This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft File: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft (raw, json) Hash identifier: 1RCpQ6C4nbgpuMEb1S03kNZ5zy9dRNoudM8HE/FU52M= Subject key identifier: 6D:2C:7B:69:17:BA:F0:C3:BD:93:51:6D:FB:35:D5:1B:DE:59:13:B7 Authority key identifier: E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2 Certificate issuer: /CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2 Certificate serial: 019B3343F260CE6A5D7C4F4A8B00AD010A5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft Manifest number: 0A39 Signing time: Thu 18 Dec 2025 21:00:49 +0000 Manifest this update: Thu 18 Dec 2025 21:00:49 +0000 Manifest next update: Fri 19 Dec 2025 21:00:49 +0000 Files and hashes: 1: 5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl (hash: hGBwF/eajT5VGJ6aLv+E6niBH1/qn4AgB2P+yge4Wrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:f2:60:ce:6a:5d:7c:4f:4a:8b:00:ad:01:0a:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ed72b46be86c654d58c930514a5f43b4a44ee2 Validity Not Before: Dec 18 21:00:49 2025 GMT Not After : Dec 19 21:00:49 2025 GMT Subject: CN=6d2c7b6917baf0c3bd93516dfb35d51bde5913b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:88:08:e4:c0:dd:81:3e:47:60:37:e3:4e:c0: 58:fe:f2:93:c9:73:07:0f:d6:b3:71:2a:ca:82:50: 94:2a:ce:60:aa:54:7f:a9:2f:90:86:65:91:68:fd: 12:2c:e1:76:34:c6:19:41:63:09:86:9f:66:75:10: 3f:3e:19:66:a6:d8:6c:2e:10:b3:2a:c9:37:26:91: a0:de:be:17:04:22:7b:2a:f0:fd:f0:92:be:f4:e0: 6b:3a:61:51:e3:e7:52:dd:32:42:0f:f4:a8:b9:f5: 85:2d:78:a1:43:f4:94:bc:65:e0:27:8a:c7:18:3c: 27:04:53:5c:a2:f3:ab:87:a8:5f:db:95:94:32:82: fa:6e:2f:68:b0:1e:df:82:a3:94:a3:55:d4:36:8b: f8:84:4c:a8:f7:55:29:89:75:a6:bf:3c:ed:73:92: 78:92:47:e1:61:56:0f:2b:75:26:1e:f4:b5:68:f3: a8:6b:98:1f:e9:c1:a9:e2:88:76:90:4d:b9:59:df: 3c:41:4c:93:d1:16:24:3b:e2:67:f1:aa:91:59:a7: 26:dc:21:46:84:d7:44:0e:75:b3:b6:a6:82:ce:b6: d5:79:cd:f8:f3:e5:2e:56:a1:af:25:c1:d8:9a:23: 9f:79:88:ed:44:5a:a9:08:79:73:33:dd:6f:53:dd: 95:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2C:7B:69:17:BA:F0:C3:BD:93:51:6D:FB:35:D5:1B:DE:59:13:B7 X509v3 Authority Key Identifier: keyid:E6:ED:72:B4:6B:E8:6C:65:4D:58:C9:30:51:4A:5F:43:B4:A4:4E:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5u1ytGvobGVNWMkwUUpfQ7SkTuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f8c657-2d5e-46c9-bebc-d8432a2753eb/1/5u1ytGvobGVNWMkwUUpfQ7SkTuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:48:af:58:d0:c0:03:ce:02:1d:38:ff:ae:ea:cd:b9:eb:40: