This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft File: _5lGMPx0VWzlCAJocJAVRft7BM0.mft (raw, json) Hash identifier: 8OOuk5WdhDTp+4dnqPTw8TeSg/EmsoAqQkMtpV5edU0= Subject key identifier: 50:60:81:3E:3F:3C:34:29:3E:36:7F:7C:80:D9:2E:16:13:83:87:10 Authority key identifier: FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD Certificate issuer: /CN=ff994630fc74556ce508026870901545fb7b04cd Certificate serial: 019B3C7F8A8E97FFEA0C6BD7CA0A8AE661B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 16:02:29 +0000 Manifest this update: Sat 20 Dec 2025 16:02:29 +0000 Manifest next update: Sun 21 Dec 2025 16:02:29 +0000 Files and hashes: 1: _5lGMPx0VWzlCAJocJAVRft7BM0.crl (hash: m2lmB+8dkJvbW+OvtyA0/BuCqTakMJumzQ9liOfLEfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:8a:8e:97:ff:ea:0c:6b:d7:ca:0a:8a:e6:61:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff994630fc74556ce508026870901545fb7b04cd Validity Not Before: Dec 20 16:02:29 2025 GMT Not After : Dec 21 16:02:29 2025 GMT Subject: CN=5060813e3f3c34293e367f7c80d92e1613838710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7c:9e:9a:fd:5d:ee:8f:56:cf:14:08:0c:02: d0:0c:54:46:d1:28:3e:d2:9d:38:ee:12:e4:b0:ef: 08:b0:d5:21:db:2c:fa:27:9f:ac:0b:e2:72:3f:03: 4e:95:05:fd:cb:ff:b1:f9:28:e8:fb:e3:6d:3e:35: ba:a0:6e:23:70:19:7d:e1:8c:64:f7:83:01:0c:3e: b2:ca:b5:e2:fe:96:e3:36:13:d5:21:41:11:d5:57: d7:17:e2:ae:7b:2e:9f:d3:7d:27:56:1e:61:22:0b: d9:73:e3:74:e0:03:7c:88:77:f9:7d:06:e6:f5:52: 8e:fb:3a:3a:4e:30:15:bd:48:05:5c:ab:bc:79:90: 96:ae:17:bf:4d:40:de:37:ff:fd:f4:31:92:55:a3: 5a:ad:15:97:2f:6b:9e:96:b0:3d:ef:f0:96:88:5e: e3:12:76:53:b7:44:5f:07:ca:21:5b:0a:35:b3:ca: 41:21:e5:4d:33:fb:ec:af:95:ae:51:a9:a5:7b:8b: 31:b6:27:24:94:55:57:c2:af:c9:b2:27:56:08:5f: 4e:11:63:93:a4:10:17:f0:4f:63:f0:4e:45:d4:b4: fc:c9:b3:f6:e0:4f:a4:37:87:86:d5:24:38:08:82: 76:1c:5c:90:71:db:4a:cb:5d:ad:e8:d8:ec:3b:2e: db:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:60:81:3E:3F:3C:34:29:3E:36:7F:7C:80:D9:2E:16:13:83:87:10 X509v3 Authority Key Identifier: keyid:FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c5:a1:c0:82:3e:fa:5e:e1:5c:f3:f7:14:3e:99:1d:ea:0c: 10:87:fd:61:bf:6e:4a:43:bd:6b:d3:99:9d:ac:0e:6a:38:59: 83:f5:91:d7:ed:2e:d9:c8:61:50:5a:dd:ee:3a:91:1c:c3:fc: d7:06:94:ff:cc:8b:50:07:3e:c4:e5:20:8c:0f:6f:0d:ee:d1: c4:ad:b7:42:b2:c8:b0:df:f1:7d:13:d7:c1:fa:66:92:88:72: 36:c4:c9:da:48:d1:e7:86:53:9e:7b:21:15:b9:14:cc:71:5f: 9d:e6:68:53:0c:2f:40:e2:4d:ad:ae:be:2e:1f:73:56:0e:71: 2b:ec:62:75:c3:3a:41:44:c0:03:77:5a:b8:83:48:fa:42:0d: bc:06:e9:22:91:a4:f7:07:b2:6f:06:82:cf:12:89:a0:03:1e: 73:fd:22:6c:2f:79:ed:60:ef:db:ae:11:e5:03:d1:f0:5d:c8: be:d4:0f:45:a9:3e:63:9f:00:03:05:e5:86:c7:ef:ba:45:3d: a5:f3:82:00:25:2a:90:f2:d2:f7:07:2a:9a:4e:50:96:82:a1: a8:1f:69:1f:77:6d:96:6b:98:32:b5:a2:34:fa:a1:a5:60:de: cf:94:5c:75:bf:2c:06:51:a1:4c:e2:d0:b7:11:d4:99:a0:74: 3b:f3:f2:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f4qOl//qDGvXygqK5mG5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOTk0NjMwZmM3NDU1NmNlNTA4MDI2ODcwOTAxNTQ1ZmI3 YjA0Y2QwHhcNMjUxMjIwMTYwMjI5WhcNMjUxMjIxMTYwMjI5WjAzMTEwLwYDVQQD Eyg1MDYwODEzZTNmM2MzNDI5M2UzNjdmN2M4MGQ5MmUxNjEzODM4NzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Hyemv1d7o9WzxQIDALQDFRG0Sg+ 0p047hLksO8IsNUh2yz6J5+sC+JyPwNOlQX9y/+x+Sjo++NtPjW6oG4jcBl94Yxk 94MBDD6yyrXi/pbjNhPVIUER1VfXF+Kuey6f030nVh5hIgvZc+N04AN8iHf5fQbm 9VKO+zo6TjAVvUgFXKu8eZCWrhe/TUDeN//99DGSVaNarRWXL2uelrA97/CWiF7j EnZTt0RfB8ohWwo1s8pBIeVNM/vsr5WuUamle4sxticklFVXwq/JsidWCF9OEWOT pBAX8E9j8E5F1LT8ybP24E+kN4eG1SQ4CIJ2HFyQcdtKy12t6NjsOy7bMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBggT4/PDQpPjZ/fIDZLhYTg4cQMB8GA1UdIwQY MBaAFP+ZRjD8dFVs5QgCaHCQFUX7ewTNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzVsR01QeDBWV3psQ0FKb2NKQVZSZnQ3Qk0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9kYjU2NTEtOTVmMS00N2MxLWFjZjAt ZWFmY2E1ODU0MjU3LzEvXzVsR01QeDBWV3psQ0FKb2NKQVZSZnQ3Qk0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9kYjU2NTEtOTVmMS00N2MxLWFjZjAtZWFmY2E1ODU0MjU3 LzEvXzVsR01QeDBWV3psQ0FKb2NKQVZSZnQ3Qk0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMWhwII+ +l7hXPP3FD6ZHeoMEIf9Yb9uSkO9a9OZnawOajhZg/WR1+0u2chhUFrd7jqRHMP8 1waU/8yLUAc+xOUgjA9vDe7RxK23QrLIsN/xfRPXwfpmkohyNsTJ2kjR54ZTnnsh FbkUzHFfneZoUwwvQOJNra6+Lh9zVg5xK+xidcM6QUTAA3dauINI+kINvAbpIpGk 9weybwaCzxKJoAMec/0ibC957WDv264R5QPR8F3IvtQPRak+Y58AAwXlhsfvukU9 pfOCACUqkPLS9wcqmk5QloKhqB9pH3dtlmuYMrWiNPqhpWDez5Rcdb8sBlGhTOLQ txHUmaB0O/PyBg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:04:52 2025 by rpki-client