This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft File: 5bHedEPq8YzrBoiNfvk6VjWkrh4.mft (raw, json) Hash identifier: LmpvMcbYFbIAZirnt3KzYfaEAQevjPP9cMLNSC0BYMk= Subject key identifier: A6:F7:A1:EA:A5:A5:67:D2:C1:D8:41:59:6C:0D:C0:D3:6C:28:DF:69 Authority key identifier: E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E Certificate issuer: /CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e Certificate serial: 019AF1D1A0FDC9308039E09C34C23AAD69F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft Manifest number: 0E20 Signing time: Sat 06 Dec 2025 04:00:38 +0000 Manifest this update: Sat 06 Dec 2025 04:00:38 +0000 Manifest next update: Sun 07 Dec 2025 04:00:38 +0000 Files and hashes: 1: 5bHedEPq8YzrBoiNfvk6VjWkrh4.crl (hash: apJu8Y/K3MdaS/828H8OMARwvc4JH8GTwDiQb3+lMpU=) 2: LPt_zehQ6PKVzp0MjfSZ8bhI3FI.roa (hash: 2Of6PA2/JSgV0uL+6WcJ1JnLHaSmd2yrbwOuprAZdu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a0:fd:c9:30:80:39:e0:9c:34:c2:3a:ad:69:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e Validity Not Before: Dec 6 04:00:38 2025 GMT Not After : Dec 7 04:00:38 2025 GMT Subject: CN=a6f7a1eaa5a567d2c1d841596c0dc0d36c28df69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5b:35:e2:0f:aa:e0:0b:3d:9a:09:1c:cb:0c: 28:2a:95:e5:c4:3c:b1:bb:41:64:5a:17:0a:88:bf: d8:19:16:ae:00:fb:ed:3e:de:11:e2:70:fe:bc:95: ae:d1:7a:aa:a7:39:f0:bf:8c:b0:dd:57:2a:eb:d9: 7a:f9:15:75:b7:c6:23:25:6c:47:6c:ee:05:4b:99: a9:f1:25:d7:de:1b:2a:7b:0c:1d:90:d4:a2:a5:0c: 18:6b:fa:ee:7c:bc:a9:71:07:fc:99:6e:1f:6f:92: ec:e7:49:e3:e8:99:47:3e:ea:1a:08:f8:cb:d8:bf: b0:87:80:36:a5:34:b8:2b:d6:3b:da:5e:a4:37:d9: 79:59:21:6a:fe:3c:29:de:ad:e0:d8:52:27:bf:38: df:0d:ff:ce:87:02:0d:99:72:97:ae:7b:78:13:4a: 55:7f:70:38:50:37:d3:af:70:9e:a9:35:5f:32:4b: 83:bf:33:74:db:c5:72:20:b5:88:24:81:3c:ed:23: b1:03:33:02:ed:ea:bd:14:61:f8:9f:ce:e9:5b:40: 5f:56:ab:a0:bc:a1:05:d3:ea:35:54:bf:5a:b3:9b: 73:cf:c1:8b:1f:68:c1:0c:60:d0:fb:06:27:d0:27: 63:4b:1e:9f:2f:20:17:ed:92:4b:b9:dc:12:9e:d2: b8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F7:A1:EA:A5:A5:67:D2:C1:D8:41:59:6C:0D:C0:D3:6C:28:DF:69 X509v3 Authority Key Identifier: keyid:E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:7f:a8:4d:2c:fe:c3:42:07:ec:31:38:92:57:89:b1:a9:29: a0:1b:db:49:4a:f1:55:db:9a:99:41:08:3e:b0:6f:43:4f:6c: