This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft File: 5hwHyVFIjwTLOw_TOK-E135Gv1I.mft (raw, json) Hash identifier: y2AxO/UQq4FOIcl76cfvg631Gw9LgVgqBX2k5WtYx+8= Subject key identifier: 33:3A:77:EE:1E:62:23:43:44:83:47:5D:83:AC:C1:16:08:E1:94:B7 Authority key identifier: E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52 Certificate issuer: /CN=e61c07c951488f04cb3b0fd338af84d77e46bf52 Certificate serial: 019AF1D2146AC8FF310280A66119327543A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 04:01:08 +0000 Manifest this update: Sat 06 Dec 2025 04:01:08 +0000 Manifest next update: Sun 07 Dec 2025 04:01:08 +0000 Files and hashes: 1: 5d-MK0SFUKCa7OqDshoW83Eshuo.roa (hash: aey5uC54BClCdDEzkN3fyScGqIKvlanDv8iSdtaGwEg=) 2: 5hwHyVFIjwTLOw_TOK-E135Gv1I.crl (hash: u9RmTqaYgnEve7yBU9OOKaCOPzHr/kQA32J/Ut1zgCw=) 3: GYQyoqa1Lcx9RJ4IYkOHPaDzsYs.roa (hash: 5OkYxXGX0IRpYv6mAWx2ijlmqd3siYfdidMZt5Qq9jo=) 4: PFBBA4lrKhNwCem9RKvfOnYfCDc.roa (hash: /EjlV3R/5VRkrIm2TPm8gVB2qkL97VXtQAiUN3hx+BU=) 5: RntbFw86fXPeZrXmK3pHV0zJQEg.roa (hash: 2k5iB1oS6C7exnQoJZ1PI5WrELrU2n19+jcz7Vk+ODg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:14:6a:c8:ff:31:02:80:a6:61:19:32:75:43:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e61c07c951488f04cb3b0fd338af84d77e46bf52 Validity Not Before: Dec 6 04:01:08 2025 GMT Not After : Dec 7 04:01:08 2025 GMT Subject: CN=333a77ee1e6223434483475d83acc11608e194b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6f:fe:fe:a3:1d:e9:37:a3:de:91:f3:c4:b7: 14:2e:95:8a:6c:00:0f:ab:5a:7c:9c:a9:66:98:8f: 4c:0b:e6:6f:69:7e:f5:10:b4:7c:81:4c:5d:c7:9b: 0f:89:21:8c:b0:0a:ee:ae:bd:8e:1e:bc:87:0c:37: 50:9e:12:57:56:f1:6c:57:ca:56:7d:ca:68:8f:e3: ad:d8:c4:dc:5a:41:98:64:08:da:1a:c7:ab:35:9f: 8d:b9:d8:69:8c:a2:85:d1:74:a4:ab:c6:10:48:a8: 37:c2:9d:14:d6:20:54:94:f5:2f:95:02:74:b0:b0: 48:e1:48:b7:d0:78:13:0e:85:cb:e9:c8:20:c8:16: ea:78:f9:1c:5b:a8:68:0c:ae:86:94:3c:ac:98:a0: aa:47:e3:fe:e9:23:a3:bc:4d:2e:7a:5e:a3:ed:df: 1b:53:34:08:9f:a3:f1:40:1c:94:f4:15:1a:f9:a6: 83:23:65:6b:09:c0:6f:f9:b4:5e:ee:b8:20:43:87: 40:ec:58:b1:ae:84:b7:3b:d6:b4:e5:d7:38:3d:18: 62:cf:1d:a0:38:b3:6f:f3:be:13:96:fb:eb:55:8f: a5:73:9f:4c:23:33:62:d9:76:40:c1:80:6b:17:0e: de:e6:2d:8a:28:19:ec:9b:34:0f:3d:19:27:b8:d5: 10:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3A:77:EE:1E:62:23:43:44:83:47:5D:83:AC:C1:16:08:E1:94:B7 X509v3 Authority Key Identifier: