This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft File: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft (raw, json) Hash identifier: 9sdjz6WUaXzsvMNpVuhHR2eP8Or11uOTXpCMQf1x2EU= Subject key identifier: AD:59:58:E6:F7:8B:FA:E1:74:9D:7D:7D:89:FD:7C:10:A5:63:A8:47 Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F Certificate issuer: /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f Certificate serial: 019B424A7BED5F7C0FEE3C83C0D5546E743A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft Manifest number: 1241 Signing time: Sun 21 Dec 2025 19:02:16 +0000 Manifest this update: Sun 21 Dec 2025 19:02:16 +0000 Manifest next update: Mon 22 Dec 2025 19:02:16 +0000 Files and hashes: 1: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl (hash: VIxAQDFMHaQ651kIFXdK91RqewLh+Mg6Jzy7tU0HCrQ=) 2: V60g_4Hl1O4ws6xObJRepK5WbCI.roa (hash: WQJN9PGlNp52w8KNVApuftRmLkpbyYXJ0S9Q2EedPcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:7b:ed:5f:7c:0f:ee:3c:83:c0:d5:54:6e:74:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f Validity Not Before: Dec 21 19:02:16 2025 GMT Not After : Dec 22 19:02:16 2025 GMT Subject: CN=ad5958e6f78bfae1749d7d7d89fd7c10a563a847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8b:cd:4e:45:a5:cc:b9:af:e2:ed:64:0d:5a: 2b:64:70:bb:60:ac:56:c1:ab:4a:62:12:47:58:f2: ef:73:68:66:0e:f4:8a:2e:e6:d8:1d:d4:60:44:0a: 03:e9:97:09:02:2d:fb:46:03:bd:08:2d:e1:05:17: 11:93:df:31:83:52:95:60:3d:08:a1:e6:2a:0f:7c: 7f:14:83:2e:c0:87:9a:f5:61:4c:9c:49:7f:7d:cb: da:07:7f:3f:43:f6:2a:dd:22:80:8b:5d:1b:69:0b: d7:5d:57:96:56:9d:95:ff:25:4e:1d:e6:59:99:1f: 40:33:1c:20:85:c4:0c:68:74:5c:8f:8a:9e:4e:6a: 5d:96:4e:7d:a1:ae:5e:5a:35:77:b8:a9:e1:c9:52: eb:fd:46:61:7b:1c:5c:b3:8a:ba:0e:59:d6:bd:4b: 89:80:92:ae:cf:b9:5b:43:d6:a3:41:10:25:ad:eb: bf:1f:3a:fc:b9:2f:61:fa:b6:20:0e:77:39:57:8c: a5:05:05:cd:19:21:d9:01:26:a9:26:77:8e:d0:de: ce:40:66:3f:4c:15:c8:88:47:d7:01:05:ec:33:46: 4c:ca:e0:78:47:e3:ba:cf:79:cf:92:a5:b7:ef:8e: b6:1b:2f:6a:17:6a:37:cb:e6:b5:a1:69:21:11:25: bc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:59:58:E6:F7:8B:FA:E1:74:9D:7D:7D:89:FD:7C:10:A5:63:A8:47 X509v3 Authority Key Identifier: keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:54:41:2f:b4:a7:00:22:c4:0e:d6:7d:cf:93:59:45:e2:a0: cf:21:f2:62:df:fe:4e:ec:5b:7e:0c:d2:9a:a8:01:9a:3e:3d: 0f:5a:87:cd:34:57:42:cc:ad:88:9c:74:3f:4c:ac:4e:28:21: c3:8f:26:11:d2:7d:1a:91:c6:eb:91:cd:30:ff:a1:2d:66:71: 01:86:4c:9f:2f:c6:a4:f7:2f:36:86:fb:53:f3:44:10:a3:07: 85:8e:30:74:17:a3:d8:f3:c2:f9:78:bc:da:83:1f:bc:b5:c2: 4a:ca:15:a2:8d:e0:df:c9:ec:d0:5f:1e:c2:1a:87:a0:5c:f2: 95:c4:5f:c8:14:6e:fb:cc:c5:af:09:1c:54:fe:49:f3:af:7e: e6:9c:5f:f1:82:3b:ba:fa:1b:2b:b5:06:f6:a6:5a:c5:2c:8a: 43:08:28:fa:f5:f7:dd:4d:a0:e3:9b:4e:b3:86:f7:04:b0:0b: 62:a8:8b:e2:b9:7e:ab:92:f8:c0:98:12:19:f5:b2:1c:1b:87: 93:6a:70:4f:c2:7a:39:bf:24:a7:f0:42:fd:e4:6f:dc:fd:7c: 89:2a:10:b7:73:da:3f:a6:e8:28:6b:00:88:58:e3:24:44:47: 6a:7e:43:9c:d6:b2:1e:de:83:ca:ff:26:a4:b7:08:c7:f4:5f: 58:61:a5:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSnvtX3wP7jyDwNVUbnQ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZmQ5OTA5ZDE2YmFmMTFjYjk1OGM4ZDI3NGUyNGVjOTk0 NzQyMmYwHhcNMjUxMjIxMTkwMjE2WhcNMjUxMjIyMTkwMjE2WjAzMTEwLwYDVQQD EyhhZDU5NThlNmY3OGJmYWUxNzQ5ZDdkN2Q4OWZkN2MxMGE1NjNhODQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArovNTkWlzLmv4u1kDVorZHC7YKxW watKYhJHWPLvc2hmDvSKLubYHdRgRAoD6ZcJAi37RgO9CC3hBRcRk98xg1KVYD0I oeYqD3x/FIMuwIea9WFMnEl/fcvaB38/Q/Yq3SKAi10baQvXXVeWVp2V/yVOHeZZ mR9AMxwghcQMaHRcj4qeTmpdlk59oa5eWjV3uKnhyVLr/UZhexxcs4q6DlnWvUuJ gJKuz7lbQ9ajQRAlreu/Hzr8uS9h+rYgDnc5V4ylBQXNGSHZASapJneO0N7OQGY/ TBXIiEfXAQXsM0ZMyuB4R+O6z3nPkqW37462Gy9qF2o3y+a1oWkhESW8uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1ZWOb3i/rhdJ19fYn9fBClY6hHMB8GA1UdIwQY MBaAFOf9mQnRa68Ry5WMjSdOJOyZR0IvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xZjAxZTMtNzdkMy00Y2Y3LWFlYTgt MTIyZmVlY2RlM2VhLzEvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8xZjAxZTMtNzdkMy00Y2Y3LWFlYTgtMTIyZmVlY2RlM2Vh LzEvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlRBL7Sn ACLEDtZ9z5NZReKgzyHyYt/+TuxbfgzSmqgBmj49D1qHzTRXQsytiJx0P0ysTigh w48mEdJ9GpHG65HNMP+hLWZxAYZMny/GpPcvNob7U/NEEKMHhY4wdBej2PPC+Xi8 2oMfvLXCSsoVoo3g38ns0F8ewhqHoFzylcRfyBRu+8zFrwkcVP5J869+5pxf8YI7 uvobK7UG9qZaxSyKQwgo+vX33U2g45tOs4b3BLALYqiL4rl+q5L4wJgSGfWyHBuH k2pwT8J6Ob8kp/BC/eRv3P18iSoQt3PaP6boKGsAiFjjJERHan5DnNayHt6Dyv8m pLcIx/RfWGGlCA== -----END CERTIFICATE-----Generated at Sun Dec 21 20:35:41 2025 by rpki-client