This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft File: m5TSR2sxUeHn8DYNzk84USXu1fs.mft (raw, json) Hash identifier: uOP4kThYoGWADEKEeYMF463vShOJIBl4qjJAWVBD8TQ= Subject key identifier: 27:D3:93:F3:07:8F:8E:97:B9:09:38:AE:B4:9A:9F:FC:5D:C2:A9:EA Authority key identifier: 9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB Certificate issuer: /CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb Certificate serial: 019B3532ACC74DF14E2BC973C8BB8B976128 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 06:01:11 +0000 Manifest this update: Fri 19 Dec 2025 06:01:11 +0000 Manifest next update: Sat 20 Dec 2025 06:01:11 +0000 Files and hashes: 1: m5TSR2sxUeHn8DYNzk84USXu1fs.crl (hash: BEVNeowF4dw7oE2GxiUGMD1gOg4qUv9koYLFb2OdwYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:ac:c7:4d:f1:4e:2b:c9:73:c8:bb:8b:97:61:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb Validity Not Before: Dec 19 06:01:11 2025 GMT Not After : Dec 20 06:01:11 2025 GMT Subject: CN=27d393f3078f8e97b90938aeb49a9ffc5dc2a9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ee:94:c4:88:6d:ba:5c:22:14:b6:be:19:5b: eb:cc:3f:69:89:7e:f9:30:b9:a1:e7:bd:97:3d:06: 15:0f:67:e8:17:9b:26:6a:6f:e1:7f:41:09:1d:ea: 97:13:06:c4:80:51:ab:f7:bd:78:e6:70:bc:a4:a9: e6:51:4c:b3:16:82:c5:ae:a7:aa:93:e2:8f:2a:62: f1:1c:63:67:2a:dc:f7:1a:b0:13:0e:98:fd:51:ea: 0c:9b:c2:7c:99:6b:d0:f1:0b:03:f3:21:0b:a2:a9: 0e:b1:14:93:d8:01:ca:a5:d2:47:99:c8:0f:df:69: e5:a6:0f:ad:06:05:4d:4a:74:76:4e:4b:d9:f8:68: cd:da:ea:12:b5:00:79:63:3e:ea:b6:d1:5c:aa:25: 5c:4c:2c:6b:16:9a:44:c3:82:ed:45:61:e8:f2:a2: 16:e3:3c:1c:d8:81:40:5b:af:3d:c8:e5:5b:f4:46: b6:2b:af:19:7e:a2:11:3f:f9:01:42:35:88:c2:bc: 56:b8:c5:56:57:de:d8:93:ec:1c:4a:87:a0:cf:24: 0d:5d:b5:e8:49:6e:87:dd:c1:1e:ad:ae:9e:54:1c: 19:e2:08:10:81:f0:b8:09:82:31:f3:de:c5:50:a8: 73:02:07:cb:ad:c5:b7:bd:9f:06:3c:f8:d6:5a:9f: 7d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D3:93:F3:07:8F:8E:97:B9:09:38:AE:B4:9A:9F:FC:5D:C2:A9:EA X509v3 Authority Key Identifier: keyid:9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:f5:5e:fe:f6:c9:96:ea:29:e9:a9:ea:72:81:31:77:ee:35: 93:b5:7e:de:77:17:3b:03:fb:75:a0:26:1f:f1:2d:b8:ba:cf: aa:eb:a1:fc:76:8a:23:3a:5b:2d:6f:28:5d:31:52:ea:96:60: 21:26:38:c5:97:18:15:78:9a:04:75:18:69:97:5b:89:4c:81: d1:6e:e5:7b:a1:82:b6:91:b4:b0:d8:5d:59:88:79:8e:d1:ff: f0:d7:57:f5:8d:e0:ec:4a:35:2d:38:7b:53:25:b6:73:ed:80: 33:41:d4:05:77:82:38:97:92:09:99:73:49:49:be:9a:80:32: 33:f4:b7:53:7a:cf:33:dc:3d:0b:25:f6:db:8e:ab:d9:11:68: 33:ab:c2:d3:21:30:39:8b:1d:92:10:d0:91:99:8a:6e:e4:3e: 81:80:40:cc:e7:c2:0a:ae:26:3d:ee:bd:f2:83:87:bc:c2:94: d1:e5:97:98:dd:77:ba:35:d7:a5:50:f6:b1:c5:cd:38:cd:f4: 05:48:d1:b9:29:32:0a:ed:85:f2:ed:c3:9f:f1:ea:84:94:4a: 81:ad:b8:b1:e4:24:fc:30:82:65:50:85:1c:b0:51:88:3c:72: 99:30:6e:c8:58:ab:01:31:e3:77:ea:73:7b:5e:32:31:f3:a6: 27:28:07:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MqzHTfFOK8lzyLuLl2EoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliOTRkMjQ3NmIzMTUxZTFlN2YwMzYwZGNlNGYzODUxMjVl ZWQ1ZmIwHhcNMjUxMjE5MDYwMTExWhcNMjUxMjIwMDYwMTExWjAzMTEwLwYDVQQD EygyN2QzOTNmMzA3OGY4ZTk3YjkwOTM4YWViNDlhOWZmYzVkYzJhOWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu6UxIhtulwiFLa+GVvrzD9piX75 MLmh572XPQYVD2foF5smam/hf0EJHeqXEwbEgFGr97145nC8pKnmUUyzFoLFrqeq k+KPKmLxHGNnKtz3GrATDpj9UeoMm8J8mWvQ8QsD8yELoqkOsRST2AHKpdJHmcgP 32nlpg+tBgVNSnR2TkvZ+GjN2uoStQB5Yz7qttFcqiVcTCxrFppEw4LtRWHo8qIW 4zwc2IFAW689yOVb9Ea2K68ZfqIRP/kBQjWIwrxWuMVWV97Yk+wcSoegzyQNXbXo SW6H3cEera6eVBwZ4ggQgfC4CYIx897FUKhzAgfLrcW3vZ8GPPjWWp99yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfTk/MHj46XuQk4rrSan/xdwqnqMB8GA1UdIwQY MBaAFJuU0kdrMVHh5/A2Dc5POFEl7tX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTVUU1Iyc3hVZUhuOERZTnprODRVU1h1MWZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8zYjc0ZjAtZTc1My00NjY5LTg1ZmQt ODIyZWFmMGQyMmIwLzEvbTVUU1Iyc3hVZUhuOERZTnprODRVU1h1MWZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8zYjc0ZjAtZTc1My00NjY5LTg1ZmQtODIyZWFmMGQyMmIw LzEvbTVUU1Iyc3hVZUhuOERZTnprODRVU1h1MWZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPVe/vbJ luop6anqcoExd+41k7V+3ncXOwP7daAmH/EtuLrPquuh/HaKIzpbLW8oXTFS6pZg ISY4xZcYFXiaBHUYaZdbiUyB0W7le6GCtpG0sNhdWYh5jtH/8NdX9Y3g7Eo1LTh7 UyW2c+2AM0HUBXeCOJeSCZlzSUm+moAyM/S3U3rPM9w9CyX2246r2RFoM6vC0yEw OYsdkhDQkZmKbuQ+gYBAzOfCCq4mPe698oOHvMKU0eWXmN13ujXXpVD2scXNOM30 BUjRuSkyCu2F8u3Dn/HqhJRKga24seQk/DCCZVCFHLBRiDxymTBuyFirATHjd+pz e14yMfOmJygHdw== -----END CERTIFICATE-----Generated at Fri Dec 19 07:58:31 2025 by rpki-client