This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft File: D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft (raw, json) Hash identifier: NX7GkbATnhO4O/EMOYxNYcoIlRs3BWYpDGz3If4OCiw= Subject key identifier: B5:BC:12:5D:49:27:E0:E7:6E:97:92:21:7F:2A:31:BE:18:83:1F:FD Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB Certificate issuer: /CN=0f92c52f86009879c177092f7cd83418b4df8cab Certificate serial: 019AF6FA0022D45B5C2B50D60E92700B6637 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft Manifest number: 176A Signing time: Sun 07 Dec 2025 04:02:50 +0000 Manifest this update: Sun 07 Dec 2025 04:02:50 +0000 Manifest next update: Mon 08 Dec 2025 04:02:50 +0000 Files and hashes: 1: D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl (hash: YOsG/ssgjQDchtmSvseeOki76neHMZ4o+NplT63ZkTU=) 2: HUHlNiQYgJ4Q8Qh3sAD_OVXJBhA.roa (hash: OPxk8KCEOkzaDriX+1Y8hLRMwmqx3zDs8p9mPqnsEt0=) 3: PajWCIMvcFk4AhOAYqjPPCoKGSM.roa (hash: YLRXPcoHiAKu8WSdD1lhP04YPthD74gG0Yhmp7yGgeI=) 4: wkRan0gCCPqjhSya1MCejtYVUwQ.roa (hash: CcC9CLeeg2oAb+UFqiFxA3SwU8cWbyT2GAOTTlHtPbo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:fa:00:22:d4:5b:5c:2b:50:d6:0e:92:70:0b:66:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab Validity Not Before: Dec 7 04:02:50 2025 GMT Not After : Dec 8 04:02:50 2025 GMT Subject: CN=b5bc125d4927e0e76e9792217f2a31be18831ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a6:9c:cb:fe:6c:49:c8:8a:83:53:f3:1a:57: 58:ed:d8:52:46:e0:28:fc:ff:96:c6:13:34:fe:85: a6:d4:67:44:3d:70:06:9f:10:00:00:34:fb:6b:10: 69:85:00:41:ba:83:bf:7d:14:d0:69:68:30:0b:32: 7c:76:be:1c:13:53:7c:ce:09:0a:e2:b9:d6:57:54: 23:4b:a9:34:dd:11:d1:c0:db:ee:8c:98:44:83:2c: c0:9a:f5:25:d1:ee:f4:13:6a:60:1d:f6:fd:d0:af: eb:f5:f9:64:5b:76:d1:8f:fb:3b:61:5e:25:10:41: f1:3e:02:57:cd:3f:05:80:30:82:62:0d:ab:b1:43: ca:13:06:29:32:e7:c9:9e:3f:af:49:2a:51:91:7e: 2f:98:9f:b5:13:24:e6:20:bd:8a:e7:1a:b6:52:d2: 60:7f:32:9f:3f:b5:d5:6b:5b:f1:1a:1e:c9:80:4d: e4:10:bf:db:3e:13:11:95:c8:7f:de:7b:ce:39:87: ed:4c:7d:e3:4c:87:e8:37:89:ba:4d:32:c7:9c:ae: dc:59:4f:39:5a:b3:34:5e:0f:e8:51:af:74:6c:3b: ea:50:d0:e6:41:d9:2f:1a:e9:97:70:af:0d:be:01: cb:4d:54:83:4c:3c:2a:fc:f1:e4:42:6a:c2:5b:dc: 29:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BC:12:5D:49:27:E0:E7:6E:97:92:21:7F:2A:31:BE:18:83:1F:FD X509v3 Authority Key Identifier: keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:a5:12:90:c3:7e:dc:22:35:fc:83:d7:04:34:06:9d:2e:90: