This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft File: 5sLg0_3CFaOJxwQ8paGga-LFWO8.mft (raw, json) Hash identifier: cAIyWorE1HQ3AgJ8od0QCWSi43wR1RI36Tzxm0XxaJM= Subject key identifier: FF:9D:E2:1E:B7:24:7A:BD:65:08:4E:FF:58:80:BC:45:F5:37:A0:D4 Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef Certificate serial: 019AF0F5EFAC3FAADD5BE732B7D7CBB1F439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft Manifest number: 0A14 Signing time: Sat 06 Dec 2025 00:00:40 +0000 Manifest this update: Sat 06 Dec 2025 00:00:40 +0000 Manifest next update: Sun 07 Dec 2025 00:00:40 +0000 Files and hashes: 1: 5sLg0_3CFaOJxwQ8paGga-LFWO8.crl (hash: a9MtK4z7qSJeIWsT101zvGtMXN4587MOvdX+OK0jvW4=) 2: BQSs352-EOwWdJt5W4JX2r66118.roa (hash: SQJWh7RfqqUI9aMjD6YSzrE33eXIstI44fKb5g3qqDI=) 3: UyklqcY4QQ3ESWmiy5lj4wfy-lE.roa (hash: gDteXJLELGLpEyJXH+6t7iRhrt3b5/Agnwke1FnjUuY=) 4: g0FtGOw6TxkA3fw7sxIeFzhy8n0.roa (hash: VbLDwTgdy1V+yunFyXeS8r5ju6kbA+Nmv4L7O3VlwNM=) 5: mx4mEjcUAqOj7-yzqqHmPAfoCTw.roa (hash: TADBUKVvbfWL8WOCN7ye3V2kF6YpMBXr/Ao/gRMpF0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:ef:ac:3f:aa:dd:5b:e7:32:b7:d7:cb:b1:f4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef Validity Not Before: Dec 6 00:00:40 2025 GMT Not After : Dec 7 00:00:40 2025 GMT Subject: CN=ff9de21eb7247abd65084eff5880bc45f537a0d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6c:b5:b2:ba:02:ed:6c:26:5a:1e:12:c4:fb: da:d9:d6:1b:59:b2:63:da:0b:b0:7f:ee:18:30:23: 88:78:11:c4:57:48:9b:58:dd:a4:03:a9:69:16:ca: db:86:f8:88:78:c4:ad:d3:a8:7e:4f:9e:26:52:03: f2:c8:84:a2:c0:f8:8c:4f:9a:3e:a0:a0:a6:79:7d: 00:5f:50:e2:80:5b:e1:a6:c7:60:d3:1b:81:1e:1d: dc:0c:cb:59:b6:5d:a6:36:cd:a5:f2:2b:1b:52:27: aa:93:08:a3:f4:d7:45:b3:4d:67:2d:1f:d6:7e:bb: 9b:3d:46:b8:c7:fb:65:d6:3b:7a:67:49:98:e1:7c: 21:ca:b1:96:82:4a:3e:d9:e4:8d:d5:ce:1c:83:ae: d3:46:3b:80:06:7c:4d:05:fe:31:7d:d3:ef:06:30: 67:88:09:44:48:67:ae:2c:ff:11:95:89:e8:7e:d0: 1e:5e:22:d6:53:f0:3d:ae:4c:eb:23:4b:97:49:b3: 01:e8:44:33:d3:81:5d:5f:f6:8b:26:76:a2:ad:85: 1d:9d:c0:86:5d:4f:43:e4:1a:61:af:13:3d:11:dd: 0a:34:ad:20:4f:ea:9d:8b:b1:29:43:a9:f9:a1:e5: 41:25:7f:06:50:52:ec:9d:31:29:d1:52:86:17:94: 5e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9D:E2:1E:B7:24:7A:BD:65:08:4E:FF:58:80:BC:45:F5:37:A0:D4 X509v3 Authority