This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft File: 5oaWVQmmScUIq4q3L3JXvvNfeTA.mft (raw, json) Hash identifier: hfEdUyftl7dGiGme5dXTSnSUgHhWT0IRdeAgLLIy+4s= Subject key identifier: F3:6E:B7:E0:B1:6D:8F:72:46:D0:24:C4:C6:97:09:7D:FE:CF:BE:F7 Authority key identifier: E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30 Certificate issuer: /CN=e686965509a649c508ab8ab72f7257bef35f7930 Certificate serial: 019B4212284DAC34AA75976050E1F936DF14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft Manifest number: 11 Signing time: Sun 21 Dec 2025 18:00:44 +0000 Manifest this update: Sun 21 Dec 2025 18:00:44 +0000 Manifest next update: Mon 22 Dec 2025 18:00:44 +0000 Files and hashes: 1: 5O9Cs84ALzQYWShlYpzbuaAEl0U.roa (hash: LQFehHDdF2EYE3Sk0E8gsAQFha6C352cj9Bb1p47hLI=) 2: 5oaWVQmmScUIq4q3L3JXvvNfeTA.crl (hash: RyvylieTaWyvUqb7rQfnp6qBXDH3zBqZBQWw8uAjSmg=) 3: YT7TxtjN2dRtXnT4-WJTTfp5eIQ.roa (hash: mFJordH00PdHOWT1Y4dRq5PrI120PAxfDwm/akkRQ/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 18:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:12:28:4d:ac:34:aa:75:97:60:50:e1:f9:36:df:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e686965509a649c508ab8ab72f7257bef35f7930 Validity Not Before: Dec 21 18:00:44 2025 GMT Not After : Dec 22 18:00:44 2025 GMT Subject: CN=f36eb7e0b16d8f7246d024c4c697097dfecfbef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c7:52:0c:19:83:10:4c:bd:15:79:cf:ea:57: 7f:dc:90:73:ce:d8:9e:57:78:6b:5a:25:e9:5f:14: 5b:73:97:a9:52:c7:33:b4:69:9e:b0:c5:4b:53:d3: 96:e0:88:ef:9a:38:e0:59:8d:77:12:c9:c7:e4:e3: e6:00:fc:24:a5:c0:53:c1:34:1f:1c:c8:36:a3:0c: ec:b4:d1:89:bc:aa:af:20:19:cf:1b:05:88:be:70: b8:bc:2c:d2:8b:21:43:7a:bc:e3:b6:f1:ce:86:05: e3:3d:53:10:9f:c9:20:9e:d3:0c:bf:ba:bc:70:b9: a8:89:b2:4c:e6:ad:be:f8:10:ef:14:f3:8b:ee:95: fe:af:c3:b4:c0:2c:9b:60:5c:7a:56:81:d6:95:17: a6:ae:cf:1d:53:0c:6e:28:44:3c:79:a2:0e:ce:6d: f4:e0:41:4f:ae:5b:b5:3f:19:b7:34:97:f1:9c:60: fd:3c:7d:15:ea:ce:16:86:35:04:83:e6:7d:af:82: e5:16:8b:bb:08:59:94:c5:4f:fb:6a:d8:26:1d:d2: 25:c9:2d:82:d1:1c:7f:54:6a:70:35:7f:04:bb:91: 61:3f:cd:1d:ef:8d:9b:34:6a:d1:82:65:72:47:b8: 93:16:f5:42:0e:86:0f:39:2d:d4:14:00:5d:21:9b: 23:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:6E:B7:E0:B1:6D:8F:72:46:D0:24:C4:C6:97:09:7D:FE:CF:BE:F7 X509v3 Authority Key Identifier: keyid:E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:1c:2e:95:94:d3:df:83:18:0d:e5:2a:06:87:2a:c9:21:f9: 