This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft File: p5ROOKJ1k6RvXEoqli9YO49r5GA.mft (raw, json) Hash identifier: 4KZdoQQj1Xfu3zzn3XCtXby6aHaBs51rn9alJ4akS9w= Subject key identifier: 7D:E8:73:64:74:71:C6:4A:13:07:82:05:96:69:F6:F2:0E:A5:CB:9C Authority key identifier: A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60 Certificate issuer: /CN=a7944e38a27593a46f5c4a2a962f583b8f6be460 Certificate serial: 019B68E8C62A56FDA1FDDB062A661429D406 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft Manifest number: 138C Signing time: Mon 29 Dec 2025 07:00:44 +0000 Manifest this update: Mon 29 Dec 2025 07:00:44 +0000 Manifest next update: Tue 30 Dec 2025 07:00:44 +0000 Files and hashes: 1: p5ROOKJ1k6RvXEoqli9YO49r5GA.crl (hash: 7aDT/6sH3Ekrf3r52rpIvlExiODtMvZDwBt+T3r+BTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e8:c6:2a:56:fd:a1:fd:db:06:2a:66:14:29:d4:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7944e38a27593a46f5c4a2a962f583b8f6be460 Validity Not Before: Dec 29 07:00:44 2025 GMT Not After : Dec 30 07:00:44 2025 GMT Subject: CN=7de873647471c64a130782059669f6f20ea5cb9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:12:80:85:77:c9:ad:c6:35:5b:26:2c:2a:00: 1b:67:a1:3e:c1:0e:15:9f:cb:19:31:1b:26:a2:e5: 96:3e:cd:9b:9c:48:7c:e0:83:ec:8c:d2:64:23:c8: 97:55:8f:56:9e:06:61:57:a5:f4:35:bc:4e:30:c1: 92:b8:1a:1b:72:e9:cc:f3:d6:ae:1f:18:42:97:92: d6:d3:6f:aa:da:f7:b8:bd:13:6e:7f:5c:75:6a:98: b2:ca:77:97:66:f0:bf:fe:98:56:20:dd:c1:68:61: 71:a8:06:0c:b3:65:b2:53:ac:f9:26:f0:af:15:15: 69:03:34:cb:35:4e:12:b2:17:9a:15:54:06:bd:97: eb:f1:c8:6a:f3:70:d9:39:0d:3b:01:f4:90:8e:80: 0c:33:c6:bb:7e:39:05:b8:0c:fd:18:3b:54:41:bc: 44:2d:a2:78:ea:0b:66:1f:55:21:4e:8b:b9:8e:34: c1:15:10:d5:07:fd:52:89:15:77:77:27:ac:4b:9a: d6:f2:22:14:cb:db:e1:68:69:b1:e7:d3:f4:2e:11: c5:3c:b1:81:14:ea:b8:62:0c:0a:8a:d4:0c:0c:03: e1:cc:0e:c2:c9:94:de:65:e5:1d:50:6c:ae:52:35: ce:47:8d:04:3b:13:9a:f4:6c:bc:3d:a4:5c:1f:8c: 88:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E8:73:64:74:71:C6:4A:13:07:82:05:96:69:F6:F2:0E:A5:CB:9C X509v3 Authority Key Identifier: keyid:A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:08:a7:ce:22:fb:e8:eb:e3:a8:0d:ba:e6:60:b5:65:c4:15: 3f:94:ce:70:d5:f5:c5:08:2f:f4:fd:c4:e0:a8:37:27:ed:48: d6:ba:2c:51:17:aa:c7:14:21:c6:42:b1:f6:c3:37:61:b9:7e: