This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft File: 5cN18687kSQJ3YNgp0CRNVaTcUE.mft (raw, json) Hash identifier: k2Lf5u5e/FPI+Gs2m+PcBXsBUURVI6EQmIzSVM4Damg= Subject key identifier: EA:1D:68:BC:A2:BC:E8:1C:5B:C1:B6:21:9D:8F:B4:2D:69:2F:9D:42 Authority key identifier: E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41 Certificate issuer: /CN=e5c375f3af3b912409dd8360a740913556937141 Certificate serial: 019B2C661C95859EC5731D6DDF784F496B44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft Manifest number: 06BC Signing time: Wed 17 Dec 2025 13:00:48 +0000 Manifest this update: Wed 17 Dec 2025 13:00:48 +0000 Manifest next update: Thu 18 Dec 2025 13:00:48 +0000 Files and hashes: 1: 5cN18687kSQJ3YNgp0CRNVaTcUE.crl (hash: aZ4WHP1sOfP/trIcji8yNtjSO1+/L2ic1EPgv0qJXhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.crl rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:1c:95:85:9e:c5:73:1d:6d:df:78:4f:49:6b:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5c375f3af3b912409dd8360a740913556937141 Validity Not Before: Dec 17 13:00:48 2025 GMT Not After : Dec 18 13:00:48 2025 GMT Subject: CN=ea1d68bca2bce81c5bc1b6219d8fb42d692f9d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8b:55:52:6d:eb:49:95:ea:b7:03:e3:4c:21: b0:00:42:be:fb:f8:9d:d5:56:c3:00:85:12:22:a3: 7a:32:8e:28:39:c0:bd:76:ea:b0:c2:b1:1a:93:20: df:40:dd:a6:22:d3:f8:59:82:f9:d8:d7:10:ae:9f: 82:43:a7:c8:d0:40:b3:af:bc:d7:a6:27:60:83:b9: b7:01:c6:17:fd:ee:d7:34:a9:c1:eb:ca:7f:df:ba: 49:2e:5b:71:c4:ff:df:2f:b6:02:b9:f2:d1:50:09: 0d:55:38:7a:c5:9b:1e:21:a8:5d:fc:b6:b9:9d:1e: 2e:5f:3e:46:e9:ad:de:f1:fa:63:fc:c5:69:d2:de: 47:17:3b:35:32:fc:22:1b:0e:1e:de:66:5f:97:08: fc:56:03:f9:0d:9e:7f:2f:17:87:97:f1:5a:a5:67: 6b:15:32:98:91:a0:a7:99:92:41:cf:f1:69:36:c0: e4:d1:1f:c5:17:6d:42:bc:7d:50:bf:2b:75:be:4c: 96:7c:2d:fe:3e:d9:21:c4:8d:c9:8a:a7:64:12:d7: 63:c1:a4:94:b1:3e:b3:f7:77:6a:61:3a:e1:e4:58: a9:cd:f4:8f:6b:0e:31:2b:35:06:8d:b2:d4:58:8e: b4:7e:ec:9d:6f:1c:b6:40:4a:2b:f3:62:c9:56:a3: 81:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1D:68:BC:A2:BC:E8:1C:5B:C1:B6:21:9D:8F:B4:2D:69:2F:9D:42 X509v3 Authority Key Identifier: keyid:E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:cc:30:fd:00:0a:13:1b:fd:09:ad:0f:6b:dd:11:c4:1a:5a: bc:39:5f:63:1b:b4:96:4a:1b:4b:3c:f1:3f:54:9e:75:f0:12: 