This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft File: 5cfDmlkS3cIen2tRmJZyV2ISeDM.mft (raw, json) Hash identifier: ZjNGMzBCWdYhxfbg2oTNsQF7cl8GHsr6pu9Waok63qQ= Subject key identifier: 21:FF:1C:EB:6A:26:1A:42:44:B5:DC:E0:E3:0D:C5:6E:BC:2C:13:E2 Authority key identifier: E5:C7:C3:9A:59:12:DD:C2:1E:9F:6B:51:98:96:72:57:62:12:78:33 Certificate issuer: /CN=e5c7c39a5912ddc21e9f6b519896725762127833 Certificate serial: 019B443910CD5D3449352E615F8F0B59F47B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cfDmlkS3cIen2tRmJZyV2ISeDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft Manifest number: 0306 Signing time: Mon 22 Dec 2025 04:02:29 +0000 Manifest this update: Mon 22 Dec 2025 04:02:29 +0000 Manifest next update: Tue 23 Dec 2025 04:02:29 +0000 Files and hashes: 1: 5cfDmlkS3cIen2tRmJZyV2ISeDM.crl (hash: vSGcVZaB2uU4czgOYMWYzQoeLXyGdWA0ByYk3bw6KIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.crl rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft rsync://rpki.ripe.net/repository/DEFAULT/5cfDmlkS3cIen2tRmJZyV2ISeDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:39:10:cd:5d:34:49:35:2e:61:5f:8f:0b:59:f4:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5c7c39a5912ddc21e9f6b519896725762127833 Validity Not Before: Dec 22 04:02:29 2025 GMT Not After : Dec 23 04:02:29 2025 GMT Subject: CN=21ff1ceb6a261a4244b5dce0e30dc56ebc2c13e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:63:62:fb:07:1b:25:19:f4:5f:37:cb:1d:f8: 92:5b:4a:c9:b0:9e:05:47:01:79:ba:ad:86:39:02: 95:06:2c:1f:a7:96:5e:bb:75:2c:6a:68:3a:43:b2: 75:a1:12:ad:e6:fd:be:43:d6:3b:c9:b8:16:eb:4a: bb:d1:93:8d:d2:a9:85:76:8c:a0:35:46:75:5d:1f: a7:72:5a:24:47:4e:32:ac:cd:90:79:0b:84:fe:52: 03:31:ba:33:ab:55:1c:c3:67:b8:d6:91:e4:60:50: 4a:cc:11:e8:0f:b2:14:ad:82:7d:09:14:1a:10:2a: a9:5c:05:0f:df:a1:9d:35:f0:93:47:c1:64:34:d4: 07:e9:ef:e4:83:9d:f8:f3:f9:b6:3b:97:e7:c6:54: 82:9c:05:08:df:1a:0a:a2:32:3f:05:48:99:50:ef: 63:24:3a:e1:89:90:70:79:20:a8:0e:28:93:00:37: dd:12:59:e2:7e:e6:9a:a4:c9:8b:d3:ab:5a:de:df: 95:88:6e:cc:7b:4f:87:13:99:c0:eb:02:94:17:24: 94:f5:3f:59:67:92:f8:f4:48:99:44:42:91:f2:5b: 06:14:74:81:4f:18:af:79:3f:18:8e:77:cb:b7:08: 92:00:62:44:ee:fa:0b:f5:2b:f4:73:8d:78:95:1f: fd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FF:1C:EB:6A:26:1A:42:44:B5:DC:E0:E3:0D:C5:6E:BC:2C:13:E2 X509v3 Authority Key Identifier: keyid:E5:C7:C3:9A:59:12:DD:C2:1E:9F:6B:51:98:96:72:57:62:12:78:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cfDmlkS3cIen2tRmJZyV2ISeDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:d2:be:24:16:58:9b:5b:1b:e9:33:1a:53:dd:7d:9d:a8:f1: