This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft File: 5GZIM5avs3fl43nRYVveD9TZ7Uc.mft (raw, json) Hash identifier: YQBzEgxddHosGIFc/LmKB7kCnAyzK1aP83d8TU2Mdxg= Subject key identifier: 20:26:67:45:7E:B6:FE:89:FE:45:F7:54:55:87:E1:FD:EC:E3:ED:20 Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47 Certificate issuer: /CN=e466483396afb377e5e379d1615bde0fd4d9ed47 Certificate serial: 019AF389A0698121E093DDF03999AEA61063 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft Manifest number: 0E59 Signing time: Sat 06 Dec 2025 12:01:14 +0000 Manifest this update: Sat 06 Dec 2025 12:01:14 +0000 Manifest next update: Sun 07 Dec 2025 12:01:14 +0000 Files and hashes: 1: 5GZIM5avs3fl43nRYVveD9TZ7Uc.crl (hash: mCGFn+ykwUC76HSzl1zPJ9YPgwHkO59rN29q45B1V1o=) 2: Btqt9dHmfyCgZm5YxFkx4BjR-Dc.roa (hash: O8dRjpLSf+cl4rOTaaTPD9tud0oWl3levwWO3JGp7jw=) 3: TLd_ZXXp2Q2UgInwhLKUEKhwDUc.roa (hash: IaRGq7PGoes/uNGrRRu/Qh4aGHDMpqDn5kGzUSwYnj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:a0:69:81:21:e0:93:dd:f0:39:99:ae:a6:10:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47 Validity Not Before: Dec 6 12:01:14 2025 GMT Not After : Dec 7 12:01:14 2025 GMT Subject: CN=202667457eb6fe89fe45f7545587e1fdece3ed20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:95:b5:93:2b:8f:a9:e5:7e:da:7f:1a:34:81: dc:9f:90:c5:ea:7e:44:8c:32:8d:b6:fd:27:b3:f5: d7:91:70:75:c5:b7:75:13:54:dd:bd:fd:c8:a9:d3: 77:de:25:33:8d:73:7f:b6:4e:54:a1:c0:bd:90:76: 7e:48:e8:74:de:0e:dd:3c:8d:e9:37:e5:03:99:4a: d9:b3:d7:13:7c:56:0a:12:6b:0c:8c:90:e8:9b:23: 24:a5:1d:97:78:c7:97:56:2a:1f:c8:6e:90:ca:52: 06:47:85:08:3d:0a:78:d9:fa:ab:c8:23:76:aa:92: b1:9a:99:73:ed:bd:10:94:c4:bd:52:00:ad:4f:8e: d7:02:f7:f4:44:67:a7:ad:09:46:4e:67:d7:7d:ad: 52:82:dd:bd:70:3f:26:1d:6b:a1:de:3f:c2:d6:c4: 01:e3:21:d6:8e:80:15:23:32:11:ec:01:42:fd:83: 9d:3b:d7:93:4b:15:a7:7f:71:f9:e6:e3:21:1e:a2: df:1d:96:f7:ce:dd:56:b7:92:b3:0f:7b:6e:77:b9: 60:b0:b0:e7:b8:cd:99:96:db:41:8e:ff:19:62:69: 84:79:b7:c9:d1:96:43:47:28:dd:51:74:c1:2c:b6: 73:8c:c9:7f:ba:9f:6b:27:f6:3b:24:fe:a9:fc:e3: 40:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:26:67:45:7E:B6:FE:89:FE:45:F7:54:55:87:E1:FD:EC:E3:ED:20 X509v3 Authority Key Identifier: keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:a4:f8:a0:b9:c5:98:c1:e6:a8:6a:e6:7a:7b:c1:21:95:5a: 2a:bb:9f:9e:7f:e1:2a:22:6e:ed:da:4c:df:e4:a3:fc:13:d4: 