This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft File: 5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json) Hash identifier: +8PEpr60TzP+tpBepMaQSjVhDJKpGoDuHd2munligKY= Subject key identifier: A0:E8:6C:CE:92:50:41:EE:5D:86:EB:A9:BA:52:2B:99:3E:62:A0:50 Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10 Certificate issuer: /CN=e67d7b3570077064013da18e29e690cd4c9bd710 Certificate serial: 019B3BA205618BEB21B362AF6655100692D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft Manifest number: 046B Signing time: Sat 20 Dec 2025 12:00:32 +0000 Manifest this update: Sat 20 Dec 2025 12:00:32 +0000 Manifest next update: Sun 21 Dec 2025 12:00:32 +0000 Files and hashes: 1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: 7pItr+wPV3XBgJN5bnAqdyUZxfUcBnJuB3SiNAsHX4Y=) 2: UXfwFJz04X4XmU1ABHkr-Q0ovq0.roa (hash: vTofq9wYPlysSoUgx6HvDr7C9PTa+inohQrNa6Pfbqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:05:61:8b:eb:21:b3:62:af:66:55:10:06:92:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710 Validity Not Before: Dec 20 12:00:32 2025 GMT Not After : Dec 21 12:00:32 2025 GMT Subject: CN=a0e86cce925041ee5d86eba9ba522b993e62a050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3f:4d:db:9b:78:19:40:0b:b6:0a:40:97:91: 94:31:9f:d7:4c:22:47:52:d4:f4:f2:ee:e5:e5:91: a4:8e:bf:90:ef:36:c2:a0:b2:8d:c7:ef:3c:82:79: 95:11:54:2a:ea:5d:a3:24:e4:7b:e4:d2:df:6c:e4: f3:b5:21:3c:58:54:a3:c3:d8:ad:f8:4e:4c:c8:2a: 4b:85:2d:cb:fc:ea:d8:cf:ea:9a:97:dd:ae:ff:ed: ab:b9:e2:b4:5d:b5:72:35:51:2f:cb:ee:08:1b:e5: 6f:cd:95:96:00:67:b4:72:28:3e:b9:d8:3c:2a:5d: cb:ad:c4:8b:b7:d9:81:6c:b8:38:19:6a:56:ae:3b: 93:5e:e1:90:da:00:5c:80:61:5e:a0:e5:2c:c6:f7: 11:b5:88:24:8f:8f:aa:25:c2:34:65:14:b5:60:01: 15:3a:91:8b:cc:c5:90:cc:28:98:43:5f:8a:54:2a: f9:9c:2a:f3:89:b6:63:00:2c:a6:71:c9:be:48:bb: 65:f0:d3:f1:89:f7:1a:af:f3:01:e4:77:3c:5f:1e: 0d:c5:a0:0f:0b:7d:85:e4:02:4d:74:25:b5:a6:8d: bb:6d:23:b5:4a:54:9a:fa:bf:4e:b8:d5:8a:80:f2: e6:61:b0:1a:11:cd:c6:d2:d8:07:6d:2f:f2:67:4b: 96:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E8:6C:CE:92:50:41:EE:5D:86:EB:A9:BA:52:2B:99:3E:62:A0:50 X509v3 Authority Key Identifier: keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:34:fc:05:a8:8f:7f:c4:60:26:d1:e9:d4:ba:65:51:e4:87: 78:9f:1b:50:ef:38:2d:88:22:41:96:0a:1b:27:fa:b5:56:b7: 59:05:58:4e:b9:ae:5f:e4:c5:10:c0:d9:01:a1:09:10:ae:1b: ee:10:8c:59:e7:22:74:86:f5:59:a8:ab:46:3d:d7:4a:d6:d2: 00:5b:c9:8d:6b:bb:5a:76:a8:8e:50:d6:5f:f5:ba:d8:10:a9: dc:63:6d:df:12:17:98:21:1c:7c:27:31:a2:27:28:61:da:4a: cf:75:40:c2:68:b3:f1:83:50:f6:75:36:33:16:09:c3:3b:4e: 39:61:66:73:55:77:51:d3:89:d3:c9:1a:74:30:d5:d2:04:f1: 0f:14:fe:30:43:d7:6d:fa:39:fd:eb:fa:2d:cb:83:63:ef:dd: 31:c1:3a:41:d5:25:86:66:28:a2:2e:4b:cb:85:83:64:f8:b6: 95:5c:9f:1e:68:31:71:ca:e6:31:b3:34:4e:f9:60:75:5b:fa: f0:2c:51:54:e4:6e:2e:29:1c:26:f8:cd:8c:ef:9a:92:75:e3: d4:d6:f6:74:e1:af:0f:77:f9:45:91:9b:2d:44:16:13:19:e2: 3c:02:d9:81:49:a2:d3:18:34:a7:38:68:4a:e5:92:0d:55:e6: 6d:54:3d:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ogVhi+shs2KvZlUQBpLXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2N2Q3YjM1NzAwNzcwNjQwMTNkYTE4ZTI5ZTY5MGNkNGM5 YmQ3MTAwHhcNMjUxMjIwMTIwMDMyWhcNMjUxMjIxMTIwMDMyWjAzMTEwLwYDVQQD EyhhMGU4NmNjZTkyNTA0MWVlNWQ4NmViYTliYTUyMmI5OTNlNjJhMDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD9N25t4GUALtgpAl5GUMZ/XTCJH UtT08u7l5ZGkjr+Q7zbCoLKNx+88gnmVEVQq6l2jJOR75NLfbOTztSE8WFSjw9it +E5MyCpLhS3L/OrYz+qal92u/+2rueK0XbVyNVEvy+4IG+VvzZWWAGe0cig+udg8 Kl3LrcSLt9mBbLg4GWpWrjuTXuGQ2gBcgGFeoOUsxvcRtYgkj4+qJcI0ZRS1YAEV OpGLzMWQzCiYQ1+KVCr5nCrzibZjACymccm+SLtl8NPxifcar/MB5Hc8Xx4NxaAP C32F5AJNdCW1po27bSO1SlSa+r9OuNWKgPLmYbAaEc3G0tgHbS/yZ0uWyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDobM6SUEHuXYbrqbpSK5k+YqBQMB8GA1UdIwQY MBaAFOZ9ezVwB3BkAT2hjinmkM1Mm9cQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lYjdlMGMtNTlhMS00ZjkzLThiMjct YWM0ODgzZTQ3NjY1LzEvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9lYjdlMGMtNTlhMS00ZjkzLThiMjctYWM0ODgzZTQ3NjY1 LzEvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTT8BaiP f8RgJtHp1LplUeSHeJ8bUO84LYgiQZYKGyf6tVa3WQVYTrmuX+TFEMDZAaEJEK4b 7hCMWecidIb1WairRj3XStbSAFvJjWu7WnaojlDWX/W62BCp3GNt3xIXmCEcfCcx oicoYdpKz3VAwmiz8YNQ9nU2MxYJwztOOWFmc1V3UdOJ08kadDDV0gTxDxT+MEPX bfo5/ev6LcuDY+/dMcE6QdUlhmYooi5Ly4WDZPi2lVyfHmgxccrmMbM0TvlgdVv6 8CxRVORuLikcJvjNjO+aknXj1Nb2dOGvD3f5RZGbLUQWExniPALZgUmi0xg0pzho SuWSDVXmbVQ9JA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:17:22 2025 by rpki-client