This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft File: 5tM83lfaCcfZM3ce6hQllAdvmiM.mft (raw, json) Hash identifier: jLwv0CPKty5M62cC4Coc1seRpe9ZzqMfB1ONywHLpnw= Subject key identifier: CD:22:C2:9C:F7:21:83:04:A7:DD:66:F2:79:33:27:AB:E1:48:B1:6E Authority key identifier: E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23 Certificate issuer: /CN=e6d33cde57da09c7d933771eea142594076f9a23 Certificate serial: 019AF277367A49832A24AE557335C995CA16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 07:01:30 +0000 Manifest this update: Sat 06 Dec 2025 07:01:30 +0000 Manifest next update: Sun 07 Dec 2025 07:01:30 +0000 Files and hashes: 1: 5tM83lfaCcfZM3ce6hQllAdvmiM.crl (hash: JH5ZY3cvLhaCTP68kKGGMXaOIRsttNGHIV72BSePgoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:36:7a:49:83:2a:24:ae:55:73:35:c9:95:ca:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6d33cde57da09c7d933771eea142594076f9a23 Validity Not Before: Dec 6 07:01:30 2025 GMT Not After : Dec 7 07:01:30 2025 GMT Subject: CN=cd22c29cf7218304a7dd66f2793327abe148b16e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bf:8d:df:c3:f6:36:bf:9a:96:2e:72:3d:29: 54:85:09:72:05:e7:63:b9:5f:bb:08:83:a6:17:f7: 96:6e:c1:a6:ca:c7:e9:0c:b1:0c:ad:84:d2:96:ff: 67:34:86:98:91:d1:f0:a3:b7:23:d4:00:7b:4c:5f: dd:81:d3:6c:d1:88:fd:8b:e6:95:50:44:d0:c7:e8: 02:ec:7a:52:76:cf:86:a8:e4:10:d6:d7:25:4b:8a: 2d:c4:35:96:72:1e:0b:18:59:07:94:8b:df:59:d3: 6c:19:5f:7b:09:36:ad:bc:3f:a0:5d:89:0b:0b:db: 9d:dd:b0:5c:4b:30:16:de:47:65:0c:11:73:4a:af: 3b:b5:f3:58:bc:c9:84:f6:c2:a9:f3:25:b2:6f:cc: 66:1f:53:53:06:33:e7:b9:69:ae:27:6a:79:5d:4a: eb:26:4a:59:70:13:46:63:7f:23:ca:16:7f:8e:99: fc:21:9e:28:d8:ee:26:03:8a:dc:5c:6b:18:75:d1: f6:b5:0e:c7:58:b9:fd:ff:33:81:c3:75:c2:0a:36: e2:4e:37:5c:59:d7:6d:9c:c8:08:68:30:5f:32:93: 69:c8:4f:82:8f:8e:24:11:9a:50:7a:57:18:b8:7e: 43:eb:7c:77:c6:ca:7b:1f:ee:35:9f:1b:36:60:bd: b5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:22:C2:9C:F7:21:83:04:A7:DD:66:F2:79:33:27:AB:E1:48:B1:6E X509v3 Authority Key Identifier: keyid:E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ca:89:3f:10:84:cc:52:ed:32:d4:4c:dd:d2:55:9f:50:63: cf:16:17:fd:66:80:42:bf:c8:4e:7d:35:27:1a:6d:b7:7f:0d: 91:2c:86:8c:ee:91:ec:7e:f2:16:ac:03:0c:2b:c4:b8:83:e5: f5:49:dd:40:c3:5e:bd:61:40:c5:8e:89:0e:90:dd:06:da:d7: 81:a7:f0:58:f6:c2:58:7e:d0:56:a3:d2:ed:46:95:c5:3c:41: 9d:4c:ad:18:0a:96:13:87:2c:70:dd:91:c7:38:55:aa:ce:a6: 70:b9:db:74:f1:5b:a4:63:80:f5:d7:30:3a:da:a7:bb:49:37: 7e:22:c7:9e:03:74:2f:f8:e8:d6:31:a3:70:b2:68:5e:2b:a0: 66:13:a7:a2:02:58:e1:8b:2b:92:e5:9a:80:b3:6a:ea:d6:cd: ce:98:f7:77:dd:23:48:3c:83:85:9e:de:9d:45:33:c6:ec:84: 42:c6:36:14:60:df:aa:08:37:d0:bb:8e:7d:4a:62:14:98:61: 39:96:89:53:f7:42:a4:89:21:61:01:f0:12:41:db:39:6d:b0: a8:97:a7:4d:98:97:73:2a:03:ce:1e:00:28:68:f1:97:cb:e8: 6d:56:73:7e:52:42:67:56:85:d4:9c:b9:e1:55:81:f9:38:1d: 47:14:5c:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzZ6SYMqJK5VczXJlcoWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZDMzY2RlNTdkYTA5YzdkOTMzNzcxZWVhMTQyNTk0MDc2 ZjlhMjMwHhcNMjUxMjA2MDcwMTMwWhcNMjUxMjA3MDcwMTMwWjAzMTEwLwYDVQQD EyhjZDIyYzI5Y2Y3MjE4MzA0YTdkZDY2ZjI3OTMzMjdhYmUxNDhiMTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL+N38P2Nr+ali5yPSlUhQlyBedj uV+7CIOmF/eWbsGmysfpDLEMrYTSlv9nNIaYkdHwo7cj1AB7TF/dgdNs0Yj9i+aV UETQx+gC7HpSds+GqOQQ1tclS4otxDWWch4LGFkHlIvfWdNsGV97CTatvD+gXYkL C9ud3bBcSzAW3kdlDBFzSq87tfNYvMmE9sKp8yWyb8xmH1NTBjPnuWmuJ2p5XUrr JkpZcBNGY38jyhZ/jpn8IZ4o2O4mA4rcXGsYddH2tQ7HWLn9/zOBw3XCCjbiTjdc WddtnMgIaDBfMpNpyE+Cj44kEZpQelcYuH5D63x3xsp7H+41nxs2YL21bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0iwpz3IYMEp91m8nkzJ6vhSLFuMB8GA1UdIwQY MBaAFObTPN5X2gnH2TN3HuoUJZQHb5ojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXRNODNsZmFDY2ZaTTNjZTZoUWxsQWR2bWlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80ZjlkNGMtMTk0Ni00YWY5LThjMjIt NDE5NzUzZDNmODhkLzEvNXRNODNsZmFDY2ZaTTNjZTZoUWxsQWR2bWlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80ZjlkNGMtMTk0Ni00YWY5LThjMjItNDE5NzUzZDNmODhk LzEvNXRNODNsZmFDY2ZaTTNjZTZoUWxsQWR2bWlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXcqJPxCE zFLtMtRM3dJVn1BjzxYX/WaAQr/ITn01Jxptt38NkSyGjO6R7H7yFqwDDCvEuIPl 9UndQMNevWFAxY6JDpDdBtrXgafwWPbCWH7QVqPS7UaVxTxBnUytGAqWE4cscN2R xzhVqs6mcLnbdPFbpGOA9dcwOtqnu0k3fiLHngN0L/jo1jGjcLJoXiugZhOnogJY 4YsrkuWagLNq6tbNzpj3d90jSDyDhZ7enUUzxuyEQsY2FGDfqgg30LuOfUpiFJhh OZaJU/dCpIkhYQHwEkHbOW2wqJenTZiXcyoDzh4AKGjxl8vobVZzflJCZ1aF1Jy5 4VWB+TgdRxRchQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:25 2025 by rpki-client