This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft File: 5F0K3ClN02bfatqIATTb0OaIzPc.mft (raw, json) Hash identifier: i09a71r6V6jwA3XP3zctJwvgmVKb8Spv8BVSJwJrJ8I= Subject key identifier: 70:AA:5A:13:4E:20:FD:E1:80:C3:1D:60:7F:38:C2:D1:39:25:34:2A Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7 Certificate issuer: /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7 Certificate serial: 019AF1D212F551B2858E4CD3AD14B7FFC8D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:01:07 +0000 Manifest this update: Sat 06 Dec 2025 04:01:07 +0000 Manifest next update: Sun 07 Dec 2025 04:01:07 +0000 Files and hashes: 1: 5F0K3ClN02bfatqIATTb0OaIzPc.crl (hash: 3nPO6zvkGe4YUwR8I4/Oj04jKlliykgzE2clxHgFYWY=) 2: 6_MzG3BJa4ElBBdEF9-BTMf874s.roa (hash: JSnJz2i5mq2wdtkVMI+9lJsfr8mdn46eUbiIUghmOwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:12:f5:51:b2:85:8e:4c:d3:ad:14:b7:ff:c8:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7 Validity Not Before: Dec 6 04:01:07 2025 GMT Not After : Dec 7 04:01:07 2025 GMT Subject: CN=70aa5a134e20fde180c31d607f38c2d13925342a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3e:35:3c:60:42:41:35:25:95:5f:db:2b:0e: 78:43:7b:e9:82:be:fb:8e:60:ca:4c:6b:39:6f:92: 48:06:07:7d:62:b9:20:56:26:20:84:52:a6:5b:13: 3d:00:62:36:43:c8:0f:13:32:ea:58:6f:4f:03:08: 98:02:0e:8a:79:ee:25:ef:15:c1:36:e5:90:2f:cd: 89:9a:32:0f:a2:d7:35:d0:43:f8:45:39:4a:5b:78: 00:82:65:06:3a:c9:2a:53:fd:9e:da:c0:ea:c0:02: 1c:7c:3e:ff:36:f1:b7:7b:55:38:d4:03:3b:c9:9f: fc:f1:62:40:3d:79:b0:76:31:9a:e0:2d:c1:92:bd: fc:5a:d1:f0:6b:6e:cb:95:67:23:74:c0:69:0c:33: bb:3d:5e:97:9b:af:9f:a9:b4:f1:79:44:a8:43:81: bd:f1:f2:34:5c:26:c0:5c:4c:71:28:70:63:59:fa: 96:c0:85:32:83:5b:9c:4f:41:73:58:05:4d:37:5c: 43:bd:35:1c:4d:a3:49:c6:8c:48:37:97:5a:46:00: 0c:b1:0b:91:b2:44:27:2a:10:38:38:95:85:5e:f9: 18:10:a8:e4:6d:aa:f8:40:55:ba:5a:7a:d0:08:9f: 95:53:eb:7d:d8:39:a8:6f:6f:59:83:60:48:84:9e: 1b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AA:5A:13:4E:20:FD:E1:80:C3:1D:60:7F:38:C2:D1:39:25:34:2A X509v3 Authority Key Identifier: keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:cf:d9:17:2b:20:2c:a5:f5:fc:9e:8a:9b:0a:89:ae:7c:4f: 66:99:7b:88:d3:78:33:48:fc:c8:32:ea:b0:87:cd:8d:39:15: c7:c7:df:c2:0a:0d:c7:26:e0:f1:8f:0c:51:94:73:4c:f4:38: 