This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft File: 5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json) Hash identifier: uoGBWdEIJ/78HT++GAC0PmNnx6jJjuwTwjyFgojpzMA= Subject key identifier: 09:54:C7:02:EB:7E:27:2B:E8:E2:75:68:45:BD:19:67:1F:4B:96:FF Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78 Certificate issuer: /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778 Certificate serial: 019B4A02E2E1C3D736D23566F783CD560A5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 07:01:01 +0000 Manifest this update: Tue 23 Dec 2025 07:01:01 +0000 Manifest next update: Wed 24 Dec 2025 07:01:01 +0000 Files and hashes: 1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: PpoQWXc23UCde+8rPIAdFyfX4Hq3fATi+97Wznx+oQk=) 2: LeXJLi-TLu5NLRkSo2hJnEK9QDQ.roa (hash: 1KfkyTUePDTOuHMENqew1KmyeJrolI/GoAGN74JhXHQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:02:e2:e1:c3:d7:36:d2:35:66:f7:83:cd:56:0a:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778 Validity Not Before: Dec 23 07:01:01 2025 GMT Not After : Dec 24 07:01:01 2025 GMT Subject: CN=0954c702eb7e272be8e2756845bd19671f4b96ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fe:ce:6e:f9:05:f2:52:46:2e:df:f6:b6:e0: b3:ba:de:e1:be:83:6e:d1:99:b5:58:96:69:a9:c1: 3e:11:cd:bb:2a:df:28:5d:ea:91:00:6f:bc:05:62: 88:8c:e7:4d:31:80:1f:fa:a0:2c:79:6b:9c:cb:86: 07:23:b7:3c:1f:1c:ff:34:bf:3d:20:2f:b6:e0:98: e4:6c:70:0f:54:10:cd:ea:41:43:ab:b3:c5:b7:cb: 43:c5:ee:0a:49:df:19:b7:6a:cf:81:08:19:79:51: 25:6b:7f:0d:66:17:10:8d:ad:21:a6:c2:3a:06:f1: 8d:7f:53:34:5b:49:82:de:6b:43:13:ac:e1:06:d0: 4d:07:43:7f:dd:a0:dc:c0:c1:be:1e:56:d9:f7:50: d5:96:29:3f:84:df:05:55:bd:bc:5d:9b:05:31:ed: 9d:ce:37:70:4e:1c:c5:e1:bd:00:c4:c9:e7:3e:61: 0c:77:e4:92:1c:5d:05:37:a3:fa:5d:96:16:f3:9d: 65:7e:cf:14:8d:38:f7:52:e2:2f:5c:62:00:6c:7b: cc:85:f4:5b:68:6b:ec:87:69:76:36:ea:1f:f2:1e: 8e:93:86:f1:63:69:3d:06:4c:b2:5f:18:95:57:fc: 03:4d:9e:57:c1:45:e3:63:10:88:16:c7:4b:a2:18: ad:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:54:C7:02:EB:7E:27:2B:E8:E2:75:68:45:BD:19:67:1F:4B:96:FF X509v3 Authority Key Identifier: keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1a:c5:25:e3:db:5f:e9:c9:2a:2d:3d:0f:d0:a6:f9:0d:52: 07:bb:21:0a:3d:07:72:ee:82:63:f5:f5:e9:40:a7:60:fd:65: 37:b0:66:36:11:89:93:e8:32:d5:8d:2e:b3:1f:36:39:87:b9: 04:64:2e:75:30:57:c0:d8:ae:d9:bd:0e:a7:26:0f:9d:c9:65: c9:0a:0b:fb:46:45:46:7c:90:68:19:e1:9a:78:a5:0a:40:3d: e8:a4:fe:7d:b9:66:54:5a:3e:5a:43:50:bc:d3:ca:39:1b:b8: 0d:d1:98:8b:b1:81:c0:d9:88:10:12:f8:c1:c4:eb:91:43:b8: ae:27:b6:01:b3:d5:5c:06:17:67:11:3b:85:ce:b7:12:19:d1: 58:f5:80:0b:7d:29:d2:04:e1:36:86:72:79:8e:ad:11:f0:17: b4:8d:7a:67:d0:f1:ef:b5:9e:c7:9e:8e:e1:72:eb:94:41:bd: 89:4c:3a:ba:ee:58:21:95:44:d8:f4:3e:7e:89:a0:b9:86:18: fb:d3:b2:ac:1d:a5:94:79:6d:e5:17:98:ab:0f:fd:15:d2:e6: 36:f1:2b:35:47:9e:05:11:ed:b5:41:95:00:a1:c8:c8:49:a6: 5c:e2:13:f8:78:1e:d7:fa:47:0f:30:5e:38:37:1c:dd:88:fc: a6:3f:92:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKAuLhw9c20jVm94PNVgpfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NDRlMjY2ZDRlYjljYzdkZWQyOTJjMTJiMDZiMWNhN2Jj ZWE3NzgwHhcNMjUxMjIzMDcwMTAxWhcNMjUxMjI0MDcwMTAxWjAzMTEwLwYDVQQD EygwOTU0YzcwMmViN2UyNzJiZThlMjc1Njg0NWJkMTk2NzFmNGI5NmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv7ObvkF8lJGLt/2tuCzut7hvoNu 0Zm1WJZpqcE+Ec27Kt8oXeqRAG+8BWKIjOdNMYAf+qAseWucy4YHI7c8Hxz/NL89 IC+24JjkbHAPVBDN6kFDq7PFt8tDxe4KSd8Zt2rPgQgZeVEla38NZhcQja0hpsI6 BvGNf1M0W0mC3mtDE6zhBtBNB0N/3aDcwMG+HlbZ91DVlik/hN8FVb28XZsFMe2d zjdwThzF4b0AxMnnPmEMd+SSHF0FN6P6XZYW851lfs8UjTj3UuIvXGIAbHvMhfRb aGvsh2l2Nuof8h6Ok4bxY2k9BkyyXxiVV/wDTZ5XwUXjYxCIFsdLohitsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAlUxwLrficr6OJ1aEW9GWcfS5b/MB8GA1UdIwQY MBaAFOVE4mbU65zH3tKSwSsGscp7zqd4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVVUaVp0VHJuTWZlMHBMQkt3YXh5bnZPcDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iZmY3OTktOWUzMi00M2JlLTg1Y2Qt ODI0NzYwNzE0ZGZiLzEvNVVUaVp0VHJuTWZlMHBMQkt3YXh5bnZPcDNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9iZmY3OTktOWUzMi00M2JlLTg1Y2QtODI0NzYwNzE0ZGZi LzEvNVVUaVp0VHJuTWZlMHBMQkt3YXh5bnZPcDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBrFJePb X+nJKi09D9Cm+Q1SB7shCj0Hcu6CY/X16UCnYP1lN7BmNhGJk+gy1Y0usx82OYe5 BGQudTBXwNiu2b0OpyYPncllyQoL+0ZFRnyQaBnhmnilCkA96KT+fblmVFo+WkNQ vNPKORu4DdGYi7GBwNmIEBL4wcTrkUO4rie2AbPVXAYXZxE7hc63EhnRWPWAC30p 0gThNoZyeY6tEfAXtI16Z9Dx77Wex56O4XLrlEG9iUw6uu5YIZVE2PQ+fomguYYY +9OyrB2llHlt5ReYqw/9FdLmNvErNUeeBRHttUGVAKHIyEmmXOIT+Hge1/pHDzBe ODcc3Yj8pj+S5Q== -----END CERTIFICATE-----Generated at Tue Dec 23 13:02:40 2025 by rpki-client