This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft File: 5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json) Hash identifier: FlkqAKSay7RyZgZ1xld9PIO4/HM9w2bi7gwn9zewQNw= Subject key identifier: A4:29:2F:C0:74:C7:61:D3:5A:49:DD:06:DF:61:37:2D:9A:A6:FB:A7 Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10 Certificate issuer: /CN=e67d7b3570077064013da18e29e690cd4c9bd710 Certificate serial: 019AF23F69119390FEA932401228A20B45E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft Manifest number: 0445 Signing time: Sat 06 Dec 2025 06:00:33 +0000 Manifest this update: Sat 06 Dec 2025 06:00:33 +0000 Manifest next update: Sun 07 Dec 2025 06:00:33 +0000 Files and hashes: 1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: UyNARrP7ftANWGOhkUEZWMLMiwc1fMa3REK4zBuW1wA=) 2: UXfwFJz04X4XmU1ABHkr-Q0ovq0.roa (hash: vTofq9wYPlysSoUgx6HvDr7C9PTa+inohQrNa6Pfbqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:69:11:93:90:fe:a9:32:40:12:28:a2:0b:45:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710 Validity Not Before: Dec 6 06:00:33 2025 GMT Not After : Dec 7 06:00:33 2025 GMT Subject: CN=a4292fc074c761d35a49dd06df61372d9aa6fba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a3:dd:7a:74:1c:26:08:37:7f:d3:0c:45:10: 41:96:01:74:80:43:86:0f:03:0f:91:76:55:b6:44: c2:14:4f:45:1e:63:76:65:71:9e:2b:6e:1b:93:b4: 9f:7f:7f:ce:ca:86:e6:65:71:9b:1c:0f:8d:f3:b6: 5a:83:4d:a6:84:50:dc:cf:8a:19:a2:aa:4b:8c:3e: c7:f4:0e:ba:8a:ad:f8:50:ec:a2:0a:36:b9:32:d0: 71:cc:f1:81:a8:c6:b1:b1:a5:32:c8:1c:9d:5b:a6: 96:df:1e:f6:5a:d4:93:f6:06:da:2b:d2:6d:37:10: b0:e3:14:3e:7e:37:3f:34:73:9f:47:77:e1:4e:d3: da:c9:d3:34:1f:28:c3:8f:67:00:c4:fa:c5:ed:a9: 69:d1:b7:0c:5f:71:63:8a:6e:44:7b:55:60:43:a3: 4d:2a:a2:07:22:f0:6d:5b:c4:30:f5:f4:d7:39:ff: ea:a5:e7:6a:93:49:94:99:16:ad:a2:3e:6b:63:ef: c8:28:17:f5:b3:97:50:38:4a:ef:fa:39:18:08:09: 58:72:d8:fc:f1:d6:84:e7:c2:5b:55:bc:cd:4c:bd: 1a:f3:f2:06:43:fc:e6:bb:74:fa:59:f3:f3:64:88: d1:7d:90:1e:86:de:79:03:a2:a5:92:a9:54:42:9e: aa:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:29:2F:C0:74:C7:61:D3:5A:49:DD:06:DF:61:37:2D:9A:A6:FB:A7 X509v3 Authority Key Identifier: keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e0:7a:67:81:60:c7:92:be:7a:ce:3f:41:b5:16:c9:4c:d8: 8a:c8:bf:89:83:33:1d:75:06:41:79:73:2e:24:cc:5e:af:c7: 6c:ca:e7:66:09:bc:50:9d:6e:34:6f:d8:dd:7b:b7:3c:5e:74: 71:2d:fe:4c:83:0f:9f:65:9f:4f:91:8c:5d:5b:ad:9b:15:5d: f7:ca:72:64:2e:66:a1:0a:05:6e:a0:58:8b:5e:46:d9:8b:ca: c8:00:23:fa:5b:54:5d:a4:90:b8:3f:2b:33:4e:ce:9e:b0:da: 41:8e:7f:33:54:15:86:57:bd:cb:80:aa:86:82:67:72:7f:1b: 03:5a:b4:66:2e:ee:58:21:b8:d0:44:50:fd:50:ad:08:3e:d9: 1a:47:75:a3:5e:7e:64:4c:29:29:68:b3:42:8f:f1:95:c6:9b: 7f:e2:bb:a7:cf:7c:f6:73:1e:6e:e6:86:f8:38:ed:93:25:33: 9f:41:72:94:3e:99:3e:bd:3b:13:49:cd:ed:45:b8:04:9e:63: be:2b:06:8d:49:a0:a1:84:24:c0:7d:bd:6e:d4:7b:3c:4b:a1: 70:f9:1d:ad:43:92:67:78:e5:f9:00:ce:0e:80:f5:32:58:30: ea:5f:0f:12:92:e3:e2:18:8d:e8:82:3c:45:d3:b5:eb:3f:fb: 3a:bb:79:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2kRk5D+qTJAEiiiC0XiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2N2Q3YjM1NzAwNzcwNjQwMTNkYTE4ZTI5ZTY5MGNkNGM5 YmQ3MTAwHhcNMjUxMjA2MDYwMDMzWhcNMjUxMjA3MDYwMDMzWjAzMTEwLwYDVQQD EyhhNDI5MmZjMDc0Yzc2MWQzNWE0OWRkMDZkZjYxMzcyZDlhYTZmYmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36PdenQcJgg3f9MMRRBBlgF0gEOG DwMPkXZVtkTCFE9FHmN2ZXGeK24bk7Sff3/OyobmZXGbHA+N87Zag02mhFDcz4oZ oqpLjD7H9A66iq34UOyiCja5MtBxzPGBqMaxsaUyyBydW6aW3x72WtST9gbaK9Jt NxCw4xQ+fjc/NHOfR3fhTtPaydM0HyjDj2cAxPrF7alp0bcMX3Fjim5Ee1VgQ6NN KqIHIvBtW8Qw9fTXOf/qpedqk0mUmRatoj5rY+/IKBf1s5dQOErv+jkYCAlYctj8 8daE58JbVbzNTL0a8/IGQ/zmu3T6WfPzZIjRfZAeht55A6KlkqlUQp6qaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQpL8B0x2HTWkndBt9hNy2apvunMB8GA1UdIwQY MBaAFOZ9ezVwB3BkAT2hjinmkM1Mm9cQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lYjdlMGMtNTlhMS00ZjkzLThiMjct YWM0ODgzZTQ3NjY1LzEvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9lYjdlMGMtNTlhMS00ZjkzLThiMjctYWM0ODgzZTQ3NjY1 LzEvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANeB6Z4Fg x5K+es4/QbUWyUzYisi/iYMzHXUGQXlzLiTMXq/HbMrnZgm8UJ1uNG/Y3Xu3PF50 cS3+TIMPn2WfT5GMXVutmxVd98pyZC5moQoFbqBYi15G2YvKyAAj+ltUXaSQuD8r M07OnrDaQY5/M1QVhle9y4CqhoJncn8bA1q0Zi7uWCG40ERQ/VCtCD7ZGkd1o15+ ZEwpKWizQo/xlcabf+K7p8989nMebuaG+DjtkyUzn0FylD6ZPr07E0nN7UW4BJ5j visGjUmgoYQkwH29btR7PEuhcPkdrUOSZ3jl+QDODoD1Mlgw6l8PEpLj4hiN6II8 RdO16z/7Ort5LQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:59 2025 by rpki-client