This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft File: v5r7gj8fivhy55Pye2St74zU3Bs.mft (raw, json) Hash identifier: L+7axUWf34U6op70ZlG/RfPUQ0hzZtlbPFp95qnQOBA= Subject key identifier: 7C:62:49:60:5C:F0:9C:E7:FB:A6:3D:BE:B2:0F:C8:32:AF:53:91:07 Authority key identifier: BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B Certificate issuer: /CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b Certificate serial: 019B4EF23AE2D5A588E5E367DAD73B643BD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft Manifest number: 054E Signing time: Wed 24 Dec 2025 06:00:56 +0000 Manifest this update: Wed 24 Dec 2025 06:00:56 +0000 Manifest next update: Thu 25 Dec 2025 06:00:56 +0000 Files and hashes: 1: v5r7gj8fivhy55Pye2St74zU3Bs.crl (hash: 2ipPLkJiPWPMjpn4b4KYfvUKvFSMZqPXDYPmzTgLxfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:3a:e2:d5:a5:88:e5:e3:67:da:d7:3b:64:3b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b Validity Not Before: Dec 24 06:00:56 2025 GMT Not After : Dec 25 06:00:56 2025 GMT Subject: CN=7c6249605cf09ce7fba63dbeb20fc832af539107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:41:1a:a9:22:28:ed:3f:44:71:1d:df:ca:a5: e9:1b:ea:80:0d:2a:49:0d:2f:94:cf:1a:d4:1a:74: bb:87:68:77:5e:dd:55:60:ca:58:84:2c:0b:66:65: 2b:0e:38:a2:d5:6d:d0:03:ba:d3:82:ca:f3:8e:a0: fa:14:66:0f:5f:08:54:35:c8:0e:13:2a:0f:10:40: 4e:f1:1f:f9:f9:c5:7f:7f:c6:b3:15:68:eb:c9:fd: a2:1c:da:17:b5:97:18:ab:b0:c7:96:bf:4a:3d:8d: 01:1e:b5:44:ac:3a:1d:a7:fa:08:97:50:8d:5c:13: 19:47:05:ea:6b:27:28:28:d2:ff:26:97:6c:3c:fc: 12:d3:ab:ca:6d:fa:a8:d8:d3:ee:4a:8f:df:66:66: 83:50:7d:89:94:4f:29:b4:a0:80:af:08:a1:77:71: c2:b5:96:28:31:fe:85:ca:1b:37:23:56:46:08:e9: c2:70:e9:3a:14:2f:39:49:38:7e:0c:18:1f:02:d9: b8:dc:40:bc:ae:28:5a:8d:e9:d9:3c:bb:21:46:77: b2:00:91:fd:19:14:12:03:81:6b:7f:70:65:aa:71: e3:c1:1c:2c:1b:d2:d1:d2:aa:c8:d1:c4:e0:aa:46: c2:97:a8:c7:18:3e:70:13:a3:01:f5:86:24:50:c8: 2f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:62:49:60:5C:F0:9C:E7:FB:A6:3D:BE:B2:0F:C8:32:AF:53:91:07 X509v3 Authority Key Identifier: keyid:BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:e1:9c:ae:a9:02:42:c4:af:23:a7:c9:0e:e3:72:c1:ec:f4: 2e:0e:0a:d8:d0:e1:da:b1:08:9f:e4:cc:7f:6b:8c:14:4d:73: f5:33:16:f6:c8:45:36:92:02:05:03:ac:de:02:43:81:99:f2: d4:41:ff:fb:69:d4:c3:e8:90:1f:19:09:a8:37:d5:26:fb:0e: 1f:04:25:28:ff:cb:c5:59:93:e7:90:52:79:c3:d3:d4:03:8e: 74:5d:bb:f6:ab:72:e4:19:d0:fa:38:3a:7a:96:cf:89:86:7d: ac:a6:d6:f4:ac:f6:93:c0:c2:eb:42:da:35:bd:ea:0a:f0:ec: bf:da:71:79:2f:91:8b:ce:72:4f:19:dc:9c:6d:6f:f2:5c:df: 5b:71:2f:10:d0:f4:ab:e1:98:a2:b0:dd:95:74:10:b0:27:3a: e8:33:95:03:63:bb:10:67:45:12:83:97:c9:a2:93:02:a7:31: 3e:6c:20:d8:13:af:c1:26:92:99:15:fd:61:09:7b:96:52:48: c6:38:38:52:34:47:db:95:55:e8:d6:fc:b4:39:09:ab:fc:1a: 9f:a3:02:a6:64:46:2d:6c:05:39:56:7a:30:38:4b:e0:15:4c: 53:1f:35:4a:57:3b:6d:45:40:83:07:6e:76:a0:ac:15:5d:c1: d7:16:ba:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8jri1aWI5eNn2tc7ZDvWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmOWFmYjgyM2YxZjhhZjg3MmU3OTNmMjdiNjRhZGVmOGNk NGRjMWIwHhcNMjUxMjI0MDYwMDU2WhcNMjUxMjI1MDYwMDU2WjAzMTEwLwYDVQQD Eyg3YzYyNDk2MDVjZjA5Y2U3ZmJhNjNkYmViMjBmYzgzMmFmNTM5MTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0EaqSIo7T9EcR3fyqXpG+qADSpJ DS+UzxrUGnS7h2h3Xt1VYMpYhCwLZmUrDjii1W3QA7rTgsrzjqD6FGYPXwhUNcgO EyoPEEBO8R/5+cV/f8azFWjryf2iHNoXtZcYq7DHlr9KPY0BHrVErDodp/oIl1CN XBMZRwXqaycoKNL/JpdsPPwS06vKbfqo2NPuSo/fZmaDUH2JlE8ptKCArwihd3HC tZYoMf6Fyhs3I1ZGCOnCcOk6FC85STh+DBgfAtm43EC8rihajenZPLshRneyAJH9 GRQSA4Frf3BlqnHjwRwsG9LR0qrI0cTgqkbCl6jHGD5wE6MB9YYkUMgv9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxiSWBc8Jzn+6Y9vrIPyDKvU5EHMB8GA1UdIwQY MBaAFL+a+4I/H4r4cueT8ntkre+M1NwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjVyN2dqOGZpdmh5NTVQeWUyU3Q3NHpVM0JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kYzMyOTQtYmQ0Zi00ZmVmLWI5Zjct MzY2Mjc4NWJhYWFkLzEvdjVyN2dqOGZpdmh5NTVQeWUyU3Q3NHpVM0JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9kYzMyOTQtYmQ0Zi00ZmVmLWI5ZjctMzY2Mjc4NWJhYWFk LzEvdjVyN2dqOGZpdmh5NTVQeWUyU3Q3NHpVM0JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaOGcrqkC QsSvI6fJDuNywez0Lg4K2NDh2rEIn+TMf2uMFE1z9TMW9shFNpICBQOs3gJDgZny 1EH/+2nUw+iQHxkJqDfVJvsOHwQlKP/LxVmT55BSecPT1AOOdF279qty5BnQ+jg6 epbPiYZ9rKbW9Kz2k8DC60LaNb3qCvDsv9pxeS+Ri85yTxncnG1v8lzfW3EvEND0 q+GYorDdlXQQsCc66DOVA2O7EGdFEoOXyaKTAqcxPmwg2BOvwSaSmRX9YQl7llJI xjg4UjRH25VV6Nb8tDkJq/wan6MCpmRGLWwFOVZ6MDhL4BVMUx81Slc7bUVAgwdu dqCsFV3B1xa6gA== -----END CERTIFICATE-----Generated at Wed Dec 24 13:09:26 2025 by rpki-client