This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft File: 5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft (raw, json) Hash identifier: jxpk9jNak9EGmbVtRiCOXbltpeZy4Vv/0WLqoL0KW/M= Subject key identifier: 95:23:CB:AB:80:F6:56:8A:29:1F:56:99:58:F0:FC:87:23:6D:AD:5D Authority key identifier: E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00 Certificate issuer: /CN=e6f1dedaf4dbda60da990d685650e68c888c6100 Certificate serial: 019AE3A8FBFA54E7FE2D193710281856024A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft Manifest number: 1022 Signing time: Wed 03 Dec 2025 10:01:33 +0000 Manifest this update: Wed 03 Dec 2025 10:01:33 +0000 Manifest next update: Thu 04 Dec 2025 10:01:33 +0000 Files and hashes: 1: 5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl (hash: ZVzV5w3r1YSdKAf5ZuLySUwHw0UvXzUUcm9P7WIPWWE=) 2: OW3B1N5hPEzvlqiiwwyRQqXGtGw.roa (hash: BA7rjKrivNOmsfVWQtK8ZoacgDY48HHJ2LHTpwM8by0=) 3: Zc1OpaEScpUAFoK2KIwQ3bNOjEk.roa (hash: Ycn1+SSx44zVA79knmhpwAl0wsmj/W2NDIoNvR4yRPE=) 4: as-zC8jpSJGO4uxCc4_xuMoOOU0.roa (hash: H/3CCPbJG2nng0Pq02AL9scecswnyVINc6vLH8ua4TU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:a8:fb:fa:54:e7:fe:2d:19:37:10:28:18:56:02:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6f1dedaf4dbda60da990d685650e68c888c6100 Validity Not Before: Dec 3 10:01:33 2025 GMT Not After : Dec 4 10:01:33 2025 GMT Subject: CN=9523cbab80f6568a291f569958f0fc87236dad5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:66:03:aa:85:0e:c8:d4:50:68:96:6e:54:cb: 41:fa:5b:55:af:01:4b:5a:0b:61:32:15:ac:42:04: 5d:b2:91:a2:bc:f5:88:ab:9b:dc:92:df:cd:61:d2: 76:c4:22:8a:83:7d:ff:b1:3a:fb:6d:36:06:2a:0f: 8d:73:0f:51:99:e3:bd:37:60:42:84:1c:66:76:d2: 52:c2:15:78:22:bb:cf:45:80:fe:8c:42:08:c4:92: 96:66:3e:7c:d7:43:33:9c:4b:4d:f7:48:99:23:17: 22:63:4f:fe:2a:47:40:5d:c9:8f:ee:26:55:25:49: 0c:64:c5:fd:35:f9:1b:47:b3:37:8d:94:da:76:ff: 41:9d:9a:59:bc:87:c3:bf:47:d7:c5:7a:16:57:11: 0b:e1:9f:ba:76:00:4c:6b:29:1a:f8:ba:a6:43:0e: f4:b2:f2:f2:56:35:7b:de:05:51:46:7f:32:57:9e: 2c:15:7b:92:2a:d9:60:b0:9f:72:7c:cb:4d:ec:11: ea:0a:c5:b9:b1:fc:bf:ec:e6:ef:4d:d2:7e:fb:75: 57:b7:5e:1e:d6:be:30:0d:54:3c:7f:f7:47:e1:a0: db:aa:f7:ff:3b:a0:6b:6c:24:92:25:5f:a5:34:46: 14:a3:1f:00:16:cf:92:e3:d8:17:7b:ea:13:de:cc: 3c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:23:CB:AB:80:F6:56:8A:29:1F:56:99:58:F0:FC:87:23:6D:AD:5D X509v3 Authority Key Identifier: keyid:E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:9f:74:ee:bf:4d:4c:79:1d:31:c4:8e:1d:ac:0b:ce:cb:67: a1:de:80:7f:12:c0:fb:2d:63:da:e1:f4:61:97:c9:75:22:20: 05:67:c0:33:89:59:f2:c5:4f:6a:da:94:c3:7d:f9:3c:34:5b: e3:81:62:20:8f:a9:33:eb:a3:1c:6b:54:d6:20:89:e5:c1:f7: a2:5e:d5:ab:59:0d:38:c1:b2:e8:bc:f2:1d:d4:a3:b3:e9:6f: 84:ec:75:3f:2f:65:b4:90:c3:2d:39:f9:72:04:4e:41:06:f8: b1:c0:2a:97:98:23:39:64:b7:fc:93:37:25:ec:e2:b9:78:20: b9:f2:f1:04:f1:7e:00:85:b7:f5:59:e8:0b:18:98:fb:71:f2: e4:21:05:a9:fe:a4:df:34:2c:43:70:8a:b5:89:7f:42:72:a8: be:eb:e8:49:81:5d:09:4c:0d:bd:4b:2a:c2:8b:20:af:8c:cf: a6:ef:a5:b7:de:71:c9:49:c8:f9:d0:13:9a:92:0b:a2:16:ab: c1:ca:c8:9d:aa:fc:79:02:d8:2f:33:99:28:8f:9e:b9:64:ae: bd:2e:e5:7e:8a:ea:92:7f:88:20:21:05:1d:a0:f2:4f:c7:73: 93:65:0d:89:a4:a2:f9:48:c0:e3:2c:d2:ff:dc:2b:82:28:bd: de:45:b0:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrjqPv6VOf+LRk3ECgYVgJKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZjFkZWRhZjRkYmRhNjBkYTk5MGQ2ODU2NTBlNjhjODg4 YzYxMDAwHhcNMjUxMjAzMTAwMTMzWhcNMjUxMjA0MTAwMTMzWjAzMTEwLwYDVQQD Eyg5NTIzY2JhYjgwZjY1NjhhMjkxZjU2OTk1OGYwZmM4NzIzNmRhZDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9GYDqoUOyNRQaJZuVMtB+ltVrwFL WgthMhWsQgRdspGivPWIq5vckt/NYdJ2xCKKg33/sTr7bTYGKg+Ncw9RmeO9N2BC hBxmdtJSwhV4IrvPRYD+jEIIxJKWZj5810MznEtN90iZIxciY0/+KkdAXcmP7iZV JUkMZMX9NfkbR7M3jZTadv9BnZpZvIfDv0fXxXoWVxEL4Z+6dgBMayka+LqmQw70 svLyVjV73gVRRn8yV54sFXuSKtlgsJ9yfMtN7BHqCsW5sfy/7ObvTdJ++3VXt14e 1r4wDVQ8f/dH4aDbqvf/O6BrbCSSJV+lNEYUox8AFs+S49gXe+oT3sw8SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUjy6uA9laKKR9WmVjw/Icjba1dMB8GA1UdIwQY MBaAFObx3tr029pg2pkNaFZQ5oyIjGEAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXZIZTJ2VGIybURhbVExb1ZsRG1qSWlNWVFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8yM2JhNDYtZmM3YS00Yjk3LThiNGYt MjMxNjU3ODI5ZWY1LzEvNXZIZTJ2VGIybURhbVExb1ZsRG1qSWlNWVFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8yM2JhNDYtZmM3YS00Yjk3LThiNGYtMjMxNjU3ODI5ZWY1 LzEvNXZIZTJ2VGIybURhbVExb1ZsRG1qSWlNWVFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZ907r9N THkdMcSOHawLzstnod6AfxLA+y1j2uH0YZfJdSIgBWfAM4lZ8sVPatqUw335PDRb 44FiII+pM+ujHGtU1iCJ5cH3ol7Vq1kNOMGy6LzyHdSjs+lvhOx1Py9ltJDDLTn5 cgROQQb4scAql5gjOWS3/JM3JeziuXggufLxBPF+AIW39VnoCxiY+3Hy5CEFqf6k 3zQsQ3CKtYl/QnKovuvoSYFdCUwNvUsqwosgr4zPpu+lt95xyUnI+dATmpILohar wcrInar8eQLYLzOZKI+euWSuvS7lforqkn+IICEFHaDyT8dzk2UNiaSi+UjA4yzS /9wrgii93kWw4g== -----END CERTIFICATE-----Generated at Wed Dec 3 12:46:13 2025 by rpki-client