This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft File: 5LTFOvZfC4OWuVtNB9TsTnvid-U.mft (raw, json) Hash identifier: s4MFYZLSS/d/yjaXCTrzqPK5dG9frLy1r65J2iDjwVc= Subject key identifier: EB:3E:79:B5:CF:F4:25:B2:52:B8:02:D4:54:90:9F:AA:5E:EF:51:FD Authority key identifier: E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5 Certificate issuer: /CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5 Certificate serial: 019AF31B183D62FEC69A91C410A9403EF873 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:00:30 +0000 Manifest this update: Sat 06 Dec 2025 10:00:30 +0000 Manifest next update: Sun 07 Dec 2025 10:00:30 +0000 Files and hashes: 1: 5LTFOvZfC4OWuVtNB9TsTnvid-U.crl (hash: j53UAfMxVVrvv3j90VaHYy6B9uTGc7/25pB0ux8AlVs=) 2: HPP-Y8CcP39de0XZZOWjFIJ96v4.roa (hash: wqE/NVLKIIjuJJuVTQbIHrmfJEIIZJeODzcidgoveO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:18:3d:62:fe:c6:9a:91:c4:10:a9:40:3e:f8:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5 Validity Not Before: Dec 6 10:00:30 2025 GMT Not After : Dec 7 10:00:30 2025 GMT Subject: CN=eb3e79b5cff425b252b802d454909faa5eef51fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e8:12:bb:29:0e:68:cf:28:ab:61:75:bb:cc: 7a:0d:5b:b3:dc:e9:cd:67:e6:94:da:20:a2:75:bd: f9:aa:f0:8b:11:3e:98:0a:bc:7e:e9:f6:9e:d8:04: 4e:bd:22:31:4e:58:4f:b5:79:ae:34:7b:ca:ab:33: 69:80:a6:70:f7:d0:30:fd:fa:f3:ee:f0:f6:05:89: 38:84:22:cf:91:37:90:62:f7:08:43:13:f0:af:ab: f2:d1:74:13:85:57:9c:48:f0:e9:63:a3:c5:05:ab: a5:04:e3:5a:f4:d8:5a:ab:71:92:97:c1:93:1e:1c: e1:c9:44:8e:be:c7:49:ae:22:4f:cc:11:6b:9e:f1: 42:89:01:ea:95:a6:d7:99:89:85:21:cc:25:96:f1: cf:a9:9e:9d:61:61:0a:d7:7f:4b:75:a5:a9:ad:fe: 77:c5:c1:9e:7e:5c:c6:58:79:e1:b1:ab:43:29:84: 8e:d5:56:bc:01:aa:ca:ea:a4:fd:8c:af:f9:3d:72: 2a:c5:6f:82:6f:0f:24:99:28:51:12:13:ce:11:8f: 8d:8b:45:ce:5e:c0:33:67:7f:2c:ad:60:64:52:9d: c2:09:2a:03:ce:d8:40:dc:fe:e4:e6:36:47:6d:38: 00:23:b7:19:b9:d4:79:e6:8c:3a:14:3c:a0:25:7c: 98:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3E:79:B5:CF:F4:25:B2:52:B8:02:D4:54:90:9F:AA:5E:EF:51:FD X509v3 Authority Key Identifier: keyid:E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ea:a1:4b:47:43:4c:1d:ec:ac:da:44:dd:7c:cc:72:32:24: 48:de:51:1f:16:3b:58:a4:2d:56:b7:3e:94:4b:9f:a6:f4:14: 75:60:33:97:2e:0a:1e:7b:2d:78:1a:48:af:77:68:d5:c6:9a: 