This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft File: 5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft (raw, json) Hash identifier: a6qACOYI1NqNsSMIpYEgqfUQ1JCFD/eaKrglwAjzBqQ= Subject key identifier: 5A:EE:01:00:DC:1C:D1:E1:9F:14:A4:0C:48:03:5A:6B:AD:E1:39:8B Authority key identifier: E4:1B:F7:8B:70:AC:27:6C:BF:65:BB:90:9F:99:34:08:2F:4D:2D:79 Certificate issuer: /CN=e41bf78b70ac276cbf65bb909f9934082f4d2d79 Certificate serial: 019B40C8C494C269188C744B7269458A3842 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft Manifest number: 141D Signing time: Sun 21 Dec 2025 12:00:57 +0000 Manifest this update: Sun 21 Dec 2025 12:00:57 +0000 Manifest next update: Mon 22 Dec 2025 12:00:57 +0000 Files and hashes: 1: 5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl (hash: dIe4Pt0SjHABpgEHNcKKi4P/F5stn58OMKamcghpV8w=) 2: zKYpcRfJ0yCrd-f2baj9-TyNLi8.roa (hash: T7q7FvhXmWHJ0yC6vmc/dnmnSYNoJL5+7o5GUV51uGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:c4:94:c2:69:18:8c:74:4b:72:69:45:8a:38:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e41bf78b70ac276cbf65bb909f9934082f4d2d79 Validity Not Before: Dec 21 12:00:57 2025 GMT Not After : Dec 22 12:00:57 2025 GMT Subject: CN=5aee0100dc1cd1e19f14a40c48035a6bade1398b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:23:a7:66:04:7d:fe:a7:a6:67:e9:77:ea:e0: 83:6d:2f:82:80:b1:ca:53:88:df:67:2d:ba:e2:3d: b1:58:97:1d:b4:3b:19:8d:55:33:f5:c5:82:85:32: 4a:ce:74:e9:3e:39:e3:05:d8:5d:ec:f6:a7:1f:73: f0:88:48:0c:8e:05:8e:9e:4c:80:51:8b:6b:b2:48: 4f:b5:10:ea:10:24:eb:23:9e:7f:26:97:21:27:55: d0:01:27:49:73:c3:b6:30:96:e3:e2:70:d7:12:7f: cd:30:76:cc:64:e2:a9:c6:ec:47:40:72:ee:1a:a0: f7:81:eb:88:da:30:6f:82:9a:92:97:e9:d1:06:d8: 7d:92:04:c6:6a:a6:d4:75:a4:21:ea:4c:b1:d5:4f: 4f:cc:11:6d:bf:b8:f7:a3:48:9d:9f:b8:da:58:85: ca:ef:f3:58:c2:1f:40:83:44:80:b1:b5:82:57:68: 15:75:e1:74:62:60:ac:dc:d2:ed:4f:ab:04:ab:f2: 7a:74:4f:9b:c6:d6:fa:6f:15:a5:ed:40:05:a4:6c: c8:f5:4e:01:85:eb:03:c7:22:43:27:64:05:1b:fa: 64:a0:eb:6c:ea:d7:d0:11:56:7a:9a:a2:fd:9a:22: a8:48:cc:10:60:64:00:c4:b7:45:eb:3f:f5:ae:de: 44:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EE:01:00:DC:1C:D1:E1:9F:14:A4:0C:48:03:5A:6B:AD:E1:39:8B X509v3 Authority Key Identifier: keyid:E4:1B:F7:8B:70:AC:27:6C:BF:65:BB:90:9F:99:34:08:2F:4D:2D:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:32:5a:da:96:58:cf:b0:c0:8a:cf:81:f4:60:90:16:ce:5d: 