This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft File: 5o9MhddoNjPDOOA92OykR78_Z4U.mft (raw, json) Hash identifier: l2q/00qxxtdPSJadHCnoBA+9e4D8j0gcalKVdiuilH0= Subject key identifier: 8E:0A:81:E8:06:4E:E8:07:62:90:98:95:39:6C:F7:6C:1A:5B:20:3C Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85 Certificate issuer: /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785 Certificate serial: 019B59772E3FDCB9289ECE273230C6946149 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft Manifest number: 0CDA Signing time: Fri 26 Dec 2025 07:02:21 +0000 Manifest this update: Fri 26 Dec 2025 07:02:21 +0000 Manifest next update: Sat 27 Dec 2025 07:02:21 +0000 Files and hashes: 1: 5o9MhddoNjPDOOA92OykR78_Z4U.crl (hash: gRpDXr7k1UEu167I/+Rqk4QCxZs8Hze5zN8zuOAtRco=) 2: n9muJIRBw4eBvZP1hvt-YKWhQ1g.roa (hash: MB5Zeb9aar2OAVcUrab3R1409lEJyOeTnWEExzpIcts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:2e:3f:dc:b9:28:9e:ce:27:32:30:c6:94:61:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785 Validity Not Before: Dec 26 07:02:21 2025 GMT Not After : Dec 27 07:02:21 2025 GMT Subject: CN=8e0a81e8064ee80762909895396cf76c1a5b203c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ee:50:bc:6d:55:06:0a:c6:84:6f:7d:36:f1: 54:96:ca:42:a3:e9:d4:93:d6:24:9c:51:7c:14:29: 21:ca:23:96:39:57:f1:13:68:4d:2a:ed:06:9c:9e: 35:8e:a6:95:da:c3:84:69:c8:93:9b:bd:36:f1:11: b9:9e:a3:e2:91:1b:8e:45:88:ab:80:ed:39:a6:ea: de:d0:04:ec:b2:22:f3:eb:cb:03:e0:11:be:fc:f4: af:71:e2:0e:5a:f2:af:e5:ce:9a:ea:6a:86:50:0d: 4d:b6:68:c4:9a:d5:95:cc:f5:32:56:c8:0e:65:51: 53:ee:c3:30:8d:96:bc:d6:8b:20:32:27:1e:88:53: 2a:a6:f2:ea:2f:3f:73:2c:00:43:46:ca:54:5b:a9: 63:b7:5b:24:22:19:b4:a7:e4:ac:f7:59:ac:7f:8d: f6:a7:4b:08:a6:5a:03:2c:18:3a:98:a1:fe:bc:a9: 19:4c:b1:c2:b2:ea:d3:a7:41:8f:dd:26:e7:c6:2e: 10:f9:5f:ec:af:96:6f:ea:ae:99:26:68:95:0a:86: 55:69:69:9b:13:3e:35:81:88:a2:6e:cc:c7:9d:5d: be:1d:e8:7f:95:ad:69:5a:a2:59:cd:8a:09:80:6a: a0:9b:23:e2:a1:01:c7:47:fc:49:84:0f:c6:b5:3e: 42:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0A:81:E8:06:4E:E8:07:62:90:98:95:39:6C:F7:6C:1A:5B:20:3C X509v3 Authority Key Identifier: keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:39:b7:80:11:cb:e0:ae:b7:8c:09:43:e3:cc:42:ae:4c:a6: 63:55:b8:5a:65:2b:e9:3d:04:11:8d:8e:1e:63:af:3d:fb:21: f2:57:01:5f:94:1c:f1:41:33:66:2e:e6:b7:e1:e2:bd:c5:8d: fe:24:a0:8b:82:f7:4a:1c:1d:d1:66:d4:c3:f9:44:ce:c6:fa: e8:15:ec:29:73:51:c8:2f:78:1e:37:02:1f:5b:d1:e6:02:4f: 46:cd:1e:b4:89:d1:22:12:b2:32:e3:4c:dd:b8:da:da:c3:6e: 8d:84:aa:3a:dc:15:35:2a:57:4d:5e:00:cb:81:16:7e:f7:ca: 51:ba:07:d8:07:78:03:48:94:b5:0a:fb:4b:67:cb:79:97:68: 15:37:e9:44:13:dd:7c:f1:52:d4:d0:58:33:13:b0:bd:e2:56: 83:06:dc:1e:3a:2c:71:42:a9:4a:58:57:48:07:a8:ca:ee:6e: 47:7c:39:27:fe:17:3f:71:b2:48:5d:dd:a7:2b:9b:32:e6:88: a8:88:e6:ec:13:53:0b:cc:96:c8:31:bc:e5:f6:b1:ac:f1:67: aa:cf:c6:9a:fc:2b:d8:48:4f:6b:d6:47:a9:c5:20:de:44:c4: 53:2a:49:a4:7d:2b:52:09:18:c6:07:c2:cc:f4:93:2f:df:41: c0:72:61:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdy4/3Lkons4nMjDGlGFJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2OGY0Yzg1ZDc2ODM2MzNjMzM4ZTAzZGQ4ZWNhNDQ3YmYz ZjY3ODUwHhcNMjUxMjI2MDcwMjIxWhcNMjUxMjI3MDcwMjIxWjAzMTEwLwYDVQQD Eyg4ZTBhODFlODA2NGVlODA3NjI5MDk4OTUzOTZjZjc2YzFhNWIyMDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu5QvG1VBgrGhG99NvFUlspCo+nU k9YknFF8FCkhyiOWOVfxE2hNKu0GnJ41jqaV2sOEaciTm7028RG5nqPikRuORYir gO05pure0ATssiLz68sD4BG+/PSvceIOWvKv5c6a6mqGUA1NtmjEmtWVzPUyVsgO ZVFT7sMwjZa81osgMiceiFMqpvLqLz9zLABDRspUW6ljt1skIhm0p+Ss91msf432 p0sIploDLBg6mKH+vKkZTLHCsurTp0GP3Sbnxi4Q+V/sr5Zv6q6ZJmiVCoZVaWmb Ez41gYiibszHnV2+Heh/la1pWqJZzYoJgGqgmyPioQHHR/xJhA/GtT5CqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4KgegGTugHYpCYlTls92waWyA8MB8GA1UdIwQY MBaAFOaPTIXXaDYzwzjgPdjspEe/P2eFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW85TWhkZG9OalBET09BOTJPeWtSNzhfWjRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81YmJlYmMtY2YzNi00M2E0LTk5NzQt OWI2Y2ZkOGEyYWEzLzEvNW85TWhkZG9OalBET09BOTJPeWtSNzhfWjRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy81YmJlYmMtY2YzNi00M2E0LTk5NzQtOWI2Y2ZkOGEyYWEz LzEvNW85TWhkZG9OalBET09BOTJPeWtSNzhfWjRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjm3gBHL 4K63jAlD48xCrkymY1W4WmUr6T0EEY2OHmOvPfsh8lcBX5Qc8UEzZi7mt+HivcWN /iSgi4L3Shwd0WbUw/lEzsb66BXsKXNRyC94HjcCH1vR5gJPRs0etInRIhKyMuNM 3bja2sNujYSqOtwVNSpXTV4Ay4EWfvfKUboH2Ad4A0iUtQr7S2fLeZdoFTfpRBPd fPFS1NBYMxOwveJWgwbcHjoscUKpSlhXSAeoyu5uR3w5J/4XP3GySF3dpyubMuaI qIjm7BNTC8yWyDG85faxrPFnqs/Gmvwr2EhPa9ZHqcUg3kTEUypJpH0rUgkYxgfC zPSTL99BwHJhMg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:55:00 2025 by rpki-client