This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft File: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft (raw, json) Hash identifier: LqPRUkpfQK43Qc7dkaBbkeWF02fmKst4ssuR88yeuWk= Subject key identifier: 93:CB:1E:48:5D:1C:F4:7A:4D:68:91:E0:B4:0D:23:FB:9F:A4:A1:05 Authority key identifier: E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C Certificate issuer: /CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c Certificate serial: 019B2364A29EA1189457BD9A9B14F33A4788 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft Manifest number: 098A Signing time: Mon 15 Dec 2025 19:02:36 +0000 Manifest this update: Mon 15 Dec 2025 19:02:36 +0000 Manifest next update: Tue 16 Dec 2025 19:02:36 +0000 Files and hashes: 1: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl (hash: DJwfbx2V7cgnoNaaz8IvYLaG/ZeLZJv/zhDtdpBkj7o=) 2: GkuupBH0S6UfIOVBxWCowAfIXUM.roa (hash: 0Pa8It6a3TFSH6XKo+NzCtHNBkz88WRMk9KlV3Y4AVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 19:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:a2:9e:a1:18:94:57:bd:9a:9b:14:f3:3a:47:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c Validity Not Before: Dec 15 19:02:36 2025 GMT Not After : Dec 16 19:02:36 2025 GMT Subject: CN=93cb1e485d1cf47a4d6891e0b40d23fb9fa4a105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:82:a0:f1:98:ea:f0:91:19:c8:5a:6d:31:e3: c9:31:04:31:9e:e9:d1:0d:dc:d3:29:0d:65:c3:1d: 5c:27:12:19:68:c6:e3:3d:38:dc:58:27:1f:a2:6f: 46:08:6d:7a:3c:aa:4a:a3:6a:0d:20:82:f1:76:bd: 33:31:cd:56:84:bd:e1:7f:fb:75:61:3b:da:f2:f0: f8:45:e2:2c:c3:81:b0:59:bc:39:97:bc:4c:fa:7d: 9c:65:03:b2:76:51:6c:e8:a7:8f:89:ee:73:e7:94: 84:dc:7b:c0:bb:45:54:cb:f6:5e:47:71:fb:d4:a0: a2:89:7a:f7:68:80:13:d3:a6:10:b4:4c:7e:86:4a: a9:eb:8a:47:f5:7e:e1:57:2a:7b:64:52:a7:74:e0: 41:fa:93:ea:5b:96:39:3b:cb:2e:fc:e6:1d:dd:94: 6f:be:bb:98:88:73:56:ec:df:6a:df:70:87:46:fe: e3:fb:2c:e2:52:1d:8c:9e:2c:21:9f:13:17:0e:93: 33:44:07:de:fd:7d:96:21:f4:64:9e:5a:1c:6f:43: 5b:78:13:9b:de:fc:45:0f:c5:2c:b5:79:4f:6b:b3: 7c:04:76:64:49:3c:e6:23:86:a9:be:85:02:52:35: da:22:71:fa:0b:a8:76:cb:41:73:22:ca:79:80:93: 8b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CB:1E:48:5D:1C:F4:7A:4D:68:91:E0:B4:0D:23:FB:9F:A4:A1:05 X509v3 Authority Key Identifier: keyid:E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b1:04:b3:e5:4c:f2:ed:43:f8:77:c5:83:6e:a6:2d:cc:9d: