This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft File: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json) Hash identifier: /kD9l4ZPNJ94P/V3koiaYM3nKnwJHKANusybq7510t4= Subject key identifier: E7:23:D3:F6:45:4D:55:DA:A5:9D:49:19:47:BA:CB:78:F8:23:E7:A5 Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B Certificate issuer: /CN=e578bc065072b40baf08416e216a1307b24bc44b Certificate serial: 019B5D52EFA6585D3BC6E4338E538349C993 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft Manifest number: 1796 Signing time: Sat 27 Dec 2025 01:01:14 +0000 Manifest this update: Sat 27 Dec 2025 01:01:14 +0000 Manifest next update: Sun 28 Dec 2025 01:01:14 +0000 Files and hashes: 1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: iMNIKuagIDSdRewT4PoV2P2k/t1jz18Y5XNdC9dU+6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:52:ef:a6:58:5d:3b:c6:e4:33:8e:53:83:49:c9:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b Validity Not Before: Dec 27 01:01:14 2025 GMT Not After : Dec 28 01:01:14 2025 GMT Subject: CN=e723d3f6454d55daa59d491947bacb78f823e7a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f5:86:9e:4a:5b:81:15:b7:9e:10:91:5c:3e: f1:75:6f:d5:b6:03:7c:30:c9:a0:93:e6:62:1b:87: e9:8a:3d:c0:c0:e1:0f:ab:4f:4a:22:81:23:b3:2d: ab:44:da:b3:b9:e7:1c:43:11:69:53:d3:c7:1c:a1: 3f:68:58:73:85:9a:a5:46:79:74:92:ff:67:42:8d: 94:ac:b3:cb:af:c6:82:69:4d:ab:3d:ee:57:eb:70: 5d:d3:37:d6:7e:53:13:31:e5:d7:61:88:f3:35:ec: be:8c:37:b7:d9:2e:69:d8:1c:ad:8e:d8:cc:61:2e: c7:38:29:20:d5:c2:32:3e:6e:c3:95:d8:4b:d3:15: f0:43:4a:a7:18:2a:73:88:0b:38:b4:54:c2:9f:e6: f9:a9:91:87:9c:8f:70:cc:d0:9a:d8:4e:9d:88:a3: 46:8b:7e:1b:32:c7:a3:13:f4:42:e3:65:2e:17:63: 46:fb:fe:70:f6:af:50:b2:7e:8c:a6:4e:ed:a3:fb: 4a:a2:e5:7a:bf:4e:63:e6:2a:63:40:02:ab:78:ca: 70:8d:d8:d8:b0:95:65:3b:8e:0f:b8:c0:3b:07:76: ca:f3:74:25:4f:88:cf:7c:98:bf:52:f1:d2:97:2f: 87:da:18:96:86:68:3f:4d:b8:49:8f:17:12:0b:56: f8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:23:D3:F6:45:4D:55:DA:A5:9D:49:19:47:BA:CB:78:F8:23:E7:A5 X509v3 Authority Key Identifier: keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:b2:47:f5:42:bb:37:40:a2:57:bf:89:07:18:b1:a3:e6:82: 3a:a3:30:51:91:ae:3b:e4:b4:c9:22:7c:77:3f:d4:11:74:a4: 0c:0d:a8:eb:80:77:d6:c3:bb:17:4c:0b:67:81:73:08:ca:a6: 82:d3:9c:14:ec:54:47:78:04:c1:de:eb:ab:e9:46:a8:56:c6: 1c:7d:83:dc:84:d0:4f:01:68:91:98:bb:94:b3:d0:e5:78:3b: 82:d1:93:63:f8:66:99:b8:4e:e4:13:c5:06:c5:bd:73:c9:a3: 33:50:bb:1f:b9:50:a7:48:69:50:27:1a:dc:53:21:00:60:7b: e4:84:21:10:c3:9f:e3:b8:eb:99:a8:92:59:47:16:ff:09:3c: 78:23:7b:79:ba:b4:55:cb:38:7e:29:5f:ff:e4:4a:71:29:f8: ce:e3:72:86:ba:f2:78:9b:07:a4:32:1d:61:eb:f7:60:69:5c: ee:71:ca:03:32:0c:5e:49:9e:42:fe:cb:67:69:eb:1f:fb:7b: e1:33:86:d9:30:3e:b1:8b:3e:7a:9a:68:95:98:60:fe:b3:57: ad:c8:83:80:ae:09:d0:ea:0f:1e:d8:5f:1f:70:ce:b6:a9:75: 67:7f:63:7f:9d:71:4e:b9:74:8e:6f:18:86:f2:72:b6:b0:b1: cb:9e:59:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdUu+mWF07xuQzjlODScmTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NzhiYzA2NTA3MmI0MGJhZjA4NDE2ZTIxNmExMzA3YjI0 YmM0NGIwHhcNMjUxMjI3MDEwMTE0WhcNMjUxMjI4MDEwMTE0WjAzMTEwLwYDVQQD EyhlNzIzZDNmNjQ1NGQ1NWRhYTU5ZDQ5MTk0N2JhY2I3OGY4MjNlN2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/WGnkpbgRW3nhCRXD7xdW/VtgN8 MMmgk+ZiG4fpij3AwOEPq09KIoEjsy2rRNqzueccQxFpU9PHHKE/aFhzhZqlRnl0 kv9nQo2UrLPLr8aCaU2rPe5X63Bd0zfWflMTMeXXYYjzNey+jDe32S5p2BytjtjM YS7HOCkg1cIyPm7DldhL0xXwQ0qnGCpziAs4tFTCn+b5qZGHnI9wzNCa2E6diKNG i34bMsejE/RC42UuF2NG+/5w9q9Qsn6Mpk7to/tKouV6v05j5ipjQAKreMpwjdjY sJVlO44PuMA7B3bK83QlT4jPfJi/UvHSly+H2hiWhmg/TbhJjxcSC1b4DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcj0/ZFTVXapZ1JGUe6y3j4I+elMB8GA1UdIwQY MBaAFOV4vAZQcrQLrwhBbiFqEweyS8RLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEt ZmJmZjYwY2ZiOTZhLzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEtZmJmZjYwY2ZiOTZh LzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7JH9UK7 N0CiV7+JBxixo+aCOqMwUZGuO+S0ySJ8dz/UEXSkDA2o64B31sO7F0wLZ4FzCMqm gtOcFOxUR3gEwd7rq+lGqFbGHH2D3ITQTwFokZi7lLPQ5Xg7gtGTY/hmmbhO5BPF BsW9c8mjM1C7H7lQp0hpUCca3FMhAGB75IQhEMOf47jrmaiSWUcW/wk8eCN7ebq0 Vcs4filf/+RKcSn4zuNyhrryeJsHpDIdYev3YGlc7nHKAzIMXkmeQv7LZ2nrH/t7 4TOG2TA+sYs+eppolZhg/rNXrciDgK4J0OoPHthfH3DOtql1Z39jf51xTrl0jm8Y hvJytrCxy55ZaA== -----END CERTIFICATE-----Generated at Sat Dec 27 03:53:50 2025 by rpki-client