This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft File: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft (raw, json) Hash identifier: Ny6MX5vLEdlNwdWU5rRfB/9SWhZvsX1iMr+LjYwzWZ0= Subject key identifier: 8D:91:19:51:5F:9C:01:61:47:5B:59:E1:46:8F:52:0B:78:F6:AC:9C Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF Certificate issuer: /CN=e58ff73925a23692847ed92bc66613fd47068dcf Certificate serial: 019B4FCE0EC0BD8A8C4662ED04B7A42750A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft Manifest number: 0460 Signing time: Wed 24 Dec 2025 10:01:02 +0000 Manifest this update: Wed 24 Dec 2025 10:01:02 +0000 Manifest next update: Thu 25 Dec 2025 10:01:02 +0000 Files and hashes: 1: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl (hash: x0GcqeUlW8vLFz7FZerSsGq9rSk8Sk6msc5fyFXL7I4=) 2: LyUeFaQumjkEXGwuTN3adk_CmUQ.roa (hash: 1oee/niCKCFU/8iZhol3JSIxvOFh3whzL0NQ6+tUdxg=) 3: ldrAy5A_M0tg2d0BXg7t_q2mTmY.roa (hash: PzgoMs0khlbRVil+vbEFVoeQZaszoG+3sW3UoJkJrfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:0e:c0:bd:8a:8c:46:62:ed:04:b7:a4:27:50:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf Validity Not Before: Dec 24 10:01:02 2025 GMT Not After : Dec 25 10:01:02 2025 GMT Subject: CN=8d9119515f9c0161475b59e1468f520b78f6ac9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:9b:88:a9:0e:c3:83:49:bd:a4:ee:03:dd:6e: de:9a:1a:1f:82:45:b0:de:81:18:63:ef:9f:ae:54: 41:4f:94:fe:09:81:dc:a3:8f:b8:5f:8a:55:ee:2d: af:3e:af:96:5c:6b:f8:d7:e1:11:59:82:a0:9b:ef: 90:d6:2c:53:16:45:05:35:a7:f1:0c:1c:a9:15:fd: b1:c9:ea:1e:e2:59:7b:50:54:c1:de:9a:63:72:11: 26:ef:e1:20:f2:30:61:1d:3f:14:5c:59:5e:7c:36: b9:7a:02:aa:88:29:18:43:31:01:2c:12:9c:2d:eb: 30:f8:46:8b:0c:1c:fd:36:9f:f7:c1:f0:00:9e:ca: c0:dd:d5:80:5f:c8:94:d9:d2:f8:6d:00:cd:18:ee: bd:29:88:f1:c3:b9:6a:58:d2:aa:fa:69:03:4d:db: 25:d0:85:c7:d1:22:34:19:27:3d:7b:73:d9:9a:fb: 71:6a:8f:90:d6:78:31:9f:15:48:83:2a:93:a3:23: 0e:1f:29:a7:78:01:89:60:b4:39:82:c4:5e:9f:28: b4:59:78:74:0a:d2:d8:b0:57:a4:54:4a:61:0a:c6: 70:c6:c3:e8:93:d7:46:05:a4:28:86:93:67:b4:b3: 3a:ea:34:8d:7d:97:ab:f7:39:75:a4:64:73:36:bf: 68:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:91:19:51:5F:9C:01:61:47:5B:59:E1:46:8F:52:0B:78:F6:AC:9C X509v3 Authority Key Identifier: keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:b8:41:66:f0:7a:78:25:28:d9:85:57:ee:a6:b9:9a:1c:ba: 