aa:8b:c2:6c:cf:56:10:c9:62:54:63:4e:e7:a8:1e:02:c9:d2: 04:5e:d9:d9:8d:be:d7:d8:25:4a:a3:07:be:f2:d7:5d:91:43: 77:dc:43:97:8a:34:3a:6f:0f:91:d5:9e:28:23:e2:3c:2f:f0: 2f:c8:ab:3c:29:1f:b8:64:df:35:9b:55:ce:05:e3:dc:f2:9f: a7:3f:5f:53:eb:af:ae:63:5a:40:0a:b4:f8:54:b5:ab:a0:27: 5b:d8:eb:f6:e5:b5:1d:b7:3f:07:39:7b:25:1a:83:a9:fd:be: e9:f0:7c:59:d5:dc:01:af:6a:9d:fa:2e:1e:ff:d2:84:80:d6: 58:4c:99:db:43:8b:0d:0a:8d:88:0c:8d:b0:f1:72:c0:9a:b0: 34:4e:64:09:2a:b9:01:3b:4a:ef:b2:e7:62:1f:a3:3e:87:fb: d2:db:c2:48:1a:a9:37:4e:6c:24:c3:e9:17:fa:04:42:07:03: 10:12:2f:f0:e7:46:a3:14:53:c4:39:76:43:64:b9:6a:99:bc: a7:d2:c2:06:5f:5b:e9:31:27:bf:cf:37:6e:e4:1e:9f:ca:c0: 0f:f0:3c:b1:50:34:24:d6:74:42:7e:83:8f:65:bf:85:ae:65: 4c:24:4f:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ/JgzmpdfE9KiwCtAQpfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZWQ3MmI0NmJlODZjNjU0ZDU4YzkzMDUxNGE1ZjQzYjRh NDRlZTIwHhcNMjUxMjE4MjEwMDQ5WhcNMjUxMjE5MjEwMDQ5WjAzMTEwLwYDVQQD Eyg2ZDJjN2I2OTE3YmFmMGMzYmQ5MzUxNmRmYjM1ZDUxYmRlNTkxM2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArogI5MDdgT5HYDfjTsBY/vKTyXMH D9azcSrKglCUKs5gqlR/qS+QhmWRaP0SLOF2NMYZQWMJhp9mdRA/PhlmpthsLhCz Ksk3JpGg3r4XBCJ7KvD98JK+9OBrOmFR4+dS3TJCD/SoufWFLXihQ/SUvGXgJ4rH GDwnBFNcovOrh6hf25WUMoL6bi9osB7fgqOUo1XUNov4hEyo91UpiXWmvzztc5J4 kkfhYVYPK3UmHvS1aPOoa5gf6cGp4oh2kE25Wd88QUyT0RYkO+Jn8aqRWacm3CFG hNdEDnWztqaCzrbVec348+UuVqGvJcHYmiOfeYjtRFqpCHlzM91vU92VNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0se2kXuvDDvZNRbfs11RveWRO3MB8GA1UdIwQY MBaAFObtcrRr6GxlTVjJMFFKX0O0pE7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXUxeXRHdm9iR1ZOV01rd1VVcGZRN1NrVHVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mOGM2NTctMmQ1ZS00NmM5LWJlYmMt ZDg0MzJhMjc1M2ViLzEvNXUxeXRHdm9iR1ZOV01rd1VVcGZRN1NrVHVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9mOGM2NTctMmQ1ZS00NmM5LWJlYmMtZDg0MzJhMjc1M2Vi LzEvNXUxeXRHdm9iR1ZOV01rd1VVcGZRN1NrVHVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkivWNDA A84CHTj/rurNuetAqovCbM9WEMliVGNO56geAsnSBF7Z2Y2+19glSqMHvvLXXZFD d9xDl4o0Om8PkdWeKCPiPC/wL8irPCkfuGTfNZtVzgXj3PKfpz9fU+uvrmNaQAq0 +FS1q6AnW9jr9uW1Hbc/Bzl7JRqDqf2+6fB8WdXcAa9qnfouHv/ShIDWWEyZ20OL DQqNiAyNsPFywJqwNE5kCSq5ATtK77LnYh+jPof70tvCSBqpN05sJMPpF/oEQgcD EBIv8OdGoxRTxDl2Q2S5apm8p9LCBl9b6TEnv883buQen8rAD/A8sVA0JNZ0Qn6D j2W/ha5lTCRPvg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:33:13 2025 by rpki-client