This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft File: 5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json) Hash identifier: LK6Q6WSXfbOYUEFBhCF/BoVVR5vGMwkUMoJyVrqT26M= Subject key identifier: 9F:C0:BC:DE:11:A9:C7:6B:81:B5:61:E8:ED:8E:B4:22:E5:D6:91:3F Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc Certificate serial: 019B24AD0C987BDD3B336388AF3574B68DB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft Manifest number: 1428 Signing time: Tue 16 Dec 2025 01:01:19 +0000 Manifest this update: Tue 16 Dec 2025 01:01:19 +0000 Manifest next update: Wed 17 Dec 2025 01:01:19 +0000 Files and hashes: 1: 1-KxbHOd8IAxtF53PSxnQK1T4mVs.roa (hash: kPs2MrTsmIOrVH1y0/AHb3IDoxZ35cj2beaiWFS9sJI=) 2: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: 3zl2HY5F+P1XhNs4n3js3MKngW9wcAML+JfVm8Xx8iQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ad:0c:98:7b:dd:3b:33:63:88:af:35:74:b6:8d:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc Validity Not Before: Dec 16 01:01:19 2025 GMT Not After : Dec 17 01:01:19 2025 GMT Subject: CN=9fc0bcde11a9c76b81b561e8ed8eb422e5d6913f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fb:8d:35:be:69:a4:a9:b3:3d:bf:25:fb:13: 8b:e9:dc:50:69:c4:e3:30:f2:b0:1a:26:38:32:0a: 98:98:bb:10:24:25:10:0b:89:9a:22:41:ca:01:a5: 7f:78:bf:f5:a2:51:f8:00:17:af:45:c6:45:e1:31: 2e:8b:a4:ff:93:95:41:ea:1f:e8:07:bd:91:68:51: 54:54:ba:7b:1c:b8:70:ab:de:00:81:b7:65:6a:4e: 63:d6:6b:2c:85:30:ef:48:53:f1:a6:f0:49:ce:76: b8:ae:1c:c2:cf:a8:ac:40:d7:30:7b:72:6d:0d:e4: a0:50:96:7d:1c:5a:11:ec:11:eb:3e:29:3b:ac:bf: ec:66:0e:28:43:ec:ab:0c:4a:22:8e:2c:52:4e:e9: 8d:3b:3f:df:88:8b:13:48:b7:63:b1:df:09:d4:21: 4c:0a:11:e5:0b:00:4b:74:ac:a7:95:7e:f7:db:c8: 20:4e:f1:d7:f8:94:0a:42:ec:f7:c5:29:00:7c:d0: 44:ba:f3:37:c3:22:28:61:33:ce:3e:8c:49:c3:f2: 18:fb:b8:c6:03:02:60:cf:c0:63:03:c4:74:78:e2: e5:a4:ba:87:01:66:e5:c0:9d:0d:d5:46:75:07:41: d1:8f:24:7c:7c:e2:b3:25:23:f0:9b:5e:5e:50:1d: 9d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C0:BC:DE:11:A9:C7:6B:81:B5:61:E8:ED:8E:B4:22:E5:D6:91:3F X509v3 Authority Key Identifier: keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:72:51:1b:47:a0:30:fc:6f:53:7b:66:66:c0:04:4a:7c:c0: 50:af:c8:1c:9c:1c:df:e3:64:c1:6f:61:dd:44:c8:3e:d8:f7: 44:40:7a:53:e4:7e:72:a3:0d:46:7e:b3:d6:8f:b7:53:09:85: 