This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json) Hash identifier: qaCNq4Ilmryl6dHwiRoNYwr5TId/VQQ3K1A06BorLEU= Subject key identifier: 5F:69:69:D4:6D:24:D0:7E:8E:13:EF:B3:9B:74:45:E8:46:01:7F:6A Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C Certificate issuer: /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c Certificate serial: 019B3DC7E36F0549EF41A32C46A8507E372A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft Manifest number: 0CAB Signing time: Sat 20 Dec 2025 22:01:08 +0000 Manifest this update: Sat 20 Dec 2025 22:01:08 +0000 Manifest next update: Sun 21 Dec 2025 22:01:08 +0000 Files and hashes: 1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: hih4Z4ZbE9dDwW6T0Fo4cKJ5wqRdwK0k8xdAkXgUlZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:e3:6f:05:49:ef:41:a3:2c:46:a8:50:7e:37:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c Validity Not Before: Dec 20 22:01:08 2025 GMT Not After : Dec 21 22:01:08 2025 GMT Subject: CN=5f6969d46d24d07e8e13efb39b7445e846017f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a8:89:8b:c6:b7:ab:03:ed:a6:5a:0f:68:11: df:f1:2b:73:1f:30:70:76:4f:42:eb:c5:aa:53:63: 54:67:8c:ca:e8:c2:72:de:5c:40:40:d7:bf:91:4e: 1c:9c:9a:04:a6:72:81:ad:32:2f:24:42:f4:ae:6d: 9e:a6:1e:a0:c1:10:11:9a:3f:b4:61:fa:53:e2:5f: 5c:55:7e:d3:5c:52:10:ca:f3:5b:d5:85:64:3e:8c: 0b:25:21:75:99:a3:f4:ea:52:c3:c4:c5:4c:fd:c1: f6:91:c9:8e:27:05:a1:33:80:38:48:cd:b7:e5:fa: 4a:71:cd:ed:be:cb:9b:dc:e4:7d:b2:a6:1b:a6:c4: 9f:3b:31:8f:fd:67:a1:b4:05:e2:11:a3:04:8a:d3: e5:3b:ea:77:da:20:2d:95:ad:b3:e4:bc:59:39:70: 77:67:80:05:6e:32:d7:ad:21:39:7a:9f:53:26:2e: 2f:f9:df:2b:ff:98:37:eb:24:99:4f:e3:7c:9b:ed: 8f:e7:1b:33:e2:83:3b:40:02:f5:7d:eb:25:cf:08: df:cb:91:90:bb:6b:ba:f9:5d:89:82:91:f8:61:37: c8:43:bf:c6:12:8a:fc:36:50:4a:1b:f6:01:64:20: 93:27:29:2b:67:cf:e1:b4:c1:26:eb:f0:d0:0e:90: 52:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:69:69:D4:6D:24:D0:7E:8E:13:EF:B3:9B:74:45:E8:46:01:7F:6A X509v3 Authority Key Identifier: keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:51:c9:2f:34:ab:f4:ba:cd:49:90:31:15:2e:e5:cc:28:21: 1a:89:0c:62:1f:5b:8c:70:18:c7:23:e3:14:5c:ea:e4:8c:a2: 4d:a0:45:5e:57:0d:e5:9e:37:31:7c:8d:5a:3a:6b:d8:e5:60: f5:7c:d1:c9:8d:6c:24:22:82:62:69:c6:32:1f:18:c9:5a:be: c9:e7:08:dc:b8:42:3d:92:cd:44:37:44:fa:ef:b1:32:72:f5: 36:18:a3:76:ff:40:7c:74:18:49:f5:8b:2e:57:07:5e:f9:d9: 11:69:00:5b:c8:36:71:8e:0b:cd:81:c3:03:c5:3c:62:d8:c0: 18:44:4f:30:0a:f6:c9:f6:17:79:13:0a:21:cd:2f:39:c6:39: 9a:ef:2b:47:1a:da:2d:ae:16:5c:92:58:ba:0c:84:11:e4:02: b4:a9:65:e4:61:ed:fb:b9:7d:80:aa:45:f4:46:c9:e3:a8:cb: 5d:7e:9b:6f:84:96:e8:03:0a:5a:2c:29:f0:9e:07:41:e0:70: 2b:09:03:e7:65:be:91:3f:89:fc:c9:ed:44:a7:0d:ff:3a:1f: 48:4d:87:7e:72:f3:dc:f0:a7:b7:d7:de:64:78:de:a6:20:6e: f3:67:57:06:f9:42:69:b6:c7:b9:2e:c8:28:69:9d:40:dd:a9: af:e3:bc:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x+NvBUnvQaMsRqhQfjcqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MWQ3MTdmYjJkNDM3ZDQxMWQ4NzFhZjdiOWZiY2IwMWU4 OWY5NmMwHhcNMjUxMjIwMjIwMTA4WhcNMjUxMjIxMjIwMTA4WjAzMTEwLwYDVQQD Eyg1ZjY5NjlkNDZkMjRkMDdlOGUxM2VmYjM5Yjc0NDVlODQ2MDE3ZjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KiJi8a3qwPtploPaBHf8StzHzBw dk9C68WqU2NUZ4zK6MJy3lxAQNe/kU4cnJoEpnKBrTIvJEL0rm2eph6gwRARmj+0 YfpT4l9cVX7TXFIQyvNb1YVkPowLJSF1maP06lLDxMVM/cH2kcmOJwWhM4A4SM23 5fpKcc3tvsub3OR9sqYbpsSfOzGP/WehtAXiEaMEitPlO+p32iAtla2z5LxZOXB3 Z4AFbjLXrSE5ep9TJi4v+d8r/5g36ySZT+N8m+2P5xsz4oM7QAL1feslzwjfy5GQ u2u6+V2JgpH4YTfIQ7/GEor8NlBKG/YBZCCTJykrZ8/htMEm6/DQDpBSwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9padRtJNB+jhPvs5t0RehGAX9qMB8GA1UdIwQY MBaAFOUdcX+y1DfUEdhxr3ufvLAeiflsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVIxeGY3TFVOOVFSMkhHdmU1LThzQjZKLVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xMmVkNjUtNDE1Yi00OGZiLWEzZDkt MzE0ZDVlMmI2NmNhLzEvNVIxeGY3TFVOOVFSMkhHdmU1LThzQjZKLVd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8xMmVkNjUtNDE1Yi00OGZiLWEzZDktMzE0ZDVlMmI2NmNh LzEvNVIxeGY3TFVOOVFSMkhHdmU1LThzQjZKLVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVHJLzSr 9LrNSZAxFS7lzCghGokMYh9bjHAYxyPjFFzq5IyiTaBFXlcN5Z43MXyNWjpr2OVg 9XzRyY1sJCKCYmnGMh8YyVq+yecI3LhCPZLNRDdE+u+xMnL1Nhijdv9AfHQYSfWL LlcHXvnZEWkAW8g2cY4LzYHDA8U8YtjAGERPMAr2yfYXeRMKIc0vOcY5mu8rRxra La4WXJJYugyEEeQCtKll5GHt+7l9gKpF9EbJ46jLXX6bb4SW6AMKWiwp8J4HQeBw KwkD52W+kT+J/MntRKcN/zofSE2HfnLz3PCnt9feZHjepiBu82dXBvlCabbHuS7I KGmdQN2pr+O8qA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:52:34 2025 by rpki-client