This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft File: 5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft (raw, json) Hash identifier: nEWgX14YYvQbaLozgfniYjIl8baTZea0niyWH7WXEhw= Subject key identifier: 60:7C:09:44:63:D9:1D:67:6C:2F:B5:4F:0D:87:F5:3F:19:77:14:81 Authority key identifier: E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85 Certificate issuer: /CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085 Certificate serial: 019B50E0BABA908713A5F21557ECF5C0FE44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 15:01:03 +0000 Manifest this update: Wed 24 Dec 2025 15:01:03 +0000 Manifest next update: Thu 25 Dec 2025 15:01:03 +0000 Files and hashes: 1: 5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl (hash: v5Z7C8GWQO5yjXTi5LnCOAnWeWJ9tUi4L0x1Gmehhwk=) 2: dFrITcK-gyFXGF4gMBJMUn82DUw.roa (hash: JzRq8pBFAlmY9cNlSptGZN7KGuqVF/MkHyhE1GubBM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:ba:ba:90:87:13:a5:f2:15:57:ec:f5:c0:fe:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085 Validity Not Before: Dec 24 15:01:03 2025 GMT Not After : Dec 25 15:01:03 2025 GMT Subject: CN=607c094463d91d676c2fb54f0d87f53f19771481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2b:33:a8:a0:fb:c4:b8:7d:0f:54:75:a3:b0: cf:0e:36:dd:f4:3a:1f:7c:c2:4e:b5:31:0f:f7:5e: 81:f5:59:c9:e2:f4:3a:7e:5c:6f:63:18:62:e4:82: 19:73:6b:fc:dd:05:b8:70:05:c3:b0:8e:e8:7f:43: ed:0f:12:60:39:2b:a1:65:78:3b:26:55:59:1a:e0: 57:7b:3a:42:4e:40:ad:95:ec:c7:b7:a3:35:46:5f: df:ba:e1:b0:f1:d6:ac:e5:ae:2e:5f:a8:00:e1:1d: ba:1f:e2:31:0c:8a:b7:2f:9c:ee:5d:93:97:44:42: fa:0b:d3:f9:94:37:12:4b:03:55:29:bc:f6:c2:21: b8:76:88:7d:b6:90:90:7c:fb:43:62:b6:60:4e:48: 0a:41:3c:39:e7:71:93:63:89:e5:6d:b5:a4:26:af: b3:57:21:fb:5c:fe:85:27:93:4f:01:53:67:bb:ad: 0f:bd:ab:f0:cd:9e:c0:be:a3:73:68:a3:c5:3a:c5: e5:78:f5:59:da:64:86:cc:ce:a9:57:b1:56:1a:c2: aa:e0:0d:52:be:85:84:ac:f2:c1:e9:bb:86:ce:80: 09:37:9f:19:58:dd:94:4f:7b:cf:96:1d:d5:9b:cd: c4:a7:33:c2:33:8a:49:af:29:89:c5:e6:be:bf:2b: 23:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7C:09:44:63:D9:1D:67:6C:2F:B5:4F:0D:87:F5:3F:19:77:14:81 X509v3 Authority Key Identifier: keyid:E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e2:57:17:71:f5:95:46:51:f3:af:3e:72:38:71:d5:48:66: 87:a1:71:27:e0:5a:13:d9:4a:3b:16:a2:16:5e:cb:b5:8a:34: 