This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft File: 5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft (raw, json) Hash identifier: CFNr2NdaYtwQHqACUFsFHC9mm9HONvksgBRH+jPag68= Subject key identifier: 1A:F9:DB:67:62:2F:90:5B:AF:87:4C:D8:BA:85:2F:21:AD:86:4F:E6 Authority key identifier: E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85 Certificate issuer: /CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085 Certificate serial: 019B3D90E1C87F9E666C0890BDAA0CF51FF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 21:01:03 +0000 Manifest this update: Sat 20 Dec 2025 21:01:03 +0000 Manifest next update: Sun 21 Dec 2025 21:01:03 +0000 Files and hashes: 1: 5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl (hash: E1urG2nPcPCz7z8boGxqEk5XHcQPoYbLL4S8LjOd1KA=) 2: dFrITcK-gyFXGF4gMBJMUn82DUw.roa (hash: JzRq8pBFAlmY9cNlSptGZN7KGuqVF/MkHyhE1GubBM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:e1:c8:7f:9e:66:6c:08:90:bd:aa:0c:f5:1f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085 Validity Not Before: Dec 20 21:01:03 2025 GMT Not After : Dec 21 21:01:03 2025 GMT Subject: CN=1af9db67622f905baf874cd8ba852f21ad864fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:39:ee:cf:5c:f0:df:f9:e4:cd:d7:59:5a: 4a:3c:46:2d:9d:a1:a0:c8:b3:f8:51:30:75:e6:ba: 7c:21:89:ad:d1:99:39:60:c8:ce:b3:c9:18:f9:b4: 7a:0d:66:75:80:a7:e5:1c:75:6d:be:5d:d3:35:43: ba:97:5f:ce:76:e0:c0:7a:18:72:93:13:c6:24:39: 2c:56:1c:fe:a8:0e:75:0d:d0:48:32:e0:a6:32:22: 82:3c:97:4f:9f:11:82:7f:90:fd:1d:37:47:7c:35: a1:a4:a7:b7:24:a8:cf:64:ee:6f:dd:4e:94:8a:03: 09:91:16:1a:c9:5f:48:bf:6c:ab:d2:2b:4c:6f:93: ab:44:07:5f:56:96:f8:df:d3:14:0e:c0:0b:7b:ce: af:1a:82:d7:c2:b4:18:70:84:f6:0c:e2:18:3b:de: e4:56:f2:af:b2:45:ae:d5:97:50:ea:fa:77:73:04: 8f:1c:46:38:4d:37:d4:fb:15:96:3f:4e:59:e7:d6: c3:0e:db:60:fc:b7:36:5e:f6:2a:e7:b2:9e:c8:f8: 65:73:10:1c:e8:0f:a9:5d:75:13:17:fe:e8:1c:d4: de:59:d5:61:81:e5:00:75:ca:64:f6:c8:47:4b:45: d1:2e:c1:12:94:36:62:36:42:49:3f:b4:d4:cc:45: e0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F9:DB:67:62:2F:90:5B:AF:87:4C:D8:BA:85:2F:21:AD:86:4F:E6 X509v3 Authority Key Identifier: keyid:E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:64:4a:dc:15:43:27:d5:f3:93:80:95:f5:10:67:57:fb:c8: a8:f3:ca:ec:22:0b:1b:23:b3:a7:0c:42:5e:f6:81:fe:15:b4: 53:c1:23:78:c2:f0:32:64:33:ab:05:77:11:48:5d:53:2a:9c: a1:47:d5:b1:fa:d6:97:2b:88:d3:48:44:fe:a6:dc:48:09:4d: 37:47:50:9d:7d:0c:87:6b:91:eb:b9:33:20:97:9b:19:a6:d9: e8:11:24:44:c3:e8:ef:39:f0:33:13:82:ff:91:d6:cc:82:d9: 5b:75:3b:0e:52:52:9e:64:12:c0:28:52:6f:2c:86:bd:20:41: 71:aa:70:2c:8f:45:51:b9:e3:e3:08:66:6f:06:1c:30:77:69: ba:0e:ba:9b:c9:a8:b4:56:37:62:e9:e4:0f:dd:da:5e:16:53: 90:8c:d0:a0:79:1b:a1:7c:1a:67:6a:75:d7:8d:76:fb:6d:43: 0c:3d:c1:79:c1:6a:da:49:08:ae:75:28:c4:3b:db:23:9d:a3: 52:7f:b3:89:74:12:55:d2:b7:f5:aa:62:20:e8:03:bf:ee:a4: 5f:00:14:f2:88:21:df:09:f8:6e:5f:58:48:eb:ec:a7:e1:10: eb:0e:5d:a9:b8:69:90:d9:0c:3b:ab:c1:b7:f7:2b:98:56:1e: 5c:53:76:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kOHIf55mbAiQvaoM9R/wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZmVjMjgzM2QzYzhlMjMyOTAzY2RkM2FmYzAzZWNkYmU4 M2IwODUwHhcNMjUxMjIwMjEwMTAzWhcNMjUxMjIxMjEwMTAzWjAzMTEwLwYDVQQD EygxYWY5ZGI2NzYyMmY5MDViYWY4NzRjZDhiYTg1MmYyMWFkODY0ZmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6457s9c8N/55M3XWVpKPEYtnaGg yLP4UTB15rp8IYmt0Zk5YMjOs8kY+bR6DWZ1gKflHHVtvl3TNUO6l1/OduDAehhy kxPGJDksVhz+qA51DdBIMuCmMiKCPJdPnxGCf5D9HTdHfDWhpKe3JKjPZO5v3U6U igMJkRYayV9Iv2yr0itMb5OrRAdfVpb439MUDsALe86vGoLXwrQYcIT2DOIYO97k VvKvskWu1ZdQ6vp3cwSPHEY4TTfU+xWWP05Z59bDDttg/Lc2XvYq57KeyPhlcxAc 6A+pXXUTF/7oHNTeWdVhgeUAdcpk9shHS0XRLsESlDZiNkJJP7TUzEXgjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBr522diL5Bbr4dM2LqFLyGthk/mMB8GA1UdIwQY MBaAFOf+woM9PI4jKQPN06/APs2+g7CFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV83Q2d6MDhqaU1wQTgzVHI4QS16YjZEc0lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kM2RiYTAtZDcxNS00OTVmLTkxNzgt MzkzYTQwODBjNzQ3LzEvNV83Q2d6MDhqaU1wQTgzVHI4QS16YjZEc0lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kM2RiYTAtZDcxNS00OTVmLTkxNzgtMzkzYTQwODBjNzQ3 LzEvNV83Q2d6MDhqaU1wQTgzVHI4QS16YjZEc0lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGRK3BVD J9Xzk4CV9RBnV/vIqPPK7CILGyOzpwxCXvaB/hW0U8EjeMLwMmQzqwV3EUhdUyqc oUfVsfrWlyuI00hE/qbcSAlNN0dQnX0Mh2uR67kzIJebGabZ6BEkRMPo7znwMxOC /5HWzILZW3U7DlJSnmQSwChSbyyGvSBBcapwLI9FUbnj4whmbwYcMHdpug66m8mo tFY3YunkD93aXhZTkIzQoHkboXwaZ2p11412+21DDD3BecFq2kkIrnUoxDvbI52j Un+ziXQSVdK39apiIOgDv+6kXwAU8ogh3wn4bl9YSOvsp+EQ6w5dqbhpkNkMO6vB t/crmFYeXFN2Lg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:01:32 2025 by rpki-client