This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft File: 5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft (raw, json) Hash identifier: 9VQCiYcoC9wwVO2lqRFO1qX/YeHtSPohF8QZQq2magQ= Subject key identifier: CF:1D:5B:52:0E:25:2D:7E:07:9D:68:82:87:AE:B5:6C:8D:FC:1A:C6 Authority key identifier: E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02 Certificate issuer: /CN=e47e92bf41a5a774511fb723af94aff0d3512602 Certificate serial: 019AFBE7E404E29BE9CE384B1882D22F1060 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft Manifest number: 059E Signing time: Mon 08 Dec 2025 03:01:09 +0000 Manifest this update: Mon 08 Dec 2025 03:01:09 +0000 Manifest next update: Tue 09 Dec 2025 03:01:09 +0000 Files and hashes: 1: 5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl (hash: 6xBWfKOFdv6cpenYDQyiYwVbNsbYSZFmlMpVZ/wBDzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:e7:e4:04:e2:9b:e9:ce:38:4b:18:82:d2:2f:10:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e47e92bf41a5a774511fb723af94aff0d3512602 Validity Not Before: Dec 8 03:01:09 2025 GMT Not After : Dec 9 03:01:09 2025 GMT Subject: CN=cf1d5b520e252d7e079d688287aeb56c8dfc1ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cb:17:56:df:f8:02:fb:ee:2b:30:37:eb:64: dc:d8:7f:8b:6b:74:b1:f5:5b:05:21:e2:ed:d1:11: b9:16:b9:c3:7d:eb:ab:08:2a:e5:e6:5d:5e:5d:8a: 37:94:15:14:7e:f7:1f:43:84:d1:cc:49:93:7d:f8: 87:50:fb:96:14:7b:9a:c8:f8:b8:ac:da:61:2e:f2: 50:58:67:1a:47:cd:80:1f:6e:2d:f3:80:a6:a8:1c: a8:4c:d0:49:52:ad:d6:67:5d:6f:fa:0d:32:a2:e0: 76:e0:ac:f0:86:d9:ec:ce:18:6a:d6:45:91:83:4f: e5:92:f5:52:6f:4d:75:57:e5:46:2c:2f:fe:09:78: fe:91:76:7f:62:3b:85:7a:a6:fb:10:17:a1:e5:55: ff:d5:65:91:ce:44:ce:03:2b:45:3c:98:0e:68:12: f1:62:b6:59:68:b7:d0:cc:70:c2:7d:62:25:b6:11: a1:e4:35:6b:db:11:73:b5:40:9d:06:59:53:1f:73: f4:67:57:0d:98:48:d9:b5:10:be:29:d2:bd:ba:76: d3:f7:bd:6b:0a:53:31:aa:e4:7e:53:b8:2a:61:b6: 53:28:37:c1:80:d8:16:8a:e4:f8:b3:26:fd:15:e3: 9a:96:f1:c9:62:55:0c:8c:10:55:e7:c5:51:0f:3b: 1d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1D:5B:52:0E:25:2D:7E:07:9D:68:82:87:AE:B5:6C:8D:FC:1A:C6 X509v3 Authority Key Identifier: keyid:E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:13:19:91:47:ab:05:42:1b:25:d8:8b:87:58:9b:37:af:9e: 91:ec:4b:66:53:e4:72:27:48:f9:0f:40:78:61:76:ba:19:ad: ae:5d:c6:a7:a0:fd:fd:7c:96:b2:a8:b8:5e:44:88:27:55:4e: 84:47:d7:d3:85:77:ee:eb:0c:f8:43:8e:da:19:9e:e7:5e:78: 3e:b6:8a:8b:90:3d:8f:6d:1b:52:76:69:b5:b9:07:44:41:0f: 85:34:32:d5:b8:32:91:7b:d6:89:47:30:ed:70:2d:14:e5:d1: 6d:5a:65:7e:59:b4:f1:cb:5e:ed:2a:83:aa:91:57:1d:99:d1: 40:bd:4f:f0:db:a4:27:0f:cd:31:ae:20:6d:b1:e4:7d:48:0c: 29:b3:1d:7e:26:71:02:c2:b6:1c:9f:3d:17:d6:7e:3b:9f:b5: 78:80:ad:43:9a:c8:12:f3:07:fa:d0:80:8b:0d:89:1c:ba:f7: 9b:21:40:7d:01:02:4c:27:91:d7:0a:54:3f:80:2d:16:14:41: b3:f5:b2:12:82:a6:2a:7c:46:18:97:69:4e:16:c8:f6:3b:81: 69:4c:0c:51:24:14:16:32:9d:ed:3f:54:24:f3:9c:43:96:06: 80:4e:13:16:9e:c9:6c:9b:3d:7c:72:63:ef:bb:4c:4b:9a:bb: c1:20:c4:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr75+QE4pvpzjhLGILSLxBgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0N2U5MmJmNDFhNWE3NzQ1MTFmYjcyM2FmOTRhZmYwZDM1 MTI2MDIwHhcNMjUxMjA4MDMwMTA5WhcNMjUxMjA5MDMwMTA5WjAzMTEwLwYDVQQD EyhjZjFkNWI1MjBlMjUyZDdlMDc5ZDY4ODI4N2FlYjU2YzhkZmMxYWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MsXVt/4AvvuKzA362Tc2H+La3Sx 9VsFIeLt0RG5FrnDfeurCCrl5l1eXYo3lBUUfvcfQ4TRzEmTffiHUPuWFHuayPi4 rNphLvJQWGcaR82AH24t84CmqByoTNBJUq3WZ11v+g0youB24Kzwhtnszhhq1kWR g0/lkvVSb011V+VGLC/+CXj+kXZ/YjuFeqb7EBeh5VX/1WWRzkTOAytFPJgOaBLx YrZZaLfQzHDCfWIlthGh5DVr2xFztUCdBllTH3P0Z1cNmEjZtRC+KdK9unbT971r ClMxquR+U7gqYbZTKDfBgNgWiuT4syb9FeOalvHJYlUMjBBV58VRDzsdOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8dW1IOJS1+B51ogoeutWyN/BrGMB8GA1UdIwQY MBaAFOR+kr9Bpad0UR+3I6+Ur/DTUSYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUg2U3YwR2xwM1JSSDdjanI1U3Y4Tk5SSmdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mM2UzNDQtZTUwNi00Y2Q5LTk0MWIt OTQ0ZDg4MTA5ODQxLzEvNUg2U3YwR2xwM1JSSDdjanI1U3Y4Tk5SSmdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mM2UzNDQtZTUwNi00Y2Q5LTk0MWItOTQ0ZDg4MTA5ODQx LzEvNUg2U3YwR2xwM1JSSDdjanI1U3Y4Tk5SSmdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxMZkUer BUIbJdiLh1ibN6+ekexLZlPkcidI+Q9AeGF2uhmtrl3Gp6D9/XyWsqi4XkSIJ1VO hEfX04V37usM+EOO2hme5154PraKi5A9j20bUnZptbkHREEPhTQy1bgykXvWiUcw 7XAtFOXRbVplflm08cte7SqDqpFXHZnRQL1P8NukJw/NMa4gbbHkfUgMKbMdfiZx AsK2HJ89F9Z+O5+1eICtQ5rIEvMH+tCAiw2JHLr3myFAfQECTCeR1wpUP4AtFhRB s/WyEoKmKnxGGJdpThbI9juBaUwMUSQUFjKd7T9UJPOcQ5YGgE4TFp7JbJs9fHJj 77tMS5q7wSDETw== -----END CERTIFICATE-----Generated at Mon Dec 8 09:15:22 2025 by rpki-client