2d:f0:a0:f1:f3:c1:34:e8:e3:81:4b:70:0b:03:a3:68:37:41: 07:3f:ed:8c:01:86:f6:87:d1:6f:fd:0f:1d:9b:c7:d8:31:1e: 49:24:2a:86:79:1c:23:1d:a8:5c:9e:17:d5:ad:92:1e:18:dd: b0:37:56:1b:fe:dc:7c:17:b2:25:78:bf:e7:26:9a:6d:a3:49: 63:19:d2:89:65:bf:d6:56:78:d8:7c:74:f4:1e:57:5a:2c:4c: a9:07:58:73:a4:2f:36:2e:06:e9:95:8e:f0:6b:3d:ed:a3:6e: 14:bd:08:d2:80:51:40:f6:41:42:be:97:e7:91:c1:8d:f8:15: 6d:3c:a2:b8:da:31:09:b5:6e:ed:2b:cd:b1:a0:d5:e0:b3:2a: 37:23:36:96:70:cd:24:52:d4:86:8d:84:51:df:9e:32:3a:53: d2:e1:31:1d:59:ec:eb:76:4c:3e:3c:8d:f7:13:00:99:7c:8d: 9f:26:7a:4f:ae:6f:14:34:da:7d:cd:b5:ef:f7:18:6f:be:2d: b1:d7:9c:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGxg9Yv7GmpHEEKlAPvhzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YjRjNTNhZjY1ZjBiODM5NmI5NWI0ZDA3ZDRlYzRlN2Jl Mjc3ZTUwHhcNMjUxMjA2MTAwMDMwWhcNMjUxMjA3MTAwMDMwWjAzMTEwLwYDVQQD EyhlYjNlNzliNWNmZjQyNWIyNTJiODAyZDQ1NDkwOWZhYTVlZWY1MWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+gSuykOaM8oq2F1u8x6DVuz3OnN Z+aU2iCidb35qvCLET6YCrx+6fae2AROvSIxTlhPtXmuNHvKqzNpgKZw99Aw/frz 7vD2BYk4hCLPkTeQYvcIQxPwr6vy0XQThVecSPDpY6PFBaulBONa9Nhaq3GSl8GT HhzhyUSOvsdJriJPzBFrnvFCiQHqlabXmYmFIcwllvHPqZ6dYWEK139LdaWprf53 xcGeflzGWHnhsatDKYSO1Va8AarK6qT9jK/5PXIqxW+Cbw8kmShREhPOEY+Ni0XO XsAzZ38srWBkUp3CCSoDzthA3P7k5jZHbTgAI7cZudR55ow6FDygJXyYTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOs+ebXP9CWyUrgC1FSQn6pe71H9MB8GA1UdIwQY MBaAFOS0xTr2XwuDlrlbTQfU7E574nflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUxURk92WmZDNE9XdVZ0TkI5VHNUbnZpZC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80NmFhYmYtZGFkMC00ZDc2LWE1YjUt ODhkYjAxMjVhNmI4LzEvNUxURk92WmZDNE9XdVZ0TkI5VHNUbnZpZC1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi80NmFhYmYtZGFkMC00ZDc2LWE1YjUtODhkYjAxMjVhNmI4 LzEvNUxURk92WmZDNE9XdVZ0TkI5VHNUbnZpZC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+qhS0dD TB3srNpE3XzMcjIkSN5RHxY7WKQtVrc+lEufpvQUdWAzly4KHnsteBpIr3do1caa LfCg8fPBNOjjgUtwCwOjaDdBBz/tjAGG9ofRb/0PHZvH2DEeSSQqhnkcIx2oXJ4X 1a2SHhjdsDdWG/7cfBeyJXi/5yaabaNJYxnSiWW/1lZ42Hx09B5XWixMqQdYc6Qv Ni4G6ZWO8Gs97aNuFL0I0oBRQPZBQr6X55HBjfgVbTyiuNoxCbVu7SvNsaDV4LMq NyM2lnDNJFLUho2EUd+eMjpT0uExHVns63ZMPjyN9xMAmXyNnyZ6T65vFDTafc21 7/cYb74tsdecMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:52:33 2025 by rpki-client