30:ca:d7:ec:bb:4f:49:40:af:03:53:53:09:42:d1:b5:b6:ec: 88:cb:23:da:a3:12:2a:cc:ab:d6:05:ac:6e:56:49:8b:8a:38: a7:91:ea:7c:d0:35:12:a3:39:3f:6e:a3:ac:1a:ec:cc:87:49: 76:cf:9b:9e:c4:81:4b:9e:d6:96:d3:b4:44:52:10:5a:df:b6: ee:fa:24:30:9d:64:13:75:86:90:49:f0:31:80:99:22:6c:12: 8a:27:24:dd:e0:0d:f5:f5:e9:78:57:bb:c3:79:9a:51:85:5b: e0:55:39:f6:fd:29:98:1c:9d:6d:5c:de:06:f1:39:d2:29:9f: e8:5d:43:c7:2c:8e:5d:e0:a2:8c:be:8e:09:cc:8d:16:23:7c: da:61:66:26:8a:48:d2:85:b7:3c:8a:29:c7:69:34:b1:d9:a6: 59:b8:91:52:2d:60:9f:59:24:ad:92:57:14:d4:cf:54:59:94: 09:5a:b9:c2:18:78:23:1a:6e:6f:b9:6a:8a:94:4d:28:52:f6: 41:21:f9:40:6f:0c:8e:0b:b1:f5:8c:09:d2:49:8c:72:e7:7f: ac:7c:27:3b:fb:c5:a8:25:5e:e5:e0:8a:a4:5b:0d:39:57:15: 35:3d:db:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyMSUwmkYjHRLcmlFijhCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MWJmNzhiNzBhYzI3NmNiZjY1YmI5MDlmOTkzNDA4MmY0 ZDJkNzkwHhcNMjUxMjIxMTIwMDU3WhcNMjUxMjIyMTIwMDU3WjAzMTEwLwYDVQQD Eyg1YWVlMDEwMGRjMWNkMWUxOWYxNGE0MGM0ODAzNWE2YmFkZTEzOThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyOnZgR9/qemZ+l36uCDbS+CgLHK U4jfZy264j2xWJcdtDsZjVUz9cWChTJKznTpPjnjBdhd7PanH3PwiEgMjgWOnkyA UYtrskhPtRDqECTrI55/JpchJ1XQASdJc8O2MJbj4nDXEn/NMHbMZOKpxuxHQHLu GqD3geuI2jBvgpqSl+nRBth9kgTGaqbUdaQh6kyx1U9PzBFtv7j3o0idn7jaWIXK 7/NYwh9Ag0SAsbWCV2gVdeF0YmCs3NLtT6sEq/J6dE+bxtb6bxWl7UAFpGzI9U4B hesDxyJDJ2QFG/pkoOts6tfQEVZ6mqL9miKoSMwQYGQAxLdF6z/1rt5EhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFruAQDcHNHhnxSkDEgDWmut4TmLMB8GA1UdIwQY MBaAFOQb94twrCdsv2W7kJ+ZNAgvTS15MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUJ2M2kzQ3NKMnlfWmJ1UW41azBDQzlOTFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8wY2MwNDItY2YyYi00NjE2LTkyZTAt YWYwNTU2YzQ3YTM3LzEvNUJ2M2kzQ3NKMnlfWmJ1UW41azBDQzlOTFhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8wY2MwNDItY2YyYi00NjE2LTkyZTAtYWYwNTU2YzQ3YTM3 LzEvNUJ2M2kzQ3NKMnlfWmJ1UW41azBDQzlOTFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTJa2pZY z7DAis+B9GCQFs5dMMrX7LtPSUCvA1NTCULRtbbsiMsj2qMSKsyr1gWsblZJi4o4 p5HqfNA1EqM5P26jrBrszIdJds+bnsSBS57WltO0RFIQWt+27vokMJ1kE3WGkEnw MYCZImwSiick3eAN9fXpeFe7w3maUYVb4FU59v0pmBydbVzeBvE50imf6F1DxyyO XeCijL6OCcyNFiN82mFmJopI0oW3PIopx2k0sdmmWbiRUi1gn1kkrZJXFNTPVFmU CVq5whh4Ixpub7lqipRNKFL2QSH5QG8Mjgux9YwJ0kmMcud/rHwnO/vFqCVe5eCK pFsNOVcVNT3bhA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:47:49 2025 by rpki-client