This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft File: 5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft (raw, json) Hash identifier: hlpSObn/C1I1l8ge+nDyvrF5+XAcRsjaG+OAmAnNYAE= Subject key identifier: AC:1F:55:CC:D3:7F:71:A7:BC:7E:4A:74:B1:1F:88:07:92:3F:81:6C Authority key identifier: E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE Certificate issuer: /CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee Certificate serial: 019AF20979074236B1D8F6A671740CCEB523 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft Manifest number: 074F Signing time: Sat 06 Dec 2025 05:01:38 +0000 Manifest this update: Sat 06 Dec 2025 05:01:38 +0000 Manifest next update: Sun 07 Dec 2025 05:01:38 +0000 Files and hashes: 1: 5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl (hash: uGeVNpgxxcH4/ocvtrAEt4EiE5CCc25kSI2ZGS0Ithk=) 2: zwhatF5o3yk6nLXIa0yxqzP0ZTc.roa (hash: 9S00G7VwkBsXnXA2C5JQWmhqMbRgsqzBdUuOpwkdR1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:79:07:42:36:b1:d8:f6:a6:71:74:0c:ce:b5:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee Validity Not Before: Dec 6 05:01:38 2025 GMT Not After : Dec 7 05:01:38 2025 GMT Subject: CN=ac1f55ccd37f71a7bc7e4a74b11f8807923f816c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:61:41:4c:dc:72:66:5f:bd:88:89:33:4a:5b: 71:7a:f1:87:83:c2:1f:ea:bb:b5:c9:f4:16:55:c3: 54:6e:98:c5:8b:36:33:fd:d7:3a:b7:63:60:27:9d: b0:fc:c4:97:b0:b6:21:40:d8:88:43:68:95:cc:20: 23:13:d6:20:f9:4b:41:0d:5b:82:6b:01:83:47:b1: 82:f3:18:b4:ae:d6:9f:4b:e9:44:60:ed:f9:2f:17: 28:71:30:a0:1c:d2:5c:90:6d:ba:e4:3a:a9:4d:20: e2:b4:f1:e3:fb:1a:89:47:b3:dd:b6:89:3a:81:1a: 87:a4:30:64:40:89:08:33:22:18:eb:45:af:09:ef: ab:d6:09:0f:e0:bc:56:bf:52:04:95:c7:80:f9:38: 10:9b:55:81:cf:a5:0b:df:df:c4:fc:ac:ad:c4:c2: 26:a6:f8:fb:14:95:6f:55:6f:dd:6e:88:f4:e0:b8: e1:0b:b3:60:9d:21:05:4f:8f:c0:9e:72:bf:c9:e8: e9:f8:60:11:da:9e:97:d4:03:50:d4:f4:45:2d:ff: f1:0c:93:a2:6c:66:7e:22:df:01:ab:3f:93:12:6e: ae:8b:d1:36:13:f6:56:bc:c9:5c:86:69:8d:21:89: 7a:93:e4:33:b7:df:0c:41:5b:8b:a3:c7:59:27:73: fa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1F:55:CC:D3:7F:71:A7:BC:7E:4A:74:B1:1F:88:07:92:3F:81:6C X509v3 Authority Key Identifier: keyid:E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:cf:ca:8e:55:aa:01:72:f1:8b:d4:c9:3e:31:13:81:97:ec: 7a:f1:c2:60:f7:42:cf:bc:d7:06:b0:b4:cd:11:a8:8b:71:5d: 23:e1:ee:a1:48:89:da:31:05:f4:8f:9d:29:7d:f1:8b:75:3d: ad:e3:7f:cd:d4:0c:14:55:52:70:29:97:93:60:22:6e:3a:1c: aa:e1:c8:a0:ba:44:9e:45:c1:2b:e3:00:14:26:34:e6:7d:0a: d9:92:7f:ee:70:17:38:54:70:90:7a:26:63:3f:c6:b1:c7:8e: e8:8b:f9:66:fe:e8:90:af:76:4e:f1:94:74:09:b3:6d:e7:90: 35:43:69:bd:a7:86:ce:dc:b2:ad:8b:90:a8:e4:b8:8e:92:29: 78:c5:20:99:f6:f5:c5:1a:2f:b0:ef:2a:e3:1d:2d:4e:04:53: 6f:ec:12:d9:eb:0b:7d:a1:e1:f2:67:50:01:9a:e8:ac:62:37: 30:32:df:47:7c:ef:8b:31:52:02:fc:fb:2d:c8:90:d5:b4:94: 84:09:5b:0f:72:85:39:cf:cf:20:e5:9c:f8:68:da:2e:99:d1: 62:8a:4b:46:fe:f2:7f:74:ba:ba:4d:f3:aa:7a:4c:65:9d:18: b3:41:04:6c:61:ae:ce:37:74:68:ce:81:95:43:18:13:09:88: cb:37:32:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXkHQjax2PamcXQMzrUjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NGFiODlkMzNiZDhhYTk0MzhhMWRkMGI0YzU5ZWRiZWIw YzY0ZWUwHhcNMjUxMjA2MDUwMTM4WhcNMjUxMjA3MDUwMTM4WjAzMTEwLwYDVQQD EyhhYzFmNTVjY2QzN2Y3MWE3YmM3ZTRhNzRiMTFmODgwNzkyM2Y4MTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12FBTNxyZl+9iIkzSltxevGHg8If 6ru1yfQWVcNUbpjFizYz/dc6t2NgJ52w/MSXsLYhQNiIQ2iVzCAjE9Yg+UtBDVuC awGDR7GC8xi0rtafS+lEYO35LxcocTCgHNJckG265DqpTSDitPHj+xqJR7Pdtok6 gRqHpDBkQIkIMyIY60WvCe+r1gkP4LxWv1IElceA+TgQm1WBz6UL39/E/KytxMIm pvj7FJVvVW/dboj04LjhC7NgnSEFT4/AnnK/yejp+GAR2p6X1ANQ1PRFLf/xDJOi bGZ+It8Bqz+TEm6ui9E2E/ZWvMlchmmNIYl6k+Qzt98MQVuLo8dZJ3P6mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwfVczTf3GnvH5KdLEfiAeSP4FsMB8GA1UdIwQY MBaAFOVKuJ0zvYqpQ4od0LTFntvrDGTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVVxNG5UTzlpcWxEaWgzUXRNV2UyLXNNWk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMzE2YjYtNzJlMy00YmNlLWJiZTIt MWI0MzI4NzJiY2ZmLzEvNVVxNG5UTzlpcWxEaWgzUXRNV2UyLXNNWk80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9jMzE2YjYtNzJlMy00YmNlLWJiZTItMWI0MzI4NzJiY2Zm LzEvNVVxNG5UTzlpcWxEaWgzUXRNV2UyLXNNWk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFc/KjlWq AXLxi9TJPjETgZfsevHCYPdCz7zXBrC0zRGoi3FdI+HuoUiJ2jEF9I+dKX3xi3U9 reN/zdQMFFVScCmXk2AibjocquHIoLpEnkXBK+MAFCY05n0K2ZJ/7nAXOFRwkHom Yz/GsceO6Iv5Zv7okK92TvGUdAmzbeeQNUNpvaeGztyyrYuQqOS4jpIpeMUgmfb1 xRovsO8q4x0tTgRTb+wS2esLfaHh8mdQAZrorGI3MDLfR3zvizFSAvz7LciQ1bSU hAlbD3KFOc/PIOWc+GjaLpnRYopLRv7yf3S6uk3zqnpMZZ0Ys0EEbGGuzjd0aM6B lUMYEwmIyzcyzg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:38:48 2025 by rpki-client