This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft File: 5iq6ZBCCl1gsyujnuobyz8nh1ao.mft (raw, json) Hash identifier: 9ko/Ox42PsEMiTyowm9PoupiSAPK+ah6tYObg94dyW0= Subject key identifier: 79:23:A3:08:6F:0E:0B:54:BF:CC:6D:E1:CC:DA:35:39:5E:04:DA:92 Authority key identifier: E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA Certificate issuer: /CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa Certificate serial: 019AF1644F5973E55CEE75508EA5F1EE2204 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft Manifest number: 0762 Signing time: Sat 06 Dec 2025 02:01:14 +0000 Manifest this update: Sat 06 Dec 2025 02:01:14 +0000 Manifest next update: Sun 07 Dec 2025 02:01:14 +0000 Files and hashes: 1: 5iq6ZBCCl1gsyujnuobyz8nh1ao.crl (hash: 3kRzuKiZZ5kzG6T+TOK82xhSkI1bF2phJmpzpM+NRQg=) 2: 7C47IJ6PzEDLOdL0QvIP0xqQesA.roa (hash: ISA+HvV+2Juv2ntFCKzEfQOpWZqwF1hA9L7d5xR7Wl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:4f:59:73:e5:5c:ee:75:50:8e:a5:f1:ee:22:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa Validity Not Before: Dec 6 02:01:14 2025 GMT Not After : Dec 7 02:01:14 2025 GMT Subject: CN=7923a3086f0e0b54bfcc6de1ccda35395e04da92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:fa:6c:db:65:0e:b3:5b:9c:41:67:1b:af: ca:1f:c3:c3:81:db:e1:ed:28:d5:ca:9c:16:1e:b6: 7b:50:c0:18:4e:34:d9:6a:77:d6:c8:e0:cb:26:5c: c5:19:49:18:97:45:97:75:ba:2f:c4:99:3b:52:2b: 74:f2:b6:84:44:a1:f1:4a:6e:2e:e3:73:f0:67:28: 22:3d:95:39:d4:18:4d:87:eb:84:7c:8a:8c:22:ee: c5:88:52:c3:c2:a2:ab:a2:fb:f8:a4:8f:1e:67:8a: 7e:c4:87:43:4a:a8:03:68:69:24:79:27:c2:21:7c: 1b:09:ff:1d:c6:e6:77:17:b2:2a:2c:11:6b:b8:53: d2:37:a3:38:73:c1:30:3b:c0:ca:2e:e4:65:81:fb: 31:8f:62:60:65:32:c8:ff:d8:66:65:d9:0b:f0:56: 1c:78:be:64:fe:af:66:60:45:91:6f:0f:63:ba:82: f9:47:13:04:eb:88:3b:de:d3:ba:be:a1:e4:64:ec: 79:5f:13:7f:dc:26:ae:be:3c:97:1c:70:d1:80:9d: 66:41:14:fb:28:8c:14:82:ad:ba:0e:d0:fa:86:06: 84:96:ce:0d:a4:a1:ef:12:46:8d:77:43:4f:f9:cd: 44:13:61:73:e8:07:e6:5b:9f:bf:7b:d9:9a:d9:e6: 98:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:23:A3:08:6F:0E:0B:54:BF:CC:6D:E1:CC:DA:35:39:5E:04:DA:92 X509v3 Authority Key Identifier: keyid:E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:17:93:d0:b0:ab:42:8f:25:e7:2a:22:2c:8a:8d:4e:7d:bc: 36:c5:b5:34:aa:68:6a:7d:a7:3e:d9:d6:69:8e:af:55:14:87: 