This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft File: 5PKoZiAvS4y8MzgtboLYHYlkyA4.mft (raw, json) Hash identifier: O10qEywaoloX6SSo4P05haYxiOiAyDiMlX/U6KfN56o= Subject key identifier: 3C:FF:23:BB:2B:98:3B:CE:D9:47:E5:6E:27:24:3E:9C:68:A1:DB:4A Authority key identifier: E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E Certificate issuer: /CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e Certificate serial: 019AF12CE0F81F142A5F3E4F82D47BA262AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:00:41 +0000 Manifest this update: Sat 06 Dec 2025 01:00:41 +0000 Manifest next update: Sun 07 Dec 2025 01:00:41 +0000 Files and hashes: 1: 5PKoZiAvS4y8MzgtboLYHYlkyA4.crl (hash: BzIstu3kQl+U3UnpwiN74v6B2WkJ1kTZLY5PFWPgFZA=) 2: DwTC30oaWKwssRCXrBoUlk9Q5bw.roa (hash: ijzA7vHvds3BxvrPMvxvhrjeIw/3n+d/qJzXMvHrD7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e0:f8:1f:14:2a:5f:3e:4f:82:d4:7b:a2:62:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e Validity Not Before: Dec 6 01:00:41 2025 GMT Not After : Dec 7 01:00:41 2025 GMT Subject: CN=3cff23bb2b983bced947e56e27243e9c68a1db4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:05:5d:43:f4:f9:d3:84:60:1d:15:a9:ed:6f: d4:38:80:ad:6e:b3:bd:3e:2b:8e:d5:2b:e5:fb:fa: cb:5f:6c:b9:d0:81:e9:62:92:f4:ef:6d:e8:08:dc: b7:4d:29:40:29:43:bb:76:82:b0:21:86:6f:86:0a: 1b:09:f2:67:a6:c6:02:37:f6:91:9d:99:c0:50:ec: 0d:e4:2f:a7:e6:a7:68:42:69:58:4b:7e:35:c5:be: 7d:14:7a:13:3e:1d:2f:e4:00:aa:a5:a5:b6:d1:4a: 9a:15:84:92:c0:d9:59:14:67:1c:6b:81:55:c2:a3: a5:55:80:a1:48:62:17:09:3e:a0:6f:ff:b2:01:d0: 77:af:e7:b6:0f:92:de:40:02:af:35:d0:21:e6:64: 2b:a1:98:fb:a7:5a:5a:e6:96:c5:91:88:17:ae:0c: 57:2c:06:48:cf:cd:ad:b3:cb:8b:58:d7:7a:57:15: 8d:a6:5d:a0:e1:8c:44:e0:ab:27:00:a0:1e:e7:33: 91:0c:d2:99:d9:f4:7d:f5:f1:9f:ea:9c:fd:3f:26: ad:94:7f:7a:a0:77:20:e8:79:38:90:24:db:af:33: 52:62:be:49:2f:d6:fd:7b:31:25:c2:e6:6a:d8:55: 8b:93:a9:56:23:2f:69:a6:51:52:f8:57:ed:b5:e7: e6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FF:23:BB:2B:98:3B:CE:D9:47:E5:6E:27:24:3E:9C:68:A1:DB:4A X509v3 Authority Key Identifier: keyid:E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:55:a5:a7:b4:fa:bd:57:25:f0:b0:91:a7:38:e2:5d:68:19: 1b:55:b5:b5:7b:64:ff:db:1e:35:07:1e:c2:cd:2f:39:bc:d9: 14:c9:d2:b6:a0:24:af:b1:cf:47:3d:a8:cb:1f:b2:9f:b5:40: 