This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft File: 5sLg0_3CFaOJxwQ8paGga-LFWO8.mft (raw, json) Hash identifier: zsUo62dUF+gIn4ClaJepsvEZC36LQN5n3uLmZZ1FKpM= Subject key identifier: CC:5D:CC:F2:89:4F:86:3A:1F:A3:DD:05:91:ED:99:56:26:5D:4C:48 Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef Certificate serial: 019B3C46DF9F756E255774129B6F02F9F4AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft Manifest number: 0A3B Signing time: Sat 20 Dec 2025 15:00:36 +0000 Manifest this update: Sat 20 Dec 2025 15:00:36 +0000 Manifest next update: Sun 21 Dec 2025 15:00:36 +0000 Files and hashes: 1: 5sLg0_3CFaOJxwQ8paGga-LFWO8.crl (hash: O8xp9YYKRPvdjhr9vLKzMFwGbaGttKNCr9Ton2UzePA=) 2: BQSs352-EOwWdJt5W4JX2r66118.roa (hash: SQJWh7RfqqUI9aMjD6YSzrE33eXIstI44fKb5g3qqDI=) 3: UyklqcY4QQ3ESWmiy5lj4wfy-lE.roa (hash: gDteXJLELGLpEyJXH+6t7iRhrt3b5/Agnwke1FnjUuY=) 4: g0FtGOw6TxkA3fw7sxIeFzhy8n0.roa (hash: VbLDwTgdy1V+yunFyXeS8r5ju6kbA+Nmv4L7O3VlwNM=) 5: mx4mEjcUAqOj7-yzqqHmPAfoCTw.roa (hash: TADBUKVvbfWL8WOCN7ye3V2kF6YpMBXr/Ao/gRMpF0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:df:9f:75:6e:25:57:74:12:9b:6f:02:f9:f4:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef Validity Not Before: Dec 20 15:00:36 2025 GMT Not After : Dec 21 15:00:36 2025 GMT Subject: CN=cc5dccf2894f863a1fa3dd0591ed9956265d4c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ce:16:e8:df:42:b6:56:46:9c:b1:b7:96:54: d1:e5:39:80:29:d5:9d:08:e5:ce:c5:17:28:5e:29: ad:84:83:0b:f0:77:ee:6c:fd:96:ce:3f:0e:cb:5f: 34:d2:e4:09:69:80:bc:65:5d:11:75:f5:e2:1f:43: ea:5a:82:d5:85:1b:6f:19:0f:47:ba:a1:66:7b:d4: 1d:4e:4b:4d:9f:f5:ca:ba:21:1a:2a:51:ea:74:17: 57:26:3a:b5:95:ea:f0:04:a1:8c:ef:4b:aa:65:28: de:ef:de:33:cf:aa:f9:d2:d7:f9:94:b1:6a:09:1d: ae:0f:3f:39:d8:68:94:19:50:6d:4f:cf:c9:e8:2e: 42:b1:ef:9c:1d:52:d9:a8:e9:17:25:9c:da:2a:6d: 9f:30:db:2d:cb:0c:bf:d2:5c:87:44:99:28:b5:f6: 34:ad:13:51:6a:79:9c:56:90:9c:16:a7:f2:e0:04: 78:57:63:0d:70:b8:77:92:61:87:14:00:1b:fe:ec: 20:36:6e:b0:24:b5:a4:61:db:e3:ae:44:17:26:7a: d4:d9:06:49:e3:54:d5:cf:f8:01:03:f4:bf:c6:31: b9:88:3f:5a:8b:49:f9:56:49:4f:9b:06:c8:3f:f5: e5:a7:c0:be:dd:cf:63:19:19:df:26:ec:88:e5:19: 6a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5D:CC:F2:89:4F:86:3A:1F:A3:DD:05:91:ED:99:56:26:5D:4C:48 X509v3 Authority