This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft File: 5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft (raw, json) Hash identifier: 9sfAst7SM7gBYoYx5s6A1td1e8muknJTgwWrJpN/wVk= Subject key identifier: D3:4C:89:30:A6:4D:88:78:49:C9:62:2D:A9:C6:E1:F2:C1:C4:05:09 Authority key identifier: E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4 Certificate issuer: /CN=e4d608e0f7a1086c8451de5d637847b52217abb4 Certificate serial: 019AF240225669245DD8DCCA51CC4C7F4D14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft Manifest number: 0614 Signing time: Sat 06 Dec 2025 06:01:20 +0000 Manifest this update: Sat 06 Dec 2025 06:01:20 +0000 Manifest next update: Sun 07 Dec 2025 06:01:20 +0000 Files and hashes: 1: 5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl (hash: CRPcxN+pKlQKlcmFkoHZOeCcQLYf+bhLtz/HAy11XCM=) 2: GG3QiT3L8y2-6K509vuWf-CfKL0.roa (hash: 0l/LpwFeQpYG65cH+t5aLrBuln2/gPSbbnRKosRRf2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:22:56:69:24:5d:d8:dc:ca:51:cc:4c:7f:4d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4d608e0f7a1086c8451de5d637847b52217abb4 Validity Not Before: Dec 6 06:01:20 2025 GMT Not After : Dec 7 06:01:20 2025 GMT Subject: CN=d34c8930a64d887849c9622da9c6e1f2c1c40509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:48:8f:66:2f:9b:c9:50:97:51:61:ab:2d:68: 43:1a:6e:7f:e5:b7:8c:b7:30:eb:e8:9b:b1:69:c5: 39:2e:5c:25:90:b2:26:65:63:99:f9:a5:55:97:73: ce:01:b0:2b:f6:44:d8:7c:3c:2a:98:08:69:fd:7a: de:04:1d:58:0f:e1:c5:fd:25:1b:c1:de:05:98:4d: 37:1a:df:25:98:43:d1:71:77:b5:33:89:f6:e4:86: d8:74:ac:c1:07:70:b2:bc:29:6f:52:ba:0f:6c:de: 64:ce:59:cf:56:28:bc:fc:96:a4:05:09:c1:4e:db: ef:ab:23:64:de:7f:f0:02:fd:9c:54:74:83:79:47: b6:da:cf:44:70:94:6b:9f:a4:52:4a:95:8f:d8:eb: 76:45:ea:9a:3d:1e:e4:73:fc:fe:87:7f:79:4d:12: 1b:43:31:d6:65:29:0e:be:61:e2:f8:81:5c:60:e0: 75:56:e6:2d:88:72:40:d2:4e:05:92:1d:00:1f:03: cb:ee:4e:a7:a4:1d:37:3c:a4:4b:9a:c0:48:31:26: 44:c1:5d:b7:56:1a:3d:a7:00:f0:38:be:a8:48:4d: cf:61:47:32:9f:fa:d6:47:49:d2:93:d5:4f:36:5b: 86:00:b1:d7:97:bf:fd:5b:44:df:da:92:41:75:f2: f0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4C:89:30:A6:4D:88:78:49:C9:62:2D:A9:C6:E1:F2:C1:C4:05:09 X509v3 Authority Key Identifier: keyid:E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:00:e4:d0:84:44:56:34:23:80:21:ec:eb:ee:01:15:71:24: cb:be:37:08:e9:2a:14:ec:54:04:d7:51:30:62:b2:06:a7:8f: ee:2c:00:ce:d4:cf:b2:03:ad:da:af:20:9a:73:6d:c9:41:66: 22:6f:e9:55:15:5b:24:71:cf:11:fd:89:10:08:7f:ba:dd:0e: 2d:b4:67:a5:80:f1:ed:e8:b3:aa:97:78:c9:72:e2:2d:ef:31: ab:15:9d:de:95:b4:d5:b3:fb:d8:a2:85:12:d6:e7:a0:cc:81: 42:4e:f4:78:b7:53:c2:4f:80:a5:82:fa:9b:77:12:3d:63:6a: 2f:8b:88:b9:9f:ba:c9:5b:3a:bc:68:c3:98:f2:0a:da:9e:26: ab:8a:c4:b2:2a:d5:6c:7e:58:dc:62:68:01:b9:4d:96:47:d1: 51:d3:f2:68:86:83:e4:5e:7e:11:cc:5a:ea:78:2a:37:b7:79: 6f:71:77:fc:87:00:35:b0:0f:fa:13:0c:70:bf:da:9d:d5:75: b5:83:c4:41:7c:02:c1:d3:d3:39:96:62:b2:30:7c:6d:2e:4b: d8:b3:cd:34:65:63:5e:72:6c:8c:c0:dd:78:bf:cd:5e:fb:87: a9:2a:84:25:bd:61:3d:23:40:2b:c0:b8:41:c5:f4:a3:00:52: c9:b9:24:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCJWaSRd2NzKUcxMf00UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZDYwOGUwZjdhMTA4NmM4NDUxZGU1ZDYzNzg0N2I1MjIx N2FiYjQwHhcNMjUxMjA2MDYwMTIwWhcNMjUxMjA3MDYwMTIwWjAzMTEwLwYDVQQD EyhkMzRjODkzMGE2NGQ4ODc4NDljOTYyMmRhOWM2ZTFmMmMxYzQwNTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUiPZi+byVCXUWGrLWhDGm5/5beM tzDr6JuxacU5LlwlkLImZWOZ+aVVl3POAbAr9kTYfDwqmAhp/XreBB1YD+HF/SUb wd4FmE03Gt8lmEPRcXe1M4n25IbYdKzBB3CyvClvUroPbN5kzlnPVii8/JakBQnB TtvvqyNk3n/wAv2cVHSDeUe22s9EcJRrn6RSSpWP2Ot2ReqaPR7kc/z+h395TRIb QzHWZSkOvmHi+IFcYOB1VuYtiHJA0k4Fkh0AHwPL7k6npB03PKRLmsBIMSZEwV23 Vho9pwDwOL6oSE3PYUcyn/rWR0nSk9VPNluGALHXl7/9W0Tf2pJBdfLwCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNMiTCmTYh4ScliLanG4fLBxAUJMB8GA1UdIwQY MBaAFOTWCOD3oQhshFHeXWN4R7UiF6u0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU5ZSTRQZWhDR3lFVWQ1ZFkzaEh0U0lYcTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lZWM3MGEtYWE5Zi00MmFlLThhZDYt YjdiYmY1YTFhYzczLzEvNU5ZSTRQZWhDR3lFVWQ1ZFkzaEh0U0lYcTdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lZWM3MGEtYWE5Zi00MmFlLThhZDYtYjdiYmY1YTFhYzcz LzEvNU5ZSTRQZWhDR3lFVWQ1ZFkzaEh0U0lYcTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXADk0IRE VjQjgCHs6+4BFXEky743COkqFOxUBNdRMGKyBqeP7iwAztTPsgOt2q8gmnNtyUFm Im/pVRVbJHHPEf2JEAh/ut0OLbRnpYDx7eizqpd4yXLiLe8xqxWd3pW01bP72KKF EtbnoMyBQk70eLdTwk+ApYL6m3cSPWNqL4uIuZ+6yVs6vGjDmPIK2p4mq4rEsirV bH5Y3GJoAblNlkfRUdPyaIaD5F5+Ecxa6ngqN7d5b3F3/IcANbAP+hMMcL/andV1 tYPEQXwCwdPTOZZisjB8bS5L2LPNNGVjXnJsjMDdeL/NXvuHqSqEJb1hPSNAK8C4 QcX0owBSybkkcg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:19 2025 by rpki-client