This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft File: 5WzVePQvjeBnI2dnxs_CusvBbgU.mft (raw, json) Hash identifier: bQvtgfEn3n/twLWzz+5bttw0006CEINbgWbeLMOw+FM= Subject key identifier: B7:76:20:74:2E:6C:49:82:C1:DC:38:59:4C:61:0D:11:0E:C4:0D:4C Authority key identifier: E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05 Certificate issuer: /CN=e56cd578f42f8de067236767c6cfc2bacbc16e05 Certificate serial: 019B3B6B4DB2DCA2F3E6158DE2AC02F235EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft Manifest number: 1705 Signing time: Sat 20 Dec 2025 11:00:46 +0000 Manifest this update: Sat 20 Dec 2025 11:00:46 +0000 Manifest next update: Sun 21 Dec 2025 11:00:46 +0000 Files and hashes: 1: 5WzVePQvjeBnI2dnxs_CusvBbgU.crl (hash: l9Bw44BlpGtAxUebxxa9huso6x1X0CsGuh6AdVAuHtk=) 2: QNHfp-QpZNwcvnNXnGl6CZVZ8Tc.roa (hash: 6rWKjyivZLws8Y1JTJaRv4be4dA3ijdzaWgzmRI12KU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:4d:b2:dc:a2:f3:e6:15:8d:e2:ac:02:f2:35:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e56cd578f42f8de067236767c6cfc2bacbc16e05 Validity Not Before: Dec 20 11:00:46 2025 GMT Not After : Dec 21 11:00:46 2025 GMT Subject: CN=b77620742e6c4982c1dc38594c610d110ec40d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:68:8d:33:e0:f3:fd:3c:af:66:60:5c:06:55: bc:4f:c3:6c:1a:c0:82:1d:63:d2:99:0b:eb:6c:56: e5:36:fe:77:e0:15:c3:3f:86:ab:ab:67:aa:eb:9b: 05:ef:07:c5:e2:6c:3e:e5:3b:83:12:8c:70:92:58: 8b:d8:29:d2:66:dd:d9:b2:ac:f3:b5:35:6d:1d:d3: 81:8a:62:f0:35:59:d2:cc:d4:63:d7:18:4d:7b:3b: be:18:4a:cf:3b:9c:d1:4e:cb:c0:e9:e1:d7:0d:63: fa:ea:15:02:2c:09:d7:2a:7a:8d:a9:a8:b1:9e:a1: 65:aa:c7:83:72:10:92:3f:dc:82:83:5c:34:ab:5a: 71:8d:e7:7b:6d:b8:d8:51:71:af:9a:7e:d4:7d:22: e1:47:18:a5:ad:c6:98:02:bf:c9:09:06:9d:99:b5: 29:d1:5b:d1:fd:b0:3a:88:b1:e5:25:35:58:50:1e: 68:81:0b:81:f7:8a:9a:9b:ef:95:6c:57:af:1f:a9: 38:e8:59:06:30:32:96:95:c3:42:c9:56:4f:a7:98: 7c:5b:c9:44:66:d9:9c:11:60:a3:2a:5e:da:23:03: 32:55:ba:08:26:0b:8a:d7:f7:2c:00:17:34:d9:0e: 2b:81:e5:0d:0f:f7:b9:f4:fc:b0:8b:3d:5f:42:8e: 5d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:76:20:74:2E:6C:49:82:C1:DC:38:59:4C:61:0D:11:0E:C4:0D:4C X509v3 Authority Key Identifier: keyid:E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6a:3c:4a:c7:74:ab:3b:a4:9d:ed:ae:dc:da:02:ec:78:4f: d3:be:1b:03:80:eb:68:b8:65:e0:32:28:6a:e1:3f:67:2d:01: e6:7d:34:43:f7:f6:ab:e0:b4:c1:32:52:e0:7b:37:a9:9c:5c: b7:35:79:76:59:a2:6c:13:82:85:56:0e:e7:a9:16:74:1b:b6: 78:cd:34:37:d7:ee:e5:d8:3a:52:44:2a:2b:d9:62:5f:d0:4c: ef:76:ea:a6:8e:da:09:1c:3b:11:0f:d0:ea:bb:8c:0e:1a:62: 4d:90:f1:45:88:47:15:81:d9:75:87:4c:b9:60:c6:aa:5b:bc: 2e:40:d5:9c:69:ad:6d:1d:21:a4:54:db:49:c3:a4:ed:ad:6d: ee:96:f0:95:5d:02:8e:d0:81:69:12:01:bc:56:37:67:d3:62: 98:64:3b:d7:c7:cc:74:6c:6c:4a:e1:75:24:f1:ff:5e:cb:a7: 5d:cd:16:8a:cc:bc:64:2b:a6:e9:83:fb:19:08:5a:e4:8f:d2: 7c:52:f4:c2:24:3b:35:eb:9b:85:14:37:a1:6c:b3:c9:1b:75: b4:54:b4:b7:35:e6:ce:60:db:14:0d:d5:90:27:fa:f5:d2:42: 84:e6:37:17:71:2a:fe:35:93:23:62:27:80:7e:e6:18:ed:e9: d0:40:c6:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a02y3KLz5hWN4qwC8jXsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NmNkNTc4ZjQyZjhkZTA2NzIzNjc2N2M2Y2ZjMmJhY2Jj MTZlMDUwHhcNMjUxMjIwMTEwMDQ2WhcNMjUxMjIxMTEwMDQ2WjAzMTEwLwYDVQQD EyhiNzc2MjA3NDJlNmM0OTgyYzFkYzM4NTk0YzYxMGQxMTBlYzQwZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomiNM+Dz/TyvZmBcBlW8T8NsGsCC HWPSmQvrbFblNv534BXDP4arq2eq65sF7wfF4mw+5TuDEoxwkliL2CnSZt3Zsqzz tTVtHdOBimLwNVnSzNRj1xhNezu+GErPO5zRTsvA6eHXDWP66hUCLAnXKnqNqaix nqFlqseDchCSP9yCg1w0q1pxjed7bbjYUXGvmn7UfSLhRxilrcaYAr/JCQadmbUp 0VvR/bA6iLHlJTVYUB5ogQuB94qam++VbFevH6k46FkGMDKWlcNCyVZPp5h8W8lE ZtmcEWCjKl7aIwMyVboIJguK1/csABc02Q4rgeUND/e59Pywiz1fQo5dYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLd2IHQubEmCwdw4WUxhDREOxA1MMB8GA1UdIwQY MBaAFOVs1Xj0L43gZyNnZ8bPwrrLwW4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVd6VmVQUXZqZUJuSTJkbnhzX0N1c3ZCYmdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yOWRlNDYtYzJlOS00OGZiLTkyZDQt YjdhNTY0YWZiMDRiLzEvNVd6VmVQUXZqZUJuSTJkbnhzX0N1c3ZCYmdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8yOWRlNDYtYzJlOS00OGZiLTkyZDQtYjdhNTY0YWZiMDRi LzEvNVd6VmVQUXZqZUJuSTJkbnhzX0N1c3ZCYmdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGo8Ssd0 qzukne2u3NoC7HhP074bA4DraLhl4DIoauE/Zy0B5n00Q/f2q+C0wTJS4Hs3qZxc tzV5dlmibBOChVYO56kWdBu2eM00N9fu5dg6UkQqK9liX9BM73bqpo7aCRw7EQ/Q 6ruMDhpiTZDxRYhHFYHZdYdMuWDGqlu8LkDVnGmtbR0hpFTbScOk7a1t7pbwlV0C jtCBaRIBvFY3Z9NimGQ718fMdGxsSuF1JPH/XsunXc0Wisy8ZCum6YP7GQha5I/S fFL0wiQ7NeubhRQ3oWyzyRt1tFS0tzXmzmDbFA3VkCf69dJChOY3F3Eq/jWTI2In gH7mGO3p0EDGww== -----END CERTIFICATE-----Generated at Sat Dec 20 18:06:23 2025 by rpki-client