This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft File: 5gFfHiAENZyudla5aK2ypUpDTx4.mft (raw, json) Hash identifier: Y7rNEaq/tSXo+ojVXemQER85/zzz3tgaDuTHnAshd58= Subject key identifier: 23:43:32:93:AD:DE:6A:14:02:82:27:18:61:F0:E0:6B:EE:7C:20:D8 Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E Certificate issuer: /CN=e6015f1e2004359cae7656b968adb2a54a434f1e Certificate serial: 019AF31C4054D1D85B9DEF22214BEE139824 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:01:46 +0000 Manifest this update: Sat 06 Dec 2025 10:01:46 +0000 Manifest next update: Sun 07 Dec 2025 10:01:46 +0000 Files and hashes: 1: 5gFfHiAENZyudla5aK2ypUpDTx4.crl (hash: 47IVMSK/50jr0pa7yBLCGj5Lxr0k2yaxnVgJizS5bfc=) 2: MvZ9UpTU1jkxQ9uFTXHU8G59uDg.roa (hash: kL1zPGLwfZE8020kfHibTnemsjFNFBdHlurHXKEnCxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:40:54:d1:d8:5b:9d:ef:22:21:4b:ee:13:98:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e Validity Not Before: Dec 6 10:01:46 2025 GMT Not After : Dec 7 10:01:46 2025 GMT Subject: CN=23433293adde6a140282271861f0e06bee7c20d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f9:45:d4:4f:d4:42:3c:02:c8:a2:7d:94:28: 26:66:6a:fa:ac:bb:a6:00:9f:68:a7:11:23:60:6b: ed:11:cc:59:34:4f:e3:8d:2f:29:ce:ea:b6:c3:68: eb:13:f1:a3:59:b2:c9:70:76:17:a3:94:79:cd:3f: 89:72:ce:a0:25:8f:cb:b0:9c:da:49:8c:59:8c:78: ea:77:e0:6c:1c:df:9c:7e:1c:98:ea:3b:d7:a4:ff: 43:8e:43:da:77:77:3d:10:2e:4e:10:0f:03:6a:fc: e7:46:c1:a9:dd:76:5b:08:d1:78:09:f6:18:d0:5a: 25:d4:2c:8c:ce:10:c0:55:71:45:70:82:40:54:9c: 0b:f3:22:bf:fd:09:34:e6:ea:00:20:e3:0e:f5:8d: 4b:02:06:64:a1:2b:4a:e6:bc:1f:11:bf:b6:7f:6f: dd:99:31:ae:30:6f:a6:8f:18:b6:64:bf:7c:ad:ec: 54:b7:fc:22:a7:c6:9f:93:02:28:0a:10:26:b0:bb: d8:85:a1:a2:f8:69:5f:12:48:17:3f:96:91:63:93: d1:73:4e:1b:74:33:bb:bf:c5:1f:40:03:a6:12:37: 7a:48:87:27:b8:29:39:c7:b9:2c:4e:b9:d6:5b:9b: d6:10:8c:ca:8a:78:f1:d2:9e:a4:1a:db:34:5d:27: 8f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:43:32:93:AD:DE:6A:14:02:82:27:18:61:F0:E0:6B:EE:7C:20:D8 X509v3 Authority Key Identifier: keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:00:ad:59:f7:ff:18:2f:56:31:82:2d:50:0d:20:8f:b8:f1: 52:a7:d2:8c:64:43:12:4a:84:e1:6b:45:d2:ff:28:65:aa:5d: 63:95:ab:13:5c:6d:76:db:96:5d:89:61:5a:ea:21:90:9a:f6: 