This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft File: 5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json) Hash identifier: b6waLR9ssB1xKOSLjYT86Er5LT43t0pNAT9B+iru21o= Subject key identifier: B0:B3:0A:2D:E9:26:F2:B1:C7:B4:21:F8:98:D5:35:D7:3B:0E:77:05 Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc Certificate serial: 019AF276AB4F1AFE59F5FA849A56C60D45E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft Manifest number: 140E Signing time: Sat 06 Dec 2025 07:00:54 +0000 Manifest this update: Sat 06 Dec 2025 07:00:54 +0000 Manifest next update: Sun 07 Dec 2025 07:00:54 +0000 Files and hashes: 1: 1-KxbHOd8IAxtF53PSxnQK1T4mVs.roa (hash: kPs2MrTsmIOrVH1y0/AHb3IDoxZ35cj2beaiWFS9sJI=) 2: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: N13CwJWSArtfN3KcUMaq8+adHh37b5hetogKX+2C/RU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ab:4f:1a:fe:59:f5:fa:84:9a:56:c6:0d:45:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc Validity Not Before: Dec 6 07:00:54 2025 GMT Not After : Dec 7 07:00:54 2025 GMT Subject: CN=b0b30a2de926f2b1c7b421f898d535d73b0e7705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a1:9a:12:66:05:c1:9e:3d:73:77:03:6c:e8: 84:85:e9:6b:9a:30:2f:42:fe:f0:21:56:c9:b5:5d: b4:72:cd:e4:24:f7:80:91:49:ec:cb:5a:9c:df:c5: c2:0a:9b:e4:da:68:fe:95:f4:b6:47:e3:f5:0b:d9: 3b:99:a2:ca:a1:87:4a:f8:88:a1:b5:12:d9:66:19: 9b:08:34:37:48:f3:ce:36:b1:e4:b1:dc:d8:72:e3: f3:ee:20:fc:7f:4b:cc:c1:86:0b:aa:47:bf:ae:b2: 46:16:38:37:6c:a6:37:77:88:08:53:64:9e:c7:4e: 15:d0:17:e4:1b:ba:09:45:78:47:67:99:9a:a4:28: 24:01:a2:3d:fe:78:9a:c2:33:c3:fc:20:cf:98:92: 92:4a:8d:f9:31:c7:80:a2:a0:8c:6a:3f:90:bc:8f: f2:e0:4c:92:6d:8b:b1:90:a8:31:41:5f:8b:d7:45: b2:bf:2e:6f:5f:ec:1e:8e:96:af:6e:4e:5f:97:39: 67:64:95:04:ed:ab:4a:21:62:92:84:18:0f:40:a6: ef:04:02:3d:a9:80:b5:66:c0:37:93:e6:5c:3c:6d: 74:c2:57:44:d8:56:35:6b:04:34:1c:5f:66:b1:0f: ea:46:15:dc:99:ee:a0:93:b4:95:be:bb:50:85:a8: 80:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B3:0A:2D:E9:26:F2:B1:C7:B4:21:F8:98:D5:35:D7:3B:0E:77:05 X509v3 Authority Key Identifier: keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:c1:b1:8b:1d:e2:95:0f:8b:b9:80:8a:f2:19:52:8f:63:08: f5:a5:f2:e2:55:94:05:ba:b1:62:96:dc:90:f6:38:50:3a:ac: d5:d0:95:69:df:29:df:34:63:a4:e3:9d:ba:78:da:b7:56:5d: 0c:a2:8f:f1:ef:61:f8:50:79:09:93:c6:9c:44:ab:6f:7c:a6: 72:9a:ae:9a:5c:57:0f:3e:b3:2c:82:4b:cf:8b:66:67:de:ec: 9e:6e:ad:0d:d4:29:d5:e1:de:40:26:40:24:39:83:ea:0f:c7: a6:a7:a5:cc:c5:30:52:b5:6a:8a:28:b1:00:d0:b2:80:cd:81: 5a:be:3e:3c:1f:da:6d:0f:aa:2a:d7:04:b4:62:d5:5e:67:8e: f6:6b:8e:84:38:19:70:20:30:e5:83:e5:c0:02:13:6f:6a:e1: c7:cb:c3:67:b5:a2:3f:91:27:99:6a:40:da:8c:3a:61:61:e5: f0:5b:e1:86:c5:8f:51:e8:06:89:c2:4e:5d:09:d9:1e:d0:09: 94:96:37:02:4c:14:a2:12:d6:54:aa:d3:0d:98:88:2e:88:d4: b9:0b:f5:df:26:9a:26:da:6e:5a:0f:44:f0:58:0f:0d:16:1d: 36:ee:e7:4a:14:f2:53:cc:e7:68:b7:bc:8c:ee:4a:9c:41:8b: 86:2f:fc:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqtPGv5Z9fqEmlbGDUXoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZTY5MDY4YThiMWZiN2ZhMDc5NWJhZjliYjNhYjg2Yzk0 ZTQ2ZmMwHhcNMjUxMjA2MDcwMDU0WhcNMjUxMjA3MDcwMDU0WjAzMTEwLwYDVQQD EyhiMGIzMGEyZGU5MjZmMmIxYzdiNDIxZjg5OGQ1MzVkNzNiMGU3NzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66GaEmYFwZ49c3cDbOiEhelrmjAv Qv7wIVbJtV20cs3kJPeAkUnsy1qc38XCCpvk2mj+lfS2R+P1C9k7maLKoYdK+Iih tRLZZhmbCDQ3SPPONrHksdzYcuPz7iD8f0vMwYYLqke/rrJGFjg3bKY3d4gIU2Se x04V0BfkG7oJRXhHZ5mapCgkAaI9/niawjPD/CDPmJKSSo35MceAoqCMaj+QvI/y 4EySbYuxkKgxQV+L10Wyvy5vX+wejpavbk5flzlnZJUE7atKIWKShBgPQKbvBAI9 qYC1ZsA3k+ZcPG10wldE2FY1awQ0HF9msQ/qRhXcme6gk7SVvrtQhaiAxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCzCi3pJvKxx7Qh+JjVNdc7DncFMB8GA1UdIwQY MBaAFOXmkGiosft/oHlbr5uzq4bJTkb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWVhUWFLaXgtMy1nZVZ1dm03T3Joc2xPUnZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82MjlmNGQtMzkyOS00NjFlLWExOTQt ZGQxMDI4OTkxZmYzLzEvNWVhUWFLaXgtMy1nZVZ1dm03T3Joc2xPUnZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82MjlmNGQtMzkyOS00NjFlLWExOTQtZGQxMDI4OTkxZmYz LzEvNWVhUWFLaXgtMy1nZVZ1dm03T3Joc2xPUnZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMGxix3i lQ+LuYCK8hlSj2MI9aXy4lWUBbqxYpbckPY4UDqs1dCVad8p3zRjpOOdunjat1Zd DKKP8e9h+FB5CZPGnESrb3ymcpqumlxXDz6zLIJLz4tmZ97snm6tDdQp1eHeQCZA JDmD6g/HpqelzMUwUrVqiiixANCygM2BWr4+PB/abQ+qKtcEtGLVXmeO9muOhDgZ cCAw5YPlwAITb2rhx8vDZ7WiP5EnmWpA2ow6YWHl8FvhhsWPUegGicJOXQnZHtAJ lJY3AkwUohLWVKrTDZiILojUuQv13yaaJtpuWg9E8FgPDRYdNu7nShTyU8znaLe8 jO5KnEGLhi/8sA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:48 2025 by rpki-client