This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft File: 5XB6RVkqydFxmoV2lgMXeCm0bgo.mft (raw, json) Hash identifier: VHGASCTepZNpf157UlwynvKILJA8y40gClzV0jfS+bg= Subject key identifier: 1E:86:27:AE:B2:3F:31:93:52:F9:CB:A9:80:B8:38:FD:92:C9:16:E1 Authority key identifier: E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A Certificate issuer: /CN=e5707a45592ac9d1719a85769603177829b46e0a Certificate serial: 019AF352C2CEE905EA05946D0075A1423C46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft Manifest number: 0D60 Signing time: Sat 06 Dec 2025 11:01:18 +0000 Manifest this update: Sat 06 Dec 2025 11:01:18 +0000 Manifest next update: Sun 07 Dec 2025 11:01:18 +0000 Files and hashes: 1: 5XB6RVkqydFxmoV2lgMXeCm0bgo.crl (hash: RFVZ2ytc+xzVWIwRMWPs4PgQWlUVJ+zDTD0Kvc52UcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:c2:ce:e9:05:ea:05:94:6d:00:75:a1:42:3c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5707a45592ac9d1719a85769603177829b46e0a Validity Not Before: Dec 6 11:01:18 2025 GMT Not After : Dec 7 11:01:18 2025 GMT Subject: CN=1e8627aeb23f319352f9cba980b838fd92c916e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:80:44:d1:9a:66:41:1a:71:1d:76:ee:c9:6e: bb:19:f0:9b:59:e8:8e:ce:77:89:60:a5:84:83:d6: 72:04:8b:b3:2d:63:ef:90:0a:ad:34:21:d8:25:2c: 00:6a:9c:23:0f:f9:9e:20:fd:0f:c9:0d:c1:09:77: da:20:ef:85:b9:8e:4d:9f:ba:48:52:b0:12:0b:cc: 7c:62:7a:78:90:ee:52:45:df:70:97:b2:ae:01:98: aa:1e:a1:46:a1:81:07:05:31:19:82:50:c5:50:73: d0:93:da:d7:45:65:55:04:d1:fe:79:f4:ce:07:93: 02:77:2b:4a:65:e6:78:98:d1:52:3d:b2:59:ad:5f: 94:54:c7:b9:fc:16:e8:46:e2:e9:30:92:8a:6d:ef: f1:60:f3:54:8c:60:87:6b:73:e5:9d:6f:bd:08:51: ca:0f:06:03:14:b4:44:fb:5d:60:85:6a:2b:42:90: 4b:9d:31:5a:cc:65:bc:c2:04:56:92:f0:91:1e:29: ab:1f:13:80:4f:65:e2:0a:a6:95:af:0d:4c:04:5f: 15:c3:27:d9:c5:cf:dd:0d:75:bd:b6:c1:ec:b5:dc: b3:dc:cd:bf:21:0b:4b:6e:e7:22:50:1a:a2:3b:87: f2:eb:18:21:6a:ac:45:48:ed:a9:da:bf:c1:39:ad: fa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:86:27:AE:B2:3F:31:93:52:F9:CB:A9:80:B8:38:FD:92:C9:16:E1 X509v3 Authority Key Identifier: keyid:E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:94:af:ce:b0:d4:ac:b2:cb:c3:f7:1f:aa:b4:7a:e2:96:c4: c1:8a:72:6f:b2:67:10:2a:ba:3f:73:e5:2d:e0:01:16:f4:73: e2:9e:f3:37:13:4f:90:ba:25:15:35:59:6d:fe:87:c0:d5:13: 94:89:ad:c9:f4:61:e4:92:16:5f:12:f3:b5:cd:31:d2:01:e5: 9c:60:53:91:17:31:1a:34:0a:be:b4:17:8d:6e:48:10:3e:1e: 3f:52:b2:ae:76:f6:a7:ba:63:ec:95:88:e0:10:7b:e4:3e:13: 79:21:85:18:f9:ad:3d:1e:07:0d:6a:85:df:78:97:0d:b1:9a: 0f:62:b5:89:02:b9:79:30:1f:49:ca:8e:fe:38:a1:62:03:bc: 7b:c6:d1:44:f4:5d:77:87:07:1d:4e:4c:00:48:03:69:a8:60: 2e:3e:04:08:58:42:ce:40:91:b5:5c:83:94:45:d2:4b:d7:5b: 42:36:29:10:89:5e:29:39:f4:bc:4f:91:25:cc:52:cd:6d:20: d3:de:23:e2:94:aa:f8:c0:a3:c4:a8:9f:9b:27:71:01:89:38: a7:6a:06:54:82:5a:02:11:c2:73:31:ed:13:51:5f:34:c3:29: 03:e2:4e:a1:7c:f9:e5:88:e4:92:9a:41:25:a8:9b:77:4f:57: 02:c9:04:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUsLO6QXqBZRtAHWhQjxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NzA3YTQ1NTkyYWM5ZDE3MTlhODU3Njk2MDMxNzc4Mjli NDZlMGEwHhcNMjUxMjA2MTEwMTE4WhcNMjUxMjA3MTEwMTE4WjAzMTEwLwYDVQQD EygxZTg2MjdhZWIyM2YzMTkzNTJmOWNiYTk4MGI4MzhmZDkyYzkxNmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIBE0ZpmQRpxHXbuyW67GfCbWeiO zneJYKWEg9ZyBIuzLWPvkAqtNCHYJSwAapwjD/meIP0PyQ3BCXfaIO+FuY5Nn7pI UrASC8x8Ynp4kO5SRd9wl7KuAZiqHqFGoYEHBTEZglDFUHPQk9rXRWVVBNH+efTO B5MCdytKZeZ4mNFSPbJZrV+UVMe5/BboRuLpMJKKbe/xYPNUjGCHa3PlnW+9CFHK DwYDFLRE+11ghWorQpBLnTFazGW8wgRWkvCRHimrHxOAT2XiCqaVrw1MBF8VwyfZ xc/dDXW9tsHstdyz3M2/IQtLbuciUBqiO4fy6xghaqxFSO2p2r/BOa36gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6GJ66yPzGTUvnLqYC4OP2SyRbhMB8GA1UdIwQY MBaAFOVwekVZKsnRcZqFdpYDF3gptG4KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVhCNlJWa3F5ZEZ4bW9WMmxnTVhlQ20wYmdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xNDQ2YWEtNmU0MS00NWMwLWIwOWEt MzJjMzY1OGIyNWJlLzEvNVhCNlJWa3F5ZEZ4bW9WMmxnTVhlQ20wYmdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8xNDQ2YWEtNmU0MS00NWMwLWIwOWEtMzJjMzY1OGIyNWJl LzEvNVhCNlJWa3F5ZEZ4bW9WMmxnTVhlQ20wYmdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt5SvzrDU rLLLw/cfqrR64pbEwYpyb7JnECq6P3PlLeABFvRz4p7zNxNPkLolFTVZbf6HwNUT lImtyfRh5JIWXxLztc0x0gHlnGBTkRcxGjQKvrQXjW5IED4eP1Kyrnb2p7pj7JWI 4BB75D4TeSGFGPmtPR4HDWqF33iXDbGaD2K1iQK5eTAfScqO/jihYgO8e8bRRPRd d4cHHU5MAEgDaahgLj4ECFhCzkCRtVyDlEXSS9dbQjYpEIleKTn0vE+RJcxSzW0g 094j4pSq+MCjxKifmydxAYk4p2oGVIJaAhHCczHtE1FfNMMpA+JOoXz55YjkkppB Jaibd09XAskEFA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:02:34 2025 by rpki-client