This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft File: 5PFY7_xrOIKiWQweaQasoQjhjsI.mft (raw, json) Hash identifier: V7B/CaUz/A6lyPRajGMpGUpEFqHvmbBFM1VtMf/TVA0= Subject key identifier: 50:28:7D:A6:2F:37:BA:5A:B8:F0:A4:84:E9:D8:8A:D0:26:D9:2C:4F Authority key identifier: E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2 Certificate issuer: /CN=e4f158effc6b3882a2590c1e6906aca108e18ec2 Certificate serial: 019B397D812BC7E34C9C8C9E6BE6D3B0FD6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft Manifest number: 0D8D Signing time: Sat 20 Dec 2025 02:01:24 +0000 Manifest this update: Sat 20 Dec 2025 02:01:24 +0000 Manifest next update: Sun 21 Dec 2025 02:01:24 +0000 Files and hashes: 1: 5JIFCgXWGmsw1HA5JtADF-b1eJ4.roa (hash: kqtxwSPKoLsi1ph5t4VnO3iKewevISmebmIE1RpFWLg=) 2: 5PFY7_xrOIKiWQweaQasoQjhjsI.crl (hash: gJe9QWRpoiHeVy4IgKDzatFXKNXaBRLWxeIud1EfLXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:81:2b:c7:e3:4c:9c:8c:9e:6b:e6:d3:b0:fd:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4f158effc6b3882a2590c1e6906aca108e18ec2 Validity Not Before: Dec 20 02:01:24 2025 GMT Not After : Dec 21 02:01:24 2025 GMT Subject: CN=50287da62f37ba5ab8f0a484e9d88ad026d92c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:43:d8:16:7b:8f:f5:99:ec:b4:72:40:9f:80: f0:7b:ab:a5:37:d4:07:f3:31:ce:e9:18:15:db:1e: 4e:7b:2a:08:f0:58:75:78:5f:74:00:bb:17:37:09: 49:b5:69:5b:18:dd:d8:7b:26:76:e4:8e:73:bc:3b: 08:91:b3:1b:e0:b4:ae:6e:57:a1:b8:67:6a:73:a9: 9d:a2:64:20:02:d6:30:8f:73:99:e5:69:50:70:c9: 29:3b:1a:c0:ae:4d:3d:ab:01:2c:fe:e9:91:16:a0: da:87:98:2d:53:73:2f:27:6d:ca:84:a7:54:9f:93: dc:35:a6:51:f4:63:5f:43:6a:a6:38:4a:26:ec:5c: fa:39:2e:aa:6a:1e:68:eb:4d:31:3c:21:6f:16:70: 72:55:7a:37:ec:5b:07:b2:19:c3:f5:dc:6a:a2:f9: d1:0a:d5:9c:bb:52:eb:50:6e:7b:75:e2:5c:42:53: d8:70:4d:c3:e1:b2:a9:c0:2a:a0:59:15:ac:7e:62: 6b:ed:c8:a3:97:3c:89:5a:42:a7:b8:c1:39:a1:c5: 4b:22:25:e0:db:48:7b:6c:95:c3:d3:8c:5f:49:13: cb:f1:ef:05:a1:4f:cf:17:a1:51:f8:50:e5:1c:04: f4:ff:13:02:47:c7:dd:de:c4:df:2c:2a:4f:08:2c: b8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:28:7D:A6:2F:37:BA:5A:B8:F0:A4:84:E9:D8:8A:D0:26:D9:2C:4F X509v3 Authority Key Identifier: keyid:E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:74:f4:6e:f2:29:7e:9b:72:4d:be:d1:fa:c1:3e:35:09:12: c2:4d:86:89:5b:88:69:37:95:e3:28:a5:7d:e3:3c:d7:16:1f: 