This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft File: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft (raw, json) Hash identifier: 1St2D+ejUuAFlypnB/BUC9B85/65B9IpiqnSUmRlF0w= Subject key identifier: AC:4F:87:F7:7F:35:76:21:5B:7F:C7:45:3E:DA:FB:58:77:5C:60:C1 Authority key identifier: E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5 Certificate issuer: /CN=e67bc12b3685716d8ef6567e21904194377be1e5 Certificate serial: 019AF5AE5706CD5E4FB28FD4937CBC1888CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 22:00:34 +0000 Manifest this update: Sat 06 Dec 2025 22:00:34 +0000 Manifest next update: Sun 07 Dec 2025 22:00:34 +0000 Files and hashes: 1: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl (hash: G3PAMnEb0MotLX2/TnDQIPenhLLrxPLIacYFGk1a0go=) 2: CK8AO5cGK3UQexwKT4OQnvAc618.roa (hash: FFxKHiRId03ta3Wbr3GQyhjQH1qxb15B+KbsuejkB8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:57:06:cd:5e:4f:b2:8f:d4:93:7c:bc:18:88:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e67bc12b3685716d8ef6567e21904194377be1e5 Validity Not Before: Dec 6 22:00:34 2025 GMT Not After : Dec 7 22:00:34 2025 GMT Subject: CN=ac4f87f77f3576215b7fc7453edafb58775c60c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4e:5c:d9:60:54:51:30:3a:a2:6c:c6:8b:86: 8a:1b:96:f8:93:14:ed:0f:a5:bd:e8:a7:b6:0e:e6: 90:9d:98:bc:50:01:00:07:8d:79:00:11:13:4b:e5: 18:0d:2a:8c:41:4f:44:86:da:18:bc:94:10:64:42: 16:78:e4:8c:f2:40:7a:a9:d8:b8:71:2c:2c:a3:f0: af:21:c0:52:4e:83:ca:9f:e7:3a:19:9a:f8:41:d6: 39:d5:0b:34:e9:7d:36:d1:a2:fe:29:ba:b6:38:6d: a6:f8:1a:97:4c:44:cb:82:9a:6c:1a:79:02:0c:27: 1b:39:a0:cb:c5:4b:31:bf:71:d0:36:70:8f:7f:c6: 3e:e9:b4:10:68:f9:72:ac:3e:71:7a:cc:48:43:3e: 43:41:89:81:98:ef:ca:33:8f:17:7d:6e:f1:c3:09: a7:99:1f:27:5d:ce:c5:9d:66:08:76:d4:a0:a8:bf: 35:b9:62:a3:f4:76:8f:f5:76:ba:fe:9c:9f:ca:ee: 31:11:d1:e2:7d:65:45:c5:20:1b:7e:df:f9:dd:ac: 34:19:08:7a:a7:35:e4:4a:a2:c0:79:e9:b7:15:62: f1:75:61:c8:3b:55:20:f3:87:01:14:d8:32:1b:d5: 27:b7:cb:64:d3:3c:95:17:cc:75:e0:e2:7b:67:62: 11:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4F:87:F7:7F:35:76:21:5B:7F:C7:45:3E:DA:FB:58:77:5C:60:C1 X509v3 Authority Key Identifier: keyid:E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:2a:5b:c8:cd:c4:3b:d0:ef:51:4b:56:1b:b8:98:a5:f3:46: cb:cc:ea:1c:63:31:1f:8a:70:c9:4c:27:11:91:5f:76:70:2c: 