This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft File: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft (raw, json) Hash identifier: Al+3Ol5rwo3ah5E6kv/lPqkC8alVRvb0iIKz0JpDqZs= Subject key identifier: 29:FD:C5:95:7D:3F:01:28:23:F9:BC:0B:6D:E5:CC:5E:08:EC:DE:38 Authority key identifier: E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57 Certificate issuer: /CN=e623299ee47b4f612db90a14f95e40767ae06657 Certificate serial: 019AF12E123EF0C865458D7B66A59E1FFFE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft Manifest number: 13F2 Signing time: Sat 06 Dec 2025 01:01:59 +0000 Manifest this update: Sat 06 Dec 2025 01:01:59 +0000 Manifest next update: Sun 07 Dec 2025 01:01:59 +0000 Files and hashes: 1: 25SW2pj3F9sQQZMDR2RMcEngkMc.roa (hash: sf46s/kdJrtglYzmsHfLJakYVODfs50Q1cZVZ793qWE=) 2: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl (hash: i39rhMWhBwFju7/LG9rBZK/qNUauOztWFqhlRrb/7PA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:12:3e:f0:c8:65:45:8d:7b:66:a5:9e:1f:ff:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e623299ee47b4f612db90a14f95e40767ae06657 Validity Not Before: Dec 6 01:01:59 2025 GMT Not After : Dec 7 01:01:59 2025 GMT Subject: CN=29fdc5957d3f012823f9bc0b6de5cc5e08ecde38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:62:ba:fb:6b:15:36:70:ff:27:49:cd:62:f6: 6a:f0:e6:ac:39:1e:1c:2d:b0:4d:bc:5c:9b:7a:dd: be:c1:9a:9d:56:d1:c6:31:3e:c9:89:83:d9:f5:86: 70:27:2b:2b:6b:cf:bd:32:4c:5a:65:ed:10:1e:31: 96:11:e9:46:c2:13:ff:0e:3c:96:2a:09:5d:84:14: d1:a3:82:9f:f0:38:6e:82:53:9f:e9:ea:7e:3e:9f: 85:9f:8e:80:b8:e0:80:d6:3f:0e:51:a2:31:2e:7b: a4:17:2a:29:30:a3:36:f9:ba:37:df:24:2d:5a:9f: 69:ad:28:55:ce:7f:e9:1e:73:ba:c6:86:7f:96:2e: a0:e2:87:14:bd:66:d1:47:c6:9e:35:4a:c1:a5:cb: b1:b7:11:7d:c6:31:12:99:aa:ed:c2:fe:db:ee:14: 6a:e2:3f:22:22:5f:9b:d1:aa:a4:f2:08:e3:9b:33: c4:4e:d9:9a:d0:21:0f:76:d3:0a:a5:ec:15:48:dd: e4:8b:a7:a6:2b:96:25:e9:d4:c9:f7:89:45:77:1c: 0c:70:c6:a2:2d:88:64:1b:5c:1d:cf:fe:cd:fd:b3: 4e:13:5f:f3:db:9b:f0:c3:45:de:9b:e9:71:b6:0d: bd:12:81:23:3f:9e:86:59:0a:90:32:b2:e2:67:3f: 8b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FD:C5:95:7D:3F:01:28:23:F9:BC:0B:6D:E5:CC:5E:08:EC:DE:38 X509v3 Authority Key Identifier: keyid:E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:fe:dc:2f:4a:02:22:6f:a2:7b:06:18:9f:ff:0d:19:41:79: 