This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft File: C5NMNrdzAIhlucn7D9SGaTlaxzA.mft (raw, json) Hash identifier: 90tefhPbPVGbUEPDbR0TaUxbfgNMGXH13q4Tde/jucw= Subject key identifier: BD:50:E2:8D:17:E9:74:FA:FA:7C:F9:AB:F5:51:69:52:45:91:A4:18 Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30 Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730 Certificate serial: 019AF4D2A68FEFB7561E990189DC77C49142 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 18:00:37 +0000 Manifest this update: Sat 06 Dec 2025 18:00:37 +0000 Manifest next update: Sun 07 Dec 2025 18:00:37 +0000 Files and hashes: 1: C5NMNrdzAIhlucn7D9SGaTlaxzA.crl (hash: m/D+vnUBQ/1kvhJT6n+1IjGq/0NwXmmmJxja0us+JDc=) 2: Gx6kPcyxpQCfjzDOqvTPIqfhzSo.roa (hash: cyozRe1tjffBQUtfs/kFeEbNNq7a/YhvaL4ybQ6y3bs=) 3: KDMQDMSKvzkVFCIuQ1vi5IKxFqc.roa (hash: W1z4PN9ehAB8VlW2fAtV3SogXVKZbFhw7EL82DUKuEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:a6:8f:ef:b7:56:1e:99:01:89:dc:77:c4:91:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730 Validity Not Before: Dec 6 18:00:37 2025 GMT Not After : Dec 7 18:00:37 2025 GMT Subject: CN=bd50e28d17e974fafa7cf9abf55169524591a418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fe:db:96:9e:7d:fc:3d:28:69:b2:fa:d8:39: 0e:6b:6c:7b:de:d2:a1:09:9a:03:a9:c7:d5:3c:b7: ff:53:1c:3e:98:7f:ba:99:57:87:74:c8:0c:01:26: eb:23:1b:d0:21:5b:b2:a6:fe:02:6c:04:13:d3:9c: d5:22:d8:88:f8:2d:fd:76:8c:49:26:b5:fa:c2:56: da:4d:f4:e5:b1:fc:c0:aa:d5:b4:6b:de:59:15:6a: 46:a3:7a:81:ea:38:2a:96:08:ed:c6:cc:0b:9c:4a: 40:7d:3b:f2:f5:6e:ac:bc:35:1c:05:0f:22:35:62: 77:8b:a4:bc:e7:85:04:47:6a:25:18:2d:70:b1:78: 42:43:61:d4:64:94:cf:60:31:fc:4b:92:8b:be:42: 43:df:06:38:8e:c7:35:2e:62:50:88:11:cb:04:1b: 56:98:e7:12:7d:57:e0:0f:d8:33:24:14:cb:9a:98: 19:fb:f8:aa:53:f8:64:af:61:90:dd:e7:22:45:26: 04:51:c3:5c:d4:7f:e9:8a:c4:40:9c:a8:8f:15:b2: 7c:93:5c:ec:48:7e:2a:aa:1c:fa:71:bb:0b:5c:fb: 55:2f:16:ba:8f:ee:5f:db:2e:ed:d6:b1:31:c4:90: dd:df:e3:e0:c2:65:71:49:3b:d8:5b:e6:ed:5a:af: 85:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:50:E2:8D:17:E9:74:FA:FA:7C:F9:AB:F5:51:69:52:45:91:A4:18 X509v3 Authority Key Identifier: keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:6d:f0:4e:f7:c6:09:20:f6:26:93:98:d1:40:43:17:f2:46: b2:2f:a2:e3:f3:c5:13:22:cf:24:2c:e7:9c:bc:18:a0:0b:ce: e8:7e:08:58:bc:e5:86:13:b8:1a:4d:dc:48:77:57:9a:19:8f: d2:cf:a7:20:c4:82:19:d1:e4:df:01:fc:46:c9:26:6f:77:c6: 6e:5e:e0:8d:af:24:6b:c0:0d:62:9d:9c:41:97:8f:4d:4f:89: 5b:5f:99:4b:a6:ff:bc:51:0b:6a:c5:10:fa:84:d0:95:a9:4e: 35:da:c2:f7:22:c0:0b:bf:0c:4a:3c:dc:48:04:29:b2:25:71: 46:6e:f1:7f:a3:4d:72:0b:ca:14:86:ea:25:a9:79:c3:6e:3c: 2a:46:68:c6:97:af:d3:c1:9f:5a:f5:fa:1c:49:9a:ba:15:1b: e9:14:35:c6:4c:33:b6:dd:6b:7c:33:eb:a6:a0:03:5c:5c:d2: 3e:48:31:30:24:fa:73:07:19:50:f3:e6:cd:5e:3b:03:72:a3: bc:43:1f:49:52:f5:b7:b5:f7:83:d9:ac:d1:14:bb:ec:c6:63: d3:59:5b:b2:7d:2b:c4:a5:44:c4:e1:47:35:95:f9:47:4e:dc: a1:f4:c7:ff:03:ad:88:ef:a0:6d:7f:00:12:ee:f2:e9:23:f2: ac:6b:67:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00qaP77dWHpkBidx3xJFCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiOTM0YzM2Yjc3MzAwODg2NWI5YzlmYjBmZDQ4NjY5Mzk1 YWM3MzAwHhcNMjUxMjA2MTgwMDM3WhcNMjUxMjA3MTgwMDM3WjAzMTEwLwYDVQQD EyhiZDUwZTI4ZDE3ZTk3NGZhZmE3Y2Y5YWJmNTUxNjk1MjQ1OTFhNDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf7blp59/D0oabL62DkOa2x73tKh CZoDqcfVPLf/Uxw+mH+6mVeHdMgMASbrIxvQIVuypv4CbAQT05zVItiI+C39doxJ JrX6wlbaTfTlsfzAqtW0a95ZFWpGo3qB6jgqlgjtxswLnEpAfTvy9W6svDUcBQ8i NWJ3i6S854UER2olGC1wsXhCQ2HUZJTPYDH8S5KLvkJD3wY4jsc1LmJQiBHLBBtW mOcSfVfgD9gzJBTLmpgZ+/iqU/hkr2GQ3eciRSYEUcNc1H/pisRAnKiPFbJ8k1zs SH4qqhz6cbsLXPtVLxa6j+5f2y7t1rExxJDd3+PgwmVxSTvYW+btWq+FPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1Q4o0X6XT6+nz5q/VRaVJFkaQYMB8GA1UdIwQY MBaAFAuTTDa3cwCIZbnJ+w/Uhmk5WscwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kZWNiN2QtMDM4OC00ZTNjLThkYjQt YTMwMmY1MWQzODJjLzEvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9kZWNiN2QtMDM4OC00ZTNjLThkYjQtYTMwMmY1MWQzODJj LzEvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD23wTvfG CSD2JpOY0UBDF/JGsi+i4/PFEyLPJCznnLwYoAvO6H4IWLzlhhO4Gk3cSHdXmhmP 0s+nIMSCGdHk3wH8Rskmb3fGbl7gja8ka8ANYp2cQZePTU+JW1+ZS6b/vFELasUQ +oTQlalONdrC9yLAC78MSjzcSAQpsiVxRm7xf6NNcgvKFIbqJal5w248KkZoxpev 08GfWvX6HEmauhUb6RQ1xkwztt1rfDPrpqADXFzSPkgxMCT6cwcZUPPmzV47A3Kj vEMfSVL1t7X3g9ms0RS77MZj01lbsn0rxKVExOFHNZX5R07cofTH/wOtiO+gbX8A Eu7y6SPyrGtnag== -----END CERTIFICATE-----Generated at Sat Dec 6 22:37:25 2025 by rpki-client