This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft File: 5llE5PrhnBWib8tfJzL_G6I9NU0.mft (raw, json) Hash identifier: Yni8I90J60gzcGHkAQ0ATzKpvXFnuDBx7pYTWWYq8io= Subject key identifier: 6D:9B:89:3A:05:63:57:02:3A:6A:F4:D2:F1:90:F5:88:29:B0:66:24 Authority key identifier: E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D Certificate issuer: /CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d Certificate serial: 019B3AFD34130B373E366AE0EDE1E14B6A0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft Manifest number: 0446 Signing time: Sat 20 Dec 2025 09:00:30 +0000 Manifest this update: Sat 20 Dec 2025 09:00:30 +0000 Manifest next update: Sun 21 Dec 2025 09:00:30 +0000 Files and hashes: 1: 5llE5PrhnBWib8tfJzL_G6I9NU0.crl (hash: OEX+6SRag//VclIcIo6bbDYnAPE0B9n/G03LUoeuMqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:34:13:0b:37:3e:36:6a:e0:ed:e1:e1:4b:6a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d Validity Not Before: Dec 20 09:00:30 2025 GMT Not After : Dec 21 09:00:30 2025 GMT Subject: CN=6d9b893a056357023a6af4d2f190f58829b06624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f1:5c:6e:49:1e:bc:c8:01:ef:ba:d0:78:62: 4c:0d:9f:ff:0e:3d:f2:b3:4d:0e:da:80:b0:83:b8: 3c:12:97:06:a2:b6:34:2e:4f:1d:51:42:1f:e5:6b: 07:67:a9:d3:70:38:67:54:4d:76:4e:0f:08:a2:28: 02:de:2b:70:58:53:e7:a7:aa:d4:60:61:9d:9c:3c: ef:3c:27:f8:ce:96:35:c7:9f:32:08:f1:90:fc:06: c5:2d:80:c4:6c:fa:ba:d6:f8:6b:af:90:b1:e6:34: bb:a0:6d:34:5c:6b:ec:83:e3:12:d3:a1:2d:54:b4: af:a9:22:4c:b2:1f:00:aa:78:1d:c5:5c:41:23:bc: d5:ab:65:98:89:ad:1a:d5:af:51:71:02:69:bd:6e: 64:04:6a:d7:e1:97:9e:99:4e:5c:d6:88:6c:ce:98: df:a6:d0:f4:2a:ff:c7:ac:cb:74:69:32:5f:fd:97: 96:9d:41:35:22:5c:6d:03:96:68:6b:7e:6b:bb:07: b9:a3:65:2b:86:30:90:d1:1b:7e:c5:a5:63:2c:ef: e3:77:9b:b2:9f:2f:e3:9e:d5:a5:75:4b:e9:57:2e: 8f:a6:e7:d0:40:2b:79:51:0a:41:d0:b2:da:ce:2e: 6e:a6:e4:2e:93:2c:72:41:56:67:52:e8:2f:f1:62: fe:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9B:89:3A:05:63:57:02:3A:6A:F4:D2:F1:90:F5:88:29:B0:66:24 X509v3 Authority Key Identifier: keyid:E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:70:84:1a:32:1a:49:75:ce:81:ca:f6:8b:4d:a2:28:d3:37: 9c:9c:47:e2:5f:50:f5:26:9b:1c:f2:e7:44:21:ce:7c:e7:a7: 92:33:f9:cd:bb:99:30:76:e3:30:95:03:6a:52:05:f7:62:0c: 