18:3d:8f:c2:d0:c8:ed:28:a5:0e:f7:35:08:6e:83:f1:06:d2: 06:ff:c7:c4:ea:a3:0d:6d:cc:e5:b0:0e:06:6a:2b:0a:2b:b5: d3:1d:e8:c4:26:b6:99:27:40:67:c3:37:ff:5c:03:25:16:ad: d1:14:a0:14:da:d8:7a:f3:d6:97:36:aa:32:12:d4:01:16:59: 16:3a:7c:e7:46:68:4e:40:46:96:f5:19:a0:25:f3:99:30:39: 21:f9:57:c4:f2:57:85:7a:b9:7d:20:d6:ac:18:19:fc:aa:a0: a3:c8:af:27:2f:22:cb:23:55:f3:e2:cd:2d:b7:cd:08:b5:00: dc:0a:4b:98:5d:16:15:8a:49:1b:e3:d3:c4:8b:3b:7b:36:91: ab:c2:af:64:51:f6:ce:d4:c4:14:e8:40:11:47:99:75:15:dc: 40:8e:b6:d9:e3:e5:7a:48:57:5d:9f:73:a9:39:b1:32:c9:9e: c1:53:c6:09:35:64:6f:e3:dd:30:bb:88:97:2c:14:6f:c5:8c: 55:4c:33:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOD4HxQqXz5PgtR7omKvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZjJhODY2MjAyZjRiOGNiYzMzMzgyZDZlODJkODFkODk2 NGM4MGUwHhcNMjUxMjA2MDEwMDQxWhcNMjUxMjA3MDEwMDQxWjAzMTEwLwYDVQQD EygzY2ZmMjNiYjJiOTgzYmNlZDk0N2U1NmUyNzI0M2U5YzY4YTFkYjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwVdQ/T504RgHRWp7W/UOICtbrO9 PiuO1Svl+/rLX2y50IHpYpL0723oCNy3TSlAKUO7doKwIYZvhgobCfJnpsYCN/aR nZnAUOwN5C+n5qdoQmlYS341xb59FHoTPh0v5ACqpaW20UqaFYSSwNlZFGcca4FV wqOlVYChSGIXCT6gb/+yAdB3r+e2D5LeQAKvNdAh5mQroZj7p1pa5pbFkYgXrgxX LAZIz82ts8uLWNd6VxWNpl2g4YxE4KsnAKAe5zORDNKZ2fR99fGf6pz9PyatlH96 oHcg6Hk4kCTbrzNSYr5JL9b9ezElwuZq2FWLk6lWIy9pplFS+FfttefmEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDz/I7srmDvO2UflbickPpxoodtKMB8GA1UdIwQY MBaAFOTyqGYgL0uMvDM4LW6C2B2JZMgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVBLb1ppQXZTNHk4TXpndGJvTFlIWWxreUE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84NzkxYTEtZTY3OS00NjYzLWEyZGEt MWE1MTNkZjA2OWZjLzEvNVBLb1ppQXZTNHk4TXpndGJvTFlIWWxreUE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy84NzkxYTEtZTY3OS00NjYzLWEyZGEtMWE1MTNkZjA2OWZj LzEvNVBLb1ppQXZTNHk4TXpndGJvTFlIWWxreUE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVWlp7T6 vVcl8LCRpzjiXWgZG1W1tXtk/9seNQcews0vObzZFMnStqAkr7HPRz2oyx+yn7VA GD2PwtDI7SilDvc1CG6D8QbSBv/HxOqjDW3M5bAOBmorCiu10x3oxCa2mSdAZ8M3 /1wDJRat0RSgFNrYevPWlzaqMhLUARZZFjp850ZoTkBGlvUZoCXzmTA5IflXxPJX hXq5fSDWrBgZ/Kqgo8ivJy8iyyNV8+LNLbfNCLUA3ApLmF0WFYpJG+PTxIs7ezaR q8KvZFH2ztTEFOhAEUeZdRXcQI622ePlekhXXZ9zqTmxMsmewVPGCTVkb+PdMLuI lywUb8WMVUwzgw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:24:11 2025 by rpki-client