This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft File: 5NozpY-0djTWFOwJpomN4PWABv4.mft (raw, json) Hash identifier: o7DyR4SFxbFe9O4nCHr/ihvj8QbXKDGie4giUCxVNUI= Subject key identifier: F0:64:91:1B:38:D2:A3:81:60:DA:21:77:67:B8:F5:7F:D0:E1:3A:3A Authority key identifier: E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE Certificate issuer: /CN=e4da33a58fb47634d614ec09a6898de0f58006fe Certificate serial: 019B4EBB84539046E853AD00D087CA350B71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft Manifest number: 0E68 Signing time: Wed 24 Dec 2025 05:01:10 +0000 Manifest this update: Wed 24 Dec 2025 05:01:10 +0000 Manifest next update: Thu 25 Dec 2025 05:01:10 +0000 Files and hashes: 1: 5NozpY-0djTWFOwJpomN4PWABv4.crl (hash: 9umvKA+nMdIg6ZM9ww6wU7Wp9BHms9DBATf+dKP2ZpI=) 2: q_FuKEatt0zR6PfM8hStM_OAEUA.roa (hash: 2y3NDWHhYWGNF2joY5nRoFi6Rxr80fn/VSsCMypexYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:84:53:90:46:e8:53:ad:00:d0:87:ca:35:0b:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4da33a58fb47634d614ec09a6898de0f58006fe Validity Not Before: Dec 24 05:01:10 2025 GMT Not After : Dec 25 05:01:10 2025 GMT Subject: CN=f064911b38d2a38160da217767b8f57fd0e13a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:4f:77:46:d4:d1:93:f9:63:be:e9:bd:f1: bf:84:07:53:ea:3c:d0:6c:23:15:9d:03:31:72:1d: ac:50:1b:5d:82:35:c7:47:04:fb:53:0d:25:16:69: 9b:c4:1b:1d:eb:92:3e:12:a7:4c:74:db:d8:42:58: 12:1d:38:1a:33:5c:c4:41:bb:f3:b1:69:2a:78:4e: 7c:79:60:76:e2:ec:1f:f4:db:aa:99:d9:c8:7b:13: a4:ed:5b:ec:94:24:0b:c0:8b:b7:87:92:64:95:e2: 01:dc:6a:91:4e:7a:b8:44:38:0e:49:c2:f2:38:41: d1:8c:bb:69:c8:06:77:c6:8e:3d:24:20:07:e1:a8: 7c:d0:1a:b4:17:be:5d:13:c3:d6:4b:7b:a2:75:96: 1d:66:23:a9:17:20:c5:42:1b:64:09:be:1f:f8:19: 07:50:cc:fe:06:a1:9d:66:99:08:c4:0d:20:94:84: 59:03:c6:3c:a5:a6:38:ac:02:49:be:b0:ad:24:8d: 1d:bb:6b:f6:b5:c2:8f:f0:5e:35:1a:9e:b2:5b:76: c8:5f:83:c2:9e:35:fc:df:b2:6f:49:d7:b8:3c:09: 87:13:b0:85:80:f8:8d:1e:fd:fb:cc:76:b7:bb:db: 24:3a:00:5e:a8:37:2a:34:0c:22:34:88:55:84:71: c2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:64:91:1B:38:D2:A3:81:60:DA:21:77:67:B8:F5:7F:D0:E1:3A:3A X509v3 Authority Key Identifier: keyid:E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:b9:f7:f5:1a:c7:92:fb:2d:4b:6f:9d:30:79:92:87:0f:85: 88:1a:f9:e5:7e:8d:0c:56:96:74:71:27:cb:30:f9:79:ad:57: 