This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft File: 5gSc-H3Y8f1MgCS1psnqlPF7b70.mft (raw, json) Hash identifier: wxM27s9F1I5E2FqweC00I6U6XwUNffScZcb1gJak4Bk= Subject key identifier: 66:DF:C8:AE:86:24:FE:92:BA:61:88:4D:AF:20:B3:32:ED:EE:A9:08 Authority key identifier: E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD Certificate issuer: /CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd Certificate serial: 019B3E6CD2795E5F679DB01548A556F31FCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft Manifest number: 171C Signing time: Sun 21 Dec 2025 01:01:17 +0000 Manifest this update: Sun 21 Dec 2025 01:01:17 +0000 Manifest next update: Mon 22 Dec 2025 01:01:17 +0000 Files and hashes: 1: 5gSc-H3Y8f1MgCS1psnqlPF7b70.crl (hash: AM8GaaHBNXnld/0E0iNtgfc+zpRb4c58b/djtFuXcho=) 2: cu8xrGCLqiGHp1db_MgiG0UxHW8.roa (hash: giP9e0QpRuK7Urrt2Hhvj2cOHwVCXlF67CRutRL96MA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:d2:79:5e:5f:67:9d:b0:15:48:a5:56:f3:1f:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd Validity Not Before: Dec 21 01:01:17 2025 GMT Not After : Dec 22 01:01:17 2025 GMT Subject: CN=66dfc8ae8624fe92ba61884daf20b332edeea908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d6:2c:85:40:48:ce:69:a6:d2:fc:96:5d:8a: 2f:e3:f0:76:ec:1f:fc:04:4c:77:47:ec:33:11:a1: 91:08:f1:35:79:9c:d4:ff:11:97:ba:84:00:c1:61: 8a:58:7e:4e:ed:6c:82:91:fb:34:4e:ad:ea:b1:30: 24:92:d1:30:23:98:08:fb:77:e0:5f:7b:7c:c0:15: 8e:a4:3c:3a:f8:87:d5:32:19:4d:be:23:e3:b8:f2: 00:0b:45:d8:30:e3:76:cc:7f:41:c5:2c:4c:12:84: 45:f7:4e:b2:4e:cf:a2:77:8f:88:5d:3b:50:e4:74: f1:36:d3:18:0e:04:1e:bf:e1:39:a3:49:bf:c9:3c: 56:2e:1c:65:ce:a8:04:34:9b:45:8f:4f:bf:27:44: be:39:ed:bf:55:f1:ce:e6:2a:6c:1b:6a:45:71:b4: 06:73:0d:b0:cf:89:9c:b2:16:23:18:e7:93:3d:db: 9d:c8:f6:64:0c:86:1a:df:68:e1:6a:aa:e0:5a:a6: 64:ed:bf:b0:44:3a:1d:6c:f6:1f:7b:ae:51:5c:fd: 9d:cb:60:1a:d3:da:17:b5:7b:3e:1d:13:6d:51:56: 85:3f:e7:fa:6a:2e:c4:5a:a4:e3:7e:1b:89:f4:e0: 2e:de:23:a0:1f:cd:68:d8:f7:25:0f:27:97:96:5d: 92:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DF:C8:AE:86:24:FE:92:BA:61:88:4D:AF:20:B3:32:ED:EE:A9:08 X509v3 Authority Key Identifier: keyid:E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:29:a1:e1:7f:e0:82:58:19:2d:2c:e9:7f:57:f5:46:5e:d4: 73:6e:c8:c5:d4:09:48:f0:ff:e8:f3:ce:81:71:00:7d:27:92: 