This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft File: a5I-FqLEzb3ZUkCJCL-COARlulE.mft (raw, json) Hash identifier: xhuLEX6foOXbnEtBI/3MYUp55+SWq3hvbjLkwEJSs9I= Subject key identifier: 42:30:FB:E9:46:F6:16:48:EC:E7:8A:99:E7:CA:AA:B7:61:E7:1A:0B Authority key identifier: 6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51 Certificate issuer: /CN=6b923e16a2c4cdbdd952408908bf82380465ba51 Certificate serial: 019AF31B4788CDDA0ECDF1DE899EFA8DEDA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:00:42 +0000 Manifest this update: Sat 06 Dec 2025 10:00:42 +0000 Manifest next update: Sun 07 Dec 2025 10:00:42 +0000 Files and hashes: 1: MdpNEvAqweEeBxvHQjNduxcNC5o.roa (hash: 3CFotLoSJook5su+0dIfaMzyVX/dwZvzE8G3t1ZME68=) 2: a5I-FqLEzb3ZUkCJCL-COARlulE.crl (hash: oBcJV86/bO009jyDo0fFsoBYD9/qcIIEx4k2tekWyWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:47:88:cd:da:0e:cd:f1:de:89:9e:fa:8d:ed:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b923e16a2c4cdbdd952408908bf82380465ba51 Validity Not Before: Dec 6 10:00:42 2025 GMT Not After : Dec 7 10:00:42 2025 GMT Subject: CN=4230fbe946f61648ece78a99e7caaab761e71a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0f:ed:62:97:d7:32:89:4f:6d:b5:76:0f:17: 65:6b:1c:a3:d4:70:4d:d9:e0:02:c5:70:63:6e:54: 97:69:61:df:de:1e:2e:03:c7:30:8a:cb:39:a5:81: d2:a3:b3:12:92:ff:a1:9a:4f:c8:9b:75:e1:5a:fc: f3:49:a6:8f:c5:3d:33:69:4f:8a:27:24:a7:5e:b4: e4:1c:dc:9c:e6:e4:6e:ac:cd:65:2c:bd:f7:6c:ba: 11:44:a3:c7:b2:00:ee:58:76:f5:4b:ce:dd:f5:14: 67:7a:ce:e1:ec:58:6a:53:95:ca:32:c2:b9:c3:55: d6:fa:04:3f:1d:2b:22:f1:61:92:a3:e4:8f:73:66: 7b:fa:fa:a5:7d:3d:53:21:03:80:2e:be:43:69:d6: 5c:b1:04:bd:3c:3d:56:9c:24:ad:13:e3:d3:0e:29: 3e:2b:75:34:60:43:b8:6e:a7:25:94:c8:06:4d:01: 7c:3b:85:bc:10:e6:87:28:cf:fb:ac:fe:67:0b:53: c9:0a:20:a0:e0:d1:39:f9:e0:5d:a5:e8:b2:0a:42: ea:2b:94:4b:ee:41:ff:e0:1b:23:4b:65:83:38:b4: 9e:a2:76:72:61:5c:65:58:9c:a0:15:44:9e:b9:55: ac:21:d5:4d:23:2a:f7:ee:b5:26:ba:55:ce:ca:7a: be:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:30:FB:E9:46:F6:16:48:EC:E7:8A:99:E7:CA:AA:B7:61:E7:1A:0B X509v3 Authority Key Identifier: keyid:6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f4:16:66:75:06:d2:c8:2a:fa:5d:ac:a6:98:36:c5:fa:47: 23:d3:65:24:27:d1:34:e5:f4:2a:0a:5a:f4:f1:13:bf:c1:fe: