This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft File: 5gBvGrt1cn57wwwXnml00tGPjzg.mft (raw, json) Hash identifier: MoAEtXO47PnsV39tWnIwm/QcPKVhcFkOz59W/7aoBIA= Subject key identifier: 21:3A:C4:58:B0:56:5B:B0:D3:3C:7D:B4:66:8C:4B:E1:AC:D4:D9:C0 Authority key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38 Certificate issuer: /CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38 Certificate serial: 019B22F58E10EE022F4407B81BEC1033A307 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft Manifest number: 12D0 Signing time: Mon 15 Dec 2025 17:01:16 +0000 Manifest this update: Mon 15 Dec 2025 17:01:16 +0000 Manifest next update: Tue 16 Dec 2025 17:01:16 +0000 Files and hashes: 1: 5gBvGrt1cn57wwwXnml00tGPjzg.crl (hash: tqRMihZjmEnLka17bTg6X72wslFcXRkXr0VH5753VoQ=) 2: Zi2_IuYzlaIRtsk8-q-uBBtZEgI.roa (hash: VlhL3UjyA76HwKj7J4uOubCMpMfYtpjO6fp5e/1c/W8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f5:8e:10:ee:02:2f:44:07:b8:1b:ec:10:33:a3:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38 Validity Not Before: Dec 15 17:01:16 2025 GMT Not After : Dec 16 17:01:16 2025 GMT Subject: CN=213ac458b0565bb0d33c7db4668c4be1acd4d9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:99:f8:e2:cf:86:20:3b:98:51:dd:ba:5b:85: 97:6f:f8:1f:d5:c2:f2:ae:62:dc:76:05:7c:30:84: f7:26:a7:f5:81:20:1b:0f:5f:8d:3c:3a:74:88:31: de:a7:3b:69:3d:a5:08:60:8f:09:39:9b:6c:13:0f: e1:74:ce:bf:64:ba:cd:3e:8b:8a:8d:80:dc:19:df: 1d:7b:57:4c:22:91:0d:c3:ac:32:2f:1c:83:e6:b8: af:79:a3:c0:8c:c0:04:73:e8:0b:de:07:27:70:50: 05:db:e6:d5:56:71:b1:c7:72:ef:70:51:ec:61:a3: 87:59:c4:31:1d:55:00:7c:c2:72:ff:48:cc:14:70: 60:3f:5f:83:9b:7e:98:c0:6e:87:9c:a6:8b:33:d2: 80:a6:f3:ce:c1:83:0f:f9:6e:5d:45:f0:3e:76:14: 8e:15:b9:1a:d3:83:e0:de:43:55:8a:16:02:23:0b: 04:ee:4f:a7:d2:1a:58:cb:5e:1e:80:d9:f4:44:fc: d7:a9:12:f1:3c:64:8c:29:0a:e4:61:36:d3:56:0f: 62:b0:ef:59:5f:3c:f8:f2:f8:c5:82:d0:94:f5:60: dd:67:88:cf:dd:8a:19:f3:8d:e9:2c:38:0c:f6:0b: 84:82:3a:52:40:92:3f:a8:bd:9c:9b:17:2b:bd:ff: ff:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3A:C4:58:B0:56:5B:B0:D3:3C:7D:B4:66:8C:4B:E1:AC:D4:D9:C0 X509v3 Authority Key Identifier: keyid:E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:9c:34:02:9a:7b:5e:f7:2f:b8:2f:37:e7:62:c9:bd:e2:ac: db:41:50:bc:15:d8:a0:e6:f8:0a:1b:31:26:fc:c3:73:27:d0: e7:8f:ee:f5:f2:cf:09:63:d5:18:6f:78:ba:04:39:1c:87:b2: 68:0e:25:64:8a:fa:b2:92:3c:09:14:01:5e:3d:c2:14:1e:36: b5:8b:b6:ff:d8:f4:04:8e:68:4d:5a:ea:33:5f:e5:17:23:2b: 7c:d7:a0:44:41:f9:ca:e6:aa:b6:b4:cc:65:2d:cc:ed:c5:b8: 8d:79:7a:fc:6b:b3:66:99:ee:53:21:04:70:f0:9b:4e:64:8f: 04:15:31:eb:8d:64:ce:e4:f6:64:3b:cf:21:3c:a6:e4:06:a1: bc:8a:f6:80:b4:23:1e:fd:9b:6a:cd:05:4e:6a:fa:fa:52:d3: f0:46:22:7e:e6:13:ad:43:aa:7b:fb:9a:d3:47:8a:59:e9:a2: 39:27:1e:4d:e0:04:23:59:7d:bd:ef:54:3e:de:1f:4a:22:0b: 2b:91:9e:44:12:22:53:a5:11:6d:7b:90:62:e0:26:e6:91:cf: 48:95:d1:0d:c6:50:5a:04:00:b9:4d:ef:51:ee:1e:18:76:3c: c5:cf:18:27:69:a3:ce:75:53:64:a5:74:71:61:65:64:0e:80: 28:27:f8:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9Y4Q7gIvRAe4G+wQM6MHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MDA2ZjFhYmI3NTcyN2U3YmMzMGMxNzllNjk3NGQyZDE4 ZjhmMzgwHhcNMjUxMjE1MTcwMTE2WhcNMjUxMjE2MTcwMTE2WjAzMTEwLwYDVQQD EygyMTNhYzQ1OGIwNTY1YmIwZDMzYzdkYjQ2NjhjNGJlMWFjZDRkOWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5n44s+GIDuYUd26W4WXb/gf1cLy rmLcdgV8MIT3Jqf1gSAbD1+NPDp0iDHepztpPaUIYI8JOZtsEw/hdM6/ZLrNPouK jYDcGd8de1dMIpENw6wyLxyD5riveaPAjMAEc+gL3gcncFAF2+bVVnGxx3LvcFHs YaOHWcQxHVUAfMJy/0jMFHBgP1+Dm36YwG6HnKaLM9KApvPOwYMP+W5dRfA+dhSO Fbka04Pg3kNVihYCIwsE7k+n0hpYy14egNn0RPzXqRLxPGSMKQrkYTbTVg9isO9Z Xzz48vjFgtCU9WDdZ4jP3YoZ843pLDgM9guEgjpSQJI/qL2cmxcrvf//SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCE6xFiwVluw0zx9tGaMS+Gs1NnAMB8GA1UdIwQY MBaAFOYAbxq7dXJ+e8MMF55pdNLRj484MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hMjdhMTktOTBiNS00NjcxLWJiYzEt NDcyZDg4MmU5ZDcyLzEvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9hMjdhMTktOTBiNS00NjcxLWJiYzEtNDcyZDg4MmU5ZDcy LzEvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZw0App7 XvcvuC8352LJveKs20FQvBXYoOb4ChsxJvzDcyfQ54/u9fLPCWPVGG94ugQ5HIey aA4lZIr6spI8CRQBXj3CFB42tYu2/9j0BI5oTVrqM1/lFyMrfNegREH5yuaqtrTM ZS3M7cW4jXl6/GuzZpnuUyEEcPCbTmSPBBUx641kzuT2ZDvPITym5AahvIr2gLQj Hv2bas0FTmr6+lLT8EYifuYTrUOqe/ua00eKWemiOSceTeAEI1l9ve9UPt4fSiIL K5GeRBIiU6URbXuQYuAm5pHPSJXRDcZQWgQAuU3vUe4eGHY8xc8YJ2mjznVTZKV0 cWFlZA6AKCf4OA== -----END CERTIFICATE-----Generated at Mon Dec 15 20:59:30 2025 by rpki-client