This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft File: 5trj7-CjZ5faQ8vVj23_mcO73Y0.mft (raw, json) Hash identifier: M+qvc7HwbCUzyZJwnAF0IXvmKrqWFaxLWhn66nnAHe4= Subject key identifier: FF:10:7D:05:1E:B3:C6:B5:AB:78:9E:3D:2D:0B:9A:24:30:74:77:CE Authority key identifier: E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D Certificate issuer: /CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d Certificate serial: 019B32D7865D4D370FF7FA7AF33056442E8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 19:02:23 +0000 Manifest this update: Thu 18 Dec 2025 19:02:23 +0000 Manifest next update: Fri 19 Dec 2025 19:02:23 +0000 Files and hashes: 1: 5trj7-CjZ5faQ8vVj23_mcO73Y0.crl (hash: 9dLgzKziXIrOxI5ZuLStPmzkz+H6Knx4AxGmRYulH/8=) 2: jtdGItGjIscVK6iUpNCTUSGRedQ.roa (hash: FnwkKHIg+SdV2PfeNPF4IQR2s2fhTwukNFGZU8AgQ9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:86:5d:4d:37:0f:f7:fa:7a:f3:30:56:44:2e:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d Validity Not Before: Dec 18 19:02:23 2025 GMT Not After : Dec 19 19:02:23 2025 GMT Subject: CN=ff107d051eb3c6b5ab789e3d2d0b9a24307477ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cc:67:80:86:95:36:b1:12:d9:0a:8f:ad:1a: a2:54:06:37:71:cc:ab:bf:bd:07:4b:22:ee:76:7d: 04:a8:09:57:7e:d9:22:19:fc:be:42:74:8d:60:8c: 5c:f7:fd:42:e0:96:83:70:fe:c9:b8:cb:83:dc:f2: 98:7c:26:f4:49:f7:5d:9d:74:d2:8e:30:52:de:6d: 0c:0c:9e:53:57:1d:fe:df:4b:a5:8b:c5:bb:e6:5d: 85:a5:b7:8f:53:d1:23:2b:76:ae:84:d4:90:f8:25: c3:c1:0a:51:d0:fd:2b:af:d0:6b:cb:78:db:47:42: 80:ab:42:2d:57:da:30:7b:27:60:4c:cc:a4:2a:f1: 4e:57:15:38:bd:01:d5:07:d4:96:e8:15:f2:6b:b8: 05:3c:37:df:45:b8:95:83:9e:e9:0f:ac:84:88:ef: 85:1f:60:99:14:f4:45:a6:5f:7b:2c:3f:bc:20:bf: 4d:98:bf:ae:1f:11:d8:c2:04:38:c7:9a:45:ab:28: 7b:9e:9f:c0:77:2f:95:6e:99:ad:94:5a:06:be:45: 96:a4:09:d6:d4:ee:a6:9b:58:dc:0c:9d:b2:79:81: f1:3d:d1:66:c5:6b:8e:55:d9:d0:f5:d3:c6:bf:8c: 9e:74:a3:fc:d1:54:4e:19:03:4d:a1:24:1f:9a:2f: a3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:10:7D:05:1E:B3:C6:B5:AB:78:9E:3D:2D:0B:9A:24:30:74:77:CE X509v3 Authority Key Identifier: keyid:E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:13:a2:71:8d:fb:1e:cf:bc:ed:81:da:f4:c3:74:c7:95:2d: 76:46:31:e4:b1:9c:7f:64:38:54:37:c9:d5:30:82:4f:b7:a5: 8f:40:60:01:d3:f7:15:d3:d4:2e:9d:2b:f8:d8:92:97:a8:c1: 