This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft File: t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft (raw, json) Hash identifier: hsWL1HU9NAoyXHvhxwbzoz0OtavxrLfIPJJaMOVH3cg= Subject key identifier: 78:73:60:D4:9C:B3:DB:34:3E:F6:FA:B6:9E:49:67:DB:6C:02:37:3F Authority key identifier: B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41 Certificate issuer: /CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441 Certificate serial: 019AF19B272159FFBA6046B1C22D0181F864 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft Manifest number: 0DF6 Signing time: Sat 06 Dec 2025 03:01:08 +0000 Manifest this update: Sat 06 Dec 2025 03:01:08 +0000 Manifest next update: Sun 07 Dec 2025 03:01:08 +0000 Files and hashes: 1: t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl (hash: l8h0hS+CSM/1CdutEnHEVWBqBZG7GXYnJhyTVwj+7dk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:27:21:59:ff:ba:60:46:b1:c2:2d:01:81:f8:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441 Validity Not Before: Dec 6 03:01:08 2025 GMT Not After : Dec 7 03:01:08 2025 GMT Subject: CN=787360d49cb3db343ef6fab69e4967db6c02373f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e3:f3:4b:35:e4:61:59:74:e6:da:1f:f2:4c: a1:a8:89:89:96:da:c1:e1:01:ee:80:79:22:e4:d2: 99:32:6e:e9:66:21:4b:41:d0:3f:2a:97:da:2a:11: c1:30:51:df:4d:c8:4d:41:60:60:e3:86:85:f4:c5: 35:41:81:5f:ed:ad:fd:f0:f4:7e:e0:10:c5:36:78: 4c:ae:6a:1f:b2:db:9b:7a:d2:49:c1:a5:b9:37:89: ef:db:78:1c:26:9f:80:69:4a:4b:44:97:c4:f0:cd: 76:b4:5e:d4:12:ba:6b:65:c5:32:68:8b:40:73:68: 7d:c1:3b:20:d8:6c:93:c9:99:e8:0a:54:98:44:ad: 0b:af:5a:e5:89:f8:a9:5b:c2:6b:da:8e:b4:4c:46: c6:3f:26:de:ce:d0:ac:7b:e8:16:cb:43:aa:7f:47: 85:2e:e1:09:79:ac:e7:7e:0e:cf:e9:ce:10:24:b0: 6d:66:de:d6:71:d1:42:eb:e6:13:4f:4f:a8:f4:5b: 6c:7d:c1:89:ba:d5:b2:78:52:69:18:86:6e:6a:5f: a9:96:44:d0:bd:5b:b0:73:70:cb:ae:6a:b6:59:30: 6f:5d:f0:d6:90:70:7a:7f:d5:45:ca:25:63:05:cb: fb:b9:c8:8e:e9:72:94:97:3a:31:c1:3f:a4:32:85: 3d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:73:60:D4:9C:B3:DB:34:3E:F6:FA:B6:9E:49:67:DB:6C:02:37:3F X509v3 Authority Key Identifier: keyid:B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:af:72:6f:76:1a:da:70:34:a0:3f:62:97:57:88:b5:0a:ec: 89:b1:df:00:79:fe:ad:2e:7f:f4:92:46:db:37:53:83:ca:c2: 47:38:a3:c6:0e:8f:f3:48:1a:c5:9b:35:14:cc:72:8a:5f:f9: 4e:40:ad:b6:09:33:57:17:e9:7a:0a:06:13:61:f5:67:9d:63: 82:be:62:71:f3:06:3d:9c:04:b6:18:ef:5a:60:c1:c9:01:77: 51:f8:c7:cf:eb:9e:12:70:e5:41:e1:39:58:fe:97:fa:d3:0e: b6:a1:3c:b2:c6:38:42:3d:17:56:84:4c:98:74:8a:f2:5e:db: d7:f3:60:24:49:5b:c7:bc:8a:5f:f0:cd:f8:9b:d4:1c:81:cd: e6:85:f3:83:f2:cd:c6:50:fe:d4:84:e5:6d:4e:3b:8f:94:29: d8:3a:a4:7f:42:30:95:7a:9f:a2:bd:8a:82:43:ba:af:94:4d: 07:a1:ed:aa:72:19:b8:a0:f0:f6:55:43:25:c3:3f:75:8d:89: c1:4d:b9:0c:6f:f3:48:07:ab:86:84:cc:ee:6d:8a:85:6c:76: 48:10:da:71:d4:e3:60:e7:7e:48:7c:64:7a:26:7e:c9:c5:3e: 2f:19:b2:a9:90:d7:bb:8e:5f:cf:58:67:3c:58:cf:03:8d:79: f2:f7:10:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmychWf+6YEaxwi0BgfhkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OTJkN2VjZjNiNDVjNDkzOGYwNWJiOTA1MWM1YTg5NzI5 ZGQ0NDEwHhcNMjUxMjA2MDMwMTA4WhcNMjUxMjA3MDMwMTA4WjAzMTEwLwYDVQQD Eyg3ODczNjBkNDljYjNkYjM0M2VmNmZhYjY5ZTQ5NjdkYjZjMDIzNzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOPzSzXkYVl05tof8kyhqImJltrB 4QHugHki5NKZMm7pZiFLQdA/KpfaKhHBMFHfTchNQWBg44aF9MU1QYFf7a398PR+ 4BDFNnhMrmofstubetJJwaW5N4nv23gcJp+AaUpLRJfE8M12tF7UErprZcUyaItA c2h9wTsg2GyTyZnoClSYRK0Lr1rlifipW8Jr2o60TEbGPybeztCse+gWy0Oqf0eF LuEJeaznfg7P6c4QJLBtZt7WcdFC6+YTT0+o9FtsfcGJutWyeFJpGIZual+plkTQ vVuwc3DLrmq2WTBvXfDWkHB6f9VFyiVjBcv7uciO6XKUlzoxwT+kMoU9tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhzYNScs9s0Pvb6tp5JZ9tsAjc/MB8GA1UdIwQY MBaAFLeS1+zztFxJOPBbuQUcWolyndRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDVMWDdQTzBYRWs0OEZ1NUJSeGFpWEtkMUVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iMDVlNjItY2FjMi00MmY5LTllZjYt YTMyNTQ5MjMyNTIwLzEvdDVMWDdQTzBYRWs0OEZ1NUJSeGFpWEtkMUVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9iMDVlNjItY2FjMi00MmY5LTllZjYtYTMyNTQ5MjMyNTIw LzEvdDVMWDdQTzBYRWs0OEZ1NUJSeGFpWEtkMUVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABK9yb3Ya 2nA0oD9il1eItQrsibHfAHn+rS5/9JJG2zdTg8rCRzijxg6P80gaxZs1FMxyil/5 TkCttgkzVxfpegoGE2H1Z51jgr5icfMGPZwEthjvWmDByQF3UfjHz+ueEnDlQeE5 WP6X+tMOtqE8ssY4Qj0XVoRMmHSK8l7b1/NgJElbx7yKX/DN+JvUHIHN5oXzg/LN xlD+1ITlbU47j5Qp2Dqkf0IwlXqfor2KgkO6r5RNB6HtqnIZuKDw9lVDJcM/dY2J wU25DG/zSAerhoTM7m2KhWx2SBDacdTjYOd+SHxkeiZ+ycU+LxmyqZDXu45fz1hn PFjPA4158vcQDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:37:17 2025 by rpki-client