This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft File: 5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft (raw, json) Hash identifier: +vtNwffFO1/xnuD0Yngx5U4xiUUKXRKcJuaqUPu5AlE= Subject key identifier: AC:B2:3F:1D:E9:0E:A0:9E:53:E1:C4:A2:8F:AC:03:16:03:A5:9B:FD Authority key identifier: E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02 Certificate issuer: /CN=e47e92bf41a5a774511fb723af94aff0d3512602 Certificate serial: 019B35D789ECEF177A87E5A1BDEA24D331C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft Manifest number: 05BC Signing time: Fri 19 Dec 2025 09:01:16 +0000 Manifest this update: Fri 19 Dec 2025 09:01:16 +0000 Manifest next update: Sat 20 Dec 2025 09:01:16 +0000 Files and hashes: 1: 5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl (hash: UaqCpwRNlRsLf02BmpNi0RwNgY2JRMqP2VhbMwhuCPA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:89:ec:ef:17:7a:87:e5:a1:bd:ea:24:d3:31:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e47e92bf41a5a774511fb723af94aff0d3512602 Validity Not Before: Dec 19 09:01:16 2025 GMT Not After : Dec 20 09:01:16 2025 GMT Subject: CN=acb23f1de90ea09e53e1c4a28fac031603a59bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:1c:16:97:d1:13:96:ef:79:49:1e:92:36: bc:08:d3:18:46:09:0f:eb:9e:90:16:d9:90:61:1d: 7f:8e:d0:34:2c:a1:76:9d:c4:af:ff:ab:43:8d:60: 12:7e:62:44:4b:2f:a6:68:6c:04:a4:0f:37:5b:36: 6e:33:6d:0c:86:a8:bc:44:ab:05:83:c8:da:ab:d9: 31:05:e9:77:e1:f8:1d:a1:f8:2f:59:76:c9:df:81: 20:33:da:65:e0:05:3c:7f:54:c3:9d:3b:9c:6c:13: 78:b6:9a:13:ae:50:05:e7:5c:2c:ff:9c:1e:73:0f: 08:42:df:23:6a:9d:6e:60:c0:1d:c8:b1:ce:ea:77: 9d:01:7b:d9:41:55:29:65:d7:0e:00:d4:1c:d3:26: 5a:34:15:f2:84:51:b3:cc:77:b1:00:85:93:92:0a: ea:7c:17:87:73:78:15:cc:08:e5:7c:28:61:8f:91: e6:17:85:0f:3b:aa:50:91:b6:d6:eb:c0:d9:af:f0: ca:46:a0:5c:d0:1b:c2:53:3e:91:dd:a2:ad:6d:d8: 5c:9f:5e:5f:fc:d5:84:b0:17:3e:1f:56:17:82:2a: 91:ed:92:e7:e2:2a:47:23:6e:05:fb:0f:9c:b3:2a: 1d:50:65:02:ad:62:0d:f7:bf:ce:05:a5:88:9c:0f: b1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B2:3F:1D:E9:0E:A0:9E:53:E1:C4:A2:8F:AC:03:16:03:A5:9B:FD X509v3 Authority Key Identifier: keyid:E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:6c:30:d8:44:b0:ff:b0:bd:a9:90:e5:8e:da:5d:c7:99:00: a0:3b:61:72:8d:9d:21:4d:91:9b:eb:cc:37:ed:e5:ce:56:a3: 