This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft File: 5zfJpEKotKTJEvEbwrbTzxAK30I.mft (raw, json) Hash identifier: KV55DehIm6OdZs1QhHpK5RV7V5Osv8fn3X1BY9nKnFw= Subject key identifier: F6:7D:7C:07:73:B3:FA:34:BE:3B:3E:21:8D:01:FD:E8:1D:AC:42:E8 Authority key identifier: E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42 Certificate issuer: /CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42 Certificate serial: 019B548653D9026446AF1AC9F7B66554BBD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft Manifest number: 1796 Signing time: Thu 25 Dec 2025 08:00:47 +0000 Manifest this update: Thu 25 Dec 2025 08:00:47 +0000 Manifest next update: Fri 26 Dec 2025 08:00:47 +0000 Files and hashes: 1: 5zfJpEKotKTJEvEbwrbTzxAK30I.crl (hash: Axv29KXzfxgyHDlYRe5VdQHMduHJSJZyycdQ/DoPpT8=) 2: 9Gaptu7OegDOTWgwtAQ4TQ0AHTI.roa (hash: rkESQzEqL5Foo1j28OK1lOudeGd3GtI+57JqeG8POXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:53:d9:02:64:46:af:1a:c9:f7:b6:65:54:bb:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42 Validity Not Before: Dec 25 08:00:47 2025 GMT Not After : Dec 26 08:00:47 2025 GMT Subject: CN=f67d7c0773b3fa34be3b3e218d01fde81dac42e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:50:f7:1e:69:a5:ee:1a:77:15:c7:ab:80:55: 39:05:b1:7c:12:38:f5:8a:8c:20:87:ad:f3:39:1b: b9:ae:35:31:99:ff:ee:8f:a2:8e:b7:71:0f:2e:46: b7:64:7b:bf:da:6a:92:06:2f:b5:24:a6:6a:db:c8: af:a8:1e:30:2f:fd:a8:50:e9:b7:62:c7:7e:18:f9: 5b:31:ab:01:9a:b8:c3:0e:d2:34:68:0c:7c:61:3f: c6:71:58:13:4a:b5:55:a6:2c:a3:ca:4e:8c:61:f8: 41:8c:5d:39:f4:b1:bc:3d:19:01:ca:1c:c3:23:b0: 8f:84:5f:9b:da:d6:2b:f6:04:9e:9a:76:c5:93:6d: 53:62:22:45:46:2e:4a:a5:30:01:3c:a6:c5:e7:b0: d8:6b:3b:b5:79:0c:62:22:08:1b:97:bc:88:ce:35: 77:12:59:c6:0b:ac:f0:8c:dd:4d:7b:e7:ab:76:be: 73:b7:ee:27:1e:26:10:76:df:2d:88:e1:f2:3e:75: 7a:6e:b2:30:70:9f:cf:a3:c8:b4:76:7b:18:e0:b9: 8d:51:ba:bc:fa:f3:44:dc:fc:15:40:4c:2b:5b:14: 0e:da:7b:13:47:66:a9:ee:78:28:5b:e0:29:0c:60: 12:04:1e:a0:fe:f2:d3:34:a8:05:c1:4b:d4:69:92: af:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7D:7C:07:73:B3:FA:34:BE:3B:3E:21:8D:01:FD:E8:1D:AC:42:E8 X509v3 Authority Key Identifier: keyid:E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:c6:2b:7c:ea:82:fa:99:90:90:cf:5a:36:ab:b8:16:f0:68: e9:86:45:d0:e6:a0:f2:dd:cc:25:e7:69:29:b8:7a:39:60:19: 