This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft File: 5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft (raw, json) Hash identifier: x1Gckdjd2/O0uHuH8v7Jzu8zZQN2qhYk1kkmZkZe+oI= Subject key identifier: FF:5D:62:5E:65:5F:A5:90:C6:12:9C:92:14:C5:63:F5:70:A1:5B:39 Authority key identifier: E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8 Certificate issuer: /CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8 Certificate serial: 019B236312CCED4620BB04A396F8ED3A95F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft Manifest number: 177D Signing time: Mon 15 Dec 2025 19:00:54 +0000 Manifest this update: Mon 15 Dec 2025 19:00:54 +0000 Manifest next update: Tue 16 Dec 2025 19:00:54 +0000 Files and hashes: 1: 5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl (hash: 6LenG92uL5U5uDAl0nnCvFy6q3Jdx/I42UJnSN63ELs=) 2: xw1wxyD1fMrJTbgYiyQiF0uQJK0.roa (hash: TVVXOUY13A6nRw+KZkyghJdyM7alOs0fCSWauNlbS0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 19:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:63:12:cc:ed:46:20:bb:04:a3:96:f8:ed:3a:95:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8 Validity Not Before: Dec 15 19:00:54 2025 GMT Not After : Dec 16 19:00:54 2025 GMT Subject: CN=ff5d625e655fa590c6129c9214c563f570a15b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c2:73:70:92:ed:ca:f0:2b:2b:9c:38:e0:2b: 5f:f0:0b:fb:a1:02:10:c5:e2:af:eb:86:b1:06:c4: 20:74:3e:07:34:97:6a:9a:61:8f:28:98:6c:a9:d1: 19:5d:a2:84:8e:f0:2e:bd:46:fc:4c:e6:b6:d8:9d: 32:ae:41:97:d9:6c:c7:0f:30:da:ec:48:79:65:99: 54:b8:72:37:73:ff:9f:9d:1f:cb:5c:31:2f:7e:5c: 62:f3:0f:e0:57:2e:83:ee:c5:db:ea:6a:cc:a1:2c: 53:5a:44:1d:e6:8b:fc:6b:ae:85:a9:d0:08:6b:65: e0:37:50:05:b9:e3:6c:90:42:4b:cd:46:8f:82:72: 4b:75:aa:c2:85:69:b1:e8:57:7a:e0:6b:cf:74:6b: 06:15:60:90:ef:95:2f:45:27:fb:a1:75:fd:f3:ee: e6:08:f0:b4:6a:b0:a1:98:fc:f0:37:75:35:7d:97: 98:3b:98:bf:02:51:74:96:a4:cb:ef:52:f2:d8:ae: e2:5d:dd:24:a9:79:fd:92:7b:93:06:d9:51:27:f7: da:66:1d:d3:b0:42:66:f4:66:56:e9:1e:e1:3e:6f: 76:7a:d2:97:9c:80:04:65:ee:4a:31:37:ac:09:49: 7b:d6:54:99:98:66:4d:ea:3d:29:c0:59:29:dd:46: f7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5D:62:5E:65:5F:A5:90:C6:12:9C:92:14:C5:63:F5:70:A1:5B:39 X509v3 Authority Key Identifier: keyid:E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:53:25:d3:45:80:42:b5:72:26:6a:8f:6b:7b:10:d4:a7:fd: 