93:ec:c8:8d:a0:f5:03:b1:6e:0a:01:b2:c8:8d:48:d1:ef:c2: a7:90:f3:29:44:0d:a2:fa:7a:9f:d7:26:52:ba:ed:5c:61:aa: c8:74:7e:0a:4d:00:9b:90:28:0f:a0:3f:11:2b:80:2d:7a:33: 7e:51:43:da:72:13:83:15:1e:d8:f1:0c:41:97:fa:99:df:36: e1:50:ab:43:a0:8f:a8:41:ef:47:bf:ed:18:28:70:63:99:22: c9:d1:1e:aa:79:04:a0:4d:3e:ac:ae:fd:be:3d:bb:40:31:95: 55:2d:27:b1:02:55:ae:b2:2e:91:49:d9:9d:05:b7:7d:50:41: e4:8f:60:48:9a:b7:9d:9d:6c:a5:04:f4:1c:f6:20:fd:c0:02: 46:ab:1d:55:19:56:da:57:04:22:8e:2a:30:22:0d:28:eb:18: 95:48:12:ba:91:32:e6:88:64:8a:c0:b7:58:94:29:f0:53:44: aa:37:27:3e:c6:17:db:71:b7:de:6f:38:63:42:54:9b:da:db: c5:5f:44:07:5f:5f:44:c2:70:62:a1:e2:c9:5a:af:e4:af:ca: 98:99:a7:71:63:e3:ca:59:9e:ec:37:b4:e8:bb:9d:43:13:b8: 77:b1:2f:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzg7AvYqMRmLtBLekJ1ChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1OGZmNzM5MjVhMjM2OTI4NDdlZDkyYmM2NjYxM2ZkNDcw NjhkY2YwHhcNMjUxMjI0MTAwMTAyWhcNMjUxMjI1MTAwMTAyWjAzMTEwLwYDVQQD Eyg4ZDkxMTk1MTVmOWMwMTYxNDc1YjU5ZTE0NjhmNTIwYjc4ZjZhYzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZuIqQ7Dg0m9pO4D3W7emhofgkWw 3oEYY++frlRBT5T+CYHco4+4X4pV7i2vPq+WXGv41+ERWYKgm++Q1ixTFkUFNafx DBypFf2xyeoe4ll7UFTB3ppjchEm7+Eg8jBhHT8UXFlefDa5egKqiCkYQzEBLBKc Lesw+EaLDBz9Np/3wfAAnsrA3dWAX8iU2dL4bQDNGO69KYjxw7lqWNKq+mkDTdsl 0IXH0SI0GSc9e3PZmvtxao+Q1ngxnxVIgyqToyMOHymneAGJYLQ5gsRenyi0WXh0 CtLYsFekVEphCsZwxsPok9dGBaQohpNntLM66jSNfZer9zl1pGRzNr9o8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2RGVFfnAFhR1tZ4UaPUgt49qycMB8GA1UdIwQY MBaAFOWP9zklojaShH7ZK8ZmE/1HBo3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlfM09TV2lOcEtFZnRrcnhtWVRfVWNHamM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80MGYxYmItZTg2OC00NzljLWE1MTUt N2I0N2I1YmE2YWVkLzEvNVlfM09TV2lOcEtFZnRrcnhtWVRfVWNHamM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi80MGYxYmItZTg2OC00NzljLWE1MTUtN2I0N2I1YmE2YWVk LzEvNVlfM09TV2lOcEtFZnRrcnhtWVRfVWNHamM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlbhBZvB6 eCUo2YVX7qa5mhy6k+zIjaD1A7FuCgGyyI1I0e/Cp5DzKUQNovp6n9cmUrrtXGGq yHR+Ck0Am5AoD6A/ESuALXozflFD2nITgxUe2PEMQZf6md824VCrQ6CPqEHvR7/t GChwY5kiydEeqnkEoE0+rK79vj27QDGVVS0nsQJVrrIukUnZnQW3fVBB5I9gSJq3 nZ1spQT0HPYg/cACRqsdVRlW2lcEIo4qMCINKOsYlUgSupEy5ohkisC3WJQp8FNE qjcnPsYX23G33m84Y0JUm9rbxV9EB19fRMJwYqHiyVqv5K/KmJmncWPjylme7De0 6LudQxO4d7EvDw== -----END CERTIFICATE-----Generated at Wed Dec 24 12:32:37 2025 by rpki-client