85:15:6c:a2:b9:48:b1:1a:bc:66:90:95:d7:3f:3c:81:72:4e: 04:17:75:1a:7e:1c:c5:ef:6a:93:77:11:26:9a:42:27:58:2c: 2c:7f:96:4e:3e:b8:0e:2e:27:6a:aa:ef:77:d2:9c:82:02:59: 26:e5:f9:08:58:55:ad:2f:56:62:6c:b7:2b:5e:76:5b:7a:91: 60:5d:e5:96:bd:b6:3c:7e:f5:f0:e3:37:b0:b8:7c:1f:3a:3a: 93:6e:c3:a8:0e:5a:a4:d1:36:fa:c2:1a:29:07:e3:0e:3f:60: 10:ff:91:28:13:43:0b:fa:d7:1b:bd:b2:b8:2a:09:cf:73:fb: a5:1c:53:f8:17:34:ce:6c:62:ec:1c:6c:a8:c4:ca:83:7d:e7: ab:8a:13:6a:8c:fe:bf:3e:8a:73:d6:96:d7:8a:6e:5f:a2:7e: 44:de:0e:c2:80:e7:14:22:49:f0:b9:fc:a9:c4:45:e1:12:f7: 4d:16:a6:2a:c1:d8:21:a0:de:81:b5:e6:dd:fc:a8:01:77:56: 23:6e:2f:c4:19:31:57:f3:b1:ef:da:b6:96:86:23:57:03:a5: f0:c2:7d:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4Lq6kIcTpfIVV+z1wP5EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZmVjMjgzM2QzYzhlMjMyOTAzY2RkM2FmYzAzZWNkYmU4 M2IwODUwHhcNMjUxMjI0MTUwMTAzWhcNMjUxMjI1MTUwMTAzWjAzMTEwLwYDVQQD Eyg2MDdjMDk0NDYzZDkxZDY3NmMyZmI1NGYwZDg3ZjUzZjE5NzcxNDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SszqKD7xLh9D1R1o7DPDjbd9Dof fMJOtTEP916B9VnJ4vQ6flxvYxhi5IIZc2v83QW4cAXDsI7of0PtDxJgOSuhZXg7 JlVZGuBXezpCTkCtlezHt6M1Rl/fuuGw8das5a4uX6gA4R26H+IxDIq3L5zuXZOX REL6C9P5lDcSSwNVKbz2wiG4doh9tpCQfPtDYrZgTkgKQTw553GTY4nlbbWkJq+z VyH7XP6FJ5NPAVNnu60PvavwzZ7AvqNzaKPFOsXlePVZ2mSGzM6pV7FWGsKq4A1S voWErPLB6buGzoAJN58ZWN2UT3vPlh3Vm83EpzPCM4pJrymJxea+vysj0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGB8CURj2R1nbC+1Tw2H9T8ZdxSBMB8GA1UdIwQY MBaAFOf+woM9PI4jKQPN06/APs2+g7CFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV83Q2d6MDhqaU1wQTgzVHI4QS16YjZEc0lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kM2RiYTAtZDcxNS00OTVmLTkxNzgt MzkzYTQwODBjNzQ3LzEvNV83Q2d6MDhqaU1wQTgzVHI4QS16YjZEc0lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kM2RiYTAtZDcxNS00OTVmLTkxNzgtMzkzYTQwODBjNzQ3 LzEvNV83Q2d6MDhqaU1wQTgzVHI4QS16YjZEc0lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiuJXF3H1 lUZR868+cjhx1Uhmh6FxJ+BaE9lKOxaiFl7LtYo0hRVsorlIsRq8ZpCV1z88gXJO BBd1Gn4cxe9qk3cRJppCJ1gsLH+WTj64Di4naqrvd9KcggJZJuX5CFhVrS9WYmy3 K152W3qRYF3llr22PH718OM3sLh8Hzo6k27DqA5apNE2+sIaKQfjDj9gEP+RKBND C/rXG72yuCoJz3P7pRxT+Bc0zmxi7BxsqMTKg33nq4oTaoz+vz6Kc9aW14puX6J+ RN4OwoDnFCJJ8Ln8qcRF4RL3TRamKsHYIaDegbXm3fyoAXdWI24vxBkxV/Ox79q2 loYjVwOl8MJ9uA== -----END CERTIFICATE-----Generated at Wed Dec 24 16:43:13 2025 by rpki-client