f4:33:0b:50:6c:c2:f9:05:0a:50:f9:a2:ea:ff:7e:74:c6:d2: db:d7:13:5f:71:2b:5b:8e:19:b3:4a:5e:1a:ff:84:cd:6b:3e: 12:92:e8:b1:1d:80:ea:a6:d1:50:e5:d5:3f:90:23:23:cb:c5: 11:7f:33:f3:16:80:05:dc:48:2d:1d:45:fb:52:9a:31:9d:9e: d9:d4:d7:ee:7f:17:17:d0:74:76:dd:c0:7f:34:66:f9:d0:de: 41:dd:b2:1c:65:85:a1:14:34:26:d1:75:dc:b7:20:6e:50:e0: 51:e9:27:37:03:80:ff:c4:1f:f7:41:98:7c:c8:ea:3c:45:49: b5:50:22:f8:53:51:ef:89:d0:dc:54:db:90:61:d7:56:3b:68: 33:85:d9:58:85:40:14:95:48:be:a9:b5:12:2d:30:b4:43:a5: fc:8c:69:54:60:18:6b:ff:52:a1:46:59:eb:3a:db:b3:cb:f5: e9:d3:1f:f7:6f:21:e9:db:3f:da:f7:a1:2b:8e:a6:5d:ef:a4: f2:3f:e2:82:94:78:19:56:76:0f:95:ed:cd:47:28:3f:cb:06: ff:1f:85:5d:21:4f:ea:dd:b2:b0:df:30:30:7d:be:ec:38:4e: 2a:ed:25:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+gAi1FtcK1DWDpJwC2Y3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOTJjNTJmODYwMDk4NzljMTc3MDkyZjdjZDgzNDE4YjRk ZjhjYWIwHhcNMjUxMjA3MDQwMjUwWhcNMjUxMjA4MDQwMjUwWjAzMTEwLwYDVQQD EyhiNWJjMTI1ZDQ5MjdlMGU3NmU5NzkyMjE3ZjJhMzFiZTE4ODMxZmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aacy/5sSciKg1PzGldY7dhSRuAo /P+WxhM0/oWm1GdEPXAGnxAAADT7axBphQBBuoO/fRTQaWgwCzJ8dr4cE1N8zgkK 4rnWV1QjS6k03RHRwNvujJhEgyzAmvUl0e70E2pgHfb90K/r9flkW3bRj/s7YV4l EEHxPgJXzT8FgDCCYg2rsUPKEwYpMufJnj+vSSpRkX4vmJ+1EyTmIL2K5xq2UtJg fzKfP7XVa1vxGh7JgE3kEL/bPhMRlch/3nvOOYftTH3jTIfoN4m6TTLHnK7cWU85 WrM0Xg/oUa90bDvqUNDmQdkvGumXcK8NvgHLTVSDTDwq/PHkQmrCW9wpbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLW8El1JJ+DnbpeSIX8qMb4Ygx/9MB8GA1UdIwQY MBaAFA+SxS+GAJh5wXcJL3zYNBi034yrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDVMRkw0WUFtSG5CZHdrdmZOZzBHTFRmaktzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lOGMyODctZjA0OS00NTk1LTg2ZWIt MGJlMjA5ZmZiYWVjLzEvRDVMRkw0WUFtSG5CZHdrdmZOZzBHTFRmaktzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lOGMyODctZjA0OS00NTk1LTg2ZWItMGJlMjA5ZmZiYWVj LzEvRDVMRkw0WUFtSG5CZHdrdmZOZzBHTFRmaktzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKUSkMN+ 3CI1/IPXBDQGnS6Q9DMLUGzC+QUKUPmi6v9+dMbS29cTX3ErW44Zs0peGv+EzWs+ EpLosR2A6qbRUOXVP5AjI8vFEX8z8xaABdxILR1F+1KaMZ2e2dTX7n8XF9B0dt3A fzRm+dDeQd2yHGWFoRQ0JtF13LcgblDgUeknNwOA/8Qf90GYfMjqPEVJtVAi+FNR 74nQ3FTbkGHXVjtoM4XZWIVAFJVIvqm1Ei0wtEOl/IxpVGAYa/9SoUZZ6zrbs8v1 6dMf928h6ds/2vehK46mXe+k8j/igpR4GVZ2D5XtzUcoP8sG/x+FXSFP6t2ysN8w MH2+7DhOKu0lnA== -----END CERTIFICATE-----Generated at Sun Dec 7 06:35:34 2025 by rpki-client