de:33:64:2b:ff:b9:bd:fd:77:ea:9f:c0:e4:a4:73:9b:ac:15: 1c:63:f8:b5:7b:a2:35:4f:0f:d1:ef:b7:d1:60:14:64:d8:5f: f8:bd:33:67:a9:53:fc:2c:46:74:38:37:a5:4e:09:0e:86:48: 3c:3e:7c:ea:a3:f8:88:6a:21:e6:a0:92:52:1a:34:8f:f4:b9: bb:b6:64:17:a0:ae:56:07:05:bf:16:f8:db:60:12:6b:1d:1d: 1f:42:5a:18:85:7f:64:c7:c6:48:3f:03:0d:65:14:e8:80:c5: 7d:62:03:7e:96:71:be:87:74:5d:ba:bf:8c:ea:7f:9d:ea:d5: 2c:96:7b:e2:cb:48:b8:01:d7:bc:9c:8a:b9:a8:e1:26:67:df: f0:d0:a4:d6:24:c6:13:92:18:44:e8:c5:43:ff:d8:99:a2:cc: 74:35:41:5f:63:fc:07:6a:26:6d:a5:54:21:67:0a:72:2d:56: 7e:89:c0:11:08:96:c6:02:a7:57:9f:f7:b7:64:7d:29:c1:1c: 38:47:9d:76:45:b7:fa:d0:73:70:1c:db:47:6f:74:53:dd:70: 3c:68:70:85:d6:16:84:9b:7d:bd:84:6d:e6:25:79:fc:f6:6c: af:f7:c0:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZKKeoRiUV72amxTzOkeIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YWFmNzZkMjdiYTgxMmUwZDVjZTIzMDVmMTdjNTMxODhj MjU4MGMwHhcNMjUxMjE1MTkwMjM2WhcNMjUxMjE2MTkwMjM2WjAzMTEwLwYDVQQD Eyg5M2NiMWU0ODVkMWNmNDdhNGQ2ODkxZTBiNDBkMjNmYjlmYTRhMTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYKg8Zjq8JEZyFptMePJMQQxnunR DdzTKQ1lwx1cJxIZaMbjPTjcWCcfom9GCG16PKpKo2oNIILxdr0zMc1WhL3hf/t1 YTva8vD4ReIsw4GwWbw5l7xM+n2cZQOydlFs6KePie5z55SE3HvAu0VUy/ZeR3H7 1KCiiXr3aIAT06YQtEx+hkqp64pH9X7hVyp7ZFKndOBB+pPqW5Y5O8su/OYd3ZRv vruYiHNW7N9q33CHRv7j+yziUh2MniwhnxMXDpMzRAfe/X2WIfRknlocb0NbeBOb 3vxFD8UstXlPa7N8BHZkSTzmI4apvoUCUjXaInH6C6h2y0FzIsp5gJOLbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPLHkhdHPR6TWiR4LQNI/ufpKEFMB8GA1UdIwQY MBaAFOWq920nuoEuDVziMF8XxTGIwlgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFyM2JTZTZnUzROWE9Jd1h4ZkZNWWpDV0F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85ZjUyMjMtYTU2Yy00NjViLWFjNjUt ZmQxNTJhNmEwNTg3LzEvNWFyM2JTZTZnUzROWE9Jd1h4ZkZNWWpDV0F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85ZjUyMjMtYTU2Yy00NjViLWFjNjUtZmQxNTJhNmEwNTg3 LzEvNWFyM2JTZTZnUzROWE9Jd1h4ZkZNWWpDV0F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7EEs+VM 8u1D+HfFg26mLcyd3jNkK/+5vf136p/A5KRzm6wVHGP4tXuiNU8P0e+30WAUZNhf +L0zZ6lT/CxGdDg3pU4JDoZIPD586qP4iGoh5qCSUho0j/S5u7ZkF6CuVgcFvxb4 22ASax0dH0JaGIV/ZMfGSD8DDWUU6IDFfWIDfpZxvod0Xbq/jOp/nerVLJZ74stI uAHXvJyKuajhJmff8NCk1iTGE5IYROjFQ//YmaLMdDVBX2P8B2ombaVUIWcKci1W fonAEQiWxgKnV5/3t2R9KcEcOEeddkW3+tBzcBzbR290U91wPGhwhdYWhJt9vYRt 5iV5/PZsr/fAYA== -----END CERTIFICATE-----Generated at Tue Dec 16 02:50:39 2025 by rpki-client