This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft File: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft (raw, json) Hash identifier: RlslXevzGD1zjkIQFq2MZnh3K35nTZ2fxFFqA7mYPJE= Subject key identifier: 03:51:E5:8F:BB:3C:83:A7:FA:C5:81:5B:B1:13:96:CE:8F:CC:A6:98 Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94 Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94 Certificate serial: 019B34FBA7D80EF4245A772738015ACBDD70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft Manifest number: 1214 Signing time: Fri 19 Dec 2025 05:01:06 +0000 Manifest this update: Fri 19 Dec 2025 05:01:06 +0000 Manifest next update: Sat 20 Dec 2025 05:01:06 +0000 Files and hashes: 1: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl (hash: KZ5OT6OpYmGLYZLWgUYNwez/WKrAUtlpG6PEaXKDUZs=) 2: QjltdHgB4W_2eDHH-42Rsn7haU4.roa (hash: GyEMXz3VqmF7vL4u7u/PEu1jMNaIBLH5FqjmQMneOuk=) 3: ik_n3d34B4WKWLhhwqx1Hs4Gq10.roa (hash: SF4FNJqkU5gIwE/u+5gu4fhisTugNMrqP4zHCgZbpN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:a7:d8:0e:f4:24:5a:77:27:38:01:5a:cb:dd:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94 Validity Not Before: Dec 19 05:01:06 2025 GMT Not After : Dec 20 05:01:06 2025 GMT Subject: CN=0351e58fbb3c83a7fac5815bb11396ce8fcca698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:54:8d:3f:d1:d7:2f:f7:39:f2:3b:c3:c1:f6: 45:bb:b8:b7:25:d6:b6:b2:26:1c:66:41:8d:7d:94: 80:84:b7:a4:a8:57:34:c6:0f:a6:66:b2:41:29:1c: 0a:6f:e3:2e:70:47:80:02:a9:5f:f9:b9:35:2a:0d: 78:7c:3d:79:03:99:eb:f2:70:45:7e:73:4c:89:1f: c4:f7:8b:fa:f3:4f:a8:d3:78:2c:db:71:8d:c9:2f: f1:e4:79:ce:b8:22:53:04:4f:63:a0:bb:6e:93:c2: 36:1f:58:bd:67:59:ad:04:ac:58:c2:05:35:f7:ff: 07:85:44:63:5e:64:4d:5b:ce:b2:97:3a:f2:b3:5b: dc:4e:a7:5f:46:f6:e4:eb:4e:4e:16:bd:d8:c1:f4: a2:32:d4:a5:75:35:69:d6:2a:e5:7a:76:90:75:40: 58:55:a1:b2:95:e8:81:6b:a4:98:d3:f7:49:d4:16: 6d:97:99:64:12:38:39:54:2a:9d:b4:60:61:55:d5: 4a:1b:73:8e:75:3a:c1:34:ae:72:81:1d:3e:3a:79: 83:8b:09:e0:fc:57:1f:db:be:fe:44:7e:d9:83:26: 2a:62:67:92:67:2b:0a:a8:42:38:b4:12:07:3f:ca: 90:6c:94:4c:0e:77:07:a0:03:1f:fd:95:45:ab:8a: cd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:51:E5:8F:BB:3C:83:A7:FA:C5:81:5B:B1:13:96:CE:8F:CC:A6:98 X509v3 Authority Key Identifier: keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:0b:9a:28:85:d3:3d:80:aa:5a:72:cd:fc:a0:90:8b:9e:23: 