This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json) Hash identifier: ccuPDC3xbIuGqg+j03MksbbHGDZ2T8u5E+CFUYuhrsg= Subject key identifier: 55:67:23:8B:13:36:41:1D:EC:1A:D0:72:19:2E:12:6E:4B:79:ED:35 Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa Certificate serial: 019AF16410B4487C1EAF8A0B6F68D960FAA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 02:00:58 +0000 Manifest this update: Sat 06 Dec 2025 02:00:58 +0000 Manifest next update: Sun 07 Dec 2025 02:00:58 +0000 Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: a/wr4vtsw7BNts+QJKuPbNdGBEDcdB7tY/J3zGNl7XM=) 2: QdF1_Zq92wXCrTWLXFHsTX1fLOE.roa (hash: 3ntgOindNlTLmT1RU6YRq18wFcBPHz2TO/Rc5iQY6kw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:10:b4:48:7c:1e:af:8a:0b:6f:68:d9:60:fa:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa Validity Not Before: Dec 6 02:00:58 2025 GMT Not After : Dec 7 02:00:58 2025 GMT Subject: CN=5567238b1336411dec1ad072192e126e4b79ed35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:57:7a:03:70:89:cb:81:f5:c2:0d:70:63:06: 78:72:17:10:99:f9:93:bb:8f:65:9a:34:47:4e:7c: 97:80:0f:e0:99:21:d5:20:45:7f:c9:48:75:5d:a5: e7:e5:56:95:b5:b9:da:28:b5:7e:91:6d:eb:e1:79: fa:3f:a7:17:18:92:a4:de:d2:7f:91:ca:d3:15:63: 7a:34:7d:86:78:43:8a:df:eb:eb:ff:28:9e:b8:f0: 80:32:88:41:48:46:a1:b4:e3:97:56:79:70:9f:59: 03:07:6e:e2:01:1b:cb:a0:1b:86:b0:3b:69:42:23: ca:9a:d1:9c:ef:ac:48:a5:1a:0c:5a:1c:65:84:cd: db:bf:4d:1d:c3:e4:99:62:93:57:52:52:3e:bb:df: 98:db:e0:3a:85:92:4d:88:f1:a3:de:b1:cd:dd:a9: 37:87:c7:94:5f:a9:b1:34:f8:2e:4b:35:12:6c:78: e6:ec:b5:3e:fd:49:cd:cb:08:70:d1:20:7f:16:bd: 00:3d:ec:05:86:f0:ba:52:d4:04:a5:4b:7c:3f:90: 80:b5:a1:02:5b:25:39:d7:1d:66:fd:87:b4:af:69: 36:b5:36:7a:ac:79:a9:b9:e6:2f:de:d2:16:1c:88: 10:f6:8a:06:f6:d9:7c:b3:bb:6a:17:ec:4d:a6:0d: e4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:67:23:8B:13:36:41:1D:EC:1A:D0:72:19:2E:12:6E:4B:79:ED:35 X509v3 Authority Key Identifier: keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:57:7b:93:14:73:69:86:18:ac:f3:0e:5a:81:7d:a2:ae:4f: 37:96:98:23:48:d5:3b:c5:ff:ed:13:f7:8c:e6:80:5c:8b:76: c9:dd:f9:5e:19:a9:fa:df:64:fe:15:23:61:ba:8d:13:8f:7a: 57:23:13:f7:3f:27:3b:3d:52:60:b7:4f:c8:b6:c2:2b:ab:ec: 6c:8d:97:6c:93:1b:d6:a7:3f:4a:99:ec:c2:01:3f:df:d8:d5: e8:2b:51:13:7c:9a:79:59:c8:a8:a3:f9:66:51:15:96:e1:45: 4c:fe:90:6b:02:b4:a9:a3:84:00:56:7c:e7:70:2d:3c:e9:db: f7:f2:64:3d:6c:cd:b2:c6:69:c6:5c:69:98:2c:3f:23:a3:cf: 05:7c:60:c3:84:28:3e:5e:3d:b8:d9:5e:eb:2f:fd:f9:e8:92: ff:7e:bc:87:5d:9d:b4:e2:09:3f:6c:43:e3:84:40:5f:01:60: 7c:6c:99:fc:47:0b:e6:0c:5b:61:20:8e:45:ca:25:5c:f1:21: e7:20:26:7e:d8:26:a9:21:78:75:6c:c1:14:d4:5e:2a:19:71: 27:1c:d9:68:04:81:06:bb:a2:d4:9a:00:8b:bd:27:ba:b1:49: 24:2b:51:b6:91:dd:1c:49:44:9b:34:64:29:c2:54:b5:29:ec: 5c:ae:76:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBC0SHwer4oLb2jZYPqhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2OTVjZmIzNmZlNWExZjM4NGNjNzc4YWUyOTlhY2FiODFj MjdiZmEwHhcNMjUxMjA2MDIwMDU4WhcNMjUxMjA3MDIwMDU4WjAzMTEwLwYDVQQD Eyg1NTY3MjM4YjEzMzY0MTFkZWMxYWQwNzIxOTJlMTI2ZTRiNzllZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1d6A3CJy4H1wg1wYwZ4chcQmfmT u49lmjRHTnyXgA/gmSHVIEV/yUh1XaXn5VaVtbnaKLV+kW3r4Xn6P6cXGJKk3tJ/ kcrTFWN6NH2GeEOK3+vr/yieuPCAMohBSEahtOOXVnlwn1kDB27iARvLoBuGsDtp QiPKmtGc76xIpRoMWhxlhM3bv00dw+SZYpNXUlI+u9+Y2+A6hZJNiPGj3rHN3ak3 h8eUX6mxNPguSzUSbHjm7LU+/UnNywhw0SB/Fr0APewFhvC6UtQEpUt8P5CAtaEC WyU51x1m/Ye0r2k2tTZ6rHmpueYv3tIWHIgQ9ooG9tl8s7tqF+xNpg3kuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVnI4sTNkEd7BrQchkuEm5Lee01MB8GA1UdIwQY MBaAFOaVz7Nv5aHzhMx3iuKZrKuBwnv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80OGE4YmEtZGM2MS00MmJkLTk0M2Et YzMxZmE3MWUyNjM1LzEvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80OGE4YmEtZGM2MS00MmJkLTk0M2EtYzMxZmE3MWUyNjM1 LzEvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1d7kxRz aYYYrPMOWoF9oq5PN5aYI0jVO8X/7RP3jOaAXIt2yd35Xhmp+t9k/hUjYbqNE496 VyMT9z8nOz1SYLdPyLbCK6vsbI2XbJMb1qc/SpnswgE/39jV6CtRE3yaeVnIqKP5 ZlEVluFFTP6QawK0qaOEAFZ853AtPOnb9/JkPWzNssZpxlxpmCw/I6PPBXxgw4Qo Pl49uNle6y/9+eiS/368h12dtOIJP2xD44RAXwFgfGyZ/EcL5gxbYSCORcolXPEh 5yAmftgmqSF4dWzBFNReKhlxJxzZaASBBrui1JoAi70nurFJJCtRtpHdHElEmzRk KcJUtSnsXK52GA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:26:47 2025 by rpki-client