Key Identifier: keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:f2:8c:ef:32:66:51:cf:fe:be:fb:b0:61:46:9a:e8:2c:65: 5e:46:5b:79:42:89:6f:25:3d:e5:93:d7:63:e3:63:a1:15:93: 64:78:51:f6:aa:15:b5:83:2d:e1:48:f5:02:99:5c:93:6d:ec: 53:40:f4:81:34:64:0d:6b:e4:1c:97:c8:32:71:b7:65:15:33: 50:61:f6:9e:63:4c:01:0e:f3:f7:ce:54:f4:df:44:d7:52:c7: ff:39:d2:01:2d:4e:7e:0c:fc:be:7d:0a:28:98:a1:cf:9d:4f: 2e:4e:a9:2b:bd:02:e5:12:d1:23:c7:a4:77:e7:ae:bf:03:8c: c0:ad:e5:d7:46:3d:60:15:8f:a4:5d:df:3b:59:5f:36:26:90: bb:e3:f7:11:23:ed:6e:d0:30:c1:ae:fe:1a:64:e4:c9:02:ea: 48:48:d8:57:dc:8f:49:99:b1:ee:76:5d:7c:9f:71:ff:41:81: 88:32:28:87:d1:ee:51:27:8a:e6:99:61:42:ca:d3:19:fa:ef: 64:e6:99:d2:95:ec:90:02:3f:21:8f:89:43:eb:1b:cc:6e:87: ce:52:0e:f6:3b:67:4d:0a:03:84:dd:70:31:77:36:51:a2:b9: 13:0a:80:fb:f6:48:85:6b:59:63:bb:f7:c9:d8:18:a9:16:21: 2f:3e:2c:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9e+sP6rdW+cyt9fLsfQ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YzJlMGQzZmRjMjE1YTM4OWM3MDQzY2E1YTFhMDZiZTJj NTU4ZWYwHhcNMjUxMjA2MDAwMDQwWhcNMjUxMjA3MDAwMDQwWjAzMTEwLwYDVQQD EyhmZjlkZTIxZWI3MjQ3YWJkNjUwODRlZmY1ODgwYmM0NWY1MzdhMGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmy1sroC7WwmWh4SxPva2dYbWbJj 2guwf+4YMCOIeBHEV0ibWN2kA6lpFsrbhviIeMSt06h+T54mUgPyyISiwPiMT5o+ oKCmeX0AX1DigFvhpsdg0xuBHh3cDMtZtl2mNs2l8isbUieqkwij9NdFs01nLR/W frubPUa4x/tl1jt6Z0mY4XwhyrGWgko+2eSN1c4cg67TRjuABnxNBf4xfdPvBjBn iAlESGeuLP8RlYnoftAeXiLWU/A9rkzrI0uXSbMB6EQz04FdX/aLJnairYUdncCG XU9D5BphrxM9Ed0KNK0gT+qdi7EpQ6n5oeVBJX8GUFLsnTEp0VKGF5ReFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+d4h63JHq9ZQhO/1iAvEX1N6DUMB8GA1UdIwQY MBaAFObC4NP9whWjiccEPKWhoGvixVjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQt ZjNlMDUyYmFiMTQ0LzEvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQtZjNlMDUyYmFiMTQ0 LzEvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/KM7zJm Uc/+vvuwYUaa6CxlXkZbeUKJbyU95ZPXY+NjoRWTZHhR9qoVtYMt4Uj1Aplck23s U0D0gTRkDWvkHJfIMnG3ZRUzUGH2nmNMAQ7z985U9N9E11LH/znSAS1Ofgz8vn0K KJihz51PLk6pK70C5RLRI8ekd+euvwOMwK3l10Y9YBWPpF3fO1lfNiaQu+P3ESPt btAwwa7+GmTkyQLqSEjYV9yPSZmx7nZdfJ9x/0GBiDIoh9HuUSeK5plhQsrTGfrv ZOaZ0pXskAI/IY+JQ+sbzG6HzlIO9jtnTQoDhN1wMXc2UaK5EwqA+/ZIhWtZY7v3 ydgYqRYhLz4sDw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:37 2025 by rpki-client