This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft File: 5O8X9MtP6SrQU-7yXznWOuEgfdM.mft (raw, json) Hash identifier: eKQo1mjDUwrQz3mGHa8R8gI9LNdEE0s9NsdKM2mSzrM= Subject key identifier: 35:86:26:1B:48:1B:0F:F1:18:CD:5B:5B:D5:48:2A:D0:45:AC:DA:5B Authority key identifier: E4:EF:17:F4:CB:4F:E9:2A:D0:53:EE:F2:5F:39:D6:3A:E1:20:7D:D3 Certificate issuer: /CN=e4ef17f4cb4fe92ad053eef25f39d63ae1207dd3 Certificate serial: 019AF5097C6E6724BEF7A9C91EE968BC7C78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft Manifest number: 0399 Signing time: Sat 06 Dec 2025 19:00:30 +0000 Manifest this update: Sat 06 Dec 2025 19:00:30 +0000 Manifest next update: Sun 07 Dec 2025 19:00:30 +0000 Files and hashes: 1: 5O8X9MtP6SrQU-7yXznWOuEgfdM.crl (hash: Nn5/UPC729Nf5gY+ZxoBDWZDNzWexab8uA16UA2IV+U=) 2: hkqw3W9-pdwewEMPwrQBPExOldQ.roa (hash: GNMEaQG7JI+6R+GxCRi11C7wb2KrqYyAM0elThFtbVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft rsync://rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:7c:6e:67:24:be:f7:a9:c9:1e:e9:68:bc:7c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4ef17f4cb4fe92ad053eef25f39d63ae1207dd3 Validity Not Before: Dec 6 19:00:30 2025 GMT Not After : Dec 7 19:00:30 2025 GMT Subject: CN=3586261b481b0ff118cd5b5bd5482ad045acda5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:85:f1:a8:e3:60:6d:d8:c1:86:7a:cb:49:84: e9:f1:d9:92:58:20:de:ae:31:71:a8:96:cf:c8:c8: d7:ff:43:c9:56:5b:70:7d:f7:67:a4:e6:42:11:ad: 19:cc:19:66:ec:a3:9c:37:d7:83:4e:c2:46:87:8e: c7:91:dd:00:98:37:0c:4f:ff:36:ef:7e:75:f3:b0: 29:2d:c9:f6:a1:04:fb:c2:94:e5:a3:86:78:76:99: 1b:ed:fa:e4:7a:3e:25:e6:ba:2f:e2:8c:10:1b:34: dd:22:34:7e:08:48:03:0c:17:5a:d9:2c:d7:b9:f2: e3:80:d4:29:4d:75:72:99:6a:b1:50:58:18:32:0c: a7:db:a3:ca:63:40:13:1c:fa:b3:12:47:d7:0e:83: 50:ba:da:62:2d:16:ff:b5:4b:b8:25:6a:60:ac:ef: ff:59:b0:a3:51:97:fb:68:b5:ae:bd:3b:10:2b:3a: 86:91:2a:01:0e:5c:49:81:3d:3d:40:ee:8a:3b:ed: 4c:cb:2c:d5:dd:df:ba:6e:b9:f3:74:44:6b:b8:5a: c7:0a:d4:72:f8:1d:56:c2:7f:e9:eb:01:76:84:b9: df:ac:bc:c5:f2:67:7f:9b:6f:57:aa:53:8d:d9:1d: 95:fe:85:da:92:a9:4e:9d:03:21:ed:eb:8d:73:b9: 96:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:86:26:1B:48:1B:0F:F1:18:CD:5B:5B:D5:48:2A:D0:45:AC:DA:5B X509v3 Authority Key Identifier: keyid:E4:EF:17:F4:CB:4F:E9:2A:D0:53:EE:F2:5F:39:D6:3A:E1:20:7D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:3e:20:b7:f7:2a:8d:10:f0:92:2c:03:db:fb:42:6d:64:86: 