39:37:6d:4d:e0:b3:b8:f2:8f:94:e1:68:2e:7b:b3:9a:6e:86: 13:a8:ea:7f:fe:c9:aa:71:bf:e6:d5:5c:a4:61:1f:ae:73:50: f8:ce:34:95:9c:d7:47:75:92:e9:ab:8d:0c:dc:24:75:1b:90: 7a:d3:f2:b9:93:03:cd:07:12:bf:30:46:38:af:aa:73:e8:bd: 81:37:36:da:a3:4e:18:81:e0:97:f4:af:6e:b5:b3:4a:58:df: aa:b6:37:bb:37:28:c7:5b:1d:df:d9:5b:a5:24:f8:fb:e2:23: b0:6c:27:30:4e:79:18:41:3f:ff:5d:09:63:fe:29:c9:50:ac: 09:9e:59:ca:a0:22:b7:69:1a:0d:00:5b:d2:03:21:27:38:2f: f5:a4:9a:3a:81:01:8c:fa:a2:17:62:f7:57:db:c6:da:19:4a: 00:a1:df:b5:b1:f1:e9:8e:e0:fd:0a:0b:b5:15:18:a2:64:03: c1:ec:6b:59:a9:2a:2a:f3:a0:6e:5d:14:74:c9:f5:e8:38:49: 28:20:7c:85:29:ad:25:33:bb:c7:1a:a8:0f:56:37:a4:77:d7: c2:32:23:5e:e1:8b:99:cb:5a:0a:52:94:46:0f:6c:f5:00:b5: dc:74:b4:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhI+8MhlRY17ZqWeH//mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MjMyOTllZTQ3YjRmNjEyZGI5MGExNGY5NWU0MDc2N2Fl MDY2NTcwHhcNMjUxMjA2MDEwMTU5WhcNMjUxMjA3MDEwMTU5WjAzMTEwLwYDVQQD EygyOWZkYzU5NTdkM2YwMTI4MjNmOWJjMGI2ZGU1Y2M1ZTA4ZWNkZTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2K6+2sVNnD/J0nNYvZq8OasOR4c LbBNvFybet2+wZqdVtHGMT7JiYPZ9YZwJysra8+9MkxaZe0QHjGWEelGwhP/DjyW KgldhBTRo4Kf8DhuglOf6ep+Pp+Fn46AuOCA1j8OUaIxLnukFyopMKM2+bo33yQt Wp9prShVzn/pHnO6xoZ/li6g4ocUvWbRR8aeNUrBpcuxtxF9xjESmartwv7b7hRq 4j8iIl+b0aqk8gjjmzPETtma0CEPdtMKpewVSN3ki6emK5Yl6dTJ94lFdxwMcMai LYhkG1wdz/7N/bNOE1/z25vww0Xem+lxtg29EoEjP56GWQqQMrLiZz+LBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCn9xZV9PwEoI/m8C23lzF4I7N44MB8GA1UdIwQY MBaAFOYjKZ7ke09hLbkKFPleQHZ64GZXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWlNcG51UjdUMkV0dVFvVS1WNUFkbnJnWmxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mMzcyMDMtZjE3Mi00NTlmLTgzMTUt ODJmMjVhYzY4ODdmLzEvNWlNcG51UjdUMkV0dVFvVS1WNUFkbnJnWmxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9mMzcyMDMtZjE3Mi00NTlmLTgzMTUtODJmMjVhYzY4ODdm LzEvNWlNcG51UjdUMkV0dVFvVS1WNUFkbnJnWmxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/7cL0oC Im+iewYYn/8NGUF5OTdtTeCzuPKPlOFoLnuzmm6GE6jqf/7JqnG/5tVcpGEfrnNQ +M40lZzXR3WS6auNDNwkdRuQetPyuZMDzQcSvzBGOK+qc+i9gTc22qNOGIHgl/Sv brWzSljfqrY3uzcox1sd39lbpST4++IjsGwnME55GEE//10JY/4pyVCsCZ5ZyqAi t2kaDQBb0gMhJzgv9aSaOoEBjPqiF2L3V9vG2hlKAKHftbHx6Y7g/QoLtRUYomQD wexrWakqKvOgbl0UdMn16DhJKCB8hSmtJTO7xxqoD1Y3pHfXwjIjXuGLmctaClKU Rg9s9QC13HS05w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:10 2025 by rpki-client