91:50:66:af:88:e9:b6:b6:b7:d6:15:1f:91:ec:ac:82:57:84: c3:cc:c5:03:9b:ce:b5:34:9e:88:2d:ae:29:66:80:0c:a6:63: 9a:04:66:0d:67:b7:3a:3d:9f:c7:90:cb:54:a2:b4:3e:09:60: 33:66:9e:dc:a3:1d:ab:6d:20:85:aa:e7:c1:fd:ea:11:11:4c: 11:2a:77:88:2a:f0:bb:c6:b5:09:91:3a:20:85:94:77:11:5d: f9:f7:5a:57:f9:3a:dc:20:90:3a:74:4d:f3:7f:2c:b9:e3:e2: 44:c7:43:c5:2a:7d:6f:3a:1e:9d:e3:f0:90:1d:03:12:c7:08: 48:73:98:c8:40:b4:aa:ee:4b:0a:22:88:9f:6b:eb:38:ce:1b: 8f:7f:11:d5:85:0b:0f:36:c6:f4:12:df:df:ff:6c:32:02:29: 0a:4d:8c:29:f1:fd:7b:47:ec:73:3e:35:30:dc:18:1e:b4:4d: 9f:7f:44:61:85:3e:5a:03:0e:ee:35:3b:29:42:8a:54:af:d6: 9b:40:11:7f:5e:42:05:01:bd:2f:f3:46:a4:4d:5c:15:c1:54: f4:6a:a2:57:d4:69:ef:fa:3d:c7:3a:11:83:4d:fc:83:f0:39: 68:ba:8a:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjYxLM7UYguwSjlvjtOpXyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2Y2M2NWMyN2MyMzI5OGIwYzVhMGUwYmM3NGJhNTEwMzRh NzA0YzgwHhcNMjUxMjE1MTkwMDU0WhcNMjUxMjE2MTkwMDU0WjAzMTEwLwYDVQQD EyhmZjVkNjI1ZTY1NWZhNTkwYzYxMjljOTIxNGM1NjNmNTcwYTE1YjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMJzcJLtyvArK5w44Ctf8Av7oQIQ xeKv64axBsQgdD4HNJdqmmGPKJhsqdEZXaKEjvAuvUb8TOa22J0yrkGX2WzHDzDa 7Eh5ZZlUuHI3c/+fnR/LXDEvflxi8w/gVy6D7sXb6mrMoSxTWkQd5ov8a66FqdAI a2XgN1AFueNskEJLzUaPgnJLdarChWmx6Fd64GvPdGsGFWCQ75UvRSf7oXX98+7m CPC0arChmPzwN3U1fZeYO5i/AlF0lqTL71Ly2K7iXd0kqXn9knuTBtlRJ/faZh3T sEJm9GZW6R7hPm92etKXnIAEZe5KMTesCUl71lSZmGZN6j0pwFkp3Ub3bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9dYl5lX6WQxhKckhTFY/VwoVs5MB8GA1UdIwQY MBaAFObMZcJ8IymLDFoOC8dLpRA0pwTIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXN4bHdud2pLWXNNV2c0THgwdWxFRFNuQk1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wZThiYWQtMTIxYy00YTU2LTk2Y2Qt YWFjZmMwZGJlZDEyLzEvNXN4bHdud2pLWXNNV2c0THgwdWxFRFNuQk1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8wZThiYWQtMTIxYy00YTU2LTk2Y2QtYWFjZmMwZGJlZDEy LzEvNXN4bHdud2pLWXNNV2c0THgwdWxFRFNuQk1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFMl00WA QrVyJmqPa3sQ1Kf9kVBmr4jptra31hUfkeysgleEw8zFA5vOtTSeiC2uKWaADKZj mgRmDWe3Oj2fx5DLVKK0PglgM2ae3KMdq20gharnwf3qERFMESp3iCrwu8a1CZE6 IIWUdxFd+fdaV/k63CCQOnRN838suePiRMdDxSp9bzoenePwkB0DEscISHOYyEC0 qu5LCiKIn2vrOM4bj38R1YULDzbG9BLf3/9sMgIpCk2MKfH9e0fscz41MNwYHrRN n39EYYU+WgMO7jU7KUKKVK/Wm0ARf15CBQG9L/NGpE1cFcFU9GqiV9Rp7/o9xzoR g038g/A5aLqK+w== -----END CERTIFICATE-----Generated at Tue Dec 16 03:18:45 2025 by rpki-client