This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft File: 5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json) Hash identifier: b0LSixWvvq1R+EW8LTDQAlBLmQMMkPVUK93fS829fMg= Subject key identifier: D7:26:13:21:9D:38:DE:87:8C:1A:6C:BE:BC:71:C0:4A:8D:48:A6:40 Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc Certificate serial: 019B4F29B3C05361472EAA2C4D3878E4F63B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft Manifest number: 143E Signing time: Wed 24 Dec 2025 07:01:31 +0000 Manifest this update: Wed 24 Dec 2025 07:01:31 +0000 Manifest next update: Thu 25 Dec 2025 07:01:31 +0000 Files and hashes: 1: 1-KxbHOd8IAxtF53PSxnQK1T4mVs.roa (hash: kPs2MrTsmIOrVH1y0/AHb3IDoxZ35cj2beaiWFS9sJI=) 2: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: H5fjyOJdcORUd4RHu+msPTy2ETprdoqiDy301Kdf5zE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:b3:c0:53:61:47:2e:aa:2c:4d:38:78:e4:f6:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc Validity Not Before: Dec 24 07:01:31 2025 GMT Not After : Dec 25 07:01:31 2025 GMT Subject: CN=d72613219d38de878c1a6cbebc71c04a8d48a640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bc:0f:5c:01:ba:d0:fd:4c:72:47:b2:cf:b0: f3:3b:07:f9:e2:d7:e8:21:d3:e5:28:f3:56:0e:9a: aa:36:11:63:86:66:8d:e3:7d:a4:ee:3b:12:92:c3: a7:df:ad:b0:de:68:e0:42:3f:89:c4:03:50:f2:6a: 25:53:61:af:55:e1:1d:17:cc:74:14:86:c5:ed:b0: 4a:71:fe:5d:19:89:35:df:f0:89:ec:7e:2e:bb:07: 40:17:8d:16:e6:67:31:0e:27:c3:ed:2c:d2:48:5f: dc:15:10:69:e2:fc:a4:5c:49:1e:84:09:14:48:97: fa:77:87:1e:0a:2f:df:87:a6:c7:3f:da:de:80:d7: 2f:6b:e1:b5:25:33:b9:7c:d7:1d:bc:06:50:45:61: 06:57:e1:77:a5:2a:12:64:fc:9b:5e:b9:64:0e:47: ee:a5:32:26:8d:0c:e3:71:bf:fc:b9:b0:97:69:1d: 98:d8:d0:9c:2f:ba:13:9a:26:66:5f:b2:81:39:ef: e8:13:b2:20:44:e5:cd:86:f0:d9:20:59:dd:fa:fd: 47:dd:ce:f8:9a:fe:d7:19:2b:a8:c6:10:49:e3:ea: 3e:36:d5:56:1a:c0:9c:e8:8b:99:90:44:89:e8:f5: 15:40:e2:41:b7:21:28:62:97:78:30:85:fa:47:3c: 4a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:26:13:21:9D:38:DE:87:8C:1A:6C:BE:BC:71:C0:4A:8D:48:A6:40 X509v3 Authority Key Identifier: keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:dc:40:62:c7:41:48:c3:a1:f7:4f:98:74:0d:b6:8d:4e:42: 9e:76:ae:a4:d4:8a:af:66:b9:0c:dc:57:b7:ed:25:ee:70:44: 55:2d:d9:df:51:35:cb:e3:f3:c0:f0:59:93:cf:00:70:f7:a4: d7:25:f4:16:58:33:90:8f:48:bf:06:d2:b9:4a:5c:d9:31:c8: 9b:81:bc:56:88:fa:51:6c:49:9f:d4:6e:86:2e:5a:dc:78:32: b8:cd:b2:78:9e:e4:ab:08:95:39:fa:1f:4f:69:6d:d2:46:a8: ed:23:07:6b:13:0b:c1:06:a7:57:40:f1:c7:6c:7d:56:f4:b7: c6:7b:68:5f:b4:ed:4f:5a:f4:61:da:fc:66:97:74:b4:b9:8b: 8e:70:c8:69:61:3f:40:67:b1:6b:46:02:a9:08:64:dd:27:e1: 65:9b:52:83:ca:b3:99:9d:74:8b:9d:d5:e3:42:84:59:c8:d2: 3c:06:93:76:fe:c4:cf:9e:aa:97:5e:69:fa:70:ca:dc:97:b7: 92:5d:00:68:6f:0f:d4:50:50:e4:29:b6:33:4a:dc:27:da:8b: 79:b0:89:42:22:2d:5d:c5:d0:5a:31:7c:39:0e:e8:fb:22:61: e0:a9:9c:9f:a3:89:f0:22:86:fd:6f:f6:d5:73:21:44:43:9b: c0:ab:b7:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKbPAU2FHLqosTTh45PY7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZTY5MDY4YThiMWZiN2ZhMDc5NWJhZjliYjNhYjg2Yzk0 ZTQ2ZmMwHhcNMjUxMjI0MDcwMTMxWhcNMjUxMjI1MDcwMTMxWjAzMTEwLwYDVQQD EyhkNzI2MTMyMTlkMzhkZTg3OGMxYTZjYmViYzcxYzA0YThkNDhhNjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrwPXAG60P1Mckeyz7DzOwf54tfo IdPlKPNWDpqqNhFjhmaN432k7jsSksOn362w3mjgQj+JxANQ8molU2GvVeEdF8x0 FIbF7bBKcf5dGYk13/CJ7H4uuwdAF40W5mcxDifD7SzSSF/cFRBp4vykXEkehAkU SJf6d4ceCi/fh6bHP9regNcva+G1JTO5fNcdvAZQRWEGV+F3pSoSZPybXrlkDkfu pTImjQzjcb/8ubCXaR2Y2NCcL7oTmiZmX7KBOe/oE7IgROXNhvDZIFnd+v1H3c74 mv7XGSuoxhBJ4+o+NtVWGsCc6IuZkESJ6PUVQOJBtyEoYpd4MIX6RzxKjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcmEyGdON6HjBpsvrxxwEqNSKZAMB8GA1UdIwQY MBaAFOXmkGiosft/oHlbr5uzq4bJTkb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWVhUWFLaXgtMy1nZVZ1dm03T3Joc2xPUnZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82MjlmNGQtMzkyOS00NjFlLWExOTQt ZGQxMDI4OTkxZmYzLzEvNWVhUWFLaXgtMy1nZVZ1dm03T3Joc2xPUnZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82MjlmNGQtMzkyOS00NjFlLWExOTQtZGQxMDI4OTkxZmYz LzEvNWVhUWFLaXgtMy1nZVZ1dm03T3Joc2xPUnZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdxAYsdB SMOh90+YdA22jU5CnnaupNSKr2a5DNxXt+0l7nBEVS3Z31E1y+PzwPBZk88AcPek 1yX0FlgzkI9IvwbSuUpc2THIm4G8Voj6UWxJn9Ruhi5a3HgyuM2yeJ7kqwiVOfof T2lt0kao7SMHaxMLwQanV0Dxx2x9VvS3xntoX7TtT1r0Ydr8Zpd0tLmLjnDIaWE/ QGexa0YCqQhk3SfhZZtSg8qzmZ10i53V40KEWcjSPAaTdv7Ez56ql15p+nDK3Je3 kl0AaG8P1FBQ5Cm2M0rcJ9qLebCJQiItXcXQWjF8OQ7o+yJh4Kmcn6OJ8CKG/W/2 1XMhREObwKu3qA== -----END CERTIFICATE-----Generated at Wed Dec 24 10:30:54 2025 by rpki-client