This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft File: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft (raw, json) Hash identifier: CLJw594DpMWhMinSHnoRydDGpVGPKG962iRS/BrN0Ig= Subject key identifier: 93:CF:CD:60:6D:ED:6F:C2:A8:1E:8B:A9:5F:25:77:04:57:D2:04:E3 Authority key identifier: E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20 Certificate issuer: /CN=e4c7482434a457b048b7d6261ddd8095c5c09020 Certificate serial: 019AF31C5F92FAFFBBD534FDCAA0F23E551C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft Manifest number: 0994 Signing time: Sat 06 Dec 2025 10:01:54 +0000 Manifest this update: Sat 06 Dec 2025 10:01:54 +0000 Manifest next update: Sun 07 Dec 2025 10:01:54 +0000 Files and hashes: 1: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl (hash: P1/t0TFcFswnDnMEJ22iCOZVCtLNMZIbB4kH7a49Qm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:5f:92:fa:ff:bb:d5:34:fd:ca:a0:f2:3e:55:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4c7482434a457b048b7d6261ddd8095c5c09020 Validity Not Before: Dec 6 10:01:54 2025 GMT Not After : Dec 7 10:01:54 2025 GMT Subject: CN=93cfcd606ded6fc2a81e8ba95f25770457d204e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a6:a0:c8:fc:ed:8c:47:a1:a9:3e:53:05:72: d6:c9:1c:a4:25:45:d0:5a:33:12:3f:1d:a7:c8:f5: 84:d7:d2:6e:e9:40:5f:46:bb:47:c5:f4:85:04:96: f9:97:27:ff:74:b9:7e:ca:3a:f4:a4:08:91:e9:df: 17:9c:7d:db:cf:40:0c:21:da:e2:f0:b0:ec:e9:60: f1:7e:cb:b2:2a:01:04:ab:8a:a4:7e:62:c3:bb:38: 8a:8a:9b:fe:16:ab:4e:c4:16:de:dd:43:9d:f8:f7: 3d:4d:6f:90:58:0b:a9:b9:28:fa:87:f9:aa:49:85: 3c:e6:a9:f8:83:9e:28:12:1d:a5:01:90:26:b6:6d: 36:74:92:4e:11:5e:1b:04:a3:62:8e:18:e1:6b:df: 17:95:69:3f:cf:14:df:1c:6b:26:13:9e:2b:5f:bb: 61:2e:26:82:90:98:f2:80:21:a4:40:87:8a:82:c0: 5d:6c:52:97:aa:9b:53:3c:c5:5d:2e:b4:07:a6:2b: ae:31:e7:18:c4:37:10:e0:fc:9d:a3:10:63:2c:36: 34:bc:8f:14:79:89:75:31:89:17:b8:d4:a1:fd:c4: f2:aa:66:43:b1:c6:c0:08:43:6b:e2:fb:e1:19:23: 9f:b8:3a:9e:ef:7b:df:e1:6e:ff:93:9e:15:ff:26: c9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CF:CD:60:6D:ED:6F:C2:A8:1E:8B:A9:5F:25:77:04:57:D2:04:E3 X509v3 Authority Key Identifier: keyid:E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:0e:cb:53:0f:21:fa:e8:c8:5a:e1:a0:f2:b3:ae:7c:6b:52: f2:66:ee:dc:29:b3:cc:1c:c8:e8:2f:d8:60:d6:ff:f3:fa:df: b8:94:32:a0:26:3c:ec:49:c7:77:41:7c:16:24:00:ec:b6:56: a9:74:7f:3f:f1:94:3e:87:66:91:64:0b:e0:70:f8:52:84:a1: b7:30:83:d3:c2:4e:76:44:34:d7:0b:31:1c:5b:61:a5:c5:39: 0f:16:4d:be:7c:34:ad:32:73:7e:ca:39:da:44:d7:6b:08:36: e0:e1:ce:b9:5a:10:65:d4:9d:62:36:14:53:6d:63:ee:b3:a7: 3a:7a:3e:89:33:07:68:95:6d:bd:3d:7d:70:17:cd:e4:51:11: e1:87:ca:44:86:ca:06:8d:4e:02:d8:38:35:a9:d3:9a:b7:ec: 8e:22:01:b5:38:05:97:e0:c0:bc:c6:5c:6a:ae:83:08:5c:64: 32:48:e3:01:e5:57:66:94:8d:b2:59:f2:c9:d4:66:4f:70:9a: 02:66:1a:81:05:10:6e:f5:97:87:6c:aa:a0:7f:ae:e6:95:62: d4:b8:82:ce:de:79:5d:64:48:3a:f8:19:f1:e7:14:e6:c6:2a: 38:1e:82:49:34:67:d7:13:18:f8:75:bf:37:82:d7:b4:a6:dc: 46:2d:6b:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHF+S+v+71TT9yqDyPlUcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Yzc0ODI0MzRhNDU3YjA0OGI3ZDYyNjFkZGQ4MDk1YzVj MDkwMjAwHhcNMjUxMjA2MTAwMTU0WhcNMjUxMjA3MTAwMTU0WjAzMTEwLwYDVQQD Eyg5M2NmY2Q2MDZkZWQ2ZmMyYTgxZThiYTk1ZjI1NzcwNDU3ZDIwNGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6agyPztjEehqT5TBXLWyRykJUXQ WjMSPx2nyPWE19Ju6UBfRrtHxfSFBJb5lyf/dLl+yjr0pAiR6d8XnH3bz0AMIdri 8LDs6WDxfsuyKgEEq4qkfmLDuziKipv+FqtOxBbe3UOd+Pc9TW+QWAupuSj6h/mq SYU85qn4g54oEh2lAZAmtm02dJJOEV4bBKNijhjha98XlWk/zxTfHGsmE54rX7th LiaCkJjygCGkQIeKgsBdbFKXqptTPMVdLrQHpiuuMecYxDcQ4PydoxBjLDY0vI8U eYl1MYkXuNSh/cTyqmZDscbACENr4vvhGSOfuDqe73vf4W7/k54V/ybJOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPPzWBt7W/CqB6LqV8ldwRX0gTjMB8GA1UdIwQY MBaAFOTHSCQ0pFewSLfWJh3dgJXFwJAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU1kSUpEU2tWN0JJdDlZbUhkMkFsY1hBa0NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lZGUzNmQtYmY1Yi00NDM1LWIzZTUt YzQ1MDhiNTU1MDcxLzEvNU1kSUpEU2tWN0JJdDlZbUhkMkFsY1hBa0NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lZGUzNmQtYmY1Yi00NDM1LWIzZTUtYzQ1MDhiNTU1MDcx LzEvNU1kSUpEU2tWN0JJdDlZbUhkMkFsY1hBa0NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcA7LUw8h +ujIWuGg8rOufGtS8mbu3CmzzBzI6C/YYNb/8/rfuJQyoCY87EnHd0F8FiQA7LZW qXR/P/GUPodmkWQL4HD4UoShtzCD08JOdkQ01wsxHFthpcU5DxZNvnw0rTJzfso5 2kTXawg24OHOuVoQZdSdYjYUU21j7rOnOno+iTMHaJVtvT19cBfN5FER4YfKRIbK Bo1OAtg4NanTmrfsjiIBtTgFl+DAvMZcaq6DCFxkMkjjAeVXZpSNslnyydRmT3Ca AmYagQUQbvWXh2yqoH+u5pVi1LiCzt55XWRIOvgZ8ecU5sYqOB6CSTRn1xMY+HW/ N4LXtKbcRi1rxg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:00 2025 by rpki-client