This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft File: 5llE5PrhnBWib8tfJzL_G6I9NU0.mft (raw, json) Hash identifier: JReHHtMee5NjTGPF1mAWrUxu2sFdUgSg9bxbOByR5zQ= Subject key identifier: 7D:BF:EA:BD:A3:5D:43:C3:94:5F:E0:43:0C:32:FC:3C:23:F7:5B:4F Authority key identifier: E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D Certificate issuer: /CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d Certificate serial: 019B6579B28DFAEBD2D439CA78C4E4902A17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft Manifest number: 045C Signing time: Sun 28 Dec 2025 15:00:32 +0000 Manifest this update: Sun 28 Dec 2025 15:00:32 +0000 Manifest next update: Mon 29 Dec 2025 15:00:32 +0000 Files and hashes: 1: 5llE5PrhnBWib8tfJzL_G6I9NU0.crl (hash: WTJW2aoS6/kl/kYkMsuTnO5Wtuu8teiCN3zkauDhNLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 15:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:79:b2:8d:fa:eb:d2:d4:39:ca:78:c4:e4:90:2a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d Validity Not Before: Dec 28 15:00:32 2025 GMT Not After : Dec 29 15:00:32 2025 GMT Subject: CN=7dbfeabda35d43c3945fe0430c32fc3c23f75b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:34:32:91:65:5e:d1:70:6e:01:07:96:7f:06: fb:26:37:c6:a8:72:13:20:b5:19:72:22:e7:52:da: a4:09:17:27:02:24:93:d4:74:ef:56:16:b5:2a:e7: c5:fc:01:51:24:5c:78:c2:6d:d3:77:c8:91:dc:59: e4:45:91:f3:ca:3c:cf:8a:fa:f6:32:19:03:cc:23: d0:af:5f:cd:bf:c9:d2:9d:da:b0:c0:66:2f:ba:df: be:14:b8:6e:5b:89:84:c7:a8:22:8b:71:1b:a8:74: 44:a9:5a:38:97:66:40:34:61:86:49:ce:c1:c9:1a: c0:ee:04:11:5d:9a:75:36:5d:c2:00:f7:c0:b0:f8: 9a:09:a9:40:28:12:45:05:23:d0:a6:41:67:72:b8: 9b:f7:33:e6:39:13:30:ce:70:97:36:1d:c6:db:53: b9:d5:70:04:7b:ce:20:dd:e9:40:de:c1:b1:9a:ea: 07:ca:a3:c9:cf:d5:9d:47:0c:8d:98:a0:d6:dd:05: e4:a0:7d:1d:fe:55:2a:3c:24:ea:b1:20:b4:2e:5e: d2:fa:08:2d:df:72:47:b6:42:fe:b8:38:21:ac:05: 4a:ad:00:96:48:d4:1a:bd:b3:b6:dd:5f:ec:02:8f: 8a:1b:67:e0:0a:5c:99:b5:8f:b2:5b:05:48:74:f8: 55:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BF:EA:BD:A3:5D:43:C3:94:5F:E0:43:0C:32:FC:3C:23:F7:5B:4F X509v3 Authority Key Identifier: keyid:E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:01:5a:19:da:06:44:bb:19:5d:2e:3f:4a:ea:8b:b9:b1:f8: 8c:85:5a:92:b0:10:d9:c4:cc:8a:a4:52:5f:29:52:b4:3a:c0: 37:6b:94:ce:74:ff:c5:03:17:7f:e6:97:88:2c:a5:b7:d2:c1: c4:3f:d0:21:40:38:64:54:f3:b2:65:b6:d4:58:dc:33:f7:d8: 93:01:dd:ba:18:9a:cb:27:31:10:df:d1:e4:9d:32:47:dd:df: a3:fd:b0:f5:5c:ae:07:bb:08:80:57:db:97:a1:4e:0d:c0:66: e0:ef:03:e9:99:08:ad:64:ad:cb:4f:e7:f7:f0:fa:3d:6d:f6: e6:d3:93:22:bc:89:43:0e:53:a0:d4:19:41:74:e9:5f:1a:5d: 55:cf:9e:38:59:9d:72:18:17:b6:62:09:9a:11:be:80:c8:6c: 89:c0:8c:9b:32:18:aa:c6:3f:eb:0d:12:9a:22:70:6b:a8:52: 7b:8a:8d:a1:3f:61:6c:96:d3:fb:6d:22:3b:90:01:d3:08:eb: 2a:16:b6:e4:f0:b9:41:45:b1:17:20:48:c6:ce:83:a5:e0:9f: 3d:5e:b9:88:e8:cb:34:4c:5c:64:d7:49:eb:0c:b9:0a:d6:cd: df:51:40:79:ac:1d:b9:92:e5:24:44:7a:28:73:7c:de:34:83: a1:66:77:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlebKN+uvS1DnKeMTkkCoXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NTk0NGU0ZmFlMTljMTVhMjZmY2I1ZjI3MzJmZjFiYTIz ZDM1NGQwHhcNMjUxMjI4MTUwMDMyWhcNMjUxMjI5MTUwMDMyWjAzMTEwLwYDVQQD Eyg3ZGJmZWFiZGEzNWQ0M2MzOTQ1ZmUwNDMwYzMyZmMzYzIzZjc1YjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujQykWVe0XBuAQeWfwb7JjfGqHIT ILUZciLnUtqkCRcnAiST1HTvVha1KufF/AFRJFx4wm3Td8iR3FnkRZHzyjzPivr2 MhkDzCPQr1/Nv8nSndqwwGYvut++FLhuW4mEx6gii3EbqHREqVo4l2ZANGGGSc7B yRrA7gQRXZp1Nl3CAPfAsPiaCalAKBJFBSPQpkFncrib9zPmORMwznCXNh3G21O5 1XAEe84g3elA3sGxmuoHyqPJz9WdRwyNmKDW3QXkoH0d/lUqPCTqsSC0Ll7S+ggt 33JHtkL+uDghrAVKrQCWSNQavbO23V/sAo+KG2fgClyZtY+yWwVIdPhV8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2/6r2jXUPDlF/gQwwy/Dwj91tPMB8GA1UdIwQY MBaAFOZZROT64ZwVom/LXycy/xuiPTVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWxsRTVQcmhuQldpYjh0Zkp6TF9HNkk5TlUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83M2RhMGQtZmM4Mi00NTcyLTg4ZDMt Njk4Y2M3MjY4ODgwLzEvNWxsRTVQcmhuQldpYjh0Zkp6TF9HNkk5TlUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83M2RhMGQtZmM4Mi00NTcyLTg4ZDMtNjk4Y2M3MjY4ODgw LzEvNWxsRTVQcmhuQldpYjh0Zkp6TF9HNkk5TlUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwFaGdoG RLsZXS4/SuqLubH4jIVakrAQ2cTMiqRSXylStDrAN2uUznT/xQMXf+aXiCylt9LB xD/QIUA4ZFTzsmW21FjcM/fYkwHduhiayycxEN/R5J0yR93fo/2w9VyuB7sIgFfb l6FODcBm4O8D6ZkIrWSty0/n9/D6PW325tOTIryJQw5ToNQZQXTpXxpdVc+eOFmd chgXtmIJmhG+gMhsicCMmzIYqsY/6w0SmiJwa6hSe4qNoT9hbJbT+20iO5AB0wjr Kha25PC5QUWxFyBIxs6DpeCfPV65iOjLNExcZNdJ6wy5CtbN31FAeawduZLlJER6 KHN83jSDoWZ3Wg== -----END CERTIFICATE-----Generated at Mon Dec 29 00:57:46 2025 by rpki-client