63:7e:3f:6f:f1:31:29:1e:6a:c6:93:97:6d:4f:f2:16:4e:4a: f2:16:84:4e:19:cb:a0:7f:25:d3:37:b1:a5:2d:40:98:e4:76: cc:f7:5e:97:bf:1d:34:8c:a3:40:e8:e7:aa:0d:93:32:3e:35: be:3c:13:fa:b5:b2:86:2c:07:bb:0d:60:68:b4:3f:de:77:e1: f1:8f:82:63:65:8a:87:61:d8:70:bd:b6:6f:42:79:56:bb:6d: 6e:bd:e4:1b:26:e9:26:b3:fa:ad:68:6e:21:12:4c:03:c7:5d: e8:08:61:3c:8b:a9:1b:bf:1f:59:89:0d:3e:32:3d:5f:4b:e4: 46:ac:a1:5a:65:1d:88:73:8d:9d:32:f4:d7:e4:c5:5c:bb:07: 0c:e7:0b:7a:8c:1e:b0:bf:ff:cc:a4:8f:d7:07:7f:7b:d3:bb: e5:13:3a:70:39:3f:cf:00:f8:df:b5:e1:32:8c:14:f0:0f:f1: 8f:0e:6f:a0:d6:b1:94:34:28:6f:c9:c0:57:ab:83:c5:51:53: 26:ca:bc:60:d1:38:cf:12:e0:fd:e5:20:c5:93:63:24:28:c2: a7:7e:57:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhlPZAmRGrxrJ97ZlVLvXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MzdjOWE0NDJhOGI0YTRjOTEyZjExYmMyYjZkM2NmMTAw YWRmNDIwHhcNMjUxMjI1MDgwMDQ3WhcNMjUxMjI2MDgwMDQ3WjAzMTEwLwYDVQQD EyhmNjdkN2MwNzczYjNmYTM0YmUzYjNlMjE4ZDAxZmRlODFkYWM0MmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlD3Hmml7hp3FcergFU5BbF8Ejj1 iowgh63zORu5rjUxmf/uj6KOt3EPLka3ZHu/2mqSBi+1JKZq28ivqB4wL/2oUOm3 Ysd+GPlbMasBmrjDDtI0aAx8YT/GcVgTSrVVpiyjyk6MYfhBjF059LG8PRkByhzD I7CPhF+b2tYr9gSemnbFk21TYiJFRi5KpTABPKbF57DYazu1eQxiIggbl7yIzjV3 ElnGC6zwjN1Ne+erdr5zt+4nHiYQdt8tiOHyPnV6brIwcJ/Po8i0dnsY4LmNUbq8 +vNE3PwVQEwrWxQO2nsTR2ap7ngoW+ApDGASBB6g/vLTNKgFwUvUaZKvgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZ9fAdzs/o0vjs+IY0B/egdrELoMB8GA1UdIwQY MBaAFOc3yaRCqLSkyRLxG8K2088QCt9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXpmSnBFS290S1RKRXZFYndyYlR6eEFLMzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xNzY2N2UtMDIxOS00MjFlLTg0MTIt MzFmNjAzNzNhMDkyLzEvNXpmSnBFS290S1RKRXZFYndyYlR6eEFLMzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8xNzY2N2UtMDIxOS00MjFlLTg0MTItMzFmNjAzNzNhMDky LzEvNXpmSnBFS290S1RKRXZFYndyYlR6eEFLMzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlcYrfOqC +pmQkM9aNqu4FvBo6YZF0Oag8t3MJedpKbh6OWAZY34/b/ExKR5qxpOXbU/yFk5K 8haEThnLoH8l0zexpS1AmOR2zPdel78dNIyjQOjnqg2TMj41vjwT+rWyhiwHuw1g aLQ/3nfh8Y+CY2WKh2HYcL22b0J5Vrttbr3kGybpJrP6rWhuIRJMA8dd6AhhPIup G78fWYkNPjI9X0vkRqyhWmUdiHONnTL01+TFXLsHDOcLeowesL//zKSP1wd/e9O7 5RM6cDk/zwD437XhMowU8A/xjw5voNaxlDQob8nAV6uDxVFTJsq8YNE4zxLg/eUg xZNjJCjCp35X3A== -----END CERTIFICATE-----Generated at Thu Dec 25 11:18:54 2025 by rpki-client