This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft File: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft (raw, json) Hash identifier: yumps4mHMHlzGi3r7tobDQWZNqxNke0CWAtA3Ktj0OA= Subject key identifier: B4:DA:C9:F6:68:37:70:85:3E:07:38:27:64:97:7A:97:8C:06:2B:3A Authority key identifier: E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C Certificate issuer: /CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c Certificate serial: 019B3CEBC523345AEFA727F3C6A543CEE396 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft Manifest number: 03F8 Signing time: Sat 20 Dec 2025 18:00:42 +0000 Manifest this update: Sat 20 Dec 2025 18:00:42 +0000 Manifest next update: Sun 21 Dec 2025 18:00:42 +0000 Files and hashes: 1: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl (hash: AQ3RKOTW3OeTyrWjdNEVTZ+RmJGjsd8kOA8p6blXhkc=) 2: sh2pFLFRXQ_LNHY8Z6kE6uVGJsM.roa (hash: LOYuvxv+r/IWU8gCda5GHcFP5KoGM8hEkOX7ufXWF5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:c5:23:34:5a:ef:a7:27:f3:c6:a5:43:ce:e3:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c Validity Not Before: Dec 20 18:00:42 2025 GMT Not After : Dec 21 18:00:42 2025 GMT Subject: CN=b4dac9f6683770853e07382764977a978c062b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:21:0c:8d:23:65:4d:74:e6:34:fb:0a:d2:fc: af:81:6d:90:6d:76:2e:5b:f5:e6:ce:65:78:c8:2a: af:bb:60:0d:aa:a3:f3:08:98:75:c0:45:04:d0:d0: c0:63:ca:88:58:06:db:25:21:ad:f5:f1:03:23:93: be:cc:a8:7b:07:63:6d:fb:4d:29:cd:f4:3a:df:80: a8:c7:33:5c:17:f2:83:de:7d:0a:da:11:71:e3:dc: 39:a5:61:03:fc:86:70:08:eb:71:58:51:1f:0a:c3: f2:4d:81:71:56:49:15:41:49:a5:41:5a:3b:97:d3: a0:3e:c3:f5:33:cd:1b:62:2a:ba:f4:03:01:02:0f: 13:58:aa:08:e4:1a:3f:10:1e:91:64:d9:49:e5:a9: 90:e9:53:32:b7:22:6c:03:46:40:ac:59:b7:fc:9b: 06:e4:ef:9d:b4:0b:45:de:c2:13:ed:76:d5:e6:4f: ad:42:f5:0e:95:c5:93:7a:94:6d:a1:03:c2:ca:d4: 41:3a:8c:33:ef:d0:94:68:20:90:18:46:0d:5f:fb: d6:6b:b7:c5:61:8f:0c:9e:8f:67:70:32:ae:0b:8d: 41:ab:b3:d4:d7:8b:75:c7:92:fd:57:d7:53:7b:24: 98:16:8d:01:51:6a:0e:33:37:e3:cd:d1:05:10:cf: fd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DA:C9:F6:68:37:70:85:3E:07:38:27:64:97:7A:97:8C:06:2B:3A X509v3 Authority Key Identifier: keyid:E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:71:6d:b9:0c:fa:6b:d2:9d:4d:a4:1b:35:06:4f:f6:60:d0: 74:78:2c:83:38:ad:30:38:c2:b7:c2:c6:81:28:f1:58:45:92: 30:99:a5:61:5b:0e:e5:c4:01:d1:a0:31:e1:9d:ea:d0:ba:7c: ae:87:98:e2:ac:60:26:37:50:9c:a9:c8:70:27:df:5c:3a:f5: ca:52:97:6b:8a:4a:0d:7a:8b:b2:34:dd:db:dc:12:11:db:0d: c8:06:3b:e2:f3:b1:08:1b:9c:32:eb:0d:6b:ff:4e:0f:fa:1b: fe:30:9e:4c:9a:d1:48:31:8a:95:39:36:8e:b9:50:96:e5:b4: 8f:e8:90:89:dc:69:69:73:c0:12:97:89:d4:91:d5:26:bc:27: 7c:5a:b6:b5:f3:62:91:11:73:34:57:a1:16:bd:9c:4d:fb:2a: 75:c0:64:8c:d0:17:1f:f7:75:b4:b9:2b:72:56:5b:49:e4:64: e6:64:08:fe:0a:e6:ec:4e:71:f8:fa:f0:70:5d:a7:4c:dd:83: 01:70:a6:92:90:ce:3e:67:f7:b3:fb:12:15:f0:05:ed:ec:3b: 5b:52:18:57:49:2b:b7:ee:d4:16:f9:29:11:7b:80:a4:4a:59: dd:1d:6f:87:84:32:7e:84:8e:07:15:ec:2f:55:c0:91:54:b1: 97:85:b5:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs868UjNFrvpyfzxqVDzuOWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NmIzZDYxZmU0M2FiNjgwNGI2ZjFlMzI5N2E4Y2RjYzI2 YjlkNmMwHhcNMjUxMjIwMTgwMDQyWhcNMjUxMjIxMTgwMDQyWjAzMTEwLwYDVQQD EyhiNGRhYzlmNjY4Mzc3MDg1M2UwNzM4Mjc2NDk3N2E5NzhjMDYyYjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiEMjSNlTXTmNPsK0vyvgW2QbXYu W/XmzmV4yCqvu2ANqqPzCJh1wEUE0NDAY8qIWAbbJSGt9fEDI5O+zKh7B2Nt+00p zfQ634CoxzNcF/KD3n0K2hFx49w5pWED/IZwCOtxWFEfCsPyTYFxVkkVQUmlQVo7 l9OgPsP1M80bYiq69AMBAg8TWKoI5Bo/EB6RZNlJ5amQ6VMytyJsA0ZArFm3/JsG 5O+dtAtF3sIT7XbV5k+tQvUOlcWTepRtoQPCytRBOowz79CUaCCQGEYNX/vWa7fF YY8Mno9ncDKuC41Bq7PU14t1x5L9V9dTeySYFo0BUWoOMzfjzdEFEM/9cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTayfZoN3CFPgc4J2SXepeMBis6MB8GA1UdIwQY MBaAFORrPWH+Q6toBLbx4yl6jNzCa51sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUdzOVlmNURxMmdFdHZIaktYcU0zTUpybld3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xYTAyNGMtNmI3NS00YWQ4LWI1OWQt YWY5YmIzZDEyNWQ4LzEvNUdzOVlmNURxMmdFdHZIaktYcU0zTUpybld3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8xYTAyNGMtNmI3NS00YWQ4LWI1OWQtYWY5YmIzZDEyNWQ4 LzEvNUdzOVlmNURxMmdFdHZIaktYcU0zTUpybld3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXFtuQz6 a9KdTaQbNQZP9mDQdHgsgzitMDjCt8LGgSjxWEWSMJmlYVsO5cQB0aAx4Z3q0Lp8 roeY4qxgJjdQnKnIcCffXDr1ylKXa4pKDXqLsjTd29wSEdsNyAY74vOxCBucMusN a/9OD/ob/jCeTJrRSDGKlTk2jrlQluW0j+iQidxpaXPAEpeJ1JHVJrwnfFq2tfNi kRFzNFehFr2cTfsqdcBkjNAXH/d1tLkrclZbSeRk5mQI/grm7E5x+PrwcF2nTN2D AXCmkpDOPmf3s/sSFfAF7ew7W1IYV0krt+7UFvkpEXuApEpZ3R1vh4QyfoSOBxXs L1XAkVSxl4W1gw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:00:21 2025 by rpki-client