76:cb:de:22:ee:d2:a9:20:0a:b6:87:92:91:bd:70:e0:6f:a2: a7:86:10:a7:82:ce:b4:d6:4d:0d:8f:6d:39:6d:3b:36:74:f0: 10:ca:3f:45:e1:48:ce:8c:fd:8d:b0:bb:42:5f:96:cc:a4:7e: f1:c4:f3:42:fe:3d:dd:bb:bd:d8:31:ff:a8:54:3c:a3:b0:94: e3:af:b1:21:5c:72:04:d8:30:bb:a0:cc:5f:98:9a:ac:cb:f7: 27:79:63:dc:d3:bc:87:e4:c5:de:23:c4:f2:32:99:10:47:2c: e2:ef:8b:89:83:05:fc:08:4f:b6:f4:30:59:21:71:5f:67:f6: 6e:d4:9c:c0:bb:63:13:25:37:fa:00:38:31:8b:70:8a:48:8c: c6:15:aa:3f:36:dc:7a:40:9e:f1:a9:90:8d:ef:5e:4d:d6:a7: 13:b3:b4:26:46:9e:b0:34:81:ef:b8:64:b6:60:94:3b:a1:0d: e7:23:dc:66:0a:59:c2:68:94:4c:8b:12:ef:d8:57:3c:49:97: 4d:fc:b2:42:79:d0:b3:5d:3c:35:3d:dc:4b:64:21:6b:57:ba: 58:79:18:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu4RTkEboU60A0IfKNQtxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZGEzM2E1OGZiNDc2MzRkNjE0ZWMwOWE2ODk4ZGUwZjU4 MDA2ZmUwHhcNMjUxMjI0MDUwMTEwWhcNMjUxMjI1MDUwMTEwWjAzMTEwLwYDVQQD EyhmMDY0OTExYjM4ZDJhMzgxNjBkYTIxNzc2N2I4ZjU3ZmQwZTEzYTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwpPd0bU0ZP5Y77pvfG/hAdT6jzQ bCMVnQMxch2sUBtdgjXHRwT7Uw0lFmmbxBsd65I+EqdMdNvYQlgSHTgaM1zEQbvz sWkqeE58eWB24uwf9NuqmdnIexOk7VvslCQLwIu3h5JkleIB3GqRTnq4RDgOScLy OEHRjLtpyAZ3xo49JCAH4ah80Bq0F75dE8PWS3uidZYdZiOpFyDFQhtkCb4f+BkH UMz+BqGdZpkIxA0glIRZA8Y8paY4rAJJvrCtJI0du2v2tcKP8F41Gp6yW3bIX4PC njX837JvSde4PAmHE7CFgPiNHv37zHa3u9skOgBeqDcqNAwiNIhVhHHCcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBkkRs40qOBYNohd2e49X/Q4To6MB8GA1UdIwQY MBaAFOTaM6WPtHY01hTsCaaJjeD1gAb+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU5venBZLTBkalRXRk93SnBvbU40UFdBQnY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8yZDBjYTItOGMzZS00ZjhjLTkwNmMt NmNlNjAyMjZhOWU4LzEvNU5venBZLTBkalRXRk93SnBvbU40UFdBQnY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8yZDBjYTItOGMzZS00ZjhjLTkwNmMtNmNlNjAyMjZhOWU4 LzEvNU5venBZLTBkalRXRk93SnBvbU40UFdBQnY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLn39RrH kvstS2+dMHmShw+FiBr55X6NDFaWdHEnyzD5ea1XdsveIu7SqSAKtoeSkb1w4G+i p4YQp4LOtNZNDY9tOW07NnTwEMo/ReFIzoz9jbC7Ql+WzKR+8cTzQv493bu92DH/ qFQ8o7CU46+xIVxyBNgwu6DMX5iarMv3J3lj3NO8h+TF3iPE8jKZEEcs4u+LiYMF /AhPtvQwWSFxX2f2btScwLtjEyU3+gA4MYtwikiMxhWqPzbcekCe8amQje9eTdan E7O0JkaesDSB77hktmCUO6EN5yPcZgpZwmiUTIsS79hXPEmXTfyyQnnQs108NT3c S2Qha1e6WHkYfg== -----END CERTIFICATE-----Generated at Wed Dec 24 13:09:21 2025 by rpki-client