Key Identifier: keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:0d:85:b7:21:c9:5c:9b:17:05:cf:0b:9d:58:8f:6e:6d:74: f9:09:98:dd:4b:56:9c:8b:21:11:c0:be:24:24:26:06:e2:c3: 04:1e:16:0b:e1:37:00:ae:57:b7:ce:78:44:34:12:b5:51:53: 37:70:93:ee:3a:7d:8f:db:c5:5a:ea:96:03:b7:3b:7d:53:5f: f4:aa:89:ff:8a:2e:a8:04:fd:48:05:a5:8b:d0:d1:68:04:5a: 11:37:65:a0:65:a6:e7:dd:79:df:00:49:3d:f8:f6:f8:42:3a: 77:9d:23:1a:3b:d9:32:1e:84:d3:6d:16:55:8c:2f:85:f3:f2: c6:cd:e1:63:f4:70:83:18:92:71:37:04:04:5c:88:ca:c7:a0: 68:99:14:6d:7c:a1:aa:b7:53:5b:57:aa:f0:5b:76:d1:39:7c: 8e:c3:5f:2c:c4:55:3f:ef:2e:e9:99:1a:5d:fb:85:a7:c0:34: 05:62:7a:b9:15:b0:ef:f3:99:03:38:0f:fe:d7:c4:75:57:e7: 17:0a:e4:cf:09:b0:9c:58:4a:1f:83:be:b7:f0:ac:9a:3d:5f: 4f:91:94:07:82:98:7d:2a:d8:f6:24:67:30:24:9f:69:1b:23: 48:50:6d:24:0f:2b:21:b1:86:82:87:e7:21:b3:79:aa:89:68: 20:3d:24:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8Rt+fdW4lV3QSm28C+fSvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YzJlMGQzZmRjMjE1YTM4OWM3MDQzY2E1YTFhMDZiZTJj NTU4ZWYwHhcNMjUxMjIwMTUwMDM2WhcNMjUxMjIxMTUwMDM2WjAzMTEwLwYDVQQD EyhjYzVkY2NmMjg5NGY4NjNhMWZhM2RkMDU5MWVkOTk1NjI2NWQ0YzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM4W6N9CtlZGnLG3llTR5TmAKdWd COXOxRcoXimthIML8HfubP2Wzj8Oy1800uQJaYC8ZV0RdfXiH0PqWoLVhRtvGQ9H uqFme9QdTktNn/XKuiEaKlHqdBdXJjq1lerwBKGM70uqZSje794zz6r50tf5lLFq CR2uDz852GiUGVBtT8/J6C5Cse+cHVLZqOkXJZzaKm2fMNstywy/0lyHRJkotfY0 rRNRanmcVpCcFqfy4AR4V2MNcLh3kmGHFAAb/uwgNm6wJLWkYdvjrkQXJnrU2QZJ 41TVz/gBA/S/xjG5iD9ai0n5VklPmwbIP/Xlp8C+3c9jGRnfJuyI5RlqDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxdzPKJT4Y6H6PdBZHtmVYmXUxIMB8GA1UdIwQY MBaAFObC4NP9whWjiccEPKWhoGvixVjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQt ZjNlMDUyYmFiMTQ0LzEvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQtZjNlMDUyYmFiMTQ0 LzEvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEg2FtyHJ XJsXBc8LnViPbm10+QmY3UtWnIshEcC+JCQmBuLDBB4WC+E3AK5Xt854RDQStVFT N3CT7jp9j9vFWuqWA7c7fVNf9KqJ/4ouqAT9SAWli9DRaARaETdloGWm59153wBJ Pfj2+EI6d50jGjvZMh6E020WVYwvhfPyxs3hY/RwgxiScTcEBFyIysegaJkUbXyh qrdTW1eq8Ft20Tl8jsNfLMRVP+8u6ZkaXfuFp8A0BWJ6uRWw7/OZAzgP/tfEdVfn FwrkzwmwnFhKH4O+t/Csmj1fT5GUB4KYfSrY9iRnMCSfaRsjSFBtJA8rIbGGgofn IbN5qoloID0k9g== -----END CERTIFICATE-----Generated at Sat Dec 20 22:51:11 2025 by rpki-client