fe:82:87:f7:ea:07:ad:d9:66:ab:73:5d:12:3a:a0:d0:8b:ee: aa:3f:48:1a:4f:25:f3:24:77:ba:03:95:1f:c3:79:e5:9a:b7: f8:30:0d:78:cb:a4:80:16:35:73:69:f9:b2:3d:92:6c:a7:e1: 2f:c5:f8:6a:27:2b:d3:23:da:cc:dc:f7:fb:b2:09:f2:b2:b3: 55:d9:9d:52:4b:22:f2:1d:bc:e6:b0:f0:ea:52:0b:2d:de:bc: ee:4c:12:83:0e:39:77:c0:9b:4a:5c:63:53:99:2d:49:f1:ad: 1e:86:7a:9a:6b:89:e9:3a:b5:b3:d4:01:c3:38:03:90:4d:f9: 51:59:09:ab:2f:33:ed:a1:73:1b:44:52:96:3f:7c:f5:0f:5a: 35:ae:85:12:32:0e:61:de:9c:01:07:93:ca:6a:4e:06:18:dc: f0:ae:58:f4:98:0d:3f:d9:af:2a:53:6d:16:57:8a:11:b5:be: 6b:a4:af:7c:ca:9c:82:c2:79:d9:77:ff:d1:cd:1b:78:49:e7: 05:6e:4e:6c:92:73:70:34:94:82:de:a3:31:a9:b7:d4:5e:ac: 02:10:5b:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aD9yTCAOeCcNMI6rWnwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YjFkZTc0NDNlYWYxOGNlYjA2ODg4ZDdlZjkzYTU2MzVh NGFlMWUwHhcNMjUxMjA2MDQwMDM4WhcNMjUxMjA3MDQwMDM4WjAzMTEwLwYDVQQD EyhhNmY3YTFlYWE1YTU2N2QyYzFkODQxNTk2YzBkYzBkMzZjMjhkZjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVs14g+q4As9mgkcywwoKpXlxDyx u0FkWhcKiL/YGRauAPvtPt4R4nD+vJWu0Xqqpznwv4yw3Vcq69l6+RV1t8YjJWxH bO4FS5mp8SXX3hsqewwdkNSipQwYa/rufLypcQf8mW4fb5Ls50nj6JlHPuoaCPjL 2L+wh4A2pTS4K9Y72l6kN9l5WSFq/jwp3q3g2FInvzjfDf/OhwINmXKXrnt4E0pV f3A4UDfTr3CeqTVfMkuDvzN028VyILWIJIE87SOxAzMC7eq9FGH4n87pW0BfVqug vKEF0+o1VL9as5tzz8GLH2jBDGDQ+wYn0CdjSx6fLyAX7ZJLudwSntK4hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKb3oeqlpWfSwdhBWWwNwNNsKN9pMB8GA1UdIwQY MBaAFOWx3nRD6vGM6waIjX75OlY1pK4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWJIZWRFUHE4WXpyQm9pTmZ2azZWaldrcmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODQ4MzgtMGUzYi00NmJhLTg1OTUt ZDhmNmFiODNiNTMzLzEvNWJIZWRFUHE4WXpyQm9pTmZ2azZWaldrcmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODQ4MzgtMGUzYi00NmJhLTg1OTUtZDhmNmFiODNiNTMz LzEvNWJIZWRFUHE4WXpyQm9pTmZ2azZWaldrcmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfX+oTSz+ w0IH7DE4kleJsakpoBvbSUrxVduamUEIPrBvQ09s/oKH9+oHrdlmq3NdEjqg0Ivu qj9IGk8l8yR3ugOVH8N55Zq3+DANeMukgBY1c2n5sj2SbKfhL8X4aicr0yPazNz3 +7IJ8rKzVdmdUksi8h285rDw6lILLd687kwSgw45d8CbSlxjU5ktSfGtHoZ6mmuJ 6Tq1s9QBwzgDkE35UVkJqy8z7aFzG0RSlj989Q9aNa6FEjIOYd6cAQeTympOBhjc 8K5Y9JgNP9mvKlNtFleKEbW+a6SvfMqcgsJ52Xf/0c0beEnnBW5ObJJzcDSUgt6j Mam31F6sAhBb0g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:07 2025 by rpki-client