This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft File: 5H48mpUfGxWBE6t8PfGd_DNtnu8.mft (raw, json) Hash identifier: 8pwyywRxvzNGP5b6UG7Q5UoFJBqlqA/V1u1YiZGXLJw= Subject key identifier: 28:F0:C0:55:C2:CE:B4:CD:58:7C:A4:7A:3F:A3:C5:6B:8B:BC:68:11 Authority key identifier: E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF Certificate issuer: /CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef Certificate serial: 019B315556148813ADB85A815BCF886CEB5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft Manifest number: 0281 Signing time: Thu 18 Dec 2025 12:00:34 +0000 Manifest this update: Thu 18 Dec 2025 12:00:34 +0000 Manifest next update: Fri 19 Dec 2025 12:00:34 +0000 Files and hashes: 1: 5H48mpUfGxWBE6t8PfGd_DNtnu8.crl (hash: YegVh2BWFjg7C1z6jj/khXJphcoMOxgmAGtUSxB4vhU=) 2: Q9CRQZy3s0gtS_tA2FymWdsC4t4.roa (hash: 9hBwRUtzjTqHG1Gie71trio1LQkRxaOtaflWu8/l7K4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:56:14:88:13:ad:b8:5a:81:5b:cf:88:6c:eb:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef Validity Not Before: Dec 18 12:00:34 2025 GMT Not After : Dec 19 12:00:34 2025 GMT Subject: CN=28f0c055c2ceb4cd587ca47a3fa3c56b8bbc6811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a4:ad:1f:33:c1:9e:e8:19:ad:2a:88:9d:11: 0c:2b:e2:60:f1:dc:19:d6:4e:e1:e2:89:9c:0a:1b: 1a:db:e3:9e:97:9d:e2:ef:a8:d4:29:b2:64:fb:55: 71:0a:4e:09:9b:d7:0c:d1:a4:99:87:ee:c1:a8:1a: a1:6c:7b:e0:c8:b8:f6:47:5d:98:76:65:54:49:9b: ab:90:dd:0e:a0:55:a6:ef:32:8c:c7:30:c0:a3:47: f0:46:ca:bc:ba:b0:71:db:f4:ea:09:23:b0:46:0a: a2:54:09:e0:79:77:66:a6:32:5e:ae:e8:9d:7b:f5: 38:b0:ae:fc:e6:1e:61:4c:6a:b0:74:7e:11:92:1d: 97:05:2b:77:35:89:44:0c:76:5f:ee:99:88:fe:ca: 5f:3c:7e:75:ea:9b:cd:37:ba:0f:2d:31:93:06:7f: d6:9c:3f:70:e3:21:db:5a:7c:71:95:62:4b:25:99: 5f:6a:1b:ec:16:9e:d9:c6:f8:18:ee:61:c0:17:be: a4:c3:35:15:e5:99:e2:5f:22:c6:04:82:9f:9d:6f: c7:d3:f8:d2:8a:5c:dc:0f:93:01:a1:3f:08:da:86: 8f:cf:10:d9:38:6c:eb:01:5a:cf:05:48:94:c9:b2: f0:9f:89:03:84:ae:18:df:d3:ba:f7:a1:83:dd:49: 26:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F0:C0:55:C2:CE:B4:CD:58:7C:A4:7A:3F:A3:C5:6B:8B:BC:68:11 X509v3 Authority Key Identifier: keyid:E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:03:a0:50:e5:bb:23:f1:62:b6:91:2c:22:f5:f2:c9:11:1e: 4e:7a:ec:29:97:ca:bc:ff:ce:dd:ba:ce:d4:67:07:42:fe:01: c5:8b:8c:63:70:e0:af:ce:89:2e:55:af:2e:7f:07:de:84:db: 98:84:12:e4:18:ac:de:cc:25:a7:92:2a:72:34:6d:21:31:5a: 35:d7:18:17:6c:f8:d7:2a:af:35:3d:9e:74:0f:bf:61:79:1b: 43:03:09:89:69:6b:a1:fc:85:3e:28:07:63:0a:21:85:bb:dd: 02:16:77:de:a1:48:32:b9:cd:44:5e:97:53:91:02:10:24:ca: 73:1b:27:65:6c:26:75:5a:3b:0e:1f:e4:11:d8:aa:70:aa:f1: d7:09:ab:d2:45:d5:8e:02:bd:1f:d2:c5:7f:a3:ee:fa:2b:18: cc:38:95:db:b3:a4:b1:34:f0:2f:52:86:ee:22:2b:0d:c9:55: 81:bc:5c:9f:a5:4e:c7:63:b7:99:e3:10:ea:fd:89:0b:75:eb: a7:83:53:48:98:2e:5f:8e:99:53:72:40:c3:39:7d:81:1a:d2: 06:5d:2f:2a:ae:01:90:70:16:21:d2:c8:e6:56:3d:80:fc:a5: 01:71:ce:ff:48:4c:93:09:35:ee:00:9e:f0:0b:65:26:7e:09: 38:c9:7e:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVVYUiBOtuFqBW8+IbOtaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0N2UzYzlhOTUxZjFiMTU4MTEzYWI3YzNkZjE5ZGZjMzM2 ZDllZWYwHhcNMjUxMjE4MTIwMDM0WhcNMjUxMjE5MTIwMDM0WjAzMTEwLwYDVQQD EygyOGYwYzA1NWMyY2ViNGNkNTg3Y2E0N2EzZmEzYzU2YjhiYmM2ODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6StHzPBnugZrSqInREMK+Jg8dwZ 1k7h4omcChsa2+Oel53i76jUKbJk+1VxCk4Jm9cM0aSZh+7BqBqhbHvgyLj2R12Y dmVUSZurkN0OoFWm7zKMxzDAo0fwRsq8urBx2/TqCSOwRgqiVAngeXdmpjJeruid e/U4sK785h5hTGqwdH4Rkh2XBSt3NYlEDHZf7pmI/spfPH516pvNN7oPLTGTBn/W nD9w4yHbWnxxlWJLJZlfahvsFp7ZxvgY7mHAF76kwzUV5ZniXyLGBIKfnW/H0/jS ilzcD5MBoT8I2oaPzxDZOGzrAVrPBUiUybLwn4kDhK4Y39O696GD3Ukm0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjwwFXCzrTNWHykej+jxWuLvGgRMB8GA1UdIwQY MBaAFOR+PJqVHxsVgROrfD3xnfwzbZ7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUg0OG1wVWZHeFdCRTZ0OFBmR2RfRE50bnU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MGFlZDEtNmY3NC00M2E5LTk3NmYt N2VkNWUzMWFlNDRmLzEvNUg0OG1wVWZHeFdCRTZ0OFBmR2RfRE50bnU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82MGFlZDEtNmY3NC00M2E5LTk3NmYtN2VkNWUzMWFlNDRm LzEvNUg0OG1wVWZHeFdCRTZ0OFBmR2RfRE50bnU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzAOgUOW7 I/FitpEsIvXyyREeTnrsKZfKvP/O3brO1GcHQv4BxYuMY3Dgr86JLlWvLn8H3oTb mIQS5Bis3swlp5IqcjRtITFaNdcYF2z41yqvNT2edA+/YXkbQwMJiWlrofyFPigH YwohhbvdAhZ33qFIMrnNRF6XU5ECECTKcxsnZWwmdVo7Dh/kEdiqcKrx1wmr0kXV jgK9H9LFf6Pu+isYzDiV27OksTTwL1KG7iIrDclVgbxcn6VOx2O3meMQ6v2JC3Xr p4NTSJguX46ZU3JAwzl9gRrSBl0vKq4BkHAWIdLI5lY9gPylAXHO/0hMkwk17gCe 8AtlJn4JOMl+tQ== -----END CERTIFICATE-----Generated at Thu Dec 18 17:18:42 2025 by rpki-client