dc:6c:31:b1:56:7c:c2:98:b2:85:8e:99:cc:0e:2b:11:85:e1: e9:ec:2d:33:a6:10:7d:50:6f:5e:53:c1:94:4e:07:1b:db:26: 9f:ec:ca:c2:86:bb:2d:2d:96:a4:5a:ad:9e:37:b5:9a:4b:eb: 70:c8:36:c2:52:2b:61:88:cf:dd:4c:fc:bc:da:78:56:fa:ff: 74:1a:fa:8c:d7:be:97:c8:70:16:72:48:39:a3:b0:93:32:7c: 61:98:a2:d9:25:47:1f:e3:45:17:cf:3c:dd:0d:fa:f5:b0:89: 8b:d4:2c:60:9f:1c:10:39:f4:cc:9d:aa:de:f8:4b:4a:ad:07: bf:2b:cd:e8:70:0f:73:e6:37:31:11:49:69:40:70:4f:df:b4: a3:b1:8f:8b:1f:ec:67:9c:ed:f0:7f:d3:a7:f8:aa:b3:2c:f8: d9:c6:bc:5e:3f:b0:13:d8:0d:20:f6:3a:e3:78:6a:da:52:4e: e7:b7:2e:63:dd:31:53:85:7e:e0:42:28:1f:f8:b4:5c:20:ae: 9e:a5:fa:02:62:eb:9c:c9:56:e2:ca:af:cc:b9:eb:83:7a:c0: f4:f9:22:24:33:9e:ab:87:2d:b8:00:08:43:e2:3d:a6:eb:b4: 6d:b9:7a:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEORDNXTRJNS5hX48LWfR7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YzdjMzlhNTkxMmRkYzIxZTlmNmI1MTk4OTY3MjU3NjIx Mjc4MzMwHhcNMjUxMjIyMDQwMjI5WhcNMjUxMjIzMDQwMjI5WjAzMTEwLwYDVQQD EygyMWZmMWNlYjZhMjYxYTQyNDRiNWRjZTBlMzBkYzU2ZWJjMmMxM2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmNi+wcbJRn0XzfLHfiSW0rJsJ4F RwF5uq2GOQKVBiwfp5Zeu3Usamg6Q7J1oRKt5v2+Q9Y7ybgW60q70ZON0qmFdoyg NUZ1XR+nclokR04yrM2QeQuE/lIDMbozq1Ucw2e41pHkYFBKzBHoD7IUrYJ9CRQa ECqpXAUP36GdNfCTR8FkNNQH6e/kg5348/m2O5fnxlSCnAUI3xoKojI/BUiZUO9j JDrhiZBweSCoDiiTADfdElnifuaapMmL06ta3t+ViG7Me0+HE5nA6wKUFySU9T9Z Z5L49EiZREKR8lsGFHSBTxiveT8YjnfLtwiSAGJE7voL9Sv0c414lR/97wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCH/HOtqJhpCRLXc4OMNxW68LBPiMB8GA1UdIwQY MBaAFOXHw5pZEt3CHp9rUZiWcldiEngzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWNmRG1sa1MzY0llbjJ0Um1KWnlWMklTZURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xMGFmODMtMDhmNS00OTE5LWJhMWQt MzhmODY0YTM0Yjc4LzEvNWNmRG1sa1MzY0llbjJ0Um1KWnlWMklTZURNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8xMGFmODMtMDhmNS00OTE5LWJhMWQtMzhmODY0YTM0Yjc4 LzEvNWNmRG1sa1MzY0llbjJ0Um1KWnlWMklTZURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv9K+JBZY m1sb6TMaU919najx3GwxsVZ8wpiyhY6ZzA4rEYXh6ewtM6YQfVBvXlPBlE4HG9sm n+zKwoa7LS2WpFqtnje1mkvrcMg2wlIrYYjP3Uz8vNp4Vvr/dBr6jNe+l8hwFnJI OaOwkzJ8YZii2SVHH+NFF8883Q369bCJi9QsYJ8cEDn0zJ2q3vhLSq0HvyvN6HAP c+Y3MRFJaUBwT9+0o7GPix/sZ5zt8H/Tp/iqsyz42ca8Xj+wE9gNIPY643hq2lJO 57cuY90xU4V+4EIoH/i0XCCunqX6AmLrnMlW4sqvzLnrg3rA9PkiJDOeq4ctuAAI Q+I9puu0bbl6ag== -----END CERTIFICATE-----Generated at Mon Dec 22 12:58:01 2025 by rpki-client