42:53:1a:49:3e:ea:2f:78:88:f1:64:17:d3:bf:d3:e0:f2:77: 19:1d:68:5c:22:02:36:af:a7:26:c8:0b:b1:bf:e3:d5:23:33: 3a:5d:ac:5e:26:a4:40:2f:68:60:c8:73:4b:80:da:95:8e:0d: 22:33:40:5b:42:ca:d2:53:ff:7b:b6:b7:11:9d:44:54:b0:ac: da:97:20:d1:ba:90:0c:5f:a4:26:0e:39:f6:28:2e:ec:63:02: 92:f8:14:5d:21:9f:4b:0c:ec:6f:55:0f:f1:9f:83:f4:7f:03: c5:78:ef:fb:b2:9e:e8:d9:03:fd:e9:1a:38:59:ed:ed:59:1f: d5:9f:4a:c7:12:7f:41:06:e7:e4:28:bf:60:1b:d4:2c:74:dd: da:52:d7:c3:e9:41:83:de:f7:67:f7:ef:1a:62:8a:b1:1c:0a: 38:f6:1f:5c:5e:32:db:46:1e:4b:d0:f4:ec:0a:b4:53:9b:25: 31:49:86:b0:94:97:a4:1d:d5:2d:e0:13:e6:c8:6e:8b:5a:bb: 09:07:fe:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrQyYe907M2OIrzV0to2xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZTY5MDY4YThiMWZiN2ZhMDc5NWJhZjliYjNhYjg2Yzk0 ZTQ2ZmMwHhcNMjUxMjE2MDEwMTE5WhcNMjUxMjE3MDEwMTE5WjAzMTEwLwYDVQQD Eyg5ZmMwYmNkZTExYTljNzZiODFiNTYxZThlZDhlYjQyMmU1ZDY5MTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPuNNb5ppKmzPb8l+xOL6dxQacTj MPKwGiY4MgqYmLsQJCUQC4maIkHKAaV/eL/1olH4ABevRcZF4TEui6T/k5VB6h/o B72RaFFUVLp7HLhwq94Agbdlak5j1msshTDvSFPxpvBJzna4rhzCz6isQNcwe3Jt DeSgUJZ9HFoR7BHrPik7rL/sZg4oQ+yrDEoijixSTumNOz/fiIsTSLdjsd8J1CFM ChHlCwBLdKynlX7328ggTvHX+JQKQuz3xSkAfNBEuvM3wyIoYTPOPoxJw/IY+7jG AwJgz8BjA8R0eOLlpLqHAWblwJ0N1UZ1B0HRjyR8fOKzJSPwm15eUB2dZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/AvN4RqcdrgbVh6O2OtCLl1pE/MB8GA1UdIwQY MBaAFOXmkGiosft/oHlbr5uzq4bJTkb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWVhUWFLaXgtMy1nZVZ1dm03T3Joc2xPUnZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82MjlmNGQtMzkyOS00NjFlLWExOTQt ZGQxMDI4OTkxZmYzLzEvNWVhUWFLaXgtMy1nZVZ1dm03T3Joc2xPUnZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82MjlmNGQtMzkyOS00NjFlLWExOTQtZGQxMDI4OTkxZmYz LzEvNWVhUWFLaXgtMy1nZVZ1dm03T3Joc2xPUnZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuXJRG0eg MPxvU3tmZsAESnzAUK/IHJwc3+NkwW9h3UTIPtj3REB6U+R+cqMNRn6z1o+3UwmF QlMaST7qL3iI8WQX07/T4PJ3GR1oXCICNq+nJsgLsb/j1SMzOl2sXiakQC9oYMhz S4DalY4NIjNAW0LK0lP/e7a3EZ1EVLCs2pcg0bqQDF+kJg459igu7GMCkvgUXSGf Swzsb1UP8Z+D9H8DxXjv+7Ke6NkD/ekaOFnt7Vkf1Z9KxxJ/QQbn5Ci/YBvULHTd 2lLXw+lBg973Z/fvGmKKsRwKOPYfXF4y20YeS9D07Aq0U5slMUmGsJSXpB3VLeAT 5shui1q7CQf+7w== -----END CERTIFICATE-----Generated at Tue Dec 16 10:35:55 2025 by rpki-client