This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft File: 5kdeNHqvK1nU7oU6ilS05L03R-s.mft (raw, json) Hash identifier: spa16wOevmYLpSoL0/dFNIbATuqqkzfxqBAhfhgMwec= Subject key identifier: DE:1C:25:74:2F:AC:DF:0B:45:A5:49:E1:67:2E:99:2C:08:A8:2B:F3 Authority key identifier: E6:47:5E:34:7A:AF:2B:59:D4:EE:85:3A:8A:54:B4:E4:BD:37:47:EB Certificate issuer: /CN=e6475e347aaf2b59d4ee853a8a54b4e4bd3747eb Certificate serial: 019AF1642686691693AD5CB63711D3280B6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft Manifest number: 02AB Signing time: Sat 06 Dec 2025 02:01:03 +0000 Manifest this update: Sat 06 Dec 2025 02:01:03 +0000 Manifest next update: Sun 07 Dec 2025 02:01:03 +0000 Files and hashes: 1: 5kdeNHqvK1nU7oU6ilS05L03R-s.crl (hash: 9Tjp8hC0nycMtJpi+otZiH8T+Bhg8japXIaH2K1m7gw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:26:86:69:16:93:ad:5c:b6:37:11:d3:28:0b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6475e347aaf2b59d4ee853a8a54b4e4bd3747eb Validity Not Before: Dec 6 02:01:03 2025 GMT Not After : Dec 7 02:01:03 2025 GMT Subject: CN=de1c25742facdf0b45a549e1672e992c08a82bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c8:58:df:a3:af:b6:b5:3a:2f:da:8d:76:1a: 05:bd:b4:c3:ec:cf:19:8f:c0:b7:c0:eb:17:99:a5: 94:16:39:58:30:17:75:7f:91:88:8d:2b:7b:5c:46: 03:ea:0b:a3:ba:49:75:bc:d4:8b:cb:52:70:29:b3: a9:9b:1b:8c:90:0e:05:81:ec:29:74:8f:44:93:9d: cd:d4:59:a4:72:1f:d4:59:aa:01:a1:4c:b6:1f:af: cb:45:b6:23:d0:67:7d:6f:79:06:c8:e5:8b:83:b3: 21:60:0f:76:bd:9b:68:48:a0:be:b1:cc:17:64:9a: cf:5a:45:53:a8:8a:32:64:7e:67:c5:5a:d3:d3:20: e5:3a:47:e9:df:38:62:38:e4:43:fd:e4:6b:7c:13: c5:e4:25:7c:1f:16:7c:d6:b9:39:d7:b0:98:61:49: 3e:91:c3:04:54:c4:05:e2:55:6e:fc:23:7a:1a:75: 24:0b:ba:fe:8d:9e:b0:23:eb:36:8a:2d:32:5e:e0: a7:30:da:3b:22:9d:61:f4:71:49:78:96:b6:45:1b: 2c:b9:89:2e:7c:d1:7b:ee:8c:96:f5:46:05:ff:03: eb:ca:ca:f5:b7:fe:57:bb:c8:6a:88:0e:50:a0:22: 3e:15:6a:b1:48:6c:0f:42:83:a1:3a:e8:68:89:60: 9b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1C:25:74:2F:AC:DF:0B:45:A5:49:E1:67:2E:99:2C:08:A8:2B:F3 X509v3 Authority Key Identifier: keyid:E6:47:5E:34:7A:AF:2B:59:D4:EE:85:3A:8A:54:B4:E4:BD:37:47:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:c3:c2:05:ac:7e:92:30:b3:c6:d4:dc:5d:64:ec:81:8b:9f: b1:58:34:09:c0:51:55:a4:85:5a:5c:a6:c4:14:c8:ee:ac:d4: 