63:c5:5d:23:fd:48:44:90:7f:ca:03:88:66:00:85:cc:40:f6: ea:d7:66:b7:7c:92:8f:f8:e1:5e:46:4d:cc:bc:01:3a:f5:77: 20:e0:f8:04:49:20:20:42:c3:ff:2e:bc:30:82:c8:35:61:72: 0c:9d:8f:f5:28:f0:85:61:1d:7c:cf:34:40:c0:8b:67:42:2b: a6:64:c9:6f:43:2f:3a:b8:00:4c:ee:e3:b2:bd:db:c5:a5:ea: 6b:ca:c8:02:cc:24:70:d1:1c:b7:60:5b:44:d9:4b:d6:cc:9b: b8:ed:dc:d3:78:62:60:30:00:33:96:6c:d3:e1:9f:33:a4:c9: 53:5b:45:99:7d:76:67:5e:51:fe:5c:43:fc:fe:84:7b:42:38: 80:b1:94:59:da:9c:6c:90:f0:21:37:fe:d3:24:d3:db:a0:f8: ab:82:a4:ce:47:1a:a8:cd:bc:7b:eb:0f:55:da:25:39:22:96: af:71:97:88:87:ee:1a:08:23:4d:0d:d4:41:27:20:95:25:70: b2:34:b0:41:04:03:3e:f5:78:29:f1:6e:60:c1:46:45:dc:3b: 1d:24:84:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZE9Zc+Vc7nVQjqXx7iIEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MmFiYTY0MTA4Mjk3NTgyY2NhZThlN2JhODZmMmNmYzll MWQ1YWEwHhcNMjUxMjA2MDIwMTE0WhcNMjUxMjA3MDIwMTE0WjAzMTEwLwYDVQQD Eyg3OTIzYTMwODZmMGUwYjU0YmZjYzZkZTFjY2RhMzUzOTVlMDRkYTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTn6bNtlDrNbnEFnG6/KH8PDgdvh 7SjVypwWHrZ7UMAYTjTZanfWyODLJlzFGUkYl0WXdbovxJk7Uit08raERKHxSm4u 43PwZygiPZU51BhNh+uEfIqMIu7FiFLDwqKrovv4pI8eZ4p+xIdDSqgDaGkkeSfC IXwbCf8dxuZ3F7IqLBFruFPSN6M4c8EwO8DKLuRlgfsxj2JgZTLI/9hmZdkL8FYc eL5k/q9mYEWRbw9juoL5RxME64g73tO6vqHkZOx5XxN/3CauvjyXHHDRgJ1mQRT7 KIwUgq26DtD6hgaEls4NpKHvEkaNd0NP+c1EE2Fz6AfmW5+/e9ma2eaY4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkjowhvDgtUv8xt4czaNTleBNqSMB8GA1UdIwQY MBaAFOYqumQQgpdYLMro57qG8s/J4dWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWlxNlpCQ0NsMWdzeXVqbnVvYnl6OG5oMWFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82NDcwYWMtMTgwOS00ZDU5LTg3MTQt NzNiZGNiOWRlNzU1LzEvNWlxNlpCQ0NsMWdzeXVqbnVvYnl6OG5oMWFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy82NDcwYWMtMTgwOS00ZDU5LTg3MTQtNzNiZGNiOWRlNzU1 LzEvNWlxNlpCQ0NsMWdzeXVqbnVvYnl6OG5oMWFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxeT0LCr Qo8l5yoiLIqNTn28NsW1NKpoan2nPtnWaY6vVRSHY8VdI/1IRJB/ygOIZgCFzED2 6tdmt3ySj/jhXkZNzLwBOvV3IOD4BEkgIELD/y68MILINWFyDJ2P9SjwhWEdfM80 QMCLZ0IrpmTJb0MvOrgATO7jsr3bxaXqa8rIAswkcNEct2BbRNlL1sybuO3c03hi YDAAM5Zs0+GfM6TJU1tFmX12Z15R/lxD/P6Ee0I4gLGUWdqcbJDwITf+0yTT26D4 q4KkzkcaqM28e+sPVdolOSKWr3GXiIfuGggjTQ3UQScglSVwsjSwQQQDPvV4KfFu YMFGRdw7HSSEFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:16:21 2025 by rpki-client