This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft File: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft (raw, json) Hash identifier: a5bHsugY5CChJw+Wn0RVm3LqmOvqColl7js4QyquyLk= Subject key identifier: 55:1C:08:3A:9D:BA:1D:0E:D0:61:2F:DA:88:74:C0:1D:94:A8:C8:9C Authority key identifier: E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20 Certificate issuer: /CN=e4c7482434a457b048b7d6261ddd8095c5c09020 Certificate serial: 019B1F87D07EE86511EB9C93D05842B9EAF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft Manifest number: 09AB Signing time: Mon 15 Dec 2025 01:02:32 +0000 Manifest this update: Mon 15 Dec 2025 01:02:32 +0000 Manifest next update: Tue 16 Dec 2025 01:02:32 +0000 Files and hashes: 1: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl (hash: hy6NyCwhO0RtB4kJqlToiQTuqDCf0MSog10RfdPrJL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:d0:7e:e8:65:11:eb:9c:93:d0:58:42:b9:ea:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4c7482434a457b048b7d6261ddd8095c5c09020 Validity Not Before: Dec 15 01:02:32 2025 GMT Not After : Dec 16 01:02:32 2025 GMT Subject: CN=551c083a9dba1d0ed0612fda8874c01d94a8c89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:db:93:68:10:be:91:d3:26:a2:d7:e8:15:1b: 69:a7:67:0c:15:09:56:49:d7:bf:1d:e0:59:8d:b1: 71:a9:db:ae:96:03:e3:d0:e6:3e:3f:cb:85:11:85: 80:a9:42:59:f7:0c:13:22:d7:3f:d7:3f:ba:24:5b: 7d:f0:30:03:2b:41:ce:29:f3:00:1a:c0:39:07:a3: 0c:4b:52:dd:23:c5:fd:72:24:65:7e:4d:7a:17:61: 2f:78:5f:e9:4d:73:9d:36:c0:d1:d1:78:0e:f4:e0: 36:5d:e1:ca:28:25:b7:94:0f:74:b3:d9:69:84:54: 82:dc:c0:9f:f4:e2:67:ab:db:00:fd:0e:d8:13:61: 01:e4:9f:d2:7f:3f:be:ea:32:3e:b3:5a:94:bf:a0: 75:a7:10:dd:ce:09:4f:38:b8:01:71:3c:2c:32:a0: 41:47:2a:21:6e:f4:ae:dd:45:24:b8:c2:f8:47:9c: 86:41:08:7a:95:0c:95:d8:37:8f:e4:f1:c2:cc:2a: 73:04:9c:fe:00:0c:1f:1c:ab:3f:db:73:d4:6b:2b: 09:e4:ae:7e:73:42:d3:86:db:f2:b3:7e:44:4f:84: 67:ea:94:85:33:04:6a:de:1b:be:a5:98:7d:a3:0f: d1:a3:69:46:a5:55:cf:af:06:18:d8:7f:6c:e8:60: a3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1C:08:3A:9D:BA:1D:0E:D0:61:2F:DA:88:74:C0:1D:94:A8:C8:9C X509v3 Authority Key Identifier: keyid:E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:47:3e:54:43:e9:19:b4:9e:b9:c8:5a:b0:6f:75:3b:2d:73: e0:ab:68:ab:19:e1:b8:3e:92:53:65:bc:de:68:bd:8c:bd:98: 