This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft File: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft (raw, json) Hash identifier: ua/W+tjwu6YNPiYcPov9t3oANVg7XcbKef8wIn/Obsw= Subject key identifier: 2A:8E:43:C8:72:24:F5:7C:B9:82:BB:86:98:23:55:A5:5F:8A:F9:57 Authority key identifier: E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33 Certificate issuer: /CN=e57731ea857b903aa40a8e5fd8d88446505b5233 Certificate serial: 019AF464ADD91579782934F20D7E42EC82E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 16:00:30 +0000 Manifest this update: Sat 06 Dec 2025 16:00:30 +0000 Manifest next update: Sun 07 Dec 2025 16:00:30 +0000 Files and hashes: 1: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl (hash: gXZIAaWwQqm88QeuGQACIPT57jA2QwuRT6BvhziOM+0=) 2: orFnLXI1TH7Jt_MUuyCNlezlJcQ.roa (hash: hsQhpxV8CsTitmZs0YwImGnMA+twiLDEhUnDv5rariM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:ad:d9:15:79:78:29:34:f2:0d:7e:42:ec:82:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e57731ea857b903aa40a8e5fd8d88446505b5233 Validity Not Before: Dec 6 16:00:30 2025 GMT Not After : Dec 7 16:00:30 2025 GMT Subject: CN=2a8e43c87224f57cb982bb86982355a55f8af957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:36:ec:7f:c1:f5:55:75:43:8c:1a:63:a9:f3: 78:4d:5b:e5:32:3f:af:97:70:89:73:36:3b:e2:b2: dc:1b:fc:7b:a8:30:43:f7:d8:81:09:2f:37:96:f9: 77:51:7b:dd:be:3e:f9:ed:03:3e:6c:ff:18:58:e4: 04:ba:cb:d2:0b:8f:30:e9:ee:c6:40:b4:ab:05:c2: 64:ae:50:4f:26:ba:3f:39:13:05:7e:8a:69:a4:d1: 15:41:de:7a:a4:09:6f:05:db:0d:a9:91:5d:22:81: 7b:65:d5:82:a9:d4:0b:e9:f2:be:29:88:ce:d6:a4: 8b:81:24:36:1e:53:27:45:2f:e0:f0:b6:f0:01:8a: 9e:69:dc:0f:a3:28:20:ad:ef:e9:9f:97:77:c4:cd: 42:81:7b:70:9d:a8:ac:d6:7c:6a:d2:b2:74:ad:f1: d8:73:77:52:7a:df:96:64:78:5b:71:02:89:18:68: 15:76:25:e2:2c:f9:f3:bb:63:55:4c:79:ac:ea:f0: ea:00:42:04:23:ad:6c:58:96:6f:ee:1d:8d:9b:ef: 79:a0:12:1e:8f:20:79:e0:b1:12:47:d9:54:78:e7: a6:0a:da:23:cc:a7:b1:e7:43:86:e6:2f:bf:d2:cb: 30:af:3b:ce:91:7e:7d:54:84:9a:3b:ab:80:23:40: b4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8E:43:C8:72:24:F5:7C:B9:82:BB:86:98:23:55:A5:5F:8A:F9:57 X509v3 Authority Key Identifier: keyid:E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:6d:27:8b:ef:47:2c:f9:99:be:92:c7:e3:a5:b0:ce:20:82: f4:52:f4:e8:05:10:26:98:fc:a7:50:f4:f4:ed:eb:a4:44:72: d6:59:ec:2a:d3:c1:c0:fc:cd:6a:a5:53:9c:58:86:2b:03:48: 47:4a:0e:86:d7:06:76:d5:f6:93:94:f0:5c:21:4f:a4:cc:32: 32:3d:0a:97:47:8f:06:82:b4:d3:e1:d4:1a:78:d0:c6:58:2e: 7b:48:b1:7d:9d:c6:33:c5:a9:ff:66:15:8e:4b:9b:05:24:69: f2:93:12:c1:4a:d6:ae:72:21:43:61:84:59:f2:cb:7d:c5:2d: 52:b5:32:7c:19:d9:06:7b:3a:b4:0d:c7:47:91:a9:f4:8f:0f: 60:6d:3a:7a:7c:87:83:8c:19:c7:d8:be:2e:c0:00:8a:03:01: 4b:4f:68:c1:49:23:5b:bc:ae:85:e9:1f:5e:d8:b4:cb:a7:2e: f1:87:d5:76:9b:73:4a:ce:57:9c:5f:a1:6b:b9:1b:e4:cf:e0: 52:6d:50:e0:b1:1a:15:d6:84:58:0f:4e:7a:86:87:58:ea:7c: 3d:ac:1d:1a:00:13:a7:b7:9c:a4:50:af:6c:91:c6:36:0f:e9: 88:b8:e4:7f:09:11:b2:14:18:a0:63:a9:ae:1b:99:33:ff:12: 8d:4e:01:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZK3ZFXl4KTTyDX5C7ILgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NzczMWVhODU3YjkwM2FhNDBhOGU1ZmQ4ZDg4NDQ2NTA1 YjUyMzMwHhcNMjUxMjA2MTYwMDMwWhcNMjUxMjA3MTYwMDMwWjAzMTEwLwYDVQQD EygyYThlNDNjODcyMjRmNTdjYjk4MmJiODY5ODIzNTVhNTVmOGFmOTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTbsf8H1VXVDjBpjqfN4TVvlMj+v l3CJczY74rLcG/x7qDBD99iBCS83lvl3UXvdvj757QM+bP8YWOQEusvSC48w6e7G QLSrBcJkrlBPJro/ORMFfopppNEVQd56pAlvBdsNqZFdIoF7ZdWCqdQL6fK+KYjO 1qSLgSQ2HlMnRS/g8LbwAYqeadwPoyggre/pn5d3xM1CgXtwnais1nxq0rJ0rfHY c3dSet+WZHhbcQKJGGgVdiXiLPnzu2NVTHms6vDqAEIEI61sWJZv7h2Nm+95oBIe jyB54LESR9lUeOemCtojzKex50OG5i+/0sswrzvOkX59VISaO6uAI0C0LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqOQ8hyJPV8uYK7hpgjVaVfivlXMB8GA1UdIwQY MBaAFOV3MeqFe5A6pAqOX9jYhEZQW1IzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVhjeDZvVjdrRHFrQ281ZjJOaUVSbEJiVWpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hZmJiNjItMDA5OC00MmIzLTgxYWUt ZjBiYjJlMTVmNmQwLzEvNVhjeDZvVjdrRHFrQ281ZjJOaUVSbEJiVWpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hZmJiNjItMDA5OC00MmIzLTgxYWUtZjBiYjJlMTVmNmQw LzEvNVhjeDZvVjdrRHFrQ281ZjJOaUVSbEJiVWpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANG0ni+9H LPmZvpLH46WwziCC9FL06AUQJpj8p1D09O3rpERy1lnsKtPBwPzNaqVTnFiGKwNI R0oOhtcGdtX2k5TwXCFPpMwyMj0Kl0ePBoK00+HUGnjQxlgue0ixfZ3GM8Wp/2YV jkubBSRp8pMSwUrWrnIhQ2GEWfLLfcUtUrUyfBnZBns6tA3HR5Gp9I8PYG06enyH g4wZx9i+LsAAigMBS09owUkjW7yuhekfXti0y6cu8YfVdptzSs5XnF+ha7kb5M/g Um1Q4LEaFdaEWA9OeoaHWOp8PawdGgATp7ecpFCvbJHGNg/piLjkfwkRshQYoGOp rhuZM/8SjU4BDA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:30:05 2025 by rpki-client