This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft File: 5iL2U5eBxQvEl8egtvXVBe-IudY.mft (raw, json) Hash identifier: qrOXRoFXBlLyrgNtM7797pgkd/Vsydbz8MFGeySf0sg= Subject key identifier: 1A:4D:CF:F6:08:FA:31:51:91:2F:3B:75:1D:71:5E:59:D5:23:CB:EF Authority key identifier: E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6 Certificate issuer: /CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6 Certificate serial: 019AF12E4050E11CE8C84A097161A57708F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft Manifest number: 12B2 Signing time: Sat 06 Dec 2025 01:02:11 +0000 Manifest this update: Sat 06 Dec 2025 01:02:11 +0000 Manifest next update: Sun 07 Dec 2025 01:02:11 +0000 Files and hashes: 1: 5iL2U5eBxQvEl8egtvXVBe-IudY.crl (hash: xW1BqnyOQisVxFpZwvx8iFevP7Hczu4tTvAgVkMtX1I=) 2: 75gL-QM6p_WWaZpy6iMBTgopl4A.roa (hash: C70hkA6dezEt2xcdG5Lxg7y2p7KFd6680YSWy+fNqPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:40:50:e1:1c:e8:c8:4a:09:71:61:a5:77:08:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6 Validity Not Before: Dec 6 01:02:11 2025 GMT Not After : Dec 7 01:02:11 2025 GMT Subject: CN=1a4dcff608fa3151912f3b751d715e59d523cbef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d9:20:b2:40:37:17:4f:8c:98:92:84:ad:a4: 8c:f1:f4:3a:0a:19:f2:ea:c7:df:55:9c:f6:46:7b: de:ed:cd:7a:2c:0c:77:2c:6a:c5:b8:37:90:4c:4a: d5:e8:8b:2f:42:ee:c7:db:68:e6:b4:d0:1c:79:48: 47:9f:8b:7f:e9:2f:fc:3f:e3:44:9c:fb:25:00:2b: 44:c7:a5:02:48:52:98:9f:5c:10:9f:d4:7f:e2:13: 0c:5f:fc:60:0d:c3:47:36:d1:f7:ed:1c:b3:07:7c: 0a:5c:28:c7:54:28:79:7c:2f:73:3d:f8:a7:8c:00: f6:23:f8:bd:23:5b:01:6c:24:86:04:12:ea:3a:45: b8:49:85:62:15:2f:48:36:6c:e1:52:ed:de:e9:7a: 19:7c:51:a1:ab:49:b8:ec:28:d6:16:75:8e:22:ec: 43:b7:e5:37:79:d6:f9:00:32:0b:96:a7:bf:1d:30: 1d:c3:d8:fe:0e:82:17:75:bb:f7:c5:fa:56:65:c9: 2f:27:d7:97:90:fa:b4:df:b8:ac:63:82:e2:12:53: 5b:95:f9:34:cb:64:a3:80:5c:86:09:92:c6:78:ba: 8c:1d:5a:33:e4:0b:50:32:67:fc:56:18:5c:ab:9a: c5:b6:05:56:9f:30:09:59:70:e1:37:92:58:af:b8: 6f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4D:CF:F6:08:FA:31:51:91:2F:3B:75:1D:71:5E:59:D5:23:CB:EF X509v3 Authority Key Identifier: keyid:E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ac:3e:54:b9:c0:6b:99:e3:2e:96:7c:a7:f6:81:bd:f0:92: 67:5e:df:cc:1b:ac:7c:b9:b4:8b:8f:e5:2f:1d:1a:17:81:9d: d9:cd:83:4e:8d:2e:30:42:9a:99:81:6d:ac:f3:19:f2:aa:6b: f2:f3:76:8e:60:68:49:98:df:33:7c:1a:7e:03:1d:e3:63:df: 3b:89:8e:01:10:e3:8e:88:71:64:ec:3b:4d:fd:2b:49:84:9b: 96:d7:70:d4:be:b7:19:76:75:d3:db:23:5b:f5:6c:1b:17:8d: 21:3d:51:1e:a3:36:67:42:cb:1d:d8:64:4e:c2:f5:fe:04:5a: 53:cf:1c:e5:91:8f:07:3d:57:6c:6b:a3:fa:9a:d8:09:94:c2: 84:c7:e5:eb:ed:80:eb:7d:3e:ce:8a:27:e8:15:1d:27:de:75: 26:37:0c:b0:e4:06:40:e7:e8:1d:64:8c:1e:7f:70:8e:b1:1c: d5:c5:bf:53:2c:01:33:d1:2b:fc:33:b9:5b:57:48:5d:50:69: 80:15:f2:a3:0b:be:e4:d7:b4:1f:6d:f3:7e:a9:0f:f7:33:f4: 6e:87:2f:8c:0f:8a:91:83:59:f7:f3:5b:64:58:2b:d9:d8:d5: b3:53:d7:c0:83:c1:19:9b:89:09:19:0b:62:b7:38:2a:6c:19: e5:25:88:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkBQ4RzoyEoJcWGldwjwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MjJmNjUzOTc4MWM1MGJjNDk3YzdhMGI2ZjVkNTA1ZWY4 OGI5ZDYwHhcNMjUxMjA2MDEwMjExWhcNMjUxMjA3MDEwMjExWjAzMTEwLwYDVQQD EygxYTRkY2ZmNjA4ZmEzMTUxOTEyZjNiNzUxZDcxNWU1OWQ1MjNjYmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9kgskA3F0+MmJKEraSM8fQ6Chny 6sffVZz2Rnve7c16LAx3LGrFuDeQTErV6IsvQu7H22jmtNAceUhHn4t/6S/8P+NE nPslACtEx6UCSFKYn1wQn9R/4hMMX/xgDcNHNtH37RyzB3wKXCjHVCh5fC9zPfin jAD2I/i9I1sBbCSGBBLqOkW4SYViFS9INmzhUu3e6XoZfFGhq0m47CjWFnWOIuxD t+U3edb5ADILlqe/HTAdw9j+DoIXdbv3xfpWZckvJ9eXkPq037isY4LiElNblfk0 y2SjgFyGCZLGeLqMHVoz5AtQMmf8Vhhcq5rFtgVWnzAJWXDhN5JYr7hvPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpNz/YI+jFRkS87dR1xXlnVI8vvMB8GA1UdIwQY MBaAFOYi9lOXgcULxJfHoLb11QXviLnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWlMMlU1ZUJ4UXZFbDhlZ3R2WFZCZS1JdWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xMWFhOGMtOTU5MS00Y2M4LWE3NmEt Njk4ZTZhOGU2NzA4LzEvNWlMMlU1ZUJ4UXZFbDhlZ3R2WFZCZS1JdWRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8xMWFhOGMtOTU5MS00Y2M4LWE3NmEtNjk4ZTZhOGU2NzA4 LzEvNWlMMlU1ZUJ4UXZFbDhlZ3R2WFZCZS1JdWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqw+VLnA a5njLpZ8p/aBvfCSZ17fzBusfLm0i4/lLx0aF4Gd2c2DTo0uMEKamYFtrPMZ8qpr 8vN2jmBoSZjfM3wafgMd42PfO4mOARDjjohxZOw7Tf0rSYSbltdw1L63GXZ109sj W/VsGxeNIT1RHqM2Z0LLHdhkTsL1/gRaU88c5ZGPBz1XbGuj+prYCZTChMfl6+2A 630+zoon6BUdJ951JjcMsOQGQOfoHWSMHn9wjrEc1cW/UywBM9Er/DO5W1dIXVBp gBXyowu+5Ne0H23zfqkP9zP0bocvjA+KkYNZ9/NbZFgr2djVs1PXwIPBGZuJCRkL Yrc4KmwZ5SWI7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:58 2025 by rpki-client