92:68:6a:c5:43:d4:e4:71:15:4d:6b:18:fb:e2:3f:83:d7:58: c7:ca:e7:23:d7:f8:2c:fa:ba:b6:15:39:29:3c:25:94:bb:45: ea:39:4c:8b:90:ca:a1:ff:df:af:e5:c5:55:a3:38:39:5e:8b: 39:48:78:59:57:69:dd:ee:b0:b2:1a:ac:23:fc:ac:7d:c0:6e: 6f:d8:53:82:a1:0a:3e:f0:c6:0d:1d:81:fd:df:5b:08:de:41: ac:7f:b6:c7:a5:de:82:9d:d5:29:c7:9c:4a:a4:79:06:ce:ab: 57:b7:ea:11:78:41:c3:ac:31:fc:72:cd:5c:75:ce:2e:a9:bb: eb:4e:c1:b1:dc:af:47:d9:d9:25:05:26:a0:cd:45:ab:e5:4f: e8:dc:b1:db:4f:7c:13:0a:1a:9e:76:41:05:6e:06:ea:1e:05: f0:e8:90:7a:f6:ce:24:f1:35:e3:06:d0:5d:26:57:7a:e4:ff: 24:dc:1e:ac:72:fa:81:f2:55:ba:78:32:27:ae:62:c3:05:bb: 7b:a4:b3:ba:bc:be:09:73:59:28:7d:ed:7a:b5:04:d1:53:dd: c3:35:81:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fYErx+NMnIyea+bTsP1tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZjE1OGVmZmM2YjM4ODJhMjU5MGMxZTY5MDZhY2ExMDhl MThlYzIwHhcNMjUxMjIwMDIwMTI0WhcNMjUxMjIxMDIwMTI0WjAzMTEwLwYDVQQD Eyg1MDI4N2RhNjJmMzdiYTVhYjhmMGE0ODRlOWQ4OGFkMDI2ZDkyYzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0PYFnuP9ZnstHJAn4Dwe6ulN9QH 8zHO6RgV2x5OeyoI8Fh1eF90ALsXNwlJtWlbGN3YeyZ25I5zvDsIkbMb4LSubleh uGdqc6mdomQgAtYwj3OZ5WlQcMkpOxrArk09qwEs/umRFqDah5gtU3MvJ23KhKdU n5PcNaZR9GNfQ2qmOEom7Fz6OS6qah5o600xPCFvFnByVXo37FsHshnD9dxqovnR CtWcu1LrUG57deJcQlPYcE3D4bKpwCqgWRWsfmJr7cijlzyJWkKnuME5ocVLIiXg 20h7bJXD04xfSRPL8e8FoU/PF6FR+FDlHAT0/xMCR8fd3sTfLCpPCCy4LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAofaYvN7pauPCkhOnYitAm2SxPMB8GA1UdIwQY MBaAFOTxWO/8aziColkMHmkGrKEI4Y7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVBGWTdfeHJPSUtpV1F3ZWFRYXNvUWpoanNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84M2MwMGUtZjQxNC00ODlkLTk0NzAt YzY5MzI0OTY1MWQ1LzEvNVBGWTdfeHJPSUtpV1F3ZWFRYXNvUWpoanNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi84M2MwMGUtZjQxNC00ODlkLTk0NzAtYzY5MzI0OTY1MWQ1 LzEvNVBGWTdfeHJPSUtpV1F3ZWFRYXNvUWpoanNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHnT0bvIp fptyTb7R+sE+NQkSwk2GiVuIaTeV4yilfeM81xYfkmhqxUPU5HEVTWsY++I/g9dY x8rnI9f4LPq6thU5KTwllLtF6jlMi5DKof/fr+XFVaM4OV6LOUh4WVdp3e6wshqs I/ysfcBub9hTgqEKPvDGDR2B/d9bCN5BrH+2x6Xegp3VKcecSqR5Bs6rV7fqEXhB w6wx/HLNXHXOLqm7607BsdyvR9nZJQUmoM1Fq+VP6Nyx2098EwoannZBBW4G6h4F 8OiQevbOJPE14wbQXSZXeuT/JNwerHL6gfJVungyJ65iwwW7e6Szury+CXNZKH3t erUE0VPdwzWBCw== -----END CERTIFICATE-----Generated at Sat Dec 20 08:13:07 2025 by rpki-client