This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft File: 5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft (raw, json) Hash identifier: s0ezRqle0Ap55hPvzyiEUPgvqHsuI6liItN1iT7X1VY= Subject key identifier: 25:2E:A7:62:94:40:F3:92:3B:9B:58:2B:84:5A:E3:F5:E1:2F:78:88 Authority key identifier: E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98 Certificate issuer: /CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898 Certificate serial: 019B2B1CE1D4B34AB23A48BC0AB9279C63F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft Manifest number: 177D Signing time: Wed 17 Dec 2025 07:01:11 +0000 Manifest this update: Wed 17 Dec 2025 07:01:11 +0000 Manifest next update: Thu 18 Dec 2025 07:01:11 +0000 Files and hashes: 1: 5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl (hash: vkCAPe4hrIumTCXtdXmptmVV04iWFHiS/GKfEDzm6Mk=) 2: N5B5WcceOX8-5008CdVB5Z2Yf_U.roa (hash: N6x2VI2LM0pBE2WvbvROlXs2jZlgeDuNmVuOamFJP3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:e1:d4:b3:4a:b2:3a:48:bc:0a:b9:27:9c:63:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898 Validity Not Before: Dec 17 07:01:11 2025 GMT Not After : Dec 18 07:01:11 2025 GMT Subject: CN=252ea7629440f3923b9b582b845ae3f5e12f7888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:98:92:95:e5:c8:e9:ab:6b:c4:c3:b5:bd:53: 78:ea:93:1b:a1:27:0a:76:81:47:a8:b0:54:96:97: d3:fb:bd:ff:25:48:bc:07:cc:33:2e:a4:eb:28:68: a5:44:58:2c:46:ba:1b:5e:9c:c2:b5:6f:d5:b7:39: f4:d3:6f:b2:50:2d:7f:62:ee:f3:9b:69:dd:b1:15: 0c:46:15:ac:bd:47:66:ff:8b:6c:a6:e5:10:6a:4a: 9f:74:a2:db:4c:2e:ff:b5:72:8f:d2:b8:40:58:52: 4e:93:37:bb:36:b7:13:af:96:74:ba:f5:58:b0:d8: 52:4c:8f:15:57:65:06:1d:d8:db:71:b3:08:08:a2: a4:ac:a5:90:a7:c0:4e:51:8c:8c:0c:93:79:b0:0b: 55:49:4a:fc:38:86:f9:07:e6:81:67:fd:e6:d4:2e: 4a:e6:8e:0d:42:01:22:6a:eb:7d:13:0a:16:0d:5d: 0e:d6:ca:57:26:90:e6:15:06:72:ad:37:c6:1d:d3: a2:23:58:e7:b8:db:82:e5:a7:98:3f:b3:28:3b:66: 79:a4:e7:22:6c:b6:b5:9f:a6:4a:b3:ac:08:67:31: 97:dd:09:36:12:77:0a:0d:6c:e1:19:07:9a:df:23: ae:b6:df:ea:f0:a0:68:40:0b:35:ac:ad:eb:f1:96: 61:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2E:A7:62:94:40:F3:92:3B:9B:58:2B:84:5A:E3:F5:E1:2F:78:88 X509v3 Authority Key Identifier: keyid:E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:2b:1e:cf:cd:eb:67:eb:d4:2b:f6:b8:fd:98:4d:86:f9:7e: 85:b3:ca:e9:41:0a:eb:5c:68:87:9f:2a:73:ef:24:9b:aa:b2: 