This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft File: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json) Hash identifier: pzWq/saIxUvoCO6ESvcE1cNu7jNuLIuK0pMRMvtam1I= Subject key identifier: EC:2D:60:F4:B8:B8:76:A0:E7:C6:1E:CD:DA:6E:C4:42:59:BE:88:97 Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B Certificate issuer: /CN=e578bc065072b40baf08416e216a1307b24bc44b Certificate serial: 019B405C5C36C6918488A5E1942726B4428F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 10:02:33 +0000 Manifest this update: Sun 21 Dec 2025 10:02:33 +0000 Manifest next update: Mon 22 Dec 2025 10:02:33 +0000 Files and hashes: 1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: WbKdpSteVp0HrGVyqr3MZz2fo/drNI4bDFjOnGARYyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:5c:36:c6:91:84:88:a5:e1:94:27:26:b4:42:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b Validity Not Before: Dec 21 10:02:33 2025 GMT Not After : Dec 22 10:02:33 2025 GMT Subject: CN=ec2d60f4b8b876a0e7c61ecdda6ec44259be8897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ca:db:be:3d:00:35:32:bd:de:99:4e:a6:1b: d3:9c:c0:3a:b6:e9:6b:73:ef:ee:9f:71:c2:cf:a3: 15:54:54:b0:8f:62:8a:10:df:b1:77:5b:0e:6a:91: d1:e6:ad:57:17:3c:71:52:e7:a1:29:ce:30:80:13: b7:a6:c9:e0:a8:9e:7b:6a:e2:64:33:bb:80:97:4b: 7b:e1:dd:d1:48:d5:e9:9f:64:b2:3a:e0:e7:65:ab: 03:78:67:1c:5d:15:fd:25:21:67:de:b0:52:fd:7b: 0b:1a:44:1b:0c:6b:55:33:77:5c:28:d0:67:60:30: fd:34:21:88:77:57:f1:1f:7f:09:63:b7:a7:ec:5b: 85:32:da:cb:4e:5c:1c:55:b1:6f:02:08:b2:3a:67: d5:76:fd:b7:52:2f:31:ac:0a:5b:ad:6e:ff:ed:8d: 96:a4:a5:4b:6e:df:3f:ea:81:70:40:3b:48:11:27: d5:08:0c:0c:3c:e9:19:e8:da:49:b3:66:73:61:ab: 9d:ac:69:9f:d7:e7:00:2f:a2:b8:88:b1:8c:a6:81: e8:a1:ac:41:c2:5d:af:07:09:30:8a:f3:3b:f7:20: dd:4a:a8:92:96:44:0a:0a:28:2a:c8:af:74:03:f1: 0c:44:3b:ba:68:d1:3d:df:5d:e5:0d:24:75:dd:06: dc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2D:60:F4:B8:B8:76:A0:E7:C6:1E:CD:DA:6E:C4:42:59:BE:88:97 X509v3 Authority Key Identifier: keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:0f:2e:c6:70:0b:d6:28:f4:93:00:1d:b8:66:cb:63:8b:8d: 7e:3f:43:1e:54:ac:6f:5b:7d:ab:ab:33:1b:06:ca:4b:0c:b1: 5b:a0:d9:6a:4e:37:dd:58:18:ae:26:2f:fb:58:de:48:70:ed: 65:0b:78:d9:1b:c9:f9:cf:96:de:fe:a9:d1:11:68:75:c4:d1: 01:11:8e:61:47:ae:d6:5f:96:ee:18:80:89:50:fb:11:76:7a: 57:18:0f:61:6f:ce:10:a8:a0:21:78:a7:91:29:44:e3:39:10: 2d:66:ac:97:a7:11:8e:8b:c7:cc:b2:f5:6b:c6:fd:31:77:bf: c8:a0:f7:d3:09:92:79:f9:0d:25:6b:26:ba:3b:b4:63:f7:91: d5:dd:dd:49:de:be:25:b0:75:53:d8:23:28:02:77:cd:0a:8f: 83:bc:f6:d2:d2:7c:df:25:2f:6d:e3:60:05:79:2c:e0:16:99: 86:38:69:01:42:2e:9f:81:bf:ff:ae:1d:87:63:a5:39:a4:ea: b8:51:bd:35:a1:de:b6:08:a6:d6:2e:c1:b0:8e:24:f8:79:94: 95:39:33:43:a2:dc:cd:2a:5d:ef:04:93:e1:c9:a4:54:18:e8: af:a7:d7:8f:1e:a4:9a:25:e5:80:37:78:ca:c9:43:14:dc:64: c5:56:42:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXFw2xpGEiKXhlCcmtEKPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NzhiYzA2NTA3MmI0MGJhZjA4NDE2ZTIxNmExMzA3YjI0 YmM0NGIwHhcNMjUxMjIxMTAwMjMzWhcNMjUxMjIyMTAwMjMzWjAzMTEwLwYDVQQD EyhlYzJkNjBmNGI4Yjg3NmEwZTdjNjFlY2RkYTZlYzQ0MjU5YmU4ODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsrbvj0ANTK93plOphvTnMA6tulr c+/un3HCz6MVVFSwj2KKEN+xd1sOapHR5q1XFzxxUuehKc4wgBO3psngqJ57auJk M7uAl0t74d3RSNXpn2SyOuDnZasDeGccXRX9JSFn3rBS/XsLGkQbDGtVM3dcKNBn YDD9NCGId1fxH38JY7en7FuFMtrLTlwcVbFvAgiyOmfVdv23Ui8xrApbrW7/7Y2W pKVLbt8/6oFwQDtIESfVCAwMPOkZ6NpJs2ZzYaudrGmf1+cAL6K4iLGMpoHooaxB wl2vBwkwivM79yDdSqiSlkQKCigqyK90A/EMRDu6aNE9313lDSR13QbczQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwtYPS4uHag58YezdpuxEJZvoiXMB8GA1UdIwQY MBaAFOV4vAZQcrQLrwhBbiFqEweyS8RLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEt ZmJmZjYwY2ZiOTZhLzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEtZmJmZjYwY2ZiOTZh LzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXw8uxnAL 1ij0kwAduGbLY4uNfj9DHlSsb1t9q6szGwbKSwyxW6DZak433VgYriYv+1jeSHDt ZQt42RvJ+c+W3v6p0RFodcTRARGOYUeu1l+W7hiAiVD7EXZ6VxgPYW/OEKigIXin kSlE4zkQLWasl6cRjovHzLL1a8b9MXe/yKD30wmSefkNJWsmuju0Y/eR1d3dSd6+ JbB1U9gjKAJ3zQqPg7z20tJ83yUvbeNgBXks4BaZhjhpAUIun4G//64dh2OlOaTq uFG9NaHetgim1i7BsI4k+HmUlTkzQ6LczSpd7wST4cmkVBjor6fXjx6kmiXlgDd4 yslDFNxkxVZCaA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:47:05 2025 by rpki-client