This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft File: 5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json) Hash identifier: Y5HwC++A8ASnu2kOcT8LyCIFTHwUMgwgq92W0s173Hk= Subject key identifier: 37:08:D1:8F:99:EB:03:DE:64:DE:D6:E2:8D:D2:71:06:54:CF:5C:90 Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2 Certificate issuer: /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2 Certificate serial: 019B3FB65F0A0B11A21E57958F9E435FAA60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft Manifest number: 04A7 Signing time: Sun 21 Dec 2025 07:01:14 +0000 Manifest this update: Sun 21 Dec 2025 07:01:14 +0000 Manifest next update: Mon 22 Dec 2025 07:01:14 +0000 Files and hashes: 1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: n5gqvxkf/ix6rQXcV5iWxGBRzh5F81b9eBMp6jW3lAM=) 2: GtnbuughA7lHebTG_DZyY-rxvp0.roa (hash: 0ytXaby9nsfJsM0kCLclgYx+EoqtC/Er8+W1ubhewEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:5f:0a:0b:11:a2:1e:57:95:8f:9e:43:5f:aa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2 Validity Not Before: Dec 21 07:01:14 2025 GMT Not After : Dec 22 07:01:14 2025 GMT Subject: CN=3708d18f99eb03de64ded6e28dd2710654cf5c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:39:44:9d:f7:66:f5:57:6b:ea:8e:26:d9:0f: e7:31:1d:85:a8:ed:d1:67:f8:c0:c2:80:8c:a1:6d: 52:11:60:33:f6:cb:b9:45:53:41:c3:17:47:67:95: dc:4a:73:f4:79:1b:55:66:2c:1e:13:e6:ad:90:f5: 30:27:21:bb:92:16:e2:99:c8:3b:e4:1b:7d:af:da: 1f:82:32:e8:e8:85:2a:a8:96:e4:c2:18:71:c3:46: d5:52:b3:3e:77:df:58:9c:d9:9d:69:6e:ad:47:4b: ba:39:80:a6:fd:83:db:25:85:fe:d8:ef:63:f0:82: ba:f6:c9:21:11:c2:ca:e1:aa:9c:5b:cb:0c:00:3d: 6e:90:0e:6b:1f:46:58:ca:b0:75:35:fd:b1:98:dd: 18:35:4c:ce:ed:ed:03:2b:86:3b:b5:8c:ed:af:6c: 72:4e:ef:0b:47:d2:cd:76:e8:e1:9e:d7:5e:0f:b0: 69:22:a3:e8:eb:f2:59:f6:c1:b6:6f:75:37:ce:9a: 24:12:5b:ea:e5:1f:af:96:70:f7:35:9c:11:08:ec: d1:50:a7:90:0e:09:9d:f1:9f:33:23:27:62:eb:87: d7:8f:c7:cb:9f:00:c5:da:8f:ff:1b:0b:56:da:d4: ff:a6:b2:18:6d:47:4c:a3:f6:e4:5b:cd:43:b5:81: e3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:08:D1:8F:99:EB:03:DE:64:DE:D6:E2:8D:D2:71:06:54:CF:5C:90 X509v3 Authority Key Identifier: keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:02:d5:00:7f:7e:bf:65:0d:58:ad:0a:53:84:80:b5:d5:70: 3c:24:08:92:0b:bd:6b:47:2f:bd:37:b5:e4:ac:fc:50:a7:b1: 22:d9:5f:87:30:3d:df:80:44:a2:b4:25:3d:ea:ff:b7:b5:10: 15:86:d1:77:43:a5:f9:72:a1:d3:3c:4f:32:7e:c3:0b:e3:27: f0:9b:be:c5:48:34:4d:f5:f8:59:6f:f3:53:db:ab:76:31:47: 2a:53:7e:4d:5f:21:ac:9a:a4:6f:65:46:4e:95:9b:98:af:ec: 52:7c:8b:7b:c6:c9:ec:d4:dc:57:31:86:71:fc:dc:16:4f:99: 1d:92:f9:32:2c:9b:ac:a5:1e:ff:4b:58:a3:db:f8:a0:b8:93: 03:c9:c9:5d:a0:74:29:09:8a:a7:f1:8b:7a:a6:15:1a:4b:3d: 50:88:e9:5b:ed:0e:60:60:74:87:75:f5:47:89:48:3d:ef:92: 3c:fe:9c:b8:71:a5:01:29:a0:90:49:df:3d:8f:d8:97:cc:50: b2:a5:7e:14:01:ac:4a:69:b6:d9:48:b2:b3:f5:08:ec:ab:6b: 07:3d:a9:62:99:8b:67:22:f4:77:64:e9:f0:7c:e9:2e:48:39: 91:74:2c:ef:53:10:db:8d:d5:37:61:65:f1:22:37:c8:4b:25: dd:97:19:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tl8KCxGiHleVj55DX6pgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MmFjZmNiZDc5ZjIzMmM1ZDcyYTU1MGJjNGM2NmYxMTEw N2EwZTIwHhcNMjUxMjIxMDcwMTE0WhcNMjUxMjIyMDcwMTE0WjAzMTEwLwYDVQQD EygzNzA4ZDE4Zjk5ZWIwM2RlNjRkZWQ2ZTI4ZGQyNzEwNjU0Y2Y1YzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTlEnfdm9Vdr6o4m2Q/nMR2FqO3R Z/jAwoCMoW1SEWAz9su5RVNBwxdHZ5XcSnP0eRtVZiweE+atkPUwJyG7khbimcg7 5Bt9r9ofgjLo6IUqqJbkwhhxw0bVUrM+d99YnNmdaW6tR0u6OYCm/YPbJYX+2O9j 8IK69skhEcLK4aqcW8sMAD1ukA5rH0ZYyrB1Nf2xmN0YNUzO7e0DK4Y7tYztr2xy Tu8LR9LNdujhntdeD7BpIqPo6/JZ9sG2b3U3zpokElvq5R+vlnD3NZwRCOzRUKeQ Dgmd8Z8zIydi64fXj8fLnwDF2o//GwtW2tT/prIYbUdMo/bkW81DtYHj1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcI0Y+Z6wPeZN7W4o3ScQZUz1yQMB8GA1UdIwQY MBaAFOUqz8vXnyMsXXKlULxMZvERB6DiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80MmExOTMtYjMwYi00MDNmLWJlZmUt MzI0NTQ1MGQzNzQyLzEvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80MmExOTMtYjMwYi00MDNmLWJlZmUtMzI0NTQ1MGQzNzQy LzEvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxwLVAH9+ v2UNWK0KU4SAtdVwPCQIkgu9a0cvvTe15Kz8UKexItlfhzA934BEorQlPer/t7UQ FYbRd0Ol+XKh0zxPMn7DC+Mn8Ju+xUg0TfX4WW/zU9urdjFHKlN+TV8hrJqkb2VG TpWbmK/sUnyLe8bJ7NTcVzGGcfzcFk+ZHZL5MiybrKUe/0tYo9v4oLiTA8nJXaB0 KQmKp/GLeqYVGks9UIjpW+0OYGB0h3X1R4lIPe+SPP6cuHGlASmgkEnfPY/Yl8xQ sqV+FAGsSmm22Uiys/UI7KtrBz2pYpmLZyL0d2Tp8HzpLkg5kXQs71MQ243VN2Fl 8SI3yEsl3ZcZBg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:53:05 2025 by rpki-client