10:7b:e0:23:6c:df:4e:24:cc:17:fb:9c:e4:36:28:16:66:67: 33:c8:88:76:ee:a3:df:9b:70:ef:8a:63:15:4f:4e:ac:77:d0: f5:f8:d3:de:f5:ab:a5:12:4f:bb:88:c5:70:58:8a:41:af:8f: 27:30:8d:9a:30:16:1a:43:f0:ae:d8:46:51:b4:2b:38:3f:e2: 5b:9c:f0:a8:29:69:0a:a5:51:ce:5e:30:eb:6d:1c:a1:a8:0b: 99:1b:9c:13:93:52:90:ca:30:da:02:d7:a2:ef:7f:0c:f0:db: c3:68:8d:04:52:9c:03:5c:1b:b4:bc:25:3a:bc:54:7f:cc:53: 0f:18:65:e9:9c:a7:5c:da:8c:da:68:23:f2:5a:4b:b8:e1:7a: dc:1f:37:9d:ed:13:89:22:da:b3:46:11:8d:82:a0:9a:86:38: 50:05:95:77:42:6d:0b:bb:a1:79:ae:bb:b1:1e:cf:20:1a:f5: c9:b8:9e:9c:0e:2c:9b:a0:30:3e:b1:f9:1b:34:6f:cb:e1:5e: de:47:38:90:80:37:c8:91:aa:96:5b:78:c1:c8:b2:3e:c7:d8: 1e:4e:54:3e:b2:a7:bd:d5:11:5d:d2:4f:d6:c6:a9:16:22:22: 95:74:f0:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+6fYDvQkWncnOAFay91wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MzM0YWQ5YjNmYzUyMTAzMGJlOTlhNTE1NzIxMWI2NjMy MTZjOTQwHhcNMjUxMjE5MDUwMTA2WhcNMjUxMjIwMDUwMTA2WjAzMTEwLwYDVQQD EygwMzUxZTU4ZmJiM2M4M2E3ZmFjNTgxNWJiMTEzOTZjZThmY2NhNjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFSNP9HXL/c58jvDwfZFu7i3Jda2 siYcZkGNfZSAhLekqFc0xg+mZrJBKRwKb+MucEeAAqlf+bk1Kg14fD15A5nr8nBF fnNMiR/E94v680+o03gs23GNyS/x5HnOuCJTBE9joLtuk8I2H1i9Z1mtBKxYwgU1 9/8HhURjXmRNW86ylzrys1vcTqdfRvbk605OFr3YwfSiMtSldTVp1irlenaQdUBY VaGyleiBa6SY0/dJ1BZtl5lkEjg5VCqdtGBhVdVKG3OOdTrBNK5ygR0+OnmDiwng /Fcf277+RH7ZgyYqYmeSZysKqEI4tBIHP8qQbJRMDncHoAMf/ZVFq4rNnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANR5Y+7PIOn+sWBW7ETls6PzKaYMB8GA1UdIwQY MBaAFOczStmz/FIQML6ZpRVyEbZjIWyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXpOSzJiUDhVaEF3dnBtbEZYSVJ0bU1oYkpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iMDRiMmUtNzNlNi00ODg3LThkZjEt MzcyMmRmMDczNjAzLzEvNXpOSzJiUDhVaEF3dnBtbEZYSVJ0bU1oYkpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iMDRiMmUtNzNlNi00ODg3LThkZjEtMzcyMmRmMDczNjAz LzEvNXpOSzJiUDhVaEF3dnBtbEZYSVJ0bU1oYkpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwuaKIXT PYCqWnLN/KCQi54jEHvgI2zfTiTMF/uc5DYoFmZnM8iIdu6j35tw74pjFU9OrHfQ 9fjT3vWrpRJPu4jFcFiKQa+PJzCNmjAWGkPwrthGUbQrOD/iW5zwqClpCqVRzl4w 620coagLmRucE5NSkMow2gLXou9/DPDbw2iNBFKcA1wbtLwlOrxUf8xTDxhl6Zyn XNqM2mgj8lpLuOF63B83ne0TiSLas0YRjYKgmoY4UAWVd0JtC7uhea67sR7PIBr1 ybienA4sm6AwPrH5GzRvy+Fe3kc4kIA3yJGqllt4wciyPsfYHk5UPrKnvdURXdJP 1sapFiIilXTwLw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:54:48 2025 by rpki-client