This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft File: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft (raw, json) Hash identifier: coj9+PaO/YtgerP4PZ3R6qD4zcWpN79aOLMDhpVB28w= Subject key identifier: 73:BA:F2:7C:78:B6:8D:68:D8:2A:A2:64:65:F0:EE:67:1B:D0:C1:9E Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94 Certificate issuer: /CN=e5a6794b91b81406412a137870bfde3b170de094 Certificate serial: 019AF276A82C75374A229DCCDC68F0C8D2A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft Manifest number: 1247 Signing time: Sat 06 Dec 2025 07:00:53 +0000 Manifest this update: Sat 06 Dec 2025 07:00:53 +0000 Manifest next update: Sun 07 Dec 2025 07:00:53 +0000 Files and hashes: 1: 1n-VVl_FUGuc471oALycpRiqCLk.roa (hash: CyDn40gRMpRIy4CCIQiJsw5qJAYeVVUI59AY9O976Cg=) 2: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl (hash: 5XZJkNKat3xso7Lmk4mfxGr8FXWhT5/dg7eQvh1OSkw=) 3: bvJaB1n4DlwgW-YHgMlWz2d0zE0.roa (hash: Aum897RCErwCFSWkB8MTk4Vue2u5uq3XMcwvd1bOMFQ=) 4: d-c3fV9q29dsWUsutXEO_XUxELA.roa (hash: odfjS8/wqJCuj1kyoe6nkIiHEr+jKawF6ritEznO31s=) 5: sXJREdbwAm9mG_ih-kGMSE4IF1g.roa (hash: Vz5vIbPRAiUHJvwDkitmXzn8yuqUilXU/W786A3ZvJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a8:2c:75:37:4a:22:9d:cc:dc:68:f0:c8:d2:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094 Validity Not Before: Dec 6 07:00:53 2025 GMT Not After : Dec 7 07:00:53 2025 GMT Subject: CN=73baf27c78b68d68d82aa26465f0ee671bd0c19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:43:fb:3d:3d:6d:58:71:f6:30:aa:6b:96:3c: f4:10:47:76:59:b4:eb:62:77:17:68:02:38:9f:6e: de:45:11:7c:45:00:71:0a:20:24:c9:39:ca:ed:86: 5d:43:dd:92:fc:b2:25:e5:65:e0:00:36:52:e9:82: e6:4b:ab:b8:e9:4e:37:28:b4:d8:ac:07:31:3a:c2: d6:89:4e:e7:93:4e:10:e7:fd:6a:a7:5a:f5:b6:dd: 3b:e4:ef:fb:a5:29:0a:e9:69:a3:3c:87:b3:e4:47: 14:9a:bd:60:8e:08:39:0e:96:76:da:f6:72:8b:0e: 38:28:ec:d0:e3:27:c3:87:03:f5:7f:9d:0c:f3:44: 01:b0:c3:b5:2e:e3:a3:b8:c2:67:b8:59:98:6b:f7: 12:d3:d7:8a:18:13:8e:69:99:c5:d5:7e:f6:01:2d: dd:93:d0:19:1f:fb:38:32:d9:e1:c5:4f:3f:88:2d: c5:c2:a2:68:73:bc:77:6a:1d:fc:4d:cc:35:58:f0: 81:c1:59:32:32:57:f2:d4:79:00:84:6d:e7:62:53: 22:33:75:50:60:dc:de:16:57:b4:7e:61:ce:27:78: 52:2d:60:e5:8d:b7:b9:e8:6b:31:53:0d:8a:a0:71: 04:6a:71:9c:92:14:1e:6c:cf:c2:7d:cc:4b:06:a2: 33:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BA:F2:7C:78:B6:8D:68:D8:2A:A2:64:65:F0:EE:67:1B:D0:C1:9E X509v3 Authority Key Identifier: keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:c0:04:cc:ac:68:ee:9a:43:05:56:31:55:f0:a1:83:f7:41: 69:f5:f3:cc:f5:3f:eb:91:14:86:08:bd:30:66:85:c0:6a:fe: 78:31:eb:cc:4f:bc:cc:e4:ad:e4:7d:53:b7:17:77:7f:9a:d6: 09:ec:93:37:61:cf:a9:2a:28:52:c5:a1:cd:c5:85:03:50:ac: 02:8f:23:e9:a1:e6:6d:38:a3:72:9e:9b:26:bb:84:40:a1:bc: 7a:53:67:af:a7:60:4a:2b:91:0e:bc:9f:80:68:f9:9e:36:db: a8:a4:a3:dc:75:20:76:8f:15:87:c0:5d:65:ec:da:24:35:ce: 21:ee:c4:51:c6:dd:e3:44:6e:0e:5f:1c:bd:06:4f:d0:57:6f: 00:00:13:c0:33:e7:22:85:ff:d8:05:9b:f6:25:19:47:4e:1d: e1:2f:be:81:14:97:13:d8:ce:31:d6:ee:39:a3:28:da:64:66: d6:f8:b5:83:f0:c7:92:41:08:5e:9c:17:09:d6:46:85:ce:c9: 53:90:7e:12:fb:77:de:b8:99:65:bc:29:b9:b3:76:24:f8:0e: 65:fe:82:0e:ee:47:e8:3e:b9:21:33:a8:49:c8:ec:f9:81:93: ed:fe:fb:47:c4:1b:b8:a6:b5:0e:4c:13:5d:0a:8b:84:ad:b6: af:5b:d2:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqgsdTdKIp3M3GjwyNKmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTY3OTRiOTFiODE0MDY0MTJhMTM3ODcwYmZkZTNiMTcw ZGUwOTQwHhcNMjUxMjA2MDcwMDUzWhcNMjUxMjA3MDcwMDUzWjAzMTEwLwYDVQQD Eyg3M2JhZjI3Yzc4YjY4ZDY4ZDgyYWEyNjQ2NWYwZWU2NzFiZDBjMTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUP7PT1tWHH2MKprljz0EEd2WbTr YncXaAI4n27eRRF8RQBxCiAkyTnK7YZdQ92S/LIl5WXgADZS6YLmS6u46U43KLTY rAcxOsLWiU7nk04Q5/1qp1r1tt075O/7pSkK6WmjPIez5EcUmr1gjgg5DpZ22vZy iw44KOzQ4yfDhwP1f50M80QBsMO1LuOjuMJnuFmYa/cS09eKGBOOaZnF1X72AS3d k9AZH/s4MtnhxU8/iC3FwqJoc7x3ah38Tcw1WPCBwVkyMlfy1HkAhG3nYlMiM3VQ YNzeFle0fmHOJ3hSLWDljbe56GsxUw2KoHEEanGckhQebM/CfcxLBqIztQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHO68nx4to1o2CqiZGXw7mcb0MGeMB8GA1UdIwQY MBaAFOWmeUuRuBQGQSoTeHC/3jsXDeCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFaNVM1RzRGQVpCS2hONGNMX2VPeGNONEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jYTM0ZWItOGUyMC00YmYxLWIxYjIt NTg3MjEwOWI2N2E4LzEvNWFaNVM1RzRGQVpCS2hONGNMX2VPeGNONEpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9jYTM0ZWItOGUyMC00YmYxLWIxYjItNTg3MjEwOWI2N2E4 LzEvNWFaNVM1RzRGQVpCS2hONGNMX2VPeGNONEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8AEzKxo 7ppDBVYxVfChg/dBafXzzPU/65EUhgi9MGaFwGr+eDHrzE+8zOSt5H1Ttxd3f5rW CeyTN2HPqSooUsWhzcWFA1CsAo8j6aHmbTijcp6bJruEQKG8elNnr6dgSiuRDryf gGj5njbbqKSj3HUgdo8Vh8BdZezaJDXOIe7EUcbd40RuDl8cvQZP0FdvAAATwDPn IoX/2AWb9iUZR04d4S++gRSXE9jOMdbuOaMo2mRm1vi1g/DHkkEIXpwXCdZGhc7J U5B+Evt33riZZbwpubN2JPgOZf6CDu5H6D65ITOoScjs+YGT7f77R8QbuKa1DkwT XQqLhK22r1vSeA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:51 2025 by rpki-client