8f:b4:f6:df:87:b2:df:73:40:a2:82:fd:4e:ee:2f:20:cf:31: 10:38:0b:6b:43:0e:38:82:59:6e:a3:ce:a4:82:78:a0:75:9b: 41:86:42:b4:af:04:1f:a1:5f:b1:67:c0:ca:d7:e4:9d:55:ec: 24:e7:3c:5b:03:7f:47:40:14:8f:be:00:45:c2:c6:b5:a2:e4: 16:2a:b6:d1:19:9d:93:b0:7a:59:d3:3c:57:3d:64:81:db:64: ea:82:e3:fe:fd:48:ff:75:68:8d:45:1f:aa:0f:a2:75:2f:43: 1a:8b:a7:70:a2:11:0a:b2:87:37:cf:e2:a7:82:cc:81:ea:3d: a3:fc:fa:82:7a:45:66:a2:26:ae:bd:6f:c0:84:ae:67:f7:1a: c5:c5:14:3a:2f:13:3a:e8:2e:b0:b8:ed:61:ed:f0:a2:85:66: ab:91:5d:7e:db:ee:dc:a2:bb:94:5c:ed:87:ac:c0:12:dd:3e: 6d:bd:c9:23:cf:dc:12:97:93:5f:67:aa:94:fe:93:11:9f:06: 32:25:95:94:e6:3f:02:b1:d2:6f:3c:27:64:7a:d6:8c:8a:ef: a2:34:46:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfh9B+6GUR65yT0FhCuer4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0Yzc0ODI0MzRhNDU3YjA0OGI3ZDYyNjFkZGQ4MDk1YzVj MDkwMjAwHhcNMjUxMjE1MDEwMjMyWhcNMjUxMjE2MDEwMjMyWjAzMTEwLwYDVQQD Eyg1NTFjMDgzYTlkYmExZDBlZDA2MTJmZGE4ODc0YzAxZDk0YThjODljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtuTaBC+kdMmotfoFRtpp2cMFQlW Sde/HeBZjbFxqduulgPj0OY+P8uFEYWAqUJZ9wwTItc/1z+6JFt98DADK0HOKfMA GsA5B6MMS1LdI8X9ciRlfk16F2EveF/pTXOdNsDR0XgO9OA2XeHKKCW3lA90s9lp hFSC3MCf9OJnq9sA/Q7YE2EB5J/Sfz++6jI+s1qUv6B1pxDdzglPOLgBcTwsMqBB RyohbvSu3UUkuML4R5yGQQh6lQyV2DeP5PHCzCpzBJz+AAwfHKs/23PUaysJ5K5+ c0LThtvys35ET4Rn6pSFMwRq3hu+pZh9ow/Ro2lGpVXPrwYY2H9s6GCjNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUcCDqduh0O0GEv2oh0wB2UqMicMB8GA1UdIwQY MBaAFOTHSCQ0pFewSLfWJh3dgJXFwJAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU1kSUpEU2tWN0JJdDlZbUhkMkFsY1hBa0NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lZGUzNmQtYmY1Yi00NDM1LWIzZTUt YzQ1MDhiNTU1MDcxLzEvNU1kSUpEU2tWN0JJdDlZbUhkMkFsY1hBa0NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lZGUzNmQtYmY1Yi00NDM1LWIzZTUtYzQ1MDhiNTU1MDcx LzEvNU1kSUpEU2tWN0JJdDlZbUhkMkFsY1hBa0NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0c+VEPp GbSeuchasG91Oy1z4KtoqxnhuD6SU2W83mi9jL2Yj7T234ey33NAooL9Tu4vIM8x EDgLa0MOOIJZbqPOpIJ4oHWbQYZCtK8EH6FfsWfAytfknVXsJOc8WwN/R0AUj74A RcLGtaLkFiq20Rmdk7B6WdM8Vz1kgdtk6oLj/v1I/3VojUUfqg+idS9DGouncKIR CrKHN8/ip4LMgeo9o/z6gnpFZqImrr1vwISuZ/caxcUUOi8TOugusLjtYe3wooVm q5Fdftvu3KK7lFzth6zAEt0+bb3JI8/cEpeTX2eqlP6TEZ8GMiWVlOY/ArHSbzwn ZHrWjIrvojRGxQ== -----END CERTIFICATE-----Generated at Mon Dec 15 04:58:44 2025 by rpki-client