87:ca:df:43:c3:cc:43:c6:a8:f7:21:a3:16:26:ad:4e:a6:29: 10:49:08:37:64:fb:fd:a8:e9:f3:fa:74:d0:d5:ae:e1:a7:56: 26:5f:6a:48:3b:ee:b1:8b:ea:93:db:64:ab:57:a3:95:7f:15: 5d:e1:f7:04:bd:0e:1f:95:cf:3b:83:ca:e7:d6:9d:45:99:25: 54:89:da:1d:06:fb:cc:89:66:5d:d9:31:4a:f8:1d:d3:5b:08: 40:91:da:9c:11:a7:98:03:50:71:67:5e:f5:58:63:97:24:b2: 2a:7c:63:d9:4b:f4:1b:6a:1d:82:8d:80:1f:e4:55:5b:4c:01: 2a:b0:db:2a:59:26:ca:b5:bf:ac:ea:c0:9d:34:fe:98:5a:c9: aa:23:a3:0f:93:03:b4:39:d8:a1:16:21:f8:a1:a6:93:e3:dd: 44:50:f3:66:2a:9d:7c:b2:19:03:43:5a:4b:40:f4:3c:36:cd: d1:73:b3:e7:7c:ae:a7:59:99:fd:d2:e0:66:3e:af:8b:cd:25: e0:9b:43:91:f7:a2:5e:5b:d4:be:33:1e:ac:f5:a5:7a:ad:d3: 97:79:de:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs114ns7xd6h+Whveok0zHDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0N2U5MmJmNDFhNWE3NzQ1MTFmYjcyM2FmOTRhZmYwZDM1 MTI2MDIwHhcNMjUxMjE5MDkwMTE2WhcNMjUxMjIwMDkwMTE2WjAzMTEwLwYDVQQD EyhhY2IyM2YxZGU5MGVhMDllNTNlMWM0YTI4ZmFjMDMxNjAzYTU5YmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwIcFpfRE5bveUkekja8CNMYRgkP 656QFtmQYR1/jtA0LKF2ncSv/6tDjWASfmJESy+maGwEpA83WzZuM20Mhqi8RKsF g8jaq9kxBel34fgdofgvWXbJ34EgM9pl4AU8f1TDnTucbBN4tpoTrlAF51ws/5we cw8IQt8jap1uYMAdyLHO6nedAXvZQVUpZdcOANQc0yZaNBXyhFGzzHexAIWTkgrq fBeHc3gVzAjlfChhj5HmF4UPO6pQkbbW68DZr/DKRqBc0BvCUz6R3aKtbdhcn15f /NWEsBc+H1YXgiqR7ZLn4ipHI24F+w+csyodUGUCrWIN97/OBaWInA+xcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyyPx3pDqCeU+HEoo+sAxYDpZv9MB8GA1UdIwQY MBaAFOR+kr9Bpad0UR+3I6+Ur/DTUSYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUg2U3YwR2xwM1JSSDdjanI1U3Y4Tk5SSmdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mM2UzNDQtZTUwNi00Y2Q5LTk0MWIt OTQ0ZDg4MTA5ODQxLzEvNUg2U3YwR2xwM1JSSDdjanI1U3Y4Tk5SSmdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mM2UzNDQtZTUwNi00Y2Q5LTk0MWItOTQ0ZDg4MTA5ODQx LzEvNUg2U3YwR2xwM1JSSDdjanI1U3Y4Tk5SSmdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2ww2ESw /7C9qZDljtpdx5kAoDthco2dIU2Rm+vMN+3lzlajh8rfQ8PMQ8ao9yGjFiatTqYp EEkIN2T7/ajp8/p00NWu4adWJl9qSDvusYvqk9tkq1ejlX8VXeH3BL0OH5XPO4PK 59adRZklVInaHQb7zIlmXdkxSvgd01sIQJHanBGnmANQcWde9VhjlySyKnxj2Uv0 G2odgo2AH+RVW0wBKrDbKlkmyrW/rOrAnTT+mFrJqiOjD5MDtDnYoRYh+KGmk+Pd RFDzZiqdfLIZA0NaS0D0PDbN0XOz53yup1mZ/dLgZj6vi80l4JtDkfeiXlvUvjMe rPWleq3Tl3neQA== -----END CERTIFICATE-----Generated at Fri Dec 19 12:05:44 2025 by rpki-client