This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft File: v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft (raw, json) Hash identifier: 54ErKioN40kpS9Na5v2zRmNeBVdhXyRrsGp5Q21NZ1Y= Subject key identifier: D5:EE:0D:CC:D4:FE:A0:DF:24:11:12:8D:0C:F9:92:E7:E3:9D:88:FE Authority key identifier: BF:EE:53:11:55:60:71:46:30:4D:C6:5D:D5:76:FB:EE:9F:0D:6E:4E Certificate issuer: /CN=bfee531155607146304dc65dd576fbee9f0d6e4e Certificate serial: 019B59AD254628A9AE980C40A77144EA5ED1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft Manifest number: 05B9 Signing time: Fri 26 Dec 2025 08:01:18 +0000 Manifest this update: Fri 26 Dec 2025 08:01:18 +0000 Manifest next update: Sat 27 Dec 2025 08:01:18 +0000 Files and hashes: 1: v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl (hash: nP+4i9jopkmVnAcJOuRTm7ijimcq2BRC+hyoObVZ+5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ad:25:46:28:a9:ae:98:0c:40:a7:71:44:ea:5e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfee531155607146304dc65dd576fbee9f0d6e4e Validity Not Before: Dec 26 08:01:18 2025 GMT Not After : Dec 27 08:01:18 2025 GMT Subject: CN=d5ee0dccd4fea0df2411128d0cf992e7e39d88fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c7:1a:86:99:3b:b2:58:36:e1:e5:f7:2f:ca: ad:de:95:08:b9:93:6e:b5:bb:a8:a0:db:26:ad:11: e5:70:14:44:27:85:ec:0a:d6:a6:e0:9d:ae:58:9a: 74:7a:9d:46:7f:14:56:8e:58:de:aa:93:1a:d7:a2: 59:a8:de:9e:2e:0a:67:c3:05:05:ce:cb:8e:65:e3: cc:22:79:0f:e0:b7:92:9f:2c:4c:c4:16:4e:2c:8e: ae:5c:49:40:89:9c:10:91:9a:ea:d8:2f:e4:ba:7b: 78:14:56:31:19:c4:b1:69:74:2c:ec:dd:ec:81:8a: fa:17:a6:8f:56:95:3f:e0:bc:60:6c:c6:d6:3b:e6: d6:7c:d5:99:f7:ba:66:57:8d:e9:80:e1:28:c8:4a: 92:3c:2b:ce:c2:99:89:b1:b6:28:60:0e:a8:f4:1e: e5:7e:00:c1:90:ae:60:58:cb:8d:30:90:47:67:1e: c0:98:6d:05:b1:f7:9f:6c:b4:a4:7d:4f:99:cb:08: 1d:a2:17:ca:44:34:ea:b9:3b:f0:f2:b6:de:81:ca: 92:e1:61:b4:74:39:1d:65:80:89:d7:91:63:93:d1: 42:d1:3c:50:02:58:2f:03:19:b4:fd:77:11:78:30: db:18:2a:61:25:11:cd:04:1f:bf:14:dd:82:fa:b3: 8d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:EE:0D:CC:D4:FE:A0:DF:24:11:12:8D:0C:F9:92:E7:E3:9D:88:FE X509v3 Authority Key Identifier: keyid:BF:EE:53:11:55:60:71:46:30:4D:C6:5D:D5:76:FB:EE:9F:0D:6E:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:2c:10:c6:af:d8:54:9c:b5:b7:29:38:9a:71:03:13:54:09: 13:cf:90:63:f5:8a:05:f7:8e:6a:1c:6d:d7:fc:51:78:88:17: