxsTaMF3 ci2uNAjBar6qe8g/SYESgEohGxrVKWaiLGiPQQRMBzrskOqg+c1WGRsU78+vfXcH 6jNBq4R/0wdQHrF8UdWO7OQ0t0ft6Les87fK23RVPhPytTou23rGjttGHsOwpB+5 WVR5w0wZYY5k6NY2jMZGEu6lVBv/3Wy2r5hJgPQMdtrfPMe5gvsfiNFFuJD+2qG/ X0wbBHXVg1pZK+pTRdY5efRf1tJJmrBs6WenDBsiR2rEVhZfUl9181nFDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRiVo1gEy6fi0OSfzjcLNsx/HZ9MB8GA1UdIwQY MBaAFOSVrLr+Ru8vTWxR/PI71y9jnP0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUpXc3V2NUc3eTlOYkZIODhqdlhMMk9jX1FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy80NDA4NzctMzE5ZC00NjMwLWE2OTEt Nzk5MWI0ZTRiZmEyLzEvNUpXc3V2NUc3eTlOYkZIODhqdlhMMk9jX1FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy80NDA4NzctMzE5ZC00NjMwLWE2OTEtNzk5MWI0ZTRiZmEy LzEvNUpXc3V2NUc3eTlOYkZIODhqdlhMMk9jX1FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeSWYAqq XsXh+CHKk+fAHDOsLuvQ2XR0kcKWzBHqhHkbnzQEbCjILpoA0qF73LYqqg8P57as WOFcUjn3ZpeOptm/vy5VU1DDn08J6v28VBgkYWyJLEZQlh4Ovu/I9fVpCIP36lRC 5ErOfuM6JpmW9JUftInEnM9sPHmT2oiCdBc2Ritd1dg54wN4wb8HBQh+Zc54a9i8 B07pXx06UxK+3KtWwPzhc+FVqn7UAyEPYeXkYKLBv4tpPFiO5AdT7zSZT2bybfu9 wo3Sidx0UF4wbz5p5oaCQcPjfbEvqgZPv2rjlhRMoHqAjjQJ2rUreu3pMB86fQSA qlV8Sb06S4cdJA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:02 2025 by rpki-client