This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft File: c5ojygLNDwflNvtppcC5vqDaYKU.mft (raw, json) Hash identifier: S8cJbgH663X2umoaODEFCbqd7Cib21fWPxMHGGbmKTo= Subject key identifier: A6:1F:89:32:1F:07:5C:FF:8E:2F:34:E3:4E:E4:A2:23:45:AC:E7:F6 Authority key identifier: 73:9A:23:CA:02:CD:0F:07:E5:36:FB:69:A5:C0:B9:BE:A0:DA:60:A5 Certificate issuer: /CN=739a23ca02cd0f07e536fb69a5c0b9bea0da60a5 Certificate serial: 019AF19AD5D4C47E0690229D69375B1336F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c5ojygLNDwflNvtppcC5vqDaYKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft Manifest number: 0A54 Signing time: Sat 06 Dec 2025 03:00:47 +0000 Manifest this update: Sat 06 Dec 2025 03:00:47 +0000 Manifest next update: Sun 07 Dec 2025 03:00:47 +0000 Files and hashes: 1: c5ojygLNDwflNvtppcC5vqDaYKU.crl (hash: vsrQQJWvAi9nWzpkgh9Hn82nXOncXKvRcWU6NNo1NEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft rsync://rpki.ripe.net/repository/DEFAULT/c5ojygLNDwflNvtppcC5vqDaYKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d5:d4:c4:7e:06:90:22:9d:69:37:5b:13:36:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=739a23ca02cd0f07e536fb69a5c0b9bea0da60a5 Validity Not Before: Dec 6 03:00:47 2025 GMT Not After : Dec 7 03:00:47 2025 GMT Subject: CN=a61f89321f075cff8e2f34e34ee4a22345ace7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:67:ac:14:85:c6:30:5a:d3:05:ea:0a:d4:69: d4:e6:61:74:ea:f3:36:93:10:ac:67:6f:91:16:76: 17:b9:5c:6a:52:28:63:7e:08:bd:68:44:a3:fd:4c: 1f:7c:13:33:8f:dd:b2:80:99:34:fc:c0:6a:ed:23: a0:06:71:14:91:12:11:1e:2f:67:4c:55:e0:dc:66: c8:22:6a:74:4c:37:2d:e5:89:54:5e:31:76:f6:9c: 43:b0:94:72:fa:e5:0b:7b:88:82:27:07:f9:8f:80: 99:28:90:43:bb:58:88:21:e6:ab:7e:5b:6d:78:db: 95:d8:1e:9d:99:11:e6:5d:4a:e7:ec:58:fb:76:6c: be:7c:42:08:ef:33:80:ae:7b:a1:35:d3:dd:e6:8a: ed:6e:dc:91:99:66:81:c9:d2:4e:76:c6:04:f5:3f: de:86:0d:b2:8a:03:0b:2f:22:5c:61:ff:0c:3c:c5: 74:19:cb:45:76:57:ba:16:5d:07:51:6d:12:89:d6: 37:f6:bf:f3:78:ad:49:93:82:a9:60:64:8b:e7:28: 28:ff:17:cf:3a:72:a0:98:28:78:8f:7d:0b:41:f2: 81:27:33:f0:d2:1e:b3:62:ba:9b:bc:0f:d1:bc:04: a3:84:56:c8:3a:58:23:65:cb:2a:13:7f:43:f1:57: ea:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1F:89:32:1F:07:5C:FF:8E:2F:34:E3:4E:E4:A2:23:45:AC:E7:F6 X509v3 Authority Key Identifier: keyid:73:9A:23:CA:02:CD:0F:07:E5:36:FB:69:A5:C0:B9:BE:A0:DA:60:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5ojygLNDwflNvtppcC5vqDaYKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/160aea-31e5-4b75-9bcb-2b3bc0c198ad/1/c5ojygLNDwflNvtppcC5vqDaYKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b5:dd:92:06:1b:11:e3:95:7b:fa:bf:a6:91:e9:28:a5:9e: 