84:53:80:2d:c1:14:d9:99:3c:f7:9c:e5:e5:e0:73:f2:2f:d9: 46:0d:8a:3c:6f:d6:4f:56:04:2b:62:20:e2:7e:24:1d:ea:27: 9e:a4:c4:98:b6:3a:4c:5c:c9:ee:3b:81:d7:2d:9d:71:b2:4c: 47:5d:0f:fa:9a:63:0a:bd:52:99:5d:e1:10:97:f9:a6:6d:ac: b0:f2:fe:35:5c:12:6a:5f:85:19:61:bf:81:d9:c9:4e:99:d8: f4:0f:eb:d4:6d:67:2b:20:3a:4d:30:ae:17:99:d2:6e:80:1d: 74:8a:b2:4d:c0:50:9b:e0:ce:82:f5:1d:2b:0f:e7:4e:02:82: bf:99:92:f3:6f:78:7c:d8:0c:f2:ea:9a:86:9b:66:95:0c:d3: d9:06:38:89:7e:82:a0:03:24:f0:be:f9:1d:3b:53:f5:0e:c4: 2a:bf:ce:eb:ff:12:4f:57:2d:40:9d:5c:2f:89:c6:a2:74:f0: 9b:fc:09:b5:49:24:cf:35:b5:02:f4:67:e4:2d:7a:ff:6e:37: b8:dd:e4:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hL1UbKFjkzTrRS3/8jSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NWQwYWRjMjk0ZGQzNjZkZjZhZGE4ODAxMzRkYmQwZTY4 OGNjZjcwHhcNMjUxMjA2MDQwMTA3WhcNMjUxMjA3MDQwMTA3WjAzMTEwLwYDVQQD Eyg3MGFhNWExMzRlMjBmZGUxODBjMzFkNjA3ZjM4YzJkMTM5MjUzNDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD41PGBCQTUllV/bKw54Q3vpgr77 jmDKTGs5b5JIBgd9YrkgViYghFKmWxM9AGI2Q8gPEzLqWG9PAwiYAg6Kee4l7xXB NuWQL82JmjIPotc10EP4RTlKW3gAgmUGOskqU/2e2sDqwAIcfD7/NvG3e1U41AM7 yZ/88WJAPXmwdjGa4C3Bkr38WtHwa27LlWcjdMBpDDO7PV6Xm6+fqbTxeUSoQ4G9 8fI0XCbAXExxKHBjWfqWwIUyg1ucT0FzWAVNN1xDvTUcTaNJxoxIN5daRgAMsQuR skQnKhA4OJWFXvkYEKjkbar4QFW6WnrQCJ+VU+t92Dmob29Zg2BIhJ4bAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCqWhNOIP3hgMMdYH84wtE5JTQqMB8GA1UdIwQY MBaAFORdCtwpTdNm32raiAE029DmiMz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUYwSzNDbE4wMmJmYXRxSUFUVGIwT2FJelBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kZGYxZTEtZjA3ZS00YmFkLTg0YTgt ZmUyNzM1OWZkN2VhLzEvNUYwSzNDbE4wMmJmYXRxSUFUVGIwT2FJelBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kZGYxZTEtZjA3ZS00YmFkLTg0YTgtZmUyNzM1OWZkN2Vh LzEvNUYwSzNDbE4wMmJmYXRxSUFUVGIwT2FJelBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8/ZFysg LKX1/J6KmwqJrnxPZpl7iNN4M0j8yDLqsIfNjTkVx8ffwgoNxybg8Y8MUZRzTPQ4 hFOALcEU2Zk895zl5eBz8i/ZRg2KPG/WT1YEK2Ig4n4kHeonnqTEmLY6TFzJ7juB 1y2dcbJMR10P+ppjCr1SmV3hEJf5pm2ssPL+NVwSal+FGWG/gdnJTpnY9A/r1G1n KyA6TTCuF5nSboAddIqyTcBQm+DOgvUdKw/nTgKCv5mS8294fNgM8uqahptmlQzT 2QY4iX6CoAMk8L75HTtT9Q7EKr/O6/8ST1ctQJ1cL4nGonTwm/wJtUkkzzW1AvRn 5C16/243uN3k0g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:59:14 2025 by rpki-client