This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft File: 5gBvGrt1cn57wwwXnml00tGPjzg.mft (raw, json) Hash identifier: nsNCisapf2hJ9+4hZH3023bYb8r83bDU9Ck5uUk5ekI= Subject key identifier: 65:AE:64:2E:EE:8C:D2:68:7E:57:C1:FA:96:B4:11:C8:59:F7:CC:26 Authority key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38 Certificate issuer: /CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38 Certificate serial: 019AF2ADB5F4BD7CEAA438AF9BDDF0E84343 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft Manifest number: 12B7 Signing time: Sat 06 Dec 2025 08:01:01 +0000 Manifest this update: Sat 06 Dec 2025 08:01:01 +0000 Manifest next update: Sun 07 Dec 2025 08:01:01 +0000 Files and hashes: 1: 5gBvGrt1cn57wwwXnml00tGPjzg.crl (hash: a+7H9C054fdN3h+GAOt6iPpbBQ7j2uTdRvILTFuM3mI=) 2: Zi2_IuYzlaIRtsk8-q-uBBtZEgI.roa (hash: VlhL3UjyA76HwKj7J4uOubCMpMfYtpjO6fp5e/1c/W8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:b5:f4:bd:7c:ea:a4:38:af:9b:dd:f0:e8:43:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38 Validity Not Before: Dec 6 08:01:01 2025 GMT Not After : Dec 7 08:01:01 2025 GMT Subject: CN=65ae642eee8cd2687e57c1fa96b411c859f7cc26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b0:a9:46:b1:48:e2:a7:e5:a0:5f:8e:a6:36: 1e:ea:f8:ca:1a:ba:6c:b4:09:58:bc:2f:03:88:f6: 6b:44:0a:73:58:20:e7:fc:d1:19:58:6e:a6:9a:fd: 4f:07:5d:cb:d2:20:18:1f:82:cd:88:f6:ed:6f:7a: 5e:0d:15:20:c3:5c:cf:e5:53:3b:80:dc:5a:43:12: d7:d5:60:be:49:59:f1:23:1b:c7:7c:4e:a2:de:3a: cd:48:f1:27:73:8b:1a:23:c1:d2:b9:73:b0:3f:2b: 12:1d:f8:9e:53:94:46:4e:a2:84:00:41:9a:86:37: 53:c8:bb:c1:bf:bc:99:71:bb:72:29:86:d9:95:2a: e4:d1:4b:85:a6:0b:a2:e9:0f:ea:77:c5:a7:7c:4b: f1:6d:66:ea:95:b1:bd:e9:7a:56:55:58:8e:36:c5: 12:e7:9c:77:00:9b:4c:fd:03:32:d8:02:a7:51:8c: 6c:e1:c3:98:f1:b8:e6:a1:b4:be:78:d0:25:e1:7a: dc:94:b3:45:a4:f0:52:6e:59:65:a3:df:9b:21:70: 42:38:d8:cc:60:36:fa:1d:49:95:62:f4:aa:65:f9: 14:51:3b:19:b8:f0:09:c9:4c:e9:65:03:7e:83:35: 30:31:a3:ca:1a:11:ce:36:d9:23:21:f5:fd:39:ef: 08:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AE:64:2E:EE:8C:D2:68:7E:57:C1:FA:96:B4:11:C8:59:F7:CC:26 X509v3 Authority Key Identifier: keyid:E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:c1:3c:4d:6b:2e:50:19:b5:f2:b3:b6:c9:f8:00:5b:37:df: 48:91:c3:c3:90:04:a0:1c:48:c9:ad:3f:21:76:4d:90:74:49: 93:b4:e5:ef:6e:28:22:c2:8e:84:f0:1f:e3:b4:82:9c:ef:1f: 2d:16:79:80:78:15:2d:0c:8f:87:53:bc:6c:4d:65:75:01:ac: 24:20:56:a2:91:eb:e5:56:db:ac:fb:73:35:50:5c:02:e8:90: e9:88:24:c1:a6:ea:26:36:fe:b1:d1:f4:17:2a:a1:5e:f2:ad: d8:bf:f0:5e:c8:d7:38:a9:f6:6f:db:25:b1:d7:8a:34:4d:21: b2:49:d7:fa:59:78:59:ce:19:6b:bb:a3:16:8e:49:a9:59:2b: 3d:5f:d2:5d:d7:08:38:fe:59:0d:40:25:ed:d2:6f:29:f4:ad: 1e:1a:20:cb:56:ca:67:07:44:53:56:cd:55:f3:8b:04:7d:cb: 5f:35:ab:57:70:46:5d:6f:ff:a9:40:5b:6e:21:fd:86:df:57: 42:d3:95:4c:66:40:44:65:ff:c0:15:7d:63:51:4b:60:80:0e: 3e:cc:8b:ea:de:a3:0c:65:ea:e6:7b:20:ec:b7:d0:0c:17:0f: 88:c6:d7:11:a8:d9:f9:0b:8a:14:1a:b4:1e:75:f1:9f:d6:d9: df:a6:8a:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbX0vXzqpDivm93w6ENDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MDA2ZjFhYmI3NTcyN2U3YmMzMGMxNzllNjk3NGQyZDE4 ZjhmMzgwHhcNMjUxMjA2MDgwMTAxWhcNMjUxMjA3MDgwMTAxWjAzMTEwLwYDVQQD Eyg2NWFlNjQyZWVlOGNkMjY4N2U1N2MxZmE5NmI0MTFjODU5ZjdjYzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubCpRrFI4qfloF+OpjYe6vjKGrps tAlYvC8DiPZrRApzWCDn/NEZWG6mmv1PB13L0iAYH4LNiPbtb3peDRUgw1zP5VM7 gNxaQxLX1WC+SVnxIxvHfE6i3jrNSPEnc4saI8HSuXOwPysSHfieU5RGTqKEAEGa hjdTyLvBv7yZcbtyKYbZlSrk0UuFpgui6Q/qd8WnfEvxbWbqlbG96XpWVViONsUS 55x3AJtM/QMy2AKnUYxs4cOY8bjmobS+eNAl4XrclLNFpPBSblllo9+bIXBCONjM YDb6HUmVYvSqZfkUUTsZuPAJyUzpZQN+gzUwMaPKGhHONtkjIfX9Oe8IBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWuZC7ujNJoflfB+pa0EchZ98wmMB8GA1UdIwQY MBaAFOYAbxq7dXJ+e8MMF55pdNLRj484MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hMjdhMTktOTBiNS00NjcxLWJiYzEt NDcyZDg4MmU5ZDcyLzEvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9hMjdhMTktOTBiNS00NjcxLWJiYzEtNDcyZDg4MmU5ZDcy LzEvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA8E8TWsu UBm18rO2yfgAWzffSJHDw5AEoBxIya0/IXZNkHRJk7Tl724oIsKOhPAf47SCnO8f LRZ5gHgVLQyPh1O8bE1ldQGsJCBWopHr5VbbrPtzNVBcAuiQ6YgkwabqJjb+sdH0 FyqhXvKt2L/wXsjXOKn2b9slsdeKNE0hsknX+ll4Wc4Za7ujFo5JqVkrPV/SXdcI OP5ZDUAl7dJvKfStHhogy1bKZwdEU1bNVfOLBH3LXzWrV3BGXW//qUBbbiH9ht9X QtOVTGZARGX/wBV9Y1FLYIAOPsyL6t6jDGXq5nsg7LfQDBcPiMbXEajZ+QuKFBq0 HnXxn9bZ36aKvw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:26:47 2025 by rpki-client