9d:cf:61:8c:b0:2f:53:c4:b2:da:f0:18:72:a4:44:a4:1c:1b: 47:b7:b1:91:61:37:dc:ca:e4:41:bf:c2:0e:63:a6:36:f2:b5: 55:32:d8:02:ca:dd:5b:21:d9:32:6b:11:bc:2f:da:a7:4c:06: d4:b1:44:45:9f:47:3f:7e:da:aa:5e:c3:43:8e:17:d7:47:3e: 77:3c:c8:ea:8b:bc:29:95:85:3b:7c:f7:8d:5b:f1:8f:d0:1f: 3e:1b:0c:58:70:4f:77:82:2e:a6:e1:f6:ff:6d:2c:c6:d2:17: 89:e1:69:a9:33:4a:c5:77:b0:0b:06:97:6e:8b:4c:df:7e:ac: 46:80:55:24:49:27:bf:66:0b:f2:4e:bf:e1:0a:29:58:17:51: 49:18:f1:26:e2:61:dc:6e:b5:40:88:f5:6c:52:2c:7d:92:50: ec:da:38:54:39:fd:79:3f:1b:de:18:8c:74:97:03:67:bd:f5: ae:c1:d8:0c:b2:ac:91:8c:d1:62:df:a2:7d:6f:b9:3a:48:33: 48:66:99:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHEBU0dhbne8iIUvuE5gkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MDE1ZjFlMjAwNDM1OWNhZTc2NTZiOTY4YWRiMmE1NGE0 MzRmMWUwHhcNMjUxMjA2MTAwMTQ2WhcNMjUxMjA3MTAwMTQ2WjAzMTEwLwYDVQQD EygyMzQzMzI5M2FkZGU2YTE0MDI4MjI3MTg2MWYwZTA2YmVlN2MyMGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPlF1E/UQjwCyKJ9lCgmZmr6rLum AJ9opxEjYGvtEcxZNE/jjS8pzuq2w2jrE/GjWbLJcHYXo5R5zT+Jcs6gJY/LsJza SYxZjHjqd+BsHN+cfhyY6jvXpP9DjkPad3c9EC5OEA8DavznRsGp3XZbCNF4CfYY 0Fol1CyMzhDAVXFFcIJAVJwL8yK//Qk05uoAIOMO9Y1LAgZkoStK5rwfEb+2f2/d mTGuMG+mjxi2ZL98rexUt/wip8afkwIoChAmsLvYhaGi+GlfEkgXP5aRY5PRc04b dDO7v8UfQAOmEjd6SIcnuCk5x7ksTrnWW5vWEIzKinjx0p6kGts0XSeP6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNDMpOt3moUAoInGGHw4GvufCDYMB8GA1UdIwQY MBaAFOYBXx4gBDWcrnZWuWitsqVKQ08eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWdGZkhpQUVOWnl1ZGxhNWFLMnlwVXBEVHg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MDgzMjEtMmRmYS00MjUzLWEzY2It MmY5MjY1MTBmZmJmLzEvNWdGZkhpQUVOWnl1ZGxhNWFLMnlwVXBEVHg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS81MDgzMjEtMmRmYS00MjUzLWEzY2ItMmY5MjY1MTBmZmJm LzEvNWdGZkhpQUVOWnl1ZGxhNWFLMnlwVXBEVHg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwCtWff/ GC9WMYItUA0gj7jxUqfSjGRDEkqE4WtF0v8oZapdY5WrE1xtdtuWXYlhWuohkJr2 nc9hjLAvU8Sy2vAYcqREpBwbR7exkWE33MrkQb/CDmOmNvK1VTLYAsrdWyHZMmsR vC/ap0wG1LFERZ9HP37aql7DQ44X10c+dzzI6ou8KZWFO3z3jVvxj9AfPhsMWHBP d4IupuH2/20sxtIXieFpqTNKxXewCwaXbotM336sRoBVJEknv2YL8k6/4QopWBdR SRjxJuJh3G61QIj1bFIsfZJQ7No4VDn9eT8b3hiMdJcDZ731rsHYDLKskYzRYt+i fW+5OkgzSGaZ+w== -----END CERTIFICATE-----Generated at Sat Dec 6 19:17:04 2025 by rpki-client