33:ae:d5:40:df:a4:2d:61:16:d0:59:84:d5:6a:9d:40:e9:fc: 32:f3:26:9e:b5:38:f5:e4:7c:1f:fd:de:be:fb:7f:5f:08:c0: b4:80:d7:e8:e7:18:93:96:42:31:50:d0:3e:28:d0:dc:f9:26: 4b:e9:11:c0:7d:2d:69:87:8a:fd:d1:bf:c4:8b:0a:90:62:c0: d8:4c:19:fd:f4:d5:ad:0f:91:f1:fa:dd:7f:15:5e:36:46:6f: 8d:ed:e7:43:8c:24:a0:c6:4e:cf:5a:4f:92:cc:24:c1:6e:bb: d6:c2:af:d8:29:f7:6d:41:1e:02:c3:ff:06:5c:68:c4:15:3b: df:62:03:2f:16:81:72:9c:16:67:97:6e:ba:a8:b9:7e:4e:17: 03:e7:03:2f:b4:0e:d0:e0:8b:60:96:b5:a0:9a:8b:0e:30:53: bb:fa:9d:ba:d9:28:6e:9f:c4:55:9f:94:75:cf:17:cc:88:05: e7:1e:4c:b2:4b:49:1e:86:09:73:ac:ff:3b:38:5d:36:c8:a3: a1:e3:e0:0c:c5:46:d3:fd:22:15:3e:7e:c0:1e:77:66:92:77: 8f:4f:f1:0c:ea:6e:6f:d8:ad:80:31:30:b4:6e:8f:c5:f5:a5: b8:82:e8:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCEihNrDSqdZdgUOH5Nt8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ODY5NjU1MDlhNjQ5YzUwOGFiOGFiNzJmNzI1N2JlZjM1 Zjc5MzAwHhcNMjUxMjIxMTgwMDQ0WhcNMjUxMjIyMTgwMDQ0WjAzMTEwLwYDVQQD EyhmMzZlYjdlMGIxNmQ4ZjcyNDZkMDI0YzRjNjk3MDk3ZGZlY2ZiZWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MdSDBmDEEy9FXnP6ld/3JBzztie V3hrWiXpXxRbc5epUscztGmesMVLU9OW4IjvmjjgWY13EsnH5OPmAPwkpcBTwTQf HMg2owzstNGJvKqvIBnPGwWIvnC4vCzSiyFDerzjtvHOhgXjPVMQn8kgntMMv7q8 cLmoibJM5q2++BDvFPOL7pX+r8O0wCybYFx6VoHWlRemrs8dUwxuKEQ8eaIOzm30 4EFPrlu1Pxm3NJfxnGD9PH0V6s4WhjUEg+Z9r4LlFou7CFmUxU/7atgmHdIlyS2C 0Rx/VGpwNX8Eu5FhP80d742bNGrRgmVyR7iTFvVCDoYPOS3UFABdIZsjRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNut+CxbY9yRtAkxMaXCX3+z773MB8GA1UdIwQY MBaAFOaGllUJpknFCKuKty9yV77zX3kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW9hV1ZRbW1TY1VJcTRxM0wzSlh2dk5mZVRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82OGJmZjYtN2IyYy00ZWNmLTgwMDYt ZWQxNGFmNmRiODg4LzEvNW9hV1ZRbW1TY1VJcTRxM0wzSlh2dk5mZVRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS82OGJmZjYtN2IyYy00ZWNmLTgwMDYtZWQxNGFmNmRiODg4 LzEvNW9hV1ZRbW1TY1VJcTRxM0wzSlh2dk5mZVRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoBwulZTT 34MYDeUqBocqySH5M67VQN+kLWEW0FmE1WqdQOn8MvMmnrU49eR8H/3evvt/XwjA tIDX6OcYk5ZCMVDQPijQ3PkmS+kRwH0taYeK/dG/xIsKkGLA2EwZ/fTVrQ+R8frd fxVeNkZvje3nQ4wkoMZOz1pPkswkwW671sKv2Cn3bUEeAsP/BlxoxBU732IDLxaB cpwWZ5duuqi5fk4XA+cDL7QO0OCLYJa1oJqLDjBTu/qdutkobp/EVZ+Udc8XzIgF 5x5MsktJHoYJc6z/OzhdNsijoePgDMVG0/0iFT5+wB53ZpJ3j0/xDOpub9itgDEw tG6PxfWluILoRQ== -----END CERTIFICATE-----Generated at Sun Dec 21 23:59:11 2025 by rpki-client