2c:79:e6:9e:08:17:93:5e:05:c5:aa:e5:40:6e:25:54:ba:ab: bf:f6:d6:a6:fa:4c:4d:f0:41:d0:6d:ee:3d:aa:24:81:7e:69: b3:51:a5:c5:2c:3f:83:12:0b:92:5d:1b:07:a2:03:5d:de:a6: b5:0a:8c:2a:e4:19:0b:b1:2f:f9:24:e0:f2:26:d6:50:84:b5: d6:48:7f:1b:3f:e3:8b:17:13:04:33:de:00:35:23:d6:27:82: b2:e4:b0:a9:81:ae:4f:24:0c:cc:96:9a:43:46:c4:8b:c3:dc: df:a1:7b:8c:38:24:a0:f8:33:31:98:64:b5:f2:b8:cf:00:d2: 1b:74:e8:b7:34:10:53:24:91:3a:0d:d6:4c:6e:4f:40:eb:c8: bb:01:a6:a9:23:fb:85:c4:e1:b6:05:b7:23:8b:8f:fc:19:4e: 5e:4b:53:d9:11:be:03:45:f7:c6:8a:79:7a:a6:cd:a5:8c:b9: 5f:fd:65:c5:99:79:2a:2b:de:fd:49:c7:fd:e4:ad:4c:12:4b: 9e:4c:75:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/TQTCzc+Nmrg7eHhS2oMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NTk0NGU0ZmFlMTljMTVhMjZmY2I1ZjI3MzJmZjFiYTIz ZDM1NGQwHhcNMjUxMjIwMDkwMDMwWhcNMjUxMjIxMDkwMDMwWjAzMTEwLwYDVQQD Eyg2ZDliODkzYTA1NjM1NzAyM2E2YWY0ZDJmMTkwZjU4ODI5YjA2NjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfFcbkkevMgB77rQeGJMDZ//Dj3y s00O2oCwg7g8EpcGorY0Lk8dUUIf5WsHZ6nTcDhnVE12Tg8IoigC3itwWFPnp6rU YGGdnDzvPCf4zpY1x58yCPGQ/AbFLYDEbPq61vhrr5Cx5jS7oG00XGvsg+MS06Et VLSvqSJMsh8AqngdxVxBI7zVq2WYia0a1a9RcQJpvW5kBGrX4ZeemU5c1ohszpjf ptD0Kv/HrMt0aTJf/ZeWnUE1IlxtA5Zoa35ruwe5o2UrhjCQ0Rt+xaVjLO/jd5uy ny/jntWldUvpVy6PpufQQCt5UQpB0LLazi5upuQukyxyQVZnUugv8WL+GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2biToFY1cCOmr00vGQ9YgpsGYkMB8GA1UdIwQY MBaAFOZZROT64ZwVom/LXycy/xuiPTVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWxsRTVQcmhuQldpYjh0Zkp6TF9HNkk5TlUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83M2RhMGQtZmM4Mi00NTcyLTg4ZDMt Njk4Y2M3MjY4ODgwLzEvNWxsRTVQcmhuQldpYjh0Zkp6TF9HNkk5TlUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83M2RhMGQtZmM4Mi00NTcyLTg4ZDMtNjk4Y2M3MjY4ODgw LzEvNWxsRTVQcmhuQldpYjh0Zkp6TF9HNkk5TlUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnCEGjIa SXXOgcr2i02iKNM3nJxH4l9Q9SabHPLnRCHOfOenkjP5zbuZMHbjMJUDalIF92IM LHnmnggXk14FxarlQG4lVLqrv/bWpvpMTfBB0G3uPaokgX5ps1GlxSw/gxILkl0b B6IDXd6mtQqMKuQZC7Ev+STg8ibWUIS11kh/Gz/jixcTBDPeADUj1ieCsuSwqYGu TyQMzJaaQ0bEi8Pc36F7jDgkoPgzMZhktfK4zwDSG3TotzQQUySROg3WTG5PQOvI uwGmqSP7hcThtgW3I4uP/BlOXktT2RG+A0X3xop5eqbNpYy5X/1lxZl5Kive/UnH /eStTBJLnkx1zw== -----END CERTIFICATE-----Generated at Sat Dec 20 11:31:04 2025 by rpki-client