This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft File: 5gRDG1VUd8GaP0xcttEHNljVs-M.mft (raw, json) Hash identifier: S9fCrxPQ2AwjaJoyrThqpn6nRyZN9/+CSb1vwar6ZTk= Subject key identifier: 15:73:EA:AD:E4:1C:F4:EF:51:C3:A1:E7:0D:FA:05:DA:1C:84:CD:93 Authority key identifier: E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3 Certificate issuer: /CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3 Certificate serial: 019AF5AEE75C2066A2867598C837A9DFDB77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft Manifest number: 0DA5 Signing time: Sat 06 Dec 2025 22:01:11 +0000 Manifest this update: Sat 06 Dec 2025 22:01:11 +0000 Manifest next update: Sun 07 Dec 2025 22:01:11 +0000 Files and hashes: 1: 5gRDG1VUd8GaP0xcttEHNljVs-M.crl (hash: Z1EI++3l9Bc0jm/ie2cJQMCjcU39F9mJ/9zBqJcjU0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:e7:5c:20:66:a2:86:75:98:c8:37:a9:df:db:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3 Validity Not Before: Dec 6 22:01:11 2025 GMT Not After : Dec 7 22:01:11 2025 GMT Subject: CN=1573eaade41cf4ef51c3a1e70dfa05da1c84cd93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:55:7f:b4:ba:72:28:59:7b:7a:1a:e7:5f:37: 67:f7:0a:16:c0:c3:4a:51:04:94:44:42:d0:89:db: b8:b9:d7:ab:12:7e:64:55:51:7d:f7:77:18:53:f2: a7:6c:38:b0:7f:f6:40:9b:e2:d1:6f:0a:65:b4:27: 6a:cf:ef:69:0f:5b:22:fb:79:d3:17:cd:01:a4:55: db:45:9c:9c:2b:9e:df:c8:28:54:88:e3:b3:9a:67: 88:0a:45:95:38:da:99:20:0e:6d:e5:55:37:ef:69: 68:96:d9:0d:ad:58:49:be:14:36:6b:de:58:89:72: 70:7e:6e:cc:5e:22:91:90:c5:cc:28:38:27:f6:3a: a8:8c:41:c1:a9:08:16:af:9b:34:c8:af:07:25:08: fd:95:5e:1c:f8:5a:d5:ad:04:94:ef:72:3c:5f:a8: 7e:4c:e1:01:93:45:dd:6a:cd:32:a6:18:a5:da:0c: 8a:0a:91:4c:93:71:4d:74:39:40:37:42:3f:61:7f: 47:18:29:b6:ff:8d:b0:80:7d:03:45:6e:1a:a0:e1: 13:a8:6a:ce:75:b1:82:7d:3b:19:25:ac:1f:42:83: a5:77:b6:da:4b:8f:ea:77:b6:69:c6:a1:2a:26:9c: 91:5e:0c:cd:3a:74:f3:7f:db:79:96:a0:1c:eb:f4: 2f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:73:EA:AD:E4:1C:F4:EF:51:C3:A1:E7:0D:FA:05:DA:1C:84:CD:93 X509v3 Authority Key Identifier: keyid:E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6a:f6:fa:13:40:1a:8a:29:13:8a:2e:ef:35:3f:f8:74:3e: 23:1c:16:f4:c2:16:1d:40:09:89:e9:49:7d:9e:7a:16:bb:90: 52:d3:a9:2e:4f:ba:d7:21:70:c0:a7:b1:79:9c:20:07:67:0c: 92:a3:f3:9b:64:ce:65:6c:02:85:32:be:eb:2b:6d:0c:57:50: 28:41:48:f7:fc:5b:2c:a5:6a:1d:d4:d9:72:d5:6f:d4:17:b2: 33:a9:45:68:13:fd:f1:34:8c:11:81:89:43:61:12:a6:07:ce: 89:1a:0b:19:fc:7e:ee:0a:d2:0f:1d:92:1f:e4:40:87:34:81: bb:33:17:9d:bd:d6:7d:bf:bf:3f:22:88:3f:b8:22:23:6b:d3: 97:65:13:aa:10:fd:60:77:02:ab:0f:e0:2c:4c:56:23:b1:78: 5c:ac:d9:ce:d0:92:32:25:23:dd:bd:1d:14:59:a1:8a:51:33: 6a:69:9e:1e:6e:4e:0d:56:5b:12:24:02:cd:1d:87:99:31:ae: e0:3c:9f:76:a9:9e:de:8f:7f:b5:15:64:6f:9c:b5:7c:90:38: 7d:00:c3:bd:c9:30:46:65:aa:62:58:19:b7:50:43:f5:e4:87: c8:8a:4f:33:e9:37:17:3c:03:00:5b:26:42:75:c1:cb:ce:be: 4d:6c:f7:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rudcIGaihnWYyDep39t3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MDQ0MzFiNTU1NDc3YzE5YTNmNGM1Y2I2ZDEwNzM2NThk NWIzZTMwHhcNMjUxMjA2MjIwMTExWhcNMjUxMjA3MjIwMTExWjAzMTEwLwYDVQQD EygxNTczZWFhZGU0MWNmNGVmNTFjM2ExZTcwZGZhMDVkYTFjODRjZDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVV/tLpyKFl7ehrnXzdn9woWwMNK UQSURELQidu4uderEn5kVVF993cYU/KnbDiwf/ZAm+LRbwpltCdqz+9pD1si+3nT F80BpFXbRZycK57fyChUiOOzmmeICkWVONqZIA5t5VU372loltkNrVhJvhQ2a95Y iXJwfm7MXiKRkMXMKDgn9jqojEHBqQgWr5s0yK8HJQj9lV4c+FrVrQSU73I8X6h+ TOEBk0Xdas0yphil2gyKCpFMk3FNdDlAN0I/YX9HGCm2/42wgH0DRW4aoOETqGrO dbGCfTsZJawfQoOld7baS4/qd7ZpxqEqJpyRXgzNOnTzf9t5lqAc6/Qv/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVz6q3kHPTvUcOh5w36BdochM2TMB8GA1UdIwQY MBaAFOYEQxtVVHfBmj9MXLbRBzZY1bPjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWdSREcxVlVkOEdhUDB4Y3R0RUhObGpWcy1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kN2RjOGQtZTM4Ni00MDRjLTg4YjQt MjgzZWM0MmMyYzk0LzEvNWdSREcxVlVkOEdhUDB4Y3R0RUhObGpWcy1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9kN2RjOGQtZTM4Ni00MDRjLTg4YjQtMjgzZWM0MmMyYzk0 LzEvNWdSREcxVlVkOEdhUDB4Y3R0RUhObGpWcy1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2r2+hNA GoopE4ou7zU/+HQ+IxwW9MIWHUAJielJfZ56FruQUtOpLk+61yFwwKexeZwgB2cM kqPzm2TOZWwChTK+6yttDFdQKEFI9/xbLKVqHdTZctVv1BeyM6lFaBP98TSMEYGJ Q2ESpgfOiRoLGfx+7grSDx2SH+RAhzSBuzMXnb3Wfb+/PyKIP7giI2vTl2UTqhD9 YHcCqw/gLExWI7F4XKzZztCSMiUj3b0dFFmhilEzammeHm5ODVZbEiQCzR2HmTGu 4Dyfdqme3o9/tRVkb5y1fJA4fQDDvckwRmWqYlgZt1BD9eSHyIpPM+k3FzwDAFsm QnXBy86+TWz3rA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:34:27 2025 by rpki-client