0d:5c:b3:2a:9e:4f:99:5f:a1:67:4b:4a:2e:ee:4e:fa:20:29: f9:85:dc:d1:c2:48:1e:e2:c8:98:06:10:52:e4:70:65:dc:92: 90:48:31:3c:d6:21:94:71:47:be:3b:42:b9:16:a0:89:96:ef: 5f:b3:90:bd:5b:de:f9:38:45:ab:2b:2e:a7:10:9f:5b:06:bd: 8e:b3:85:53:b0:65:f0:5c:59:56:6d:1e:b0:62:c5:07:33:ee: 3a:a8:0d:dd:c3:e0:9d:26:f0:dc:30:dc:e9:97:bb:09:02:4f: a4:ea:3c:02:9f:66:74:2e:08:61:25:38:25:7e:25:11:99:05: a3:fb:20:db:c2:b6:b8:06:3d:cc:b7:19:02:dc:0f:e4:33:03: 6d:ff:49:d2:e0:98:3d:f8:7a:27:73:e1:dd:0d:52:fd:ef:cf: fc:58:7f:b7:4b:51:f8:ac:76:1c:50:a1:d8:15:f6:75:19:e1: 63:37:fb:15:68:25:b1:d1:dc:86:50:c6:c8:1f:71:ac:58:d4: f5:51:f7:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy14ZdTTcP9/p68zBWRC6NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZGFlM2VmZTBhMzY3OTdkYTQzY2JkNThmNmRmZjk5YzNi YmRkOGQwHhcNMjUxMjE4MTkwMjIzWhcNMjUxMjE5MTkwMjIzWjAzMTEwLwYDVQQD EyhmZjEwN2QwNTFlYjNjNmI1YWI3ODllM2QyZDBiOWEyNDMwNzQ3N2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocxngIaVNrES2QqPrRqiVAY3ccyr v70HSyLudn0EqAlXftkiGfy+QnSNYIxc9/1C4JaDcP7JuMuD3PKYfCb0SfddnXTS jjBS3m0MDJ5TVx3+30uli8W75l2FpbePU9EjK3auhNSQ+CXDwQpR0P0rr9Bry3jb R0KAq0ItV9oweydgTMykKvFOVxU4vQHVB9SW6BXya7gFPDffRbiVg57pD6yEiO+F H2CZFPRFpl97LD+8IL9NmL+uHxHYwgQ4x5pFqyh7np/Ady+VbpmtlFoGvkWWpAnW 1O6mm1jcDJ2yeYHxPdFmxWuOVdnQ9dPGv4yedKP80VROGQNNoSQfmi+jLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8QfQUes8a1q3iePS0LmiQwdHfOMB8GA1UdIwQY MBaAFOba4+/go2eX2kPL1Y9t/5nDu92NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXRyajctQ2paNWZhUTh2VmoyM19tY083M1kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9kMTI1ZmQtYzM5Yy00MjcyLThjYWQt NmMyZmZiNGI2MWU2LzEvNXRyajctQ2paNWZhUTh2VmoyM19tY083M1kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9kMTI1ZmQtYzM5Yy00MjcyLThjYWQtNmMyZmZiNGI2MWU2 LzEvNXRyajctQ2paNWZhUTh2VmoyM19tY083M1kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBOicY37 Hs+87YHa9MN0x5UtdkYx5LGcf2Q4VDfJ1TCCT7elj0BgAdP3FdPULp0r+NiSl6jB DVyzKp5PmV+hZ0tKLu5O+iAp+YXc0cJIHuLImAYQUuRwZdySkEgxPNYhlHFHvjtC uRagiZbvX7OQvVve+ThFqysupxCfWwa9jrOFU7Bl8FxZVm0esGLFBzPuOqgN3cPg nSbw3DDc6Ze7CQJPpOo8Ap9mdC4IYSU4JX4lEZkFo/sg28K2uAY9zLcZAtwP5DMD bf9J0uCYPfh6J3Ph3Q1S/e/P/Fh/t0tR+Kx2HFCh2BX2dRnhYzf7FWglsdHchlDG yB9xrFjU9VH3Nw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:58:54 2025 by rpki-client