This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft File: 5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json) Hash identifier: B5p7xhkfi6h/634YiM6SK/qCmJvBZOgVVlOu6VhNL+0= Subject key identifier: 6E:D2:54:4C:6E:A1:48:E8:74:79:20:C0:9D:B2:E4:9E:E7:29:FD:2A Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10 Certificate issuer: /CN=e67d7b3570077064013da18e29e690cd4c9bd710 Certificate serial: 019B0F3779341B94689581262E41BA1D0060 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft Manifest number: 0454 Signing time: Thu 11 Dec 2025 21:00:52 +0000 Manifest this update: Thu 11 Dec 2025 21:00:52 +0000 Manifest next update: Fri 12 Dec 2025 21:00:52 +0000 Files and hashes: 1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: 0NeP5yi8DuQTdl2e5ghjbPQYqZrk7IxNs3Y4wX6Fxg4=) 2: UXfwFJz04X4XmU1ABHkr-Q0ovq0.roa (hash: vTofq9wYPlysSoUgx6HvDr7C9PTa+inohQrNa6Pfbqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 21:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:79:34:1b:94:68:95:81:26:2e:41:ba:1d:00:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710 Validity Not Before: Dec 11 21:00:52 2025 GMT Not After : Dec 12 21:00:52 2025 GMT Subject: CN=6ed2544c6ea148e8747920c09db2e49ee729fd2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:40:ad:2d:87:dc:4a:e2:b7:26:df:b2:16:fa: ab:5c:f4:66:42:47:af:62:1e:bb:95:f1:fd:28:00: 28:e4:7a:e4:a6:ce:b4:1a:0a:1e:9e:59:93:bd:19: 8d:e1:8e:b4:3f:f9:34:66:49:f7:e7:f9:d0:1f:66: 12:ff:db:1f:e6:e2:d3:19:e0:90:c3:80:0c:65:16: 04:aa:5d:3d:e5:5f:50:a8:20:f4:b4:9e:c0:82:3a: 10:c9:74:72:e5:9e:63:b9:b5:07:d5:36:0f:f6:72: 7c:aa:03:8d:7c:b4:b6:1e:7f:8b:e4:2c:d3:97:9b: ad:06:05:03:14:84:5f:c2:f4:41:65:54:a2:ec:2b: 54:5c:15:7c:aa:a4:c7:f4:38:fb:61:2e:e1:0c:f2: ea:0e:3a:41:58:c2:9b:31:37:30:18:a5:15:7c:be: 41:84:35:63:98:9a:e7:84:47:18:fe:1f:8c:43:56: db:ea:2f:b1:2f:2f:c3:3a:af:00:69:d1:1a:fc:f9: 74:e4:44:6a:22:46:d4:44:1c:f8:f3:cc:d9:ac:40: 63:6e:d3:b5:a1:3f:cc:cf:75:08:31:f4:10:9e:19: cf:85:c6:fa:df:4e:34:6b:dc:7c:e3:4e:64:82:dc: 3a:24:de:4f:a7:ba:ad:4a:15:ca:32:4a:80:65:f4: fd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D2:54:4C:6E:A1:48:E8:74:79:20:C0:9D:B2:E4:9E:E7:29:FD:2A X509v3 Authority Key Identifier: keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:13:69:a3:04:d5:b2:66:bb:4c:2d:5e:a9:8d:c2:1d:07:82: e6:1a:3a:3a:04:cf:d6:18:67:05:f6:92:ab:5b:87:6d:18:a8: e1:23:08:43:a1:14:52:31:64:12:5b:3c:bf:b8:74:a1:77:4d: 30:b9:22:45:46:d4:c7:dc:61:49:f0:1d:f5:94:c2:20:cb:a9: 97:fc:80:65:e0:1a:19:b7:b0:25:0c:45:92:6b:36:6a:15:c9: 90:55:1c:71:f5:28:30:bf:a6:91:24:73:23:41:6b:40:ab:e0: aa:ec:ab:cd:fd:f5:64:a8:19:ac:29:34:6b:a8:11:7d:84:21: 7d:1f:4c:b7:c4:76:5a:7e:d7:b9:a3:58:65:0b:77:ee:d5:2e: f0:80:6a:47:29:ae:40:b5:fd:82:88:9d:89:48:37:b8:bd:a1: ce:e7:f6:4b:d7:c5:51:2e:09:f9:de:b5:7c:ac:f7:a3:4c:11: 1a:6b:1e:37:b1:96:6e:b6:46:65:34:ea:4f:b5:fe:7f:09:08: 5a:f2:cb:8c:f3:d1:ad:27:40:90:b0:ff:c3:44:e1:bc:5b:47: e8:35:b4:af:d7:63:1f:a7:64:69:6f:79:33:a3:5f:70:0d:2c: a4:c0:8b:de:9c:77:82:bb:cb:3e:ad:5e:7d:ff:b1:d9:af:ca: 38:56:a4:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN3k0G5RolYEmLkG6HQBgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2N2Q3YjM1NzAwNzcwNjQwMTNkYTE4ZTI5ZTY5MGNkNGM5 YmQ3MTAwHhcNMjUxMjExMjEwMDUyWhcNMjUxMjEyMjEwMDUyWjAzMTEwLwYDVQQD Eyg2ZWQyNTQ0YzZlYTE0OGU4NzQ3OTIwYzA5ZGIyZTQ5ZWU3MjlmZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70CtLYfcSuK3Jt+yFvqrXPRmQkev Yh67lfH9KAAo5Hrkps60GgoenlmTvRmN4Y60P/k0Zkn35/nQH2YS/9sf5uLTGeCQ w4AMZRYEql095V9QqCD0tJ7AgjoQyXRy5Z5jubUH1TYP9nJ8qgONfLS2Hn+L5CzT l5utBgUDFIRfwvRBZVSi7CtUXBV8qqTH9Dj7YS7hDPLqDjpBWMKbMTcwGKUVfL5B hDVjmJrnhEcY/h+MQ1bb6i+xLy/DOq8AadEa/Pl05ERqIkbURBz488zZrEBjbtO1 oT/Mz3UIMfQQnhnPhcb63040a9x8405kgtw6JN5Pp7qtShXKMkqAZfT9TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7SVExuoUjodHkgwJ2y5J7nKf0qMB8GA1UdIwQY MBaAFOZ9ezVwB3BkAT2hjinmkM1Mm9cQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lYjdlMGMtNTlhMS00ZjkzLThiMjct YWM0ODgzZTQ3NjY1LzEvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9lYjdlMGMtNTlhMS00ZjkzLThiMjctYWM0ODgzZTQ3NjY1 LzEvNW4xN05YQUhjR1FCUGFHT0tlYVF6VXliMXhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUBNpowTV sma7TC1eqY3CHQeC5ho6OgTP1hhnBfaSq1uHbRio4SMIQ6EUUjFkEls8v7h0oXdN MLkiRUbUx9xhSfAd9ZTCIMupl/yAZeAaGbewJQxFkms2ahXJkFUccfUoML+mkSRz I0FrQKvgquyrzf31ZKgZrCk0a6gRfYQhfR9Mt8R2Wn7XuaNYZQt37tUu8IBqRymu QLX9goidiUg3uL2hzuf2S9fFUS4J+d61fKz3o0wRGmseN7GWbrZGZTTqT7X+fwkI WvLLjPPRrSdAkLD/w0ThvFtH6DW0r9djH6dkaW95M6NfcA0spMCL3px3grvLPq1e ff+x2a/KOFakNg== -----END CERTIFICATE-----Generated at Fri Dec 12 05:24:27 2025 by rpki-client