This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft File: 0-5NbhwEoPWClbKpchCs1Hv32Wo.mft (raw, json) Hash identifier: vqQMCTM4o/I4G/PEx369KQOd019+Z5wcjy7hbG0NACU= Subject key identifier: 1A:25:8E:A9:23:72:EF:71:7E:23:D2:A7:E8:D8:04:B2:75:A2:F9:95 Authority key identifier: D3:EE:4D:6E:1C:04:A0:F5:82:95:B2:A9:72:10:AC:D4:7B:F7:D9:6A Certificate issuer: /CN=d3ee4d6e1c04a0f58295b2a97210acd47bf7d96a Certificate serial: 019AF0BF91B88FFA86BEF8B207B1CE7A93CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft Manifest number: 29 Signing time: Fri 05 Dec 2025 23:01:17 +0000 Manifest this update: Fri 05 Dec 2025 23:01:17 +0000 Manifest next update: Sat 06 Dec 2025 23:01:17 +0000 Files and hashes: 1: 0-5NbhwEoPWClbKpchCs1Hv32Wo.crl (hash: G8jaTgjmI83gLWUdEM1GY4PAD+af+ubTwYL/KDSiOy4=) 2: Ta7GvGgg-bPfFWriKdj0eEqjLQs.roa (hash: i+dy6kCtfabYggOgUQEwIA55BDXvizsoJUVxKQ0JiAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:91:b8:8f:fa:86:be:f8:b2:07:b1:ce:7a:93:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3ee4d6e1c04a0f58295b2a97210acd47bf7d96a Validity Not Before: Dec 5 23:01:17 2025 GMT Not After : Dec 6 23:01:17 2025 GMT Subject: CN=1a258ea92372ef717e23d2a7e8d804b275a2f995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ec:16:a1:80:d7:fc:89:32:ed:99:35:10:44: 59:17:16:77:3b:dd:74:c5:07:ac:78:68:9e:18:87: 18:14:03:bf:bd:bb:f5:55:bc:3f:d9:5f:a1:64:aa: 79:c6:e2:d8:e9:66:91:df:38:7b:0c:96:88:0f:6c: 09:c4:b2:ec:85:ac:1e:f9:bf:cf:6d:dc:05:27:68: 9a:54:69:2f:22:e3:03:af:b0:64:e0:b7:55:ef:37: d4:ee:c5:d4:cc:c0:fb:96:15:98:6e:01:7c:65:fd: 93:7a:c2:31:a1:d5:31:56:f5:b0:7c:26:c0:8e:4a: 14:1a:e5:92:9d:eb:b0:0d:33:ee:d1:10:61:ed:4a: 17:69:76:e0:2b:92:32:30:2e:34:f5:20:77:08:c3: bb:73:aa:78:94:09:6e:ce:b6:c3:e5:85:35:3f:93: e7:de:97:cb:35:77:7b:9b:1e:15:fb:1c:d5:c6:a2: 7a:21:6b:da:29:66:23:6f:5c:71:0a:0c:d0:70:9d: 7a:b6:81:bd:1b:28:1c:1e:65:d9:f4:69:23:b3:19: e3:74:db:09:74:98:ff:4a:a4:ba:a0:f2:02:92:78: 85:b3:c3:54:17:a1:25:10:ff:de:90:75:0c:55:2d: 2d:18:7f:94:f1:80:89:a1:80:e4:58:10:6b:cb:41: 36:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:25:8E:A9:23:72:EF:71:7E:23:D2:A7:E8:D8:04:B2:75:A2:F9:95 X509v3 Authority Key Identifier: keyid:D3:EE:4D:6E:1C:04:A0:F5:82:95:B2:A9:72:10:AC:D4:7B:F7:D9:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-5NbhwEoPWClbKpchCs1Hv32Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd8ef9-7833-4974-9257-65b4a69fbbce/1/0-5NbhwEoPWClbKpchCs1Hv32Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:ae:eb:b8:46:a9:7f:64:01:43:8a:f4:95:ab:4c:37:6b:0b: ea:70:70:fa:f6:3f:25:80:7c:9a:76:f5:3c:28:b6:75:33:9c: 6a:e3:ec:14:c5:ad:85:9f:24:4d:6c:fa:db:0a:3b:02:1b:1f: 4a:62:11:b3:a0:60:c4:3e:d8:f8:1e:b3:06:32:fa:85:e3:72: bd:e1:be:73:b3:ce:5a:c3:ca:45:06:f5:bf:58:36:3a:31:fe: a4:8e:32:1c:c2:29:6e:30:3c:88:25:97:4c:e8:37:1d:f9:fe: b0:75:08:0f:61:f9:4f:30:1e:21:00:47:1a:e7:9c:20:1c:46: 3b:7e:54:0d:5f:e0:8f:5d:55:5f:a5:43:59:64:5e:47:34:6d: 03:a2:eb:b3:cc:27:a2:15:e6:5e:0b:58:48:eb:a2:c4:d1:2f: 77:85:75:cb:08:01:0c:b2:71:10:54:7a:24:46:0e:d8:b6:d8: f6:35:0f:d4:93:9b:74:70:21:c9:a3:ef:dd:7b:f3:ad:cb:e0: 97:92:b7:84:02:8b:aa:d5:ea:78:82:21:96:fd:3d:30:50:33: 33:2c:ca:5d:4b:16:c8:0e:c3:e4:4e:99:d6:52:59:31:c0:d9: cb:41:71:20:a0:3e:90:bf:1c:ea:6c:48:7d:b7:9d:39:93:33: 71:14:5b:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5G4j/qGvviyB7HOepPKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZWU0ZDZlMWMwNGEwZjU4Mjk1YjJhOTcyMTBhY2Q0N2Jm N2Q5NmEwHhcNMjUxMjA1MjMwMTE3WhcNMjUxMjA2MjMwMTE3WjAzMTEwLwYDVQQD EygxYTI1OGVhOTIzNzJlZjcxN2UyM2QyYTdlOGQ4MDRiMjc1YTJmOTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOwWoYDX/Iky7Zk1EERZFxZ3O910 xQeseGieGIcYFAO/vbv1Vbw/2V+hZKp5xuLY6WaR3zh7DJaID2wJxLLshawe+b/P bdwFJ2iaVGkvIuMDr7Bk4LdV7zfU7sXUzMD7lhWYbgF8Zf2TesIxodUxVvWwfCbA jkoUGuWSneuwDTPu0RBh7UoXaXbgK5IyMC409SB3CMO7c6p4lAluzrbD5YU1P5Pn 3pfLNXd7mx4V+xzVxqJ6IWvaKWYjb1xxCgzQcJ16toG9GygcHmXZ9GkjsxnjdNsJ dJj/SqS6oPICkniFs8NUF6ElEP/ekHUMVS0tGH+U8YCJoYDkWBBry0E24wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoljqkjcu9xfiPSp+jYBLJ1ovmVMB8GA1UdIwQY MBaAFNPuTW4cBKD1gpWyqXIQrNR799lqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC01TmJod0VvUFdDbGJLcGNoQ3MxSHYzMldvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mZDhlZjktNzgzMy00OTc0LTkyNTct NjViNGE2OWZiYmNlLzEvMC01TmJod0VvUFdDbGJLcGNoQ3MxSHYzMldvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9mZDhlZjktNzgzMy00OTc0LTkyNTctNjViNGE2OWZiYmNl LzEvMC01TmJod0VvUFdDbGJLcGNoQ3MxSHYzMldvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIK7ruEap f2QBQ4r0latMN2sL6nBw+vY/JYB8mnb1PCi2dTOcauPsFMWthZ8kTWz62wo7Ahsf SmIRs6BgxD7Y+B6zBjL6heNyveG+c7POWsPKRQb1v1g2OjH+pI4yHMIpbjA8iCWX TOg3Hfn+sHUID2H5TzAeIQBHGuecIBxGO35UDV/gj11VX6VDWWReRzRtA6Lrs8wn ohXmXgtYSOuixNEvd4V1ywgBDLJxEFR6JEYO2LbY9jUP1JObdHAhyaPv3Xvzrcvg l5K3hAKLqtXqeIIhlv09MFAzMyzKXUsWyA7D5E6Z1lJZMcDZy0FxIKA+kL8c6mxI fbedOZMzcRRbpA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:21 2025 by rpki-client