This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft File: 5snUihjDwNLk5jp7g4haeWd1WCY.mft (raw, json) Hash identifier: 4zWRRfO3kn2EPt7JeXR6JMr8JgrECvoTPLUTkPJLJ5s= Subject key identifier: BC:B4:82:98:D6:6C:58:D5:F4:B6:76:A0:0D:F2:3F:E8:94:76:09:85 Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26 Certificate issuer: /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826 Certificate serial: 019B20CFC2D15F3BAEB72E2429AFA0843F40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 07:00:45 +0000 Manifest this update: Mon 15 Dec 2025 07:00:45 +0000 Manifest next update: Tue 16 Dec 2025 07:00:45 +0000 Files and hashes: 1: 5snUihjDwNLk5jp7g4haeWd1WCY.crl (hash: woyJJDhY7AICFkIh1jmvB07YK99k/Acp2t+0m66Ig4w=) 2: zohWKsAJg1AB7BcLgO5mP203ZJ8.roa (hash: qyr9zS4mbTGjUUiqIIIhploYFAxZHgevrVarc4Vt5k8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:cf:c2:d1:5f:3b:ae:b7:2e:24:29:af:a0:84:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826 Validity Not Before: Dec 15 07:00:45 2025 GMT Not After : Dec 16 07:00:45 2025 GMT Subject: CN=bcb48298d66c58d5f4b676a00df23fe894760985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:08:87:f5:97:c4:33:23:6c:49:24:e3:d6:80: fe:1d:30:bc:da:be:4b:54:98:e0:2f:67:a6:ca:67: 94:0f:e6:37:e3:30:7c:e4:16:e7:14:0a:0b:d9:e6: 57:25:2f:32:6b:31:f3:22:08:bf:f3:be:df:d8:b7: 02:7a:12:6f:59:93:ab:9e:53:a0:11:5c:69:ec:c5: 02:62:83:cf:cb:d1:1e:80:fa:9e:d4:5a:cf:0c:21: 40:79:41:03:72:7c:09:0b:15:ca:2a:c8:76:53:56: 21:0d:97:42:82:a4:f3:dc:b5:c9:1c:10:46:55:9b: a3:7e:67:b3:0d:80:39:6e:30:d8:3a:de:d2:e0:44: d0:38:14:d2:56:c7:58:79:bf:e4:ef:d4:58:2f:47: ac:9d:d8:4a:7f:5e:db:ff:cc:61:1c:36:fd:6a:85: fd:a6:42:86:e4:89:ac:c8:1f:2d:1c:57:86:21:66: b5:cc:d6:e6:8a:cc:38:d0:04:6d:91:89:6b:e1:7f: 65:20:81:24:e3:5a:44:10:fb:29:8d:2b:93:88:b7: 4d:3c:e5:97:89:ba:1e:0c:05:c2:93:d7:fa:66:33: b3:d3:1d:c1:cb:1e:e2:06:69:29:03:0b:89:c0:fb: 00:2b:53:b7:4f:25:26:ca:7a:6c:b5:52:78:d6:36: 6a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B4:82:98:D6:6C:58:D5:F4:B6:76:A0:0D:F2:3F:E8:94:76:09:85 X509v3 Authority Key Identifier: keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:f0:17:57:fd:15:b9:a6:50:9b:65:85:e6:bc:2f:73:66:9d: 99:a0:3c:4f:ac:05:39:aa:27:56:6c:e8:3e:09:1a:3a:a5:56: d3:48:8c:b6:f3:cd:ff:78:ff:61:58:b7:17:22:d0:b4:b7:4b: 62:48:97:05:45:0e:59:66:c0:30:b0:a8:86:42:33:eb:6a:c8: e7:fb:50:78:18:50:f5:b4:0b:db:04:af:f0:11:cb:3d:5b:fc: c8:ad:d1:5b:2a:dc:e0:23:dc:77:ad:5b:7d:79:cd:f7:c7:18: 20:9e:45:ac:8d:f7:8d:0d:99:ed:14:83:4b:02:59:04:7f:4e: 36:c3:fb:2c:0d:68:40:f1:b2:0c:38:6c:f5:c5:f0:73:ac:65: e1:b5:48:b7:58:1f:03:63:5a:52:17:26:4a:f3:21:73:73:59: 13:a0:63:cb:a5:6e:55:5d:df:6f:2f:1f:d4:ea:70:99:57:64: 55:d9:71:fd:f3:ec:bc:84:42:f9:b1:c1:14:b0:18:6c:27:c1: 49:1d:bb:1d:8d:b4:51:98:f3:47:a7:bc:c6:c4:e6:57:dd:3a: d8:a3:71:af:20:31:4a:6b:52:61:a9:d6:74:c0:55:ea:58:6c: a8:cf:d6:7a:a2:e4:67:07:6f:8c:b4:83:d0:62:5c:6b:38:a3: 7c:f6:ab:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgz8LRXzuuty4kKa+ghD9AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YzlkNDhhMThjM2MwZDJlNGU2M2E3YjgzODg1YTc5Njc3 NTU4MjYwHhcNMjUxMjE1MDcwMDQ1WhcNMjUxMjE2MDcwMDQ1WjAzMTEwLwYDVQQD EyhiY2I0ODI5OGQ2NmM1OGQ1ZjRiNjc2YTAwZGYyM2ZlODk0NzYwOTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1giH9ZfEMyNsSSTj1oD+HTC82r5L VJjgL2emymeUD+Y34zB85BbnFAoL2eZXJS8yazHzIgi/877f2LcCehJvWZOrnlOg EVxp7MUCYoPPy9EegPqe1FrPDCFAeUEDcnwJCxXKKsh2U1YhDZdCgqTz3LXJHBBG VZujfmezDYA5bjDYOt7S4ETQOBTSVsdYeb/k79RYL0esndhKf17b/8xhHDb9aoX9 pkKG5ImsyB8tHFeGIWa1zNbmisw40ARtkYlr4X9lIIEk41pEEPspjSuTiLdNPOWX iboeDAXCk9f6ZjOz0x3Byx7iBmkpAwuJwPsAK1O3TyUmynpstVJ41jZq2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLy0gpjWbFjV9LZ2oA3yP+iUdgmFMB8GA1UdIwQY MBaAFObJ1IoYw8DS5OY6e4OIWnlndVgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMt ODQ4ZjczZGY4YjIwLzEvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMtODQ4ZjczZGY4YjIw LzEvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPAXV/0V uaZQm2WF5rwvc2admaA8T6wFOaonVmzoPgkaOqVW00iMtvPN/3j/YVi3FyLQtLdL YkiXBUUOWWbAMLCohkIz62rI5/tQeBhQ9bQL2wSv8BHLPVv8yK3RWyrc4CPcd61b fXnN98cYIJ5FrI33jQ2Z7RSDSwJZBH9ONsP7LA1oQPGyDDhs9cXwc6xl4bVIt1gf A2NaUhcmSvMhc3NZE6Bjy6VuVV3fby8f1OpwmVdkVdlx/fPsvIRC+bHBFLAYbCfB SR27HY20UZjzR6e8xsTmV9062KNxryAxSmtSYanWdMBV6lhsqM/WeqLkZwdvjLSD 0GJcazijfParmA== -----END CERTIFICATE-----Generated at Mon Dec 15 12:09:30 2025 by rpki-client