09:04:4c:b2:85:4f:46:8a:12:b5:c2:e7:e0:fd:b9:27:51:5e: 01:78:ef:01:9a:5b:1a:be:e3:7b:e3:f9:be:46:24:6d:a5:6f: 1f:c0:a9:56:07:e0:de:1d:ae:10:a5:f0:e0:b1:55:1e:95:c0: cf:50:5c:aa:6f:ac:65:3c:c9:4f:48:fe:e5:b2:0b:a6:db:ac: 1c:48:88:c4:cb:65:a1:9c:2a:12:1f:5d:02:30:9b:3f:51:9a: ee:1a:03:0d:be:72:4e:1a:74:72:6b:97:76:a2:88:71:87:ab: 9a:43:b7:2b:fe:2a:fd:14:fa:27:26:59:c9:7b:c8:e6:57:46: bc:15:21:57:c0:90:b0:b0:73:af:59:3c:da:ac:1c:c0:d9:cf: 1f:4a:4e:82:72:39:20:f0:02:df:e3:d5:f3:25:7a:66:db:18: 52:5f:44:04:83:e0:ad:60:2c:3a:c6:81:b6:61:0a:f2:f9:1b: 0c:9c:04:e7:c8:6a:6f:54:bf:8b:08:38:ad:2d:34:30:1d:0e: f2:c5:09:39:6c:93:1d:07:ba:ec:6b:c9:d5:dc:ff:9c:10:2b: 37:b9:15:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziaBpgSHgk93wOZmuphBjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NjY0ODMzOTZhZmIzNzdlNWUzNzlkMTYxNWJkZTBmZDRk OWVkNDcwHhcNMjUxMjA2MTIwMTE0WhcNMjUxMjA3MTIwMTE0WjAzMTEwLwYDVQQD EygyMDI2Njc0NTdlYjZmZTg5ZmU0NWY3NTQ1NTg3ZTFmZGVjZTNlZDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJW1kyuPqeV+2n8aNIHcn5DF6n5E jDKNtv0ns/XXkXB1xbd1E1Tdvf3IqdN33iUzjXN/tk5UocC9kHZ+SOh03g7dPI3p N+UDmUrZs9cTfFYKEmsMjJDomyMkpR2XeMeXViofyG6QylIGR4UIPQp42fqryCN2 qpKxmplz7b0QlMS9UgCtT47XAvf0RGenrQlGTmfXfa1Sgt29cD8mHWuh3j/C1sQB 4yHWjoAVIzIR7AFC/YOdO9eTSxWnf3H55uMhHqLfHZb3zt1Wt5KzD3tud7lgsLDn uM2ZlttBjv8ZYmmEebfJ0ZZDRyjdUXTBLLZzjMl/up9rJ/Y7JP6p/ONA+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAmZ0V+tv6J/kX3VFWH4f3s4+0gMB8GA1UdIwQY MBaAFORmSDOWr7N35eN50WFb3g/U2e1HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUdaSU01YXZzM2ZsNDNuUllWdmVEOVRaN1VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xOGI1YmItOGU0MS00ZTg4LWJkYmUt MzQxYzYzNjE0MjgwLzEvNUdaSU01YXZzM2ZsNDNuUllWdmVEOVRaN1VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8xOGI1YmItOGU0MS00ZTg4LWJkYmUtMzQxYzYzNjE0Mjgw LzEvNUdaSU01YXZzM2ZsNDNuUllWdmVEOVRaN1VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6T4oLnF mMHmqGrmenvBIZVaKrufnn/hKiJu7dpM3+Sj/BPUCQRMsoVPRooStcLn4P25J1Fe AXjvAZpbGr7je+P5vkYkbaVvH8CpVgfg3h2uEKXw4LFVHpXAz1Bcqm+sZTzJT0j+ 5bILptusHEiIxMtloZwqEh9dAjCbP1Ga7hoDDb5yThp0cmuXdqKIcYermkO3K/4q /RT6JyZZyXvI5ldGvBUhV8CQsLBzr1k82qwcwNnPH0pOgnI5IPAC3+PV8yV6ZtsY Ul9EBIPgrWAsOsaBtmEK8vkbDJwE58hqb1S/iwg4rS00MB0O8sUJOWyTHQe67GvJ 1dz/nBArN7kVKw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:20:51 2025 by rpki-client