This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft File: 5F0K3ClN02bfatqIATTb0OaIzPc.mft (raw, json) Hash identifier: UxC7bFR0RoFZZ+8zl0v4cq+Cw42XHVkxmQPXAJFYXjc= Subject key identifier: 97:4C:7E:7F:C0:8F:96:1D:0E:AD:B0:58:2E:31:4A:FC:9F:69:55:1E Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7 Certificate issuer: /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7 Certificate serial: 019B44DD2461F324E166926039B8EB530C2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 07:01:41 +0000 Manifest this update: Mon 22 Dec 2025 07:01:41 +0000 Manifest next update: Tue 23 Dec 2025 07:01:41 +0000 Files and hashes: 1: 5F0K3ClN02bfatqIATTb0OaIzPc.crl (hash: 04CutjlbQ7yTjPtCpsTEOfpWVR5DmOz3gS7A9Z2q0+g=) 2: 6_MzG3BJa4ElBBdEF9-BTMf874s.roa (hash: JSnJz2i5mq2wdtkVMI+9lJsfr8mdn46eUbiIUghmOwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dd:24:61:f3:24:e1:66:92:60:39:b8:eb:53:0c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7 Validity Not Before: Dec 22 07:01:41 2025 GMT Not After : Dec 23 07:01:41 2025 GMT Subject: CN=974c7e7fc08f961d0eadb0582e314afc9f69551e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a7:80:0c:d2:7a:33:f1:b0:a5:33:7a:7b:0c: b9:19:99:e1:55:24:c7:05:d3:d6:d4:e5:dc:41:e7: 4d:f2:7f:5e:d4:04:fe:2d:28:76:b0:be:13:d6:61: 39:cd:2d:fa:51:8c:19:5b:c9:5b:54:2a:d4:42:2d: 00:34:f1:96:8c:a6:06:7a:c7:52:1c:94:93:a1:e1: e3:9e:ae:c5:ce:cc:cd:87:20:ae:11:11:76:13:1a: 09:cf:22:ff:b2:f6:98:b9:8f:be:c0:2c:72:d4:b7: 66:1c:ea:1a:44:ca:ce:6b:42:a4:4a:ce:41:b4:2a: 6d:26:3c:99:40:26:05:ad:db:0c:5c:a2:0e:c0:cb: 61:0f:36:c4:63:6d:90:e5:2d:2c:5a:16:fb:64:11: 8e:23:43:22:e5:bf:b9:1f:7e:bf:a1:17:ab:20:b0: 3a:e4:40:27:6b:96:91:ca:c8:7a:09:b6:c0:ee:d5: 21:0a:10:5d:da:fb:d8:a3:d3:cb:ff:65:a8:76:16: 71:75:62:6a:fc:50:8a:9c:9e:86:fd:c7:0c:5b:14: ea:8b:d7:59:d4:4d:dc:c1:10:64:ad:62:cf:91:05: 9d:26:a4:a5:df:c2:9c:16:a7:36:c6:b4:cc:52:d3: 5e:43:e1:87:a8:20:76:1f:76:7b:7b:30:ac:74:5a: db:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4C:7E:7F:C0:8F:96:1D:0E:AD:B0:58:2E:31:4A:FC:9F:69:55:1E X509v3 Authority Key Identifier: keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e3:fe:94:12:7c:04:65:a1:71:aa:c8:5a:13:e5:f1:2d:51: 91:2b:c4:3a:20:52:72:31:8b:0f:11:c1:ea:b1:18:62:ba:82: bb:7f:ef:a8:58:f5:c9:15:87:95:96:7a:c3:ea:2b:94:e3:c7: d0:72:e1:24:41:94:7e:70:9d:43:a4:2d:89:8d:2a:54:3e:d9: 77:73:05:b5:e7:1d:02:8a:7f:7d:6c:2c:01:c0:5a:06:81:9f: 14:30:0e:dd:84:51:48:a4:3a:1b:cd:c3:44:ba:af:d5:f2:fd: 8c:e6:48:3c:a7:85:84:eb:5c:38:ef:ae:b9:31:f3:69:45:78: 7d:14:b7:35:d0:ad:fd:fb:65:23:b2:ac:39:dd:24:ac:77:40: a5:86:21:2c:5f:4d:fc:23:29:4f:9f:8e:1f:79:c7:f1:24:6c: e2:c3:73:48:17:da:39:03:e1:ae:2a:90:78:72:af:ee:38:ca: 66:53:ff:ff:1d:bf:d2:aa:ec:ab:3a:20:08:f5:60:10:3c:9c: 1c:3e:ff:e6:1b:9f:b9:c7:4e:37:c4:08:47:45:12:c5:df:92: af:e7:a3:7d:b7:a2:b3:36:f4:37:99:61:f8:06:c5:57:0f:5a: ac:77:e5:22:73:ba:be:ce:44:97:25:83:be:da:5e:20:c8:5a: b2:ec:81:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3SRh8yThZpJgObjrUwwsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NWQwYWRjMjk0ZGQzNjZkZjZhZGE4ODAxMzRkYmQwZTY4 OGNjZjcwHhcNMjUxMjIyMDcwMTQxWhcNMjUxMjIzMDcwMTQxWjAzMTEwLwYDVQQD Eyg5NzRjN2U3ZmMwOGY5NjFkMGVhZGIwNTgyZTMxNGFmYzlmNjk1NTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqeADNJ6M/GwpTN6ewy5GZnhVSTH BdPW1OXcQedN8n9e1AT+LSh2sL4T1mE5zS36UYwZW8lbVCrUQi0ANPGWjKYGesdS HJSToeHjnq7FzszNhyCuERF2ExoJzyL/svaYuY++wCxy1LdmHOoaRMrOa0KkSs5B tCptJjyZQCYFrdsMXKIOwMthDzbEY22Q5S0sWhb7ZBGOI0Mi5b+5H36/oRerILA6 5EAna5aRysh6CbbA7tUhChBd2vvYo9PL/2WodhZxdWJq/FCKnJ6G/ccMWxTqi9dZ 1E3cwRBkrWLPkQWdJqSl38KcFqc2xrTMUtNeQ+GHqCB2H3Z7ezCsdFrbkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdMfn/Aj5YdDq2wWC4xSvyfaVUeMB8GA1UdIwQY MBaAFORdCtwpTdNm32raiAE029DmiMz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUYwSzNDbE4wMmJmYXRxSUFUVGIwT2FJelBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kZGYxZTEtZjA3ZS00YmFkLTg0YTgt ZmUyNzM1OWZkN2VhLzEvNUYwSzNDbE4wMmJmYXRxSUFUVGIwT2FJelBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kZGYxZTEtZjA3ZS00YmFkLTg0YTgtZmUyNzM1OWZkN2Vh LzEvNUYwSzNDbE4wMmJmYXRxSUFUVGIwT2FJelBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+P+lBJ8 BGWhcarIWhPl8S1RkSvEOiBScjGLDxHB6rEYYrqCu3/vqFj1yRWHlZZ6w+orlOPH 0HLhJEGUfnCdQ6QtiY0qVD7Zd3MFtecdAop/fWwsAcBaBoGfFDAO3YRRSKQ6G83D RLqv1fL9jOZIPKeFhOtcOO+uuTHzaUV4fRS3NdCt/ftlI7KsOd0krHdApYYhLF9N /CMpT5+OH3nH8SRs4sNzSBfaOQPhriqQeHKv7jjKZlP//x2/0qrsqzogCPVgEDyc HD7/5hufucdON8QIR0USxd+Sr+ejfbeiszb0N5lh+AbFVw9arHflInO6vs5ElyWD vtpeIMhasuyBYQ== -----END CERTIFICATE-----Generated at Mon Dec 22 10:37:11 2025 by rpki-client