cd:ba:b0:53:cf:8e:64:76:ee:e3:ee:f5:29:27:85:45:1d:26: f8:9a:ef:e8:d4:fa:a9:f4:8b:f1:22:25:39:e0:94:d7:d1:94: 8f:37:bd:8a:66:c2:54:49:22:06:b3:a4:3d:45:93:56:4b:af: bb:64:f1:be:f9:5a:9a:8c:75:16:90:3f:34:b4:1a:31:b8:99: 52:f8:5a:29:33:1c:d7:04:23:39:61:b4:99:2e:a6:ce:1a:7c: 25:2b:0a:9e:9a:6d:d5:b8:8a:e2:dd:7b:fd:24:79:76:76:97: a5:22:b3:73:37:f9:d9:44:4c:3c:93:e5:c5:83:68:39:cc:6a: cf:87:97:b9:a8:bc:36:1e:57:9b:c9:e5:c3:e4:ab:f0:b4:de: 89:45:61:6e:c0:3f:9b:ee:91:de:6a:a0:29:92:99:9f:6f:da: 23:5f:79:9c:8e:00:49:1a:cd:5b:5c:8b:ef:8d:1a:e6:0c:74: e8:8d:ff:7d:40:37:09:99:f9:ae:44:e4:e5:05:28:08:76:21: 73:6b:61:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6MYqVv2h/dsGKmYUKdQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OTQ0ZTM4YTI3NTkzYTQ2ZjVjNGEyYTk2MmY1ODNiOGY2 YmU0NjAwHhcNMjUxMjI5MDcwMDQ0WhcNMjUxMjMwMDcwMDQ0WjAzMTEwLwYDVQQD Eyg3ZGU4NzM2NDc0NzFjNjRhMTMwNzgyMDU5NjY5ZjZmMjBlYTVjYjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hKAhXfJrcY1WyYsKgAbZ6E+wQ4V n8sZMRsmouWWPs2bnEh84IPsjNJkI8iXVY9WngZhV6X0NbxOMMGSuBobcunM89au HxhCl5LW02+q2ve4vRNuf1x1apiyyneXZvC//phWIN3BaGFxqAYMs2WyU6z5JvCv FRVpAzTLNU4SsheaFVQGvZfr8chq83DZOQ07AfSQjoAMM8a7fjkFuAz9GDtUQbxE LaJ46gtmH1UhTou5jjTBFRDVB/1SiRV3dyesS5rW8iIUy9vhaGmx59P0LhHFPLGB FOq4YgwKitQMDAPhzA7CyZTeZeUdUGyuUjXOR40EOxOa9Gy8PaRcH4yIgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3oc2R0ccZKEweCBZZp9vIOpcucMB8GA1UdIwQY MBaAFKeUTjiidZOkb1xKKpYvWDuPa+RgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDVST09LSjFrNlJ2WEVvcWxpOVlPNDlyNUdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83MWQ4OWYtMWYxOS00ZWJlLTlhMDIt ZWU4YWU4ODJjNWM3LzEvcDVST09LSjFrNlJ2WEVvcWxpOVlPNDlyNUdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS83MWQ4OWYtMWYxOS00ZWJlLTlhMDItZWU4YWU4ODJjNWM3 LzEvcDVST09LSjFrNlJ2WEVvcWxpOVlPNDlyNUdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQinziL7 6OvjqA265mC1ZcQVP5TOcNX1xQgv9P3E4Kg3J+1I1rosUReqxxQhxkKx9sM3Ybl+ zbqwU8+OZHbu4+71KSeFRR0m+Jrv6NT6qfSL8SIlOeCU19GUjze9imbCVEkiBrOk PUWTVkuvu2Txvvlamox1FpA/NLQaMbiZUvhaKTMc1wQjOWG0mS6mzhp8JSsKnppt 1biK4t17/SR5dnaXpSKzczf52URMPJPlxYNoOcxqz4eXuai8Nh5Xm8nlw+Sr8LTe iUVhbsA/m+6R3mqgKZKZn2/aI195nI4ASRrNW1yL740a5gx06I3/fUA3CZn5rkTk 5QUoCHYhc2thEg== -----END CERTIFICATE-----Generated at Mon Dec 29 08:28:17 2025 by rpki-client