This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft File: 5BCXLMRZVogEu0t5HXwTz7IoOIM.mft (raw, json) Hash identifier: afFvvRUyUXjPL1Kw2HCwHwKvdvfWZ5Xq5alvtaRMeHw= Subject key identifier: AA:B1:0F:F7:84:58:B9:5F:9C:54:93:2E:06:FC:19:94:95:3D:D9:A8 Authority key identifier: E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83 Certificate issuer: /CN=e410972cc459568804bb4b791d7c13cfb2283883 Certificate serial: 019B48EFCD0AF8C181F61C0616CD6F6B1DEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft Manifest number: 155D Signing time: Tue 23 Dec 2025 02:00:33 +0000 Manifest this update: Tue 23 Dec 2025 02:00:33 +0000 Manifest next update: Wed 24 Dec 2025 02:00:33 +0000 Files and hashes: 1: 5BCXLMRZVogEu0t5HXwTz7IoOIM.crl (hash: 76jqwNZ2Sq8k8/b4gcGutc+R+3vBWHqE0bSpDd+ss2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:ef:cd:0a:f8:c1:81:f6:1c:06:16:cd:6f:6b:1d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e410972cc459568804bb4b791d7c13cfb2283883 Validity Not Before: Dec 23 02:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=aab10ff78458b95f9c54932e06fc1994953dd9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2d:e4:b3:e1:36:4d:86:77:ea:41:5d:e9:52: 6e:36:9b:f8:b3:f0:87:72:ea:e2:43:b1:fb:3a:35: 23:51:93:f0:18:c8:37:7c:92:38:50:8d:bc:d4:cb: 63:8f:b5:f0:43:f2:65:df:20:29:f1:b8:cf:34:4f: 60:6e:45:9f:97:05:aa:76:e0:ed:2c:d8:f2:ea:c0: b0:1b:0c:f9:b8:fd:60:de:1d:d5:c0:35:dc:91:fd: f0:3f:fb:be:45:72:fb:96:58:0d:5b:1f:5b:33:e0: 31:cd:0d:c2:c1:2e:8c:f0:22:71:1c:be:8b:1c:ce: 0f:39:7c:79:29:2e:d8:d9:41:ff:eb:ca:ad:23:8e: 8a:0f:17:79:f5:a3:64:05:f2:99:34:4a:91:62:69: bd:1f:1f:90:c0:b6:ce:56:21:ff:f8:33:e0:e0:8d: 68:7a:22:93:a8:96:6e:58:ec:bb:a2:90:5a:21:c3: 6c:73:c7:32:d4:78:45:81:72:c0:30:c2:7f:e9:41: 16:f0:12:c8:52:da:c5:8e:f7:8a:fe:91:1f:80:03: 8c:b6:bf:f2:45:02:d5:99:b9:f2:79:93:9b:14:60: c6:f0:65:75:2f:25:9a:a5:02:8b:f6:7b:bb:31:da: 32:7d:c7:e1:a2:7c:e1:45:2c:a2:45:d5:64:35:ee: a9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B1:0F:F7:84:58:B9:5F:9C:54:93:2E:06:FC:19:94:95:3D:D9:A8 X509v3 Authority Key Identifier: keyid:E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:7c:6e:52:a4:d4:47:95:1a:25:6b:a0:29:d6:6c:9d:db:6b: b4:a8:47:10:35:f4:b9:18:7c:b5:93:0c:83:fc:43:8d:40:4a: 7d:8c:5a:04:6b:d5:e7:ef:31:6d:aa:61:20:a7:5d:b8:9c:21: 