8b:5b:db:30:5e:c0:0e:cc:58:f1:e4:18:1d:eb:d6:d5:9b:62: e6:67:f6:fc:f8:b3:66:db:e5:d1:8b:82:22:50:32:f5:66:00: 0d:14:73:df:19:f3:ff:20:a5:2f:68:bc:70:03:72:58:96:91: 8c:07:b3:a0:6d:9d:df:e3:71:9e:82:bb:f9:a4:35:b8:a2:dc: 40:45:a1:77:a8:d0:da:5f:06:e3:52:d9:a3:0e:a5:12:33:32: 4a:98:c8:c9:3c:e9:50:0e:5d:1b:bc:42:8a:58:76:04:9c:c8: 59:60:4b:08:01:f1:56:a9:60:ab:c3:09:9a:58:2e:36:6d:42: f3:bc:2a:cc:e3:13:ec:8f:53:69:12:71:65:2f:74:7d:ea:55: be:d8:3b:d1:ff:cf:92:e5:f2:af:ce:cc:74:4d:34:ca:f0:20: 8d:ab:59:5a:75:e1:3d:53:16:4a:99:09:76:f1:67:fd:18:14: 75:72:de:ce:98:24:cb:cc:d7:4d:6e:ae:f8:59:3a:c1:84:57: a7:36:6e:48:4d:e3:de:f0:e7:2b:ce:52:cc:3d:e7:12:af:65: 6c:4b:56:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rlcGzV5Pso/Uk3y8GIjMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2N2JjMTJiMzY4NTcxNmQ4ZWY2NTY3ZTIxOTA0MTk0Mzc3 YmUxZTUwHhcNMjUxMjA2MjIwMDM0WhcNMjUxMjA3MjIwMDM0WjAzMTEwLwYDVQQD EyhhYzRmODdmNzdmMzU3NjIxNWI3ZmM3NDUzZWRhZmI1ODc3NWM2MGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE5c2WBUUTA6omzGi4aKG5b4kxTt D6W96Ke2DuaQnZi8UAEAB415ABETS+UYDSqMQU9EhtoYvJQQZEIWeOSM8kB6qdi4 cSwso/CvIcBSToPKn+c6GZr4QdY51Qs06X020aL+Kbq2OG2m+BqXTETLgppsGnkC DCcbOaDLxUsxv3HQNnCPf8Y+6bQQaPlyrD5xesxIQz5DQYmBmO/KM48XfW7xwwmn mR8nXc7FnWYIdtSgqL81uWKj9HaP9Xa6/pyfyu4xEdHifWVFxSAbft/53aw0GQh6 pzXkSqLAeem3FWLxdWHIO1Ug84cBFNgyG9Unt8tk0zyVF8x14OJ7Z2IR+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxPh/d/NXYhW3/HRT7a+1h3XGDBMB8GA1UdIwQY MBaAFOZ7wSs2hXFtjvZWfiGQQZQ3e+HlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW52Qkt6YUZjVzJPOWxaLUlaQkJsRGQ3NGVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82YWZhODUtMzY3YS00ZWZkLWEzMTEt NDExNzJiMjQ5NzQwLzEvNW52Qkt6YUZjVzJPOWxaLUlaQkJsRGQ3NGVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS82YWZhODUtMzY3YS00ZWZkLWEzMTEtNDExNzJiMjQ5NzQw LzEvNW52Qkt6YUZjVzJPOWxaLUlaQkJsRGQ3NGVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYipbyM3E O9DvUUtWG7iYpfNGy8zqHGMxH4pwyUwnEZFfdnAsi1vbMF7ADsxY8eQYHevW1Zti 5mf2/PizZtvl0YuCIlAy9WYADRRz3xnz/yClL2i8cANyWJaRjAezoG2d3+NxnoK7 +aQ1uKLcQEWhd6jQ2l8G41LZow6lEjMySpjIyTzpUA5dG7xCilh2BJzIWWBLCAHx Vqlgq8MJmlguNm1C87wqzOMT7I9TaRJxZS90fepVvtg70f/PkuXyr87MdE00yvAg jatZWnXhPVMWSpkJdvFn/RgUdXLezpgky8zXTW6u+Fk6wYRXpzZuSE3j3vDnK85S zD3nEq9lbEtWTQ== -----END CERTIFICATE-----Generated at Sun Dec 7 06:58:50 2025 by rpki-client