This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft File: 5JlaSpG8KcjX7RBKA4QBmk_lng4.mft (raw, json) Hash identifier: A0+NiAtKtovT7nnhddqq0aMsYQBT23HD2JzPpushwfI= Subject key identifier: CF:0F:51:AF:9F:30:8C:F0:ED:46:29:6C:33:0E:88:EB:F7:6A:45:CF Authority key identifier: E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E Certificate issuer: /CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e Certificate serial: 019AF12CD5AF3CFAB08DEB586135857E340C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft Manifest number: 0AA8 Signing time: Sat 06 Dec 2025 01:00:38 +0000 Manifest this update: Sat 06 Dec 2025 01:00:38 +0000 Manifest next update: Sun 07 Dec 2025 01:00:38 +0000 Files and hashes: 1: 5JlaSpG8KcjX7RBKA4QBmk_lng4.crl (hash: 6AlyEiPhn1Zp/zoKAsAlaFZUAqpJN/S1C3byRCef3ys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d5:af:3c:fa:b0:8d:eb:58:61:35:85:7e:34:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e Validity Not Before: Dec 6 01:00:38 2025 GMT Not After : Dec 7 01:00:38 2025 GMT Subject: CN=cf0f51af9f308cf0ed46296c330e88ebf76a45cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:69:60:9c:0a:f7:02:11:f2:09:ed:d3:4c:6f: 9b:77:fb:c2:03:4f:d4:20:ab:9e:e0:3b:17:f9:eb: 87:72:35:91:47:95:61:0d:0f:66:46:bf:4c:c3:a3: 43:6c:42:54:43:7b:59:83:ae:2a:f7:23:92:28:00: b3:d4:66:23:c5:72:1b:08:13:00:a4:d6:44:b9:c6: db:69:5f:60:0c:92:45:30:95:90:20:aa:a2:20:de: 1a:86:3a:5b:24:7b:7f:b4:56:7a:32:d3:b5:99:e2: 3d:9e:88:53:0c:b1:44:f9:04:4a:5b:17:9e:9a:0b: 5d:30:84:b3:50:bb:ac:c2:0b:f4:c1:79:81:c5:b1: c5:97:12:52:3e:e0:5e:6d:5e:17:82:c5:0a:70:41: 26:ab:2e:0d:e3:d8:4a:84:eb:66:8d:6c:f0:2e:27: 2b:1c:30:a0:e5:f4:24:99:91:3c:c8:1f:b6:b2:5b: a1:74:52:51:e4:2c:b7:d9:77:35:03:85:02:30:c0: 07:45:2d:69:16:17:fd:b4:74:b0:16:f4:ff:d8:af: 8a:5f:f7:98:f0:b3:83:f4:86:ad:36:8e:6e:84:07: 20:a1:56:f7:74:21:e6:62:5b:9b:0f:13:98:cc:30: 61:43:1f:87:b7:33:09:ba:83:1e:e1:bd:0d:51:fb: 1e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0F:51:AF:9F:30:8C:F0:ED:46:29:6C:33:0E:88:EB:F7:6A:45:CF X509v3 Authority Key Identifier: keyid:E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:20:94:06:83:49:e0:5b:e0:f0:86:28:82:76:35:7c:c4:e8: 10:8b:8b:d2:3b:a1:23:bf:f3:f8:43:51:3a:88:cf:ff:b9:b5: 80:37:6e:ea:84:2b:48:85:87:fe:52:3a:97:60:41:91:b9:a8: 8c:8f:77:c9:f4:e1:73:8e:3d:ca:16:ad:39:de:48:43:22:22: 79:a1:e5:f4:af:1d:18:44:2b:b4:12:b6:46:16:2c:44:2c:c4: 51:28:63:7c:25:6f:d6:07:c9:33:d0:e2:d7:77:6f:d9:61:20: 54:8d:5d:f4:78:68:21:c3:26:e4:b1:0e:23:dd:f5:7b:67:53: 7a:66:82:8c:6a:e8:2d:3f:18:b3:be:b6:95:76:70:b0:28:47: eb:2b:5a:ad:75:ec:b5:94:74:6d:e3:99:5c:e2:f0:6c:62:29: bc:dc:96:7a:90:a5:87:02:04:0d:35:8b:cd:e3:0c:18:96:8f: 3a:d2:68:bf:fb:88:21:d9:ea:8b:0a:be:d9:46:d7:66:17:c3: 59:f6:c8:bb:13:d3:ef:9c:21:42:3b:a3:19:fc:ef:b0:f3:8e: 6a:ff:a2:4a:21:74:50:60:ee:85:f9:40:8c:8c:62:54:db:8f: f1:57:12:c2:fb:cf:f7:97:b4:40:ed:8e:28:1a:fc:d9:1c:7f: 54:3d:64:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNWvPPqwjetYYTWFfjQMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0OTk1YTRhOTFiYzI5YzhkN2VkMTA0YTAzODQwMTlhNGZl NTllMGUwHhcNMjUxMjA2MDEwMDM4WhcNMjUxMjA3MDEwMDM4WjAzMTEwLwYDVQQD EyhjZjBmNTFhZjlmMzA4Y2YwZWQ0NjI5NmMzMzBlODhlYmY3NmE0NWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WlgnAr3AhHyCe3TTG+bd/vCA0/U IKue4DsX+euHcjWRR5VhDQ9mRr9Mw6NDbEJUQ3tZg64q9yOSKACz1GYjxXIbCBMA pNZEucbbaV9gDJJFMJWQIKqiIN4ahjpbJHt/tFZ6MtO1meI9nohTDLFE+QRKWxee mgtdMISzULuswgv0wXmBxbHFlxJSPuBebV4XgsUKcEEmqy4N49hKhOtmjWzwLicr HDCg5fQkmZE8yB+2sluhdFJR5Cy32Xc1A4UCMMAHRS1pFhf9tHSwFvT/2K+KX/eY 8LOD9IatNo5uhAcgoVb3dCHmYlubDxOYzDBhQx+HtzMJuoMe4b0NUfse+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8PUa+fMIzw7UYpbDMOiOv3akXPMB8GA1UdIwQY MBaAFOSZWkqRvCnI1+0QSgOEAZpP5Z4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUpsYVNwRzhLY2pYN1JCS0E0UUJta19sbmc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9kZWY5YzctZjNlNS00MmY3LThkZWYt OWRmNGJiMThmYjA2LzEvNUpsYVNwRzhLY2pYN1JCS0E0UUJta19sbmc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9kZWY5YzctZjNlNS00MmY3LThkZWYtOWRmNGJiMThmYjA2 LzEvNUpsYVNwRzhLY2pYN1JCS0E0UUJta19sbmc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSCUBoNJ 4Fvg8IYognY1fMToEIuL0juhI7/z+ENROojP/7m1gDdu6oQrSIWH/lI6l2BBkbmo jI93yfThc449yhatOd5IQyIieaHl9K8dGEQrtBK2RhYsRCzEUShjfCVv1gfJM9Di 13dv2WEgVI1d9HhoIcMm5LEOI931e2dTemaCjGroLT8Ys762lXZwsChH6ytarXXs tZR0beOZXOLwbGIpvNyWepClhwIEDTWLzeMMGJaPOtJov/uIIdnqiwq+2UbXZhfD WfbIuxPT75whQjujGfzvsPOOav+iSiF0UGDuhflAjIxiVNuP8VcSwvvP95e0QO2O KBr82Rx/VD1kNw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:49 2025 by rpki-client