4b:05:5d:61:2b:d6:6e:32:9f:7c:08:e4:09:8c:37:c7:7b:8b: 43:01:65:02:82:d3:90:b5:bc:46:26:e1:ca:fe:38:8c:88:ba: 91:cb:6e:68:30:f4:85:18:75:f6:a8:00:d4:90:71:63:6d:62: 05:06:04:b6:84:f2:fb:ab:ca:8e:c9:38:86:b4:31:14:94:c8: 34:7b:97:09:95:cf:2a:74:da:ea:8b:ea:e2:49:2a:b6:b5:c1: bf:da:62:9b:f7:6b:74:08:8d:e8:28:de:9c:0f:d0:8f:ab:22: f4:0f:f9:f9:9c:40:19:12:fc:f6:b0:c4:f3:68:07:89:d8:aa: d2:38:cd:cd:49:f2:08:b6:cb:af:3e:3f:74:fb:01:2d:35:19: 4c:8e:42:ae:43:18:57:b5:73:60:7b:9a:0a:97:77:bf:a9:9b: d7:19:af:aa:d8:20:25:75:a0:99:c3:d5:a8:6a:49:7d:23:10: e4:01:24:a2:47:45:26:37:a7:2e:d3:91:9e:87:4a:2e:87:c6: a3:ea:d4:47:b6:fa:7b:d8:f0:cd:cb:91:04:3e:bc:dd:5f:b5: f2:83:b7:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHOHUs0qyOki8CrknnGP2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MDA2NGRjZjcxOWVkODk5OWRhNzkyZjZmYmZjM2ZlOWJj NzA4OTgwHhcNMjUxMjE3MDcwMTExWhcNMjUxMjE4MDcwMTExWjAzMTEwLwYDVQQD EygyNTJlYTc2Mjk0NDBmMzkyM2I5YjU4MmI4NDVhZTNmNWUxMmY3ODg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJiSleXI6atrxMO1vVN46pMboScK doFHqLBUlpfT+73/JUi8B8wzLqTrKGilRFgsRrobXpzCtW/Vtzn002+yUC1/Yu7z m2ndsRUMRhWsvUdm/4tspuUQakqfdKLbTC7/tXKP0rhAWFJOkze7NrcTr5Z0uvVY sNhSTI8VV2UGHdjbcbMICKKkrKWQp8BOUYyMDJN5sAtVSUr8OIb5B+aBZ/3m1C5K 5o4NQgEiaut9EwoWDV0O1spXJpDmFQZyrTfGHdOiI1jnuNuC5aeYP7MoO2Z5pOci bLa1n6ZKs6wIZzGX3Qk2EncKDWzhGQea3yOutt/q8KBoQAs1rK3r8ZZhUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUup2KUQPOSO5tYK4Ra4/XhL3iIMB8GA1UdIwQY MBaAFOYAZNz3Ge2Jmdp5L2+/w/6bxwiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWdCazNQY1o3WW1aMm5rdmI3X0RfcHZIQ0pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83MzRlMGMtNzg2ZS00NjMxLWE5MjMt ZThiOGZjYzQxZTg1LzEvNWdCazNQY1o3WW1aMm5rdmI3X0RfcHZIQ0pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy83MzRlMGMtNzg2ZS00NjMxLWE5MjMtZThiOGZjYzQxZTg1 LzEvNWdCazNQY1o3WW1aMm5rdmI3X0RfcHZIQ0pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvysez83r Z+vUK/a4/ZhNhvl+hbPK6UEK61xoh58qc+8km6qySwVdYSvWbjKffAjkCYw3x3uL QwFlAoLTkLW8Ribhyv44jIi6kctuaDD0hRh19qgA1JBxY21iBQYEtoTy+6vKjsk4 hrQxFJTINHuXCZXPKnTa6ovq4kkqtrXBv9pim/drdAiN6CjenA/Qj6si9A/5+ZxA GRL89rDE82gHidiq0jjNzUnyCLbLrz4/dPsBLTUZTI5CrkMYV7VzYHuaCpd3v6mb 1xmvqtggJXWgmcPVqGpJfSMQ5AEkokdFJjenLtORnodKLofGo+rUR7b6e9jwzcuR BD683V+18oO3sQ== -----END CERTIFICATE-----Generated at Wed Dec 17 09:45:52 2025 by rpki-client