88:af:d8:ff:44:3c:c6:3b:a2:0b:79:13:72:e0:7a:d0:fd:33: f3:09:6c:c2:47:91:31:cb:6f:d7:93:4a:f1:1a:91:91:7b:d3: 13:8d:a0:4c:a4:dd:d5:7c:db:d0:21:b8:38:f5:99:43:bc:99: 54:2a:31:ba:04:93:9d:30:45:18:60:fa:b2:82:c6:a9:fe:18: cd:a2:08:3a:43:8c:08:da:5d:ba:91:41:c3:c1:08:39:f5:19: 01:23:3c:c2:1b:4a:2a:12:19:d2:93:31:1e:61:f2:2c:8a:1a: 06:c1:c6:4c:d7:f7:fc:2e:c6:8e:4c:ff:86:1e:33:21:8b:c4: d6:38:cc:5d:b2:53:2a:44:b7:fe:ae:5e:c2:b3:d6:74:ed:d6: 42:cb:57:8d:14:a4:d9:99:17:79:97:38:cb:ee:b2:e9:16:48: 6e:af:86:ef:b1:f9:34:ca:99:00:bc:6c:0a:0a:30:eb:b6:fd: e5:ae:e1:72:2f:d4:7e:30:7e:11:31:10:20:8e:61:24:47:c2: 67:92:39:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI780K+MGB9hwGFs1vax3rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MTA5NzJjYzQ1OTU2ODgwNGJiNGI3OTFkN2MxM2NmYjIy ODM4ODMwHhcNMjUxMjIzMDIwMDMzWhcNMjUxMjI0MDIwMDMzWjAzMTEwLwYDVQQD EyhhYWIxMGZmNzg0NThiOTVmOWM1NDkzMmUwNmZjMTk5NDk1M2RkOWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki3ks+E2TYZ36kFd6VJuNpv4s/CH curiQ7H7OjUjUZPwGMg3fJI4UI281Mtjj7XwQ/Jl3yAp8bjPNE9gbkWflwWqduDt LNjy6sCwGwz5uP1g3h3VwDXckf3wP/u+RXL7llgNWx9bM+AxzQ3CwS6M8CJxHL6L HM4POXx5KS7Y2UH/68qtI46KDxd59aNkBfKZNEqRYmm9Hx+QwLbOViH/+DPg4I1o eiKTqJZuWOy7opBaIcNsc8cy1HhFgXLAMMJ/6UEW8BLIUtrFjveK/pEfgAOMtr/y RQLVmbnyeZObFGDG8GV1LyWapQKL9nu7MdoyfcfhonzhRSyiRdVkNe6pfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqxD/eEWLlfnFSTLgb8GZSVPdmoMB8GA1UdIwQY MBaAFOQQlyzEWVaIBLtLeR18E8+yKDiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUJDWExNUlpWb2dFdTB0NUhYd1R6N0lvT0lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMDZlNjItZTU4NC00OTJhLWJmNDYt ZjI3Y2VmNGJhMjI0LzEvNUJDWExNUlpWb2dFdTB0NUhYd1R6N0lvT0lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMDZlNjItZTU4NC00OTJhLWJmNDYtZjI3Y2VmNGJhMjI0 LzEvNUJDWExNUlpWb2dFdTB0NUhYd1R6N0lvT0lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnxuUqTU R5UaJWugKdZsndtrtKhHEDX0uRh8tZMMg/xDjUBKfYxaBGvV5+8xbaphIKdduJwh iK/Y/0Q8xjuiC3kTcuB60P0z8wlswkeRMctv15NK8RqRkXvTE42gTKTd1Xzb0CG4 OPWZQ7yZVCoxugSTnTBFGGD6soLGqf4YzaIIOkOMCNpdupFBw8EIOfUZASM8whtK KhIZ0pMxHmHyLIoaBsHGTNf3/C7Gjkz/hh4zIYvE1jjMXbJTKkS3/q5ewrPWdO3W QstXjRSk2ZkXeZc4y+6y6RZIbq+G77H5NMqZALxsCgow67b95a7hci/UfjB+ETEQ II5hJEfCZ5I5WA== -----END CERTIFICATE-----Generated at Tue Dec 23 06:10:51 2025 by rpki-client