91:f5:25:29:80:92:42:09:6a:80:99:78:dd:a8:d2:24:55:83: f7:7f:1d:1c:79:d1:28:52:92:d2:e2:d1:62:64:95:e5:62:9f: 79:1c:72:82:82:7f:89:c7:55:ff:1b:02:66:fc:d9:92:28:94: fa:09:65:e8:69:4b:32:34:65:9a:b4:28:82:32:27:97:cf:63: db:29:05:ef:a9:e8:72:36:61:45:2b:1e:de:b6:19:3f:f5:61: 66:63:f7:29:ca:60:f5:af:5d:57:85:73:f6:e0:64:cd:21:37: da:9e:3e:3e:7b:ee:be:b3:7b:7e:09:43:65:a0:51:99:8c:cb: d9:ee:47:6f:af:37:dc:47:90:06:07:fe:79:fe:ae:46:e0:24: 95:bd:99:5f:38:8e:e0:a1:e7:26:57:69:80:61:bb:b1:8a:3a: 4d:90:64:68:89:db:d5:bd:8b:a6:3f:2d:48:0d:77:1a:5d:ae: b8:db:32:1f:4d:76:01:c8:4c:62:e2:e5:86:cd:52:83:5b:13: da:8d:56:56:41:c8:1c:2e:24:87:df:4d:ba:0f:03:a7:12:27: 85:ee:b5:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZhyVhZ7Fcx1t33hPSWtEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YzM3NWYzYWYzYjkxMjQwOWRkODM2MGE3NDA5MTM1NTY5 MzcxNDEwHhcNMjUxMjE3MTMwMDQ4WhcNMjUxMjE4MTMwMDQ4WjAzMTEwLwYDVQQD EyhlYTFkNjhiY2EyYmNlODFjNWJjMWI2MjE5ZDhmYjQyZDY5MmY5ZDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAootVUm3rSZXqtwPjTCGwAEK++/id 1VbDAIUSIqN6Mo4oOcC9duqwwrEakyDfQN2mItP4WYL52NcQrp+CQ6fI0ECzr7zX pidgg7m3AcYX/e7XNKnB68p/37pJLltxxP/fL7YCufLRUAkNVTh6xZseIahd/La5 nR4uXz5G6a3e8fpj/MVp0t5HFzs1MvwiGw4e3mZflwj8VgP5DZ5/LxeHl/FapWdr FTKYkaCnmZJBz/FpNsDk0R/FF21CvH1Qvyt1vkyWfC3+PtkhxI3JiqdkEtdjwaSU sT6z93dqYTrh5FipzfSPaw4xKzUGjbLUWI60fuydbxy2QEor82LJVqOBEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOodaLyivOgcW8G2IZ2PtC1pL51CMB8GA1UdIwQY MBaAFOXDdfOvO5EkCd2DYKdAkTVWk3FBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWNOMTg2ODdrU1FKM1lOZ3AwQ1JOVmFUY1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy84ZDAwYzItNzFkYi00ZmVlLWI2Y2It Yzc1YzZkMjBkMzJjLzEvNWNOMTg2ODdrU1FKM1lOZ3AwQ1JOVmFUY1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy84ZDAwYzItNzFkYi00ZmVlLWI2Y2ItYzc1YzZkMjBkMzJj LzEvNWNOMTg2ODdrU1FKM1lOZ3AwQ1JOVmFUY1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMww/QAK Exv9Ca0Pa90RxBpavDlfYxu0lkobSzzxP1SedfASkfUlKYCSQglqgJl43ajSJFWD 938dHHnRKFKS0uLRYmSV5WKfeRxygoJ/icdV/xsCZvzZkiiU+gll6GlLMjRlmrQo gjInl89j2ykF76nocjZhRSse3rYZP/VhZmP3Kcpg9a9dV4Vz9uBkzSE32p4+Pnvu vrN7fglDZaBRmYzL2e5Hb6833EeQBgf+ef6uRuAklb2ZXziO4KHnJldpgGG7sYo6 TZBkaInb1b2Lpj8tSA13Gl2uuNsyH012AchMYuLlhs1Sg1sT2o1WVkHIHC4kh99N ug8DpxInhe61Zg== -----END CERTIFICATE-----Generated at Wed Dec 17 16:46:37 2025 by rpki-client