This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft File: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json) Hash identifier: EqJHxUyaRYBKoVEWOViqpMNGN6FWjI3EzE13Uyp8Rmk= Subject key identifier: 20:7B:4F:C4:E8:2A:4A:3B:C6:11:37:D6:D2:71:81:4B:A7:E2:59:A2 Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B Certificate issuer: /CN=e578bc065072b40baf08416e216a1307b24bc44b Certificate serial: 019B6CC5CCDBD80C2D1F203D6F0346E8BD97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft Manifest number: 179E Signing time: Tue 30 Dec 2025 01:01:00 +0000 Manifest this update: Tue 30 Dec 2025 01:01:00 +0000 Manifest next update: Wed 31 Dec 2025 01:01:00 +0000 Files and hashes: 1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: arjWHXKegavcs2WnRAb5fp45NehZgOO5HOSyU7zxG4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:cc:db:d8:0c:2d:1f:20:3d:6f:03:46:e8:bd:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b Validity Not Before: Dec 30 01:01:00 2025 GMT Not After : Dec 31 01:01:00 2025 GMT Subject: CN=207b4fc4e82a4a3bc61137d6d271814ba7e259a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:88:7c:14:e7:7c:85:c1:53:fa:7b:cf:fb:86: a1:f6:6f:2b:9f:51:00:4d:18:67:cd:0d:b3:6c:f7: 81:b1:42:8e:ba:8d:53:db:ee:f1:75:1b:b5:7f:1a: 8d:3c:0b:31:86:d8:c0:8f:24:14:4d:a4:f6:05:48: 48:fd:63:24:d5:1a:4c:11:f7:36:d4:60:d7:7e:ea: af:18:76:ac:1e:56:e7:22:ee:2e:23:4b:29:ee:de: b1:ff:e4:71:e5:cf:d4:da:e0:ca:d7:33:ea:ab:07: 5b:d7:17:6e:fc:f1:13:25:71:6a:76:e4:2f:1e:b2: 73:9b:88:7a:35:2b:ad:18:c7:d0:dd:aa:ef:15:10: a5:95:97:10:23:49:54:95:56:22:9a:ad:cf:b5:70: 5a:f0:83:67:15:76:93:5b:d7:84:34:10:e8:4d:53: ff:f2:80:11:81:ba:d9:85:1a:16:b1:e6:6a:54:45: 10:e8:07:7a:28:81:31:33:6f:50:d5:b3:33:a4:4f: 2f:29:51:2e:d6:0c:b1:9e:ee:3e:6c:30:b6:a1:88: e8:15:a6:ab:b2:28:e7:c4:a1:35:f2:10:49:eb:bc: 9f:87:d5:8f:d0:33:c4:2b:71:43:0a:6d:2d:e6:a4: ce:11:6b:41:2f:79:92:23:2d:5d:01:ab:fb:bb:8d: b5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7B:4F:C4:E8:2A:4A:3B:C6:11:37:D6:D2:71:81:4B:A7:E2:59:A2 X509v3 Authority Key Identifier: keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:16:e8:14:9e:b9:3c:e7:ec:04:9f:ea:13:dc:2c:08:d8:12: 79:a4:ea:2e:c6:05:15:94:50:0f:d0:0c:be:6f:88:96:9a:a0: 2a:9b:d9:55:fd:9f:2d:41:d3:82:3f:e8:40:1e:49:06:70:7b: fd:74:d7:4e:12:19:90:d7:72:90:61:45:b4:ce:45:ed:37:cb: 21:6a:ba:8b:91:11:ad:8c:83:f6:0e:8f:44:87:a1:df:6d:a5: 88:90:38:14:86:d2:13:33:4d:01:14:dd:31:3f:6c:34:fa:95: 9c:fa:97:27:7b:53:5f:07:24:cc:e2:63:e4:85:de:42:67:00: 79:9c:19:24:a7:a0:d7:a0:d6:21:db:1d:26:9b:86:d5:0b:41: 05:9c:b5:60:af:95:36:2f:1f:f0:b5:2b:ac:02:71:ff:68:1d: 17:2f:a3:b4:52:07:96:ed:13:e2:f6:89:f0:f1:11:1c:27:1c: 60:17:e0:6c:5e:f6:ec:9b:ad:5f:93:79:40:07:03:ae:48:4c: ef:9a:d7:b3:a3:fe:45:91:4f:76:e4:48:72:d0:d9:ed:ea:78: 70:22:87:68:e6:bf:8d:33:eb:3f:a2:eb:9a:e2:8e:01:ec:55: 2e:09:74:c5:f2:6e:6d:35:9d:d7:aa:51:fb:f3:ee:b1:44:74: 64:58:24:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxczb2AwtHyA9bwNG6L2XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NzhiYzA2NTA3MmI0MGJhZjA4NDE2ZTIxNmExMzA3YjI0 YmM0NGIwHhcNMjUxMjMwMDEwMTAwWhcNMjUxMjMxMDEwMTAwWjAzMTEwLwYDVQQD EygyMDdiNGZjNGU4MmE0YTNiYzYxMTM3ZDZkMjcxODE0YmE3ZTI1OWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4h8FOd8hcFT+nvP+4ah9m8rn1EA TRhnzQ2zbPeBsUKOuo1T2+7xdRu1fxqNPAsxhtjAjyQUTaT2BUhI/WMk1RpMEfc2 1GDXfuqvGHasHlbnIu4uI0sp7t6x/+Rx5c/U2uDK1zPqqwdb1xdu/PETJXFqduQv HrJzm4h6NSutGMfQ3arvFRCllZcQI0lUlVYimq3PtXBa8INnFXaTW9eENBDoTVP/ 8oARgbrZhRoWseZqVEUQ6Ad6KIExM29Q1bMzpE8vKVEu1gyxnu4+bDC2oYjoFaar sijnxKE18hBJ67yfh9WP0DPEK3FDCm0t5qTOEWtBL3mSIy1dAav7u4219QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCB7T8ToKko7xhE31tJxgUun4lmiMB8GA1UdIwQY MBaAFOV4vAZQcrQLrwhBbiFqEweyS8RLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEt ZmJmZjYwY2ZiOTZhLzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEtZmJmZjYwY2ZiOTZh LzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhboFJ65 POfsBJ/qE9wsCNgSeaTqLsYFFZRQD9AMvm+IlpqgKpvZVf2fLUHTgj/oQB5JBnB7 /XTXThIZkNdykGFFtM5F7TfLIWq6i5ERrYyD9g6PRIeh322liJA4FIbSEzNNARTd MT9sNPqVnPqXJ3tTXwckzOJj5IXeQmcAeZwZJKeg16DWIdsdJpuG1QtBBZy1YK+V Ni8f8LUrrAJx/2gdFy+jtFIHlu0T4vaJ8PERHCccYBfgbF727JutX5N5QAcDrkhM 75rXs6P+RZFPduRIctDZ7ep4cCKHaOa/jTPrP6LrmuKOAexVLgl0xfJubTWd16pR +/PusUR0ZFgkKw== -----END CERTIFICATE-----Generated at Tue Dec 30 07:11:33 2025 by rpki-client