keyid:E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:d6:a2:03:6a:dd:72:43:b6:2e:8c:03:41:0a:e1:f0:43:ae: 2c:8e:bc:95:a4:97:c7:12:34:7e:69:5a:fb:29:82:90:be:bd: e2:fd:ec:91:62:12:90:18:63:81:1c:96:2c:69:d1:bd:42:e3: 04:81:26:fb:eb:09:06:2d:62:b1:82:45:e4:0a:e1:43:68:21: 97:30:26:8b:08:51:81:e2:28:68:db:2d:2c:13:e6:ca:1c:83: f6:03:8f:33:65:8b:f1:83:7b:4a:5c:ec:8d:8b:75:42:db:ca: ca:39:22:d5:a5:51:05:1e:d4:4e:8c:20:47:75:eb:6b:0c:66: ba:3d:75:1c:76:8f:8a:04:aa:3e:1e:b2:d3:c8:dc:da:70:1d: 6d:b0:c4:09:27:f8:11:05:1a:38:4b:79:b4:c2:04:6c:18:e1: a9:42:5b:dd:8e:38:ac:a5:1b:c4:13:d3:fc:4f:b0:39:39:52: 75:2f:a2:02:7a:f0:d8:78:d9:4e:8e:c2:cc:d9:c5:85:c2:8f: 43:f3:6c:62:a6:75:48:37:b5:85:c7:54:20:3c:59:8a:ff:71: 88:df:79:99:ac:18:bc:89:66:db:82:e5:53:c8:b3:83:f6:df: c0:22:41:8d:70:bd:1d:4f:24:b1:a1:f3:2e:60:96:ca:cb:f7: 61:0f:59:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hRqyP8xAoCmYRkydUOiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MWMwN2M5NTE0ODhmMDRjYjNiMGZkMzM4YWY4NGQ3N2U0 NmJmNTIwHhcNMjUxMjA2MDQwMTA4WhcNMjUxMjA3MDQwMTA4WjAzMTEwLwYDVQQD EygzMzNhNzdlZTFlNjIyMzQzNDQ4MzQ3NWQ4M2FjYzExNjA4ZTE5NGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2/+/qMd6Tej3pHzxLcULpWKbAAP q1p8nKlmmI9MC+ZvaX71ELR8gUxdx5sPiSGMsArurr2OHryHDDdQnhJXVvFsV8pW fcpoj+Ot2MTcWkGYZAjaGserNZ+NudhpjKKF0XSkq8YQSKg3wp0U1iBUlPUvlQJ0 sLBI4Ui30HgTDoXL6cggyBbqePkcW6hoDK6GlDysmKCqR+P+6SOjvE0uel6j7d8b UzQIn6PxQByU9BUa+aaDI2VrCcBv+bRe7rggQ4dA7FixroS3O9a05dc4PRhizx2g OLNv874TlvvrVY+lc59MIzNi2XZAwYBrFw7e5i2KKBnsmzQPPRknuNUQewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDM6d+4eYiNDRINHXYOswRYI4ZS3MB8GA1UdIwQY MBaAFOYcB8lRSI8EyzsP0zivhNd+Rr9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWh3SHlWRklqd1RMT3dfVE9LLUUxMzVHdjFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yZGJhNWMtOWE5MC00MDUyLWExZWIt NmE4NDc3Y2I2YzJhLzEvNWh3SHlWRklqd1RMT3dfVE9LLUUxMzVHdjFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8yZGJhNWMtOWE5MC00MDUyLWExZWItNmE4NDc3Y2I2YzJh LzEvNWh3SHlWRklqd1RMT3dfVE9LLUUxMzVHdjFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAutaiA2rd ckO2LowDQQrh8EOuLI68laSXxxI0fmla+ymCkL694v3skWISkBhjgRyWLGnRvULj BIEm++sJBi1isYJF5ArhQ2ghlzAmiwhRgeIoaNstLBPmyhyD9gOPM2WL8YN7Slzs jYt1QtvKyjki1aVRBR7UTowgR3Xrawxmuj11HHaPigSqPh6y08jc2nAdbbDECSf4 EQUaOEt5tMIEbBjhqUJb3Y44rKUbxBPT/E+wOTlSdS+iAnrw2HjZTo7CzNnFhcKP Q/NsYqZ1SDe1hcdUIDxZiv9xiN95mawYvIlm24LlU8izg/bfwCJBjXC9HU8ksaHz LmCWysv3YQ9ZVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:22 2025 by rpki-client