This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft File: 5gRDG1VUd8GaP0xcttEHNljVs-M.mft (raw, json) Hash identifier: n2FxLVPXtYiVhRnDNH8Zwswz2uNDVw0Y+z/1CTsZuRk= Subject key identifier: 9A:2F:6C:66:1F:95:DE:C9:FA:92:FF:26:10:00:38:27:1B:C6:C7:0E Authority key identifier: E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3 Certificate issuer: /CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3 Certificate serial: 019B5A1AD30E99C3F1DF6E15DFCE48F9D9D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft Manifest number: 0DD9 Signing time: Fri 26 Dec 2025 10:01:05 +0000 Manifest this update: Fri 26 Dec 2025 10:01:05 +0000 Manifest next update: Sat 27 Dec 2025 10:01:05 +0000 Files and hashes: 1: 5gRDG1VUd8GaP0xcttEHNljVs-M.crl (hash: G1OF1XtYzvzrmRbk9zxFSR+2guViyFG4wwmX2lrQvbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 10:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:d3:0e:99:c3:f1:df:6e:15:df:ce:48:f9:d9:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3 Validity Not Before: Dec 26 10:01:05 2025 GMT Not After : Dec 27 10:01:05 2025 GMT Subject: CN=9a2f6c661f95dec9fa92ff26100038271bc6c70e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:96:76:70:bf:2b:07:34:95:5b:a3:f0:25:e4: ad:45:2f:33:94:fb:95:87:94:0e:85:73:1c:be:74: 3a:d3:88:d1:af:44:35:6c:bf:76:c7:f9:2f:70:9f: ab:9a:9e:fe:d2:cb:41:37:5e:88:85:f2:77:21:87: 28:8f:9b:44:99:87:66:8c:48:9c:c1:b1:a5:ba:b4: bf:a8:21:d1:7d:7e:18:4f:0c:25:65:bb:fa:d5:e8: 50:17:08:10:6b:27:9d:e7:0a:fd:04:6c:c8:5a:97: 8a:bf:f4:64:cc:73:5b:9b:52:a0:3a:33:7d:1c:ef: 45:57:d4:55:67:f6:77:4f:f7:d3:37:94:97:20:27: f1:e1:e4:73:84:9a:af:82:ab:7c:11:26:18:43:dd: 72:0c:10:c4:2a:8d:2e:c5:9d:10:be:64:6c:db:59: c6:3d:fb:70:04:3c:28:14:fb:78:82:0d:fb:41:9b: d9:dc:1e:95:81:c2:94:96:dc:30:a2:7a:0b:af:5d: 84:88:c4:20:f5:a9:23:24:a7:d1:dc:39:e1:4e:dc: 65:72:dc:38:37:c4:a0:be:f0:ea:d7:0e:8e:c8:11: 9d:23:cd:e5:69:11:17:85:9c:a7:da:cd:8b:9a:03: 58:8e:13:81:7b:5c:39:4c:d3:96:63:91:3a:ab:be: fa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2F:6C:66:1F:95:DE:C9:FA:92:FF:26:10:00:38:27:1B:C6:C7:0E X509v3 Authority Key Identifier: keyid:E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:c4:7c:7b:59:03:67:28:58:14:9b:3c:3d:a2:4b:ba:14:49: dd:23:01:79:08:19:d4:c4:ef:d1:8d:20:32:62:2a:a9:ee:3d: 97:4e:12:ee:47:0e:82:48:63:24:c9:91:72:b8:5b:4c:d6:f2: bf:52:19:99:e5:32:24:d3:4e:e7:ad:11:b4:23:95:a8:32:c0: 80:74:ff:c6:6b:06:64:34:66:48:07:a9:9b:94:0f:22:11:92: 23:eb:e5:b4:82:64:5c:ae:2a:2b:a6:2f:3c:b4:27:f7:01:72: 38:e5:10:4a:ef:c1:3a:57:ab:21:2c:f0:57:12:16:20:0a:9f: be:20:be:33:09:45:7c:5e:bf:19:e0:81:8a:09:1a:34:bd:14: 8c:02:d9:6b:7d:ae:e8:44:0d:6e:d5:e0:bf:e1:7c:60:7b:d2: 70:e1:69:1f:f3:b7:73:72:87:6a:2d:a4:c4:4f:18:39:ce:ee: 31:a1:df:03:41:34:10:f9:d8:eb:29:a9:3d:af:cf:44:d3:f5: 75:0b:87:b7:ba:1d:36:10:24:e5:da:dd:f5:83:a6:dd:d8:a3: 4c:ad:2e:6f:02:31:5b:2d:d6:91:31:93:7b:10:6d:9b:09:5a: 10:62:c5:d2:97:3e:26:19:dc:73:04:39:8f:ec:2b:53:cf:cf: 74:a6:ab:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGtMOmcPx324V385I+dnXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MDQ0MzFiNTU1NDc3YzE5YTNmNGM1Y2I2ZDEwNzM2NThk NWIzZTMwHhcNMjUxMjI2MTAwMTA1WhcNMjUxMjI3MTAwMTA1WjAzMTEwLwYDVQQD Eyg5YTJmNmM2NjFmOTVkZWM5ZmE5MmZmMjYxMDAwMzgyNzFiYzZjNzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JZ2cL8rBzSVW6PwJeStRS8zlPuV h5QOhXMcvnQ604jRr0Q1bL92x/kvcJ+rmp7+0stBN16IhfJ3IYcoj5tEmYdmjEic wbGlurS/qCHRfX4YTwwlZbv61ehQFwgQayed5wr9BGzIWpeKv/RkzHNbm1KgOjN9 HO9FV9RVZ/Z3T/fTN5SXICfx4eRzhJqvgqt8ESYYQ91yDBDEKo0uxZ0QvmRs21nG PftwBDwoFPt4gg37QZvZ3B6VgcKUltwwonoLr12EiMQg9akjJKfR3DnhTtxlctw4 N8SgvvDq1w6OyBGdI83laREXhZyn2s2LmgNYjhOBe1w5TNOWY5E6q776rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJovbGYfld7J+pL/JhAAOCcbxscOMB8GA1UdIwQY MBaAFOYEQxtVVHfBmj9MXLbRBzZY1bPjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWdSREcxVlVkOEdhUDB4Y3R0RUhObGpWcy1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kN2RjOGQtZTM4Ni00MDRjLTg4YjQt MjgzZWM0MmMyYzk0LzEvNWdSREcxVlVkOEdhUDB4Y3R0RUhObGpWcy1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9kN2RjOGQtZTM4Ni00MDRjLTg4YjQtMjgzZWM0MmMyYzk0 LzEvNWdSREcxVlVkOEdhUDB4Y3R0RUhObGpWcy1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcR8e1kD ZyhYFJs8PaJLuhRJ3SMBeQgZ1MTv0Y0gMmIqqe49l04S7kcOgkhjJMmRcrhbTNby v1IZmeUyJNNO560RtCOVqDLAgHT/xmsGZDRmSAepm5QPIhGSI+vltIJkXK4qK6Yv PLQn9wFyOOUQSu/BOlerISzwVxIWIAqfviC+MwlFfF6/GeCBigkaNL0UjALZa32u 6EQNbtXgv+F8YHvScOFpH/O3c3KHai2kxE8YOc7uMaHfA0E0EPnY6ympPa/PRNP1 dQuHt7odNhAk5drd9YOm3dijTK0ubwIxWy3WkTGTexBtmwlaEGLF0pc+JhnccwQ5 j+wrU8/PdKar3g== -----END CERTIFICATE-----Generated at Fri Dec 26 17:42:35 2025 by rpki-client