af:0d:fe:00:24:7d:65:3d:7b:e6:c3:1a:87:10:49:f9:40:bc: 19:d7:89:61:2c:e2:d3:9b:54:af:23:8d:16:29:e9:53:08:3d: 0a:d6:4a:91:56:09:85:52:82:87:05:6d:86:5c:b2:8d:ad:b0: 7b:bc:9a:1e:84:7c:34:d4:ee:e3:7f:0e:ae:99:58:ef:f7:91: 3e:cf:32:e8:bb:47:8a:36:ab:04:06:21:8a:c1:f5:8f:98:4f: 2f:3d:a1:01:5b:99:47:a6:54:b2:6d:4d:93:6f:6f:6f:bc:58: 2c:a3:22:ec:bd:11:2d:84:ee:d8:20:27:ed:c9:99:0c:ff:3f: 75:23:40:18:e3:80:28:36:73:cd:bc:25:d6:b8:7c:21:36:1b: 10:17:cb:7f:3c:42:e9:9b:34:a1:d0:6b:0c:c1:f4:23:97:11: 2e:da:0a:79:43:d1:b6:e9:90:04:a3:1e:12:35:2c:b8:b1:4f: b5:74:a8:e2:28:a7:1b:2e:86:ad:7b:a4:25:8f:fd:c5:7a:b1: a9:52:66:a9:f7:cd:64:bc:92:b1:f5:ea:3e:80:4c:31:6c:1a: 17:80:e4:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG0eIzdoOzfHeiZ76je2mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiOTIzZTE2YTJjNGNkYmRkOTUyNDA4OTA4YmY4MjM4MDQ2 NWJhNTEwHhcNMjUxMjA2MTAwMDQyWhcNMjUxMjA3MTAwMDQyWjAzMTEwLwYDVQQD Eyg0MjMwZmJlOTQ2ZjYxNjQ4ZWNlNzhhOTllN2NhYWFiNzYxZTcxYTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng/tYpfXMolPbbV2Dxdlaxyj1HBN 2eACxXBjblSXaWHf3h4uA8cwiss5pYHSo7MSkv+hmk/Im3XhWvzzSaaPxT0zaU+K JySnXrTkHNyc5uRurM1lLL33bLoRRKPHsgDuWHb1S87d9RRnes7h7FhqU5XKMsK5 w1XW+gQ/HSsi8WGSo+SPc2Z7+vqlfT1TIQOALr5DadZcsQS9PD1WnCStE+PTDik+ K3U0YEO4bqcllMgGTQF8O4W8EOaHKM/7rP5nC1PJCiCg4NE5+eBdpeiyCkLqK5RL 7kH/4BsjS2WDOLSeonZyYVxlWJygFUSeuVWsIdVNIyr37rUmulXOynq+VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIw++lG9hZI7OeKmefKqrdh5xoLMB8GA1UdIwQY MBaAFGuSPhaixM292VJAiQi/gjgEZbpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTVJLUZxTEV6YjNaVWtDSkNMLUNPQVJsdWxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iMTdlYzMtNGQyZS00YjQ5LWEzYTct NDA3ZTlmMzg5MDdlLzEvYTVJLUZxTEV6YjNaVWtDSkNMLUNPQVJsdWxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9iMTdlYzMtNGQyZS00YjQ5LWEzYTctNDA3ZTlmMzg5MDdl LzEvYTVJLUZxTEV6YjNaVWtDSkNMLUNPQVJsdWxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfQWZnUG 0sgq+l2sppg2xfpHI9NlJCfRNOX0Kgpa9PETv8H+rw3+ACR9ZT175sMahxBJ+UC8 GdeJYSzi05tUryONFinpUwg9CtZKkVYJhVKChwVthlyyja2we7yaHoR8NNTu438O rplY7/eRPs8y6LtHijarBAYhisH1j5hPLz2hAVuZR6ZUsm1Nk29vb7xYLKMi7L0R LYTu2CAn7cmZDP8/dSNAGOOAKDZzzbwl1rh8ITYbEBfLfzxC6Zs0odBrDMH0I5cR LtoKeUPRtumQBKMeEjUsuLFPtXSo4iinGy6GrXukJY/9xXqxqVJmqffNZLySsfXq PoBMMWwaF4DknA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:59:13 2025 by rpki-client