5e:2e:f2:00:f4:ff:3f:58:0f:03:63:ee:c6:30:74:84:e3:37: 79:f8:53:75:1a:ba:e1:73:5b:9f:59:db:ae:62:57:13:48:70: f4:d7:70:03:4c:43:de:70:94:da:e1:3a:07:5c:db:04:35:d9: 4e:c7:94:a1:b9:d9:48:68:55:ad:98:fc:9c:cb:81:d9:9a:f8: d7:d2:16:c8:10:6b:b5:79:75:00:18:74:91:a8:97:e1:8a:2c: 18:fb:2b:2f:cd:bb:66:0c:39:ae:c5:5e:23:45:69:dc:87:ad: e8:b2:3f:d2:e3:95:3d:4f:7b:12:d5:37:a4:14:26:0b:ed:d4: 2a:f4:ee:b5:34:e3:41:e8:27:1c:13:eb:48:df:ea:51:c9:b8: 5f:bd:73:48:7c:a3:0d:49:ef:51:e0:9c:b6:06:d1:d7:a0:3c: 9f:0f:3c:b8:81:1d:ec:05:88:cc:58:1b:15:70:33:b3:f2:c0: 78:b9:21:a0:ab:ed:a0:bf:0f:a1:b8:1e:4e:67:7d:a7:9e:c0: 41:e3:55:5e:15:f2:64:fa:b0:53:fc:cd:45:89:ce:be:a0:42: ea:c0:4b:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bNJ5Xl9nnbAVSKVW8x/PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MDQ5Y2Y4N2RkOGYxZmQ0YzgwMjRiNWE2YzllYTk0ZjE3 YjZmYmQwHhcNMjUxMjIxMDEwMTE3WhcNMjUxMjIyMDEwMTE3WjAzMTEwLwYDVQQD Eyg2NmRmYzhhZTg2MjRmZTkyYmE2MTg4NGRhZjIwYjMzMmVkZWVhOTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNYshUBIzmmm0vyWXYov4/B27B/8 BEx3R+wzEaGRCPE1eZzU/xGXuoQAwWGKWH5O7WyCkfs0Tq3qsTAkktEwI5gI+3fg X3t8wBWOpDw6+IfVMhlNviPjuPIAC0XYMON2zH9BxSxMEoRF906yTs+id4+IXTtQ 5HTxNtMYDgQev+E5o0m/yTxWLhxlzqgENJtFj0+/J0S+Oe2/VfHO5ipsG2pFcbQG cw2wz4mcshYjGOeTPdudyPZkDIYa32jhaqrgWqZk7b+wRDodbPYfe65RXP2dy2Aa 09oXtXs+HRNtUVaFP+f6ai7EWqTjfhuJ9OAu3iOgH81o2PclDyeXll2S5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbfyK6GJP6SumGITa8gszLt7qkIMB8GA1UdIwQY MBaAFOYEnPh92PH9TIAktabJ6pTxe2+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWdTYy1IM1k4ZjFNZ0NTMXBzbnFsUEY3YjcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wNjBjZWEtZTkyMC00MGRlLTkwZGEt OGQ0OWViY2FlOWIzLzEvNWdTYy1IM1k4ZjFNZ0NTMXBzbnFsUEY3YjcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8wNjBjZWEtZTkyMC00MGRlLTkwZGEtOGQ0OWViY2FlOWIz LzEvNWdTYy1IM1k4ZjFNZ0NTMXBzbnFsUEY3YjcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCmh4X/g glgZLSzpf1f1Rl7Uc27IxdQJSPD/6PPOgXEAfSeSXi7yAPT/P1gPA2PuxjB0hOM3 efhTdRq64XNbn1nbrmJXE0hw9NdwA0xD3nCU2uE6B1zbBDXZTseUobnZSGhVrZj8 nMuB2Zr419IWyBBrtXl1ABh0kaiX4YosGPsrL827Zgw5rsVeI0Vp3Iet6LI/0uOV PU97EtU3pBQmC+3UKvTutTTjQegnHBPrSN/qUcm4X71zSHyjDUnvUeCctgbR16A8 nw88uIEd7AWIzFgbFXAzs/LAeLkhoKvtoL8PobgeTmd9p57AQeNVXhXyZPqwU/zN RYnOvqBC6sBLag== -----END CERTIFICATE-----Generated at Sun Dec 21 07:00:52 2025 by rpki-client