f6:98:f9:99:6a:8b:42:89:36:2e:74:1a:e8:bf:c2:c7:bc:67: c8:2d:b7:88:9d:fb:94:ac:19:e2:c1:98:8b:4f:f2:c7:84:94: cf:2c:f1:7a:b6:eb:90:25:88:02:b1:48:01:88:f7:c3:8a:df: 87:f1:a2:23:07:18:c3:a3:0d:9b:33:7a:a2:d3:76:16:a1:51: 6d:1c:bf:99:59:7d:e3:ab:e1:e7:fa:8a:7a:90:28:81:18:48: d8:3d:84:48:bb:38:d0:c5:ba:98:41:c8:38:03:cf:7b:82:1a: 81:96:c6:34:80:30:aa:76:72:6d:e9:19:9d:f0:44:e4:5d:f7: 9e:6f:cf:0c:3b:f5:dd:3f:91:c6:31:16:55:b6:4d:1b:fc:72: af:89:08:15:7c:15:9f:67:80:9b:d9:35:da:58:18:b0:06:e3: f7:05:cc:30:d2:0e:c3:71:f9:db:b9:10:55:7e:a5:31:39:b4: e1:0d:1c:d1:72:ff:5b:82:85:5d:b8:63:1b:2b:be:f3:50:f0: 61:0e:5e:e8:a6:eb:c4:9b:88:78:f4:fa:08:3a:7b:0d:71:b7: fb:a8:06:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrSVGKKmumAxAp3FE6l7RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZWU1MzExNTU2MDcxNDYzMDRkYzY1ZGQ1NzZmYmVlOWYw ZDZlNGUwHhcNMjUxMjI2MDgwMTE4WhcNMjUxMjI3MDgwMTE4WjAzMTEwLwYDVQQD EyhkNWVlMGRjY2Q0ZmVhMGRmMjQxMTEyOGQwY2Y5OTJlN2UzOWQ4OGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyscahpk7slg24eX3L8qt3pUIuZNu tbuooNsmrRHlcBREJ4XsCtam4J2uWJp0ep1GfxRWjljeqpMa16JZqN6eLgpnwwUF zsuOZePMInkP4LeSnyxMxBZOLI6uXElAiZwQkZrq2C/kunt4FFYxGcSxaXQs7N3s gYr6F6aPVpU/4LxgbMbWO+bWfNWZ97pmV43pgOEoyEqSPCvOwpmJsbYoYA6o9B7l fgDBkK5gWMuNMJBHZx7AmG0FsfefbLSkfU+ZywgdohfKRDTquTvw8rbegcqS4WG0 dDkdZYCJ15Fjk9FC0TxQAlgvAxm0/XcReDDbGCphJRHNBB+/FN2C+rONUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXuDczU/qDfJBESjQz5kufjnYj+MB8GA1UdIwQY MBaAFL/uUxFVYHFGME3GXdV2++6fDW5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdi01VEVWVmdjVVl3VGNaZDFYYjc3cDhOYms0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZWM2NGItZDNhMS00MzMxLTkyNTIt ZDRmODMzODBhOWM1LzEvdi01VEVWVmdjVVl3VGNaZDFYYjc3cDhOYms0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZWM2NGItZDNhMS00MzMxLTkyNTItZDRmODMzODBhOWM1 LzEvdi01VEVWVmdjVVl3VGNaZDFYYjc3cDhOYms0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCwQxq/Y VJy1tyk4mnEDE1QJE8+QY/WKBfeOahxt1/xReIgX9pj5mWqLQok2LnQa6L/Cx7xn yC23iJ37lKwZ4sGYi0/yx4SUzyzxerbrkCWIArFIAYj3w4rfh/GiIwcYw6MNmzN6 otN2FqFRbRy/mVl946vh5/qKepAogRhI2D2ESLs40MW6mEHIOAPPe4IagZbGNIAw qnZybekZnfBE5F33nm/PDDv13T+RxjEWVbZNG/xyr4kIFXwVn2eAm9k12lgYsAbj 9wXMMNIOw3H527kQVX6lMTm04Q0c0XL/W4KFXbhjGyu+81DwYQ5e6KbrxJuIePT6 CDp7DXG3+6gGiQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:21 2025 by rpki-client