81:67:a9:8a:bd:cd:2f:38:90:33:c3:a7:01:7e:36:f7:e6:13: 4c:d2:4b:93:d1:43:10:44:9a:fd:a4:c3:68:72:94:1a:58:8f: 3e:cf:3b:8c:19:b7:7b:d1:cc:53:96:56:ea:01:a1:28:3e:7c: b3:45:71:eb:bf:b1:1b:1f:89:0f:2e:48:31:1c:12:48:7f:bc: 61:9c:1a:3c:5a:3b:d4:8e:b9:02:7c:83:2b:74:44:87:ca:63: 93:53:63:0a:18:7d:4b:f1:e4:75:02:9a:d1:93:70:e7:2c:a5: aa:f4:e5:20:4f:ef:e3:3f:66:4c:67:8a:59:51:53:ba:e2:48: da:5b:85:e1:2d:bc:50:f3:13:54:fe:ef:9b:a6:5d:d8:5d:7c: 47:b9:3f:d1:5f:21:72:70:d7:fb:18:3e:32:b5:7b:22:9d:e3: 47:18:26:96:86:f3:ed:b1:7e:1c:84:ce:78:c2:7c:88:ef:09: b6:da:0e:0c:1d:48:04:6e:87:6f:12:00:77:ad:ca:8c:11:3d: 60:73:7c:fe:a2:00:67:db:79:2c:a7:97:74:7a:f5:f0:5c:0b: 43:dd:d4:ac:2c:fe:5d:39:03:93:59:f5:38:ba:43:10:1d:91: c8:29:a4:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CXxuZyS+96nJHulovHx4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZWYxN2Y0Y2I0ZmU5MmFkMDUzZWVmMjVmMzlkNjNhZTEy MDdkZDMwHhcNMjUxMjA2MTkwMDMwWhcNMjUxMjA3MTkwMDMwWjAzMTEwLwYDVQQD EygzNTg2MjYxYjQ4MWIwZmYxMThjZDViNWJkNTQ4MmFkMDQ1YWNkYTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYXxqONgbdjBhnrLSYTp8dmSWCDe rjFxqJbPyMjX/0PJVltwffdnpOZCEa0ZzBlm7KOcN9eDTsJGh47Hkd0AmDcMT/82 735187ApLcn2oQT7wpTlo4Z4dpkb7frkej4l5rov4owQGzTdIjR+CEgDDBda2SzX ufLjgNQpTXVymWqxUFgYMgyn26PKY0ATHPqzEkfXDoNQutpiLRb/tUu4JWpgrO// WbCjUZf7aLWuvTsQKzqGkSoBDlxJgT09QO6KO+1MyyzV3d+6brnzdERruFrHCtRy +B1Wwn/p6wF2hLnfrLzF8md/m29XqlON2R2V/oXakqlOnQMh7euNc7mWiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWGJhtIGw/xGM1bW9VIKtBFrNpbMB8GA1UdIwQY MBaAFOTvF/TLT+kq0FPu8l851jrhIH3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU84WDlNdFA2U3JRVS03eVh6bldPdUVnZmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xNTAzNTUtYzExYS00ZDM3LWExODIt MjM3NjJhYTA5NzE3LzEvNU84WDlNdFA2U3JRVS03eVh6bldPdUVnZmRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8xNTAzNTUtYzExYS00ZDM3LWExODItMjM3NjJhYTA5NzE3 LzEvNU84WDlNdFA2U3JRVS03eVh6bldPdUVnZmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArz4gt/cq jRDwkiwD2/tCbWSGgWepir3NLziQM8OnAX429+YTTNJLk9FDEESa/aTDaHKUGliP Ps87jBm3e9HMU5ZW6gGhKD58s0Vx67+xGx+JDy5IMRwSSH+8YZwaPFo71I65AnyD K3REh8pjk1NjChh9S/HkdQKa0ZNw5yylqvTlIE/v4z9mTGeKWVFTuuJI2luF4S28 UPMTVP7vm6Zd2F18R7k/0V8hcnDX+xg+MrV7Ip3jRxgmlobz7bF+HITOeMJ8iO8J ttoODB1IBG6HbxIAd63KjBE9YHN8/qIAZ9t5LKeXdHr18FwLQ93UrCz+XTkDk1n1 OLpDEB2RyCmkoA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:44:43 2025 by rpki-client