This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft File: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft (raw, json) Hash identifier: jgAuWROSIly5SD8QYg1ds0GvD+b4MX2JBESMj4/XjjU= Subject key identifier: C8:11:84:06:AA:CE:F1:CC:79:46:97:39:61:24:4A:0C:C2:EA:7B:0E Authority key identifier: E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C Certificate issuer: /CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c Certificate serial: 019AF5098C1019FE78205FDB084FC3CA30AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft Manifest number: 0972 Signing time: Sat 06 Dec 2025 19:00:34 +0000 Manifest this update: Sat 06 Dec 2025 19:00:34 +0000 Manifest next update: Sun 07 Dec 2025 19:00:34 +0000 Files and hashes: 1: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl (hash: CeMJeQZvuFzYp7xfasTFph/U/nLQfdjpOD5ulKev7Us=) 2: GkuupBH0S6UfIOVBxWCowAfIXUM.roa (hash: 0Pa8It6a3TFSH6XKo+NzCtHNBkz88WRMk9KlV3Y4AVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:8c:10:19:fe:78:20:5f:db:08:4f:c3:ca:30:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c Validity Not Before: Dec 6 19:00:34 2025 GMT Not After : Dec 7 19:00:34 2025 GMT Subject: CN=c8118406aacef1cc7946973961244a0cc2ea7b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:60:11:03:ca:93:a5:c7:8c:fa:8e:90:43:f4: 7b:12:be:fd:0a:04:f2:40:76:3a:5b:93:d5:de:d5: 56:32:77:9e:d6:14:a2:0f:ed:f3:c9:b9:83:7a:b0: 94:00:10:17:65:d1:3e:66:e7:60:69:ec:c8:50:2c: cf:08:4f:d0:33:20:db:e7:3b:a4:45:47:de:2d:ce: 46:bc:b9:f1:5e:a9:12:88:bd:57:70:40:c5:ef:7e: 48:9f:ad:53:73:ce:5d:e3:cd:c3:24:f6:e8:01:01: bf:cc:a1:0b:e2:a8:b9:89:04:83:2c:a0:d4:0f:c0: a5:db:f6:8e:d1:63:2d:35:1a:09:45:67:0b:c3:02: 37:b0:23:3b:7c:18:dd:37:01:37:a6:74:ef:10:4a: 32:bf:3d:d0:2f:59:a6:03:ae:dd:06:2f:e7:7f:8e: 47:9e:a8:cd:f1:2e:c1:b5:55:86:ef:0d:ad:40:5b: f1:af:c0:c4:d1:37:22:e0:7b:eb:04:ac:2c:1b:75: 94:a3:29:ec:ef:8d:ec:63:8e:50:5f:93:6c:c5:bc: 1e:82:49:48:b6:3b:d1:c4:e7:c4:13:16:40:84:b4: e8:4b:f1:1b:d9:0e:54:d9:e8:fa:7e:85:f1:e3:1c: 55:6f:51:f5:c8:f3:1f:65:3c:57:31:48:96:65:1f: 67:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:11:84:06:AA:CE:F1:CC:79:46:97:39:61:24:4A:0C:C2:EA:7B:0E X509v3 Authority Key Identifier: keyid:E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ff:c2:18:b9:a2:f0:91:cd:e2:d6:c3:e7:5d:51:73:29:71: 3d:9e:b8:00:2d:1b:be:dc:99:1e:0a:34:6e:a1:fb:ee:38:21: 08:7e:db:a8:f3:ca:7c:92:d0:9b:a8:16:36:ee:ae:c7:51:40: fa:05:e8:82:89:cd:7e:e1:d0:ac:8c:5f:6f:0c:49:fe:e5:07: 54:5a:79:58:1b:4b:b9:6e:04:83:ce:70:95:c6:57:ab:18:b1: 12:11:3a:b3:cf:94:54:bf:fd:14:b9:4d:99:22:63:a3:d6:d4: b2:27:54:94:1c:82:83:12:dd:bf:a7:5e:fa:f8:7f:5c:b2:c0: 3a:19:4c:6f:ef:70:28:2a:59:47:ec:da:44:b3:38:b2:da:f3: 2f:01:9e:c2:b8:a9:7a:de:b8:d6:4d:f4:a5:fa:a7:7c:32:c3: 71:cc:e5:13:ba:62:18:c7:22:c7:dc:8d:cc:3a:b4:6f:33:83: c3:02:52:28:56:ad:75:eb:b8:fc:81:0b:10:4b:f1:5e:22:a2: 75:60:18:9b:35:4d:59:67:6b:57:d2:40:42:77:fb:2b:6d:2a: 00:60:31:97:93:75:7b:b6:28:e7:ac:a1:da:1e:ca:ae:76:1a: e1:9f:ae:ae:97:b6:1f:48:36:b5:7c:30:19:37:71:e5:f2:4f: af:66:13:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CYwQGf54IF/bCE/DyjCuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YWFmNzZkMjdiYTgxMmUwZDVjZTIzMDVmMTdjNTMxODhj MjU4MGMwHhcNMjUxMjA2MTkwMDM0WhcNMjUxMjA3MTkwMDM0WjAzMTEwLwYDVQQD EyhjODExODQwNmFhY2VmMWNjNzk0Njk3Mzk2MTI0NGEwY2MyZWE3YjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WARA8qTpceM+o6QQ/R7Er79CgTy QHY6W5PV3tVWMnee1hSiD+3zybmDerCUABAXZdE+ZudgaezIUCzPCE/QMyDb5zuk RUfeLc5GvLnxXqkSiL1XcEDF735In61Tc85d483DJPboAQG/zKEL4qi5iQSDLKDU D8Cl2/aO0WMtNRoJRWcLwwI3sCM7fBjdNwE3pnTvEEoyvz3QL1mmA67dBi/nf45H nqjN8S7BtVWG7w2tQFvxr8DE0Tci4HvrBKwsG3WUoyns743sY45QX5NsxbwegklI tjvRxOfEExZAhLToS/Eb2Q5U2ej6foXx4xxVb1H1yPMfZTxXMUiWZR9nLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgRhAaqzvHMeUaXOWEkSgzC6nsOMB8GA1UdIwQY MBaAFOWq920nuoEuDVziMF8XxTGIwlgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFyM2JTZTZnUzROWE9Jd1h4ZkZNWWpDV0F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85ZjUyMjMtYTU2Yy00NjViLWFjNjUt ZmQxNTJhNmEwNTg3LzEvNWFyM2JTZTZnUzROWE9Jd1h4ZkZNWWpDV0F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85ZjUyMjMtYTU2Yy00NjViLWFjNjUtZmQxNTJhNmEwNTg3 LzEvNWFyM2JTZTZnUzROWE9Jd1h4ZkZNWWpDV0F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYP/CGLmi 8JHN4tbD511RcylxPZ64AC0bvtyZHgo0bqH77jghCH7bqPPKfJLQm6gWNu6ux1FA +gXogonNfuHQrIxfbwxJ/uUHVFp5WBtLuW4Eg85wlcZXqxixEhE6s8+UVL/9FLlN mSJjo9bUsidUlByCgxLdv6de+vh/XLLAOhlMb+9wKCpZR+zaRLM4strzLwGewrip et641k30pfqnfDLDcczlE7piGMcix9yNzDq0bzODwwJSKFatdeu4/IELEEvxXiKi dWAYmzVNWWdrV9JAQnf7K20qAGAxl5N1e7Yo56yh2h7KrnYa4Z+urpe2H0g2tXww GTdx5fJPr2YTdw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:55:21 2025 by rpki-client