83:02:aa:c8:80:35:83:fb:57:03:91:1c:9f:55:3c:a5:b0:ab: 55:d4:96:46:a7:f8:63:1a:77:81:cb:c7:b2:c5:e5:86:04:6f: 99:1a:44:5f:5b:91:85:3a:e8:4c:16:c0:86:ad:46:10:2f:c4: d2:d2:79:b1:d7:ec:bf:a6:44:f5:de:07:00:87:50:bd:3b:ed: 5c:fb:f2:de:42:ca:9d:22:41:77:02:34:23:12:71:9e:4f:0f: cc:6b:b8:5f:91:68:b4:04:01:89:d3:17:33:df:92:da:35:b5: 43:de:b9:26:8c:7b:61:69:9f:7f:94:73:ec:18:a8:56:df:46: 1e:26:82:53:9e:0f:27:6c:1c:50:38:c4:b9:f0:d4:c0:d9:31: e7:c0:32:06:e4:64:7e:c7:5f:8b:50:3c:3f:d3:da:e1:18:4c: 51:11:bf:6c:6d:da:5f:38:6b:20:84:0f:a7:c7:d8:14:5b:4b: f3:1c:34:12:4b:9e:4c:6f:31:e3:4a:0d:fa:d7:c2:fe:e9:82: ba:66:f2:2b:84:b0:29:3c:2b:40:78:82:07:39:5e:c3:61:79: f2:ae:a2:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCaGaRaTrVy2NxHTKAtrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NDc1ZTM0N2FhZjJiNTlkNGVlODUzYThhNTRiNGU0YmQz NzQ3ZWIwHhcNMjUxMjA2MDIwMTAzWhcNMjUxMjA3MDIwMTAzWjAzMTEwLwYDVQQD EyhkZTFjMjU3NDJmYWNkZjBiNDVhNTQ5ZTE2NzJlOTkyYzA4YTgyYmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvchY36OvtrU6L9qNdhoFvbTD7M8Z j8C3wOsXmaWUFjlYMBd1f5GIjSt7XEYD6gujukl1vNSLy1JwKbOpmxuMkA4Fgewp dI9Ek53N1Fmkch/UWaoBoUy2H6/LRbYj0Gd9b3kGyOWLg7MhYA92vZtoSKC+scwX ZJrPWkVTqIoyZH5nxVrT0yDlOkfp3zhiOORD/eRrfBPF5CV8HxZ81rk517CYYUk+ kcMEVMQF4lVu/CN6GnUkC7r+jZ6wI+s2ii0yXuCnMNo7Ip1h9HFJeJa2RRssuYku fNF77oyW9UYF/wPrysr1t/5Xu8hqiA5QoCI+FWqxSGwPQoOhOuhoiWCbMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4cJXQvrN8LRaVJ4WcumSwIqCvzMB8GA1UdIwQY MBaAFOZHXjR6rytZ1O6FOopUtOS9N0frMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWtkZU5IcXZLMW5VN29VNmlsUzA1TDAzUi1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hM2EyOTktY2UyOC00YzM1LWFjNjQt YzhjMjBmMjVkZTg4LzEvNWtkZU5IcXZLMW5VN29VNmlsUzA1TDAzUi1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hM2EyOTktY2UyOC00YzM1LWFjNjQtYzhjMjBmMjVkZTg4 LzEvNWtkZU5IcXZLMW5VN29VNmlsUzA1TDAzUi1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsPCBax+ kjCzxtTcXWTsgYufsVg0CcBRVaSFWlymxBTI7qzUgwKqyIA1g/tXA5Ecn1U8pbCr VdSWRqf4Yxp3gcvHssXlhgRvmRpEX1uRhTroTBbAhq1GEC/E0tJ5sdfsv6ZE9d4H AIdQvTvtXPvy3kLKnSJBdwI0IxJxnk8PzGu4X5FotAQBidMXM9+S2jW1Q965Jox7 YWmff5Rz7BioVt9GHiaCU54PJ2wcUDjEufDUwNkx58AyBuRkfsdfi1A8P9Pa4RhM URG/bG3aXzhrIIQPp8fYFFtL8xw0EkueTG8x40oN+tfC/umCumbyK4SwKTwrQHiC Bzlew2F58q6iAg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:28 2025 by rpki-client