This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json) Hash identifier: yKg0QqyQHTtwn60tOQlu05wck5diVRUa7SN91qWe9nc= Subject key identifier: 12:51:69:31:5C:1C:89:54:C9:C3:24:4F:74:83:46:DD:58:A2:1F:EA Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4 Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4 Certificate serial: 019AF19AC29DE3B713F2E4ACDF8DD88AB609 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft Manifest number: 0898 Signing time: Sat 06 Dec 2025 03:00:42 +0000 Manifest this update: Sat 06 Dec 2025 03:00:42 +0000 Manifest next update: Sun 07 Dec 2025 03:00:42 +0000 Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: GBWL6IFUdlE+WBoyBVqNad6SadRRLbMw6QEx5z3RYMU=) 2: KFEMCZhH126h5EdMOEzOYR3jl7A.roa (hash: i0lu4HO1DlJaiLzdVoxYyKbrNJlxsepiYz5nfS8kc00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c2:9d:e3:b7:13:f2:e4:ac:df:8d:d8:8a:b6:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4 Validity Not Before: Dec 6 03:00:42 2025 GMT Not After : Dec 7 03:00:42 2025 GMT Subject: CN=125169315c1c8954c9c3244f748346dd58a21fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ba:6a:ec:91:e8:a5:39:5c:2c:c5:17:42:f5: d9:2b:d9:77:a8:21:89:16:c4:6f:43:2a:9a:dc:90: 72:a1:bd:93:43:60:74:d1:d1:dd:54:0f:58:5c:76: 31:84:be:d5:22:b5:62:7c:ae:e3:2a:41:d1:01:e0: 2d:39:bb:c2:8a:f6:88:f5:45:e1:16:1a:87:17:23: 34:5a:ee:17:c1:bb:4f:2a:06:89:1b:3b:1a:2a:a1: 4a:74:91:cf:c0:4a:68:83:73:77:17:67:9d:b8:35: 95:d5:bc:1b:9e:42:8b:f9:fe:12:0d:d6:f2:d8:9e: af:68:d6:16:de:85:f1:00:5c:eb:a4:b4:5f:25:c3: 62:c4:34:3b:ef:53:12:09:eb:1e:e4:78:af:f8:15: 16:4b:28:af:b7:84:d1:d5:44:5d:f9:f5:a3:23:8a: d1:15:21:23:81:e1:7f:05:83:2a:a0:f4:e9:33:74: fa:d9:25:23:50:13:fc:ed:1c:1c:b9:99:e2:45:64: 6a:df:a5:a1:c2:97:bb:4a:75:c9:f5:9d:85:7e:e0: b9:fc:c7:7a:ad:ce:f8:ee:3e:2c:59:ba:8c:26:1a: 8e:83:6b:d0:64:f4:a3:b5:e7:b3:d0:4c:14:a2:01: d5:95:d7:b9:fc:49:98:99:e1:81:36:90:65:41:ff: d8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:51:69:31:5C:1C:89:54:C9:C3:24:4F:74:83:46:DD:58:A2:1F:EA X509v3 Authority Key Identifier: keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:74:60:a1:2a:37:60:90:9f:00:de:84:f5:61:fa:3c:a6:85: c4:63:a1:ed:0b:cc:24:1b:d4:d6:70:11:35:01:21:c5:46:26: 1f:73:e4:8e:a4:3b:e8:42:f9:ca:e4:55:b1:d1:ae:d0:9d:45: 95:d4:d5:6e:fc:9b:ea:93:b5:01:6e:00:90:79:84:39:cf:34: 16:90:2b:57:40:e9:a2:41:f2:38:61:0b:10:df:ef:6c:2f:ae: f9:c2:b2:98:70:ff:05:47:c4:1e:6b:13:a1:4e:fd:54:ba:0e: 72:70:97:9d:cf:76:80:94:e2:64:49:37:83:1d:1e:4c:92:2e: 70:fa:fd:aa:7b:5d:28:61:91:d7:1f:e5:fd:e6:ce:f8:ee:b6: dd:db:3a:81:04:33:c9:d9:ce:1a:8d:ac:97:8b:f2:af:d9:b2: 77:c2:60:04:41:cf:57:95:8d:81:00:1f:1d:9b:a3:d0:32:5c: e3:e2:a0:6b:3a:b1:70:4d:c2:99:2c:48:fd:bf:8c:98:b0:f9: ee:f0:40:fa:09:ee:4b:de:ce:2a:20:17:9b:34:fd:61:ce:c6: 34:39:c3:b5:bb:6f:4f:f8:e9:a7:28:78:6c:49:bf:e1:1b:4a: a7:1b:37:4f:38:74:7e:e9:4d:3f:4c:d1:9c:08:52:69:e0:42: 1d:bf:ad:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsKd47cT8uSs343YirYJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MzAwNzYxNGY2NzcwMGIyY2E3NmQ2MGI0OTQyYjdhOGU0 YjVjZTQwHhcNMjUxMjA2MDMwMDQyWhcNMjUxMjA3MDMwMDQyWjAzMTEwLwYDVQQD EygxMjUxNjkzMTVjMWM4OTU0YzljMzI0NGY3NDgzNDZkZDU4YTIxZmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrpq7JHopTlcLMUXQvXZK9l3qCGJ FsRvQyqa3JByob2TQ2B00dHdVA9YXHYxhL7VIrVifK7jKkHRAeAtObvCivaI9UXh FhqHFyM0Wu4XwbtPKgaJGzsaKqFKdJHPwEpog3N3F2eduDWV1bwbnkKL+f4SDdby 2J6vaNYW3oXxAFzrpLRfJcNixDQ771MSCese5Hiv+BUWSyivt4TR1URd+fWjI4rR FSEjgeF/BYMqoPTpM3T62SUjUBP87RwcuZniRWRq36Whwpe7SnXJ9Z2FfuC5/Md6 rc747j4sWbqMJhqOg2vQZPSjteez0EwUogHVlde5/EmYmeGBNpBlQf/Y6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJRaTFcHIlUycMkT3SDRt1Yoh/qMB8GA1UdIwQY MBaAFOYwB2FPZ3ALLKdtYLSUK3qOS1zkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wNDIzZGItZjIzMy00OTIyLTgwMjQt YjIxMTEwZDhmZmExLzEvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8wNDIzZGItZjIzMy00OTIyLTgwMjQtYjIxMTEwZDhmZmEx LzEvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXRgoSo3 YJCfAN6E9WH6PKaFxGOh7QvMJBvU1nARNQEhxUYmH3PkjqQ76EL5yuRVsdGu0J1F ldTVbvyb6pO1AW4AkHmEOc80FpArV0DpokHyOGELEN/vbC+u+cKymHD/BUfEHmsT oU79VLoOcnCXnc92gJTiZEk3gx0eTJIucPr9qntdKGGR1x/l/ebO+O623ds6gQQz ydnOGo2sl4vyr9myd8JgBEHPV5WNgQAfHZuj0DJc4+KgazqxcE3CmSxI/b+MmLD5 7vBA+gnuS97OKiAXmzT9Yc7GNDnDtbtvT/jppyh4bEm/4RtKpxs3Tzh0fulNP0zR nAhSaeBCHb+tyA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:10:28 2025 by rpki-client