12:71:0c:fb:99:19:a6:f8:12:4a:62:cd:67:d9:71:ea:06:26: 20:00:80:94:b8:64:4a:71:30:e3:6e:bb:38:ce:ac:4e:72:09: 35:56:bd:da:b7:7f:98:13:a4:85:4d:52:91:5d:26:6e:e6:df: 89:3d:62:e3:a7:bf:cd:e3:3e:8d:31:2c:cb:e7:c7:ee:de:4f: 16:e9:03:0f:6b:48:20:e8:ba:eb:ab:42:a8:a9:d8:aa:a8:9d: eb:7d:00:40:4f:f6:b2:77:7c:58:61:11:5f:1f:25:ee:e6:4c: e7:ce:da:2f:e0:c1:ec:47:55:f5:6c:cc:e4:80:a6:60:65:bc: 0f:65:4c:98:d4:5d:6c:37:94:d3:18:69:6e:bf:8d:98:e7:36: 7f:a1:d1:5f:3b:42:8d:22:3a:18:ee:6a:41:34:fc:58:dc:72: 0c:af:88:24:33:91:fd:90:a7:3b:8b:6b:2e:f0:14:24:c7:4d: 17:ef:2d:1a:d6:8b:9b:c3:5b:63:4f:20:26:45:38:09:e6:27: 0e:db:7c:89:2e:ca:01:6f:1c:df:d9:5c:ad:47:22:3d:fa:94: 6a:24:0e:e1:c9:98:a7:60:31:14:f7:e8:1c:48:36:5f:01:5d: 39:46:a1:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtXUxH4GkCKdaTdbEzb0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczOWEyM2NhMDJjZDBmMDdlNTM2ZmI2OWE1YzBiOWJlYTBk YTYwYTUwHhcNMjUxMjA2MDMwMDQ3WhcNMjUxMjA3MDMwMDQ3WjAzMTEwLwYDVQQD EyhhNjFmODkzMjFmMDc1Y2ZmOGUyZjM0ZTM0ZWU0YTIyMzQ1YWNlN2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmesFIXGMFrTBeoK1GnU5mF06vM2 kxCsZ2+RFnYXuVxqUihjfgi9aESj/UwffBMzj92ygJk0/MBq7SOgBnEUkRIRHi9n TFXg3GbIImp0TDct5YlUXjF29pxDsJRy+uULe4iCJwf5j4CZKJBDu1iIIearfltt eNuV2B6dmRHmXUrn7Fj7dmy+fEII7zOArnuhNdPd5ortbtyRmWaBydJOdsYE9T/e hg2yigMLLyJcYf8MPMV0GctFdle6Fl0HUW0SidY39r/zeK1Jk4KpYGSL5ygo/xfP OnKgmCh4j30LQfKBJzPw0h6zYrqbvA/RvASjhFbIOlgjZcsqE39D8VfqjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYfiTIfB1z/ji80407koiNFrOf2MB8GA1UdIwQY MBaAFHOaI8oCzQ8H5Tb7aaXAub6g2mClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzVvanlnTE5Ed2ZsTnZ0cHBjQzV2cURhWUtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xNjBhZWEtMzFlNS00Yjc1LTliY2It MmIzYmMwYzE5OGFkLzEvYzVvanlnTE5Ed2ZsTnZ0cHBjQzV2cURhWUtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8xNjBhZWEtMzFlNS00Yjc1LTliY2ItMmIzYmMwYzE5OGFk LzEvYzVvanlnTE5Ed2ZsTnZ0cHBjQzV2cURhWUtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarXdkgYb EeOVe/q/ppHpKKWeEnEM+5kZpvgSSmLNZ9lx6gYmIACAlLhkSnEw4267OM6sTnIJ NVa92rd/mBOkhU1SkV0mbubfiT1i46e/zeM+jTEsy+fH7t5PFukDD2tIIOi666tC qKnYqqid630AQE/2snd8WGERXx8l7uZM587aL+DB7EdV9WzM5ICmYGW8D2VMmNRd bDeU0xhpbr+NmOc2f6HRXztCjSI6GO5qQTT8WNxyDK+IJDOR/ZCnO4trLvAUJMdN F+8tGtaLm8NbY08gJkU4CeYnDtt8iS7KAW8c39lcrUciPfqUaiQO4cmYp2AxFPfo HEg2XwFdOUahmw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:36 2025 by rpki-client