This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft File: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft (raw, json) Hash identifier: 6vJy+DRfwZD5GkBZMfs7+01/crmrsUQQCwhNZ2P0n40= Subject key identifier: EE:D5:04:D0:46:DD:BF:EE:83:ED:2C:C8:1A:73:6A:1E:06:AC:DA:F2 Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93 Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93 Certificate serial: 019B416D5731A9DD370D696B21B91F38C173 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft Manifest number: 0B7A Signing time: Sun 21 Dec 2025 15:00:43 +0000 Manifest this update: Sun 21 Dec 2025 15:00:43 +0000 Manifest next update: Mon 22 Dec 2025 15:00:43 +0000 Files and hashes: 1: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl (hash: iyzuM4agMZ4tY67SqlS27SqfMdqplzxGnafgW5iYbSQ=) 2: U7WmqwgzCWSQVYIP4iyJRPVZecM.roa (hash: SLg4xo0u6ifhrG98ql5m+cWpgwWKcpHx5npLC6zXj4Y=) 3: qOUiptvnquwLum7BmuZWax2v-e8.roa (hash: jmPVQ2WH4XMTQXLE07r7foOrUdpp6hND+pptpQWP7JQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:57:31:a9:dd:37:0d:69:6b:21:b9:1f:38:c1:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93 Validity Not Before: Dec 21 15:00:43 2025 GMT Not After : Dec 22 15:00:43 2025 GMT Subject: CN=eed504d046ddbfee83ed2cc81a736a1e06acdaf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9f:19:c9:2c:00:2c:44:0a:4c:84:ce:c0:ac: f4:66:42:d7:d7:a4:f3:4f:27:65:b8:e5:62:1b:a6: 5e:25:e4:9c:f2:d9:71:22:5e:fe:2e:c0:f3:77:05: 85:64:69:5c:5c:1f:b7:7c:ff:81:15:c5:3e:4f:01: f6:79:bf:a9:54:26:ff:1e:6a:f2:39:41:d7:aa:71: f2:34:8d:fa:de:24:cf:e3:b6:36:c2:d1:3c:da:00: 8f:6c:99:ab:fb:b3:5c:97:13:1d:d3:cf:7f:d5:ac: 1b:1f:ab:c7:d8:fe:af:6f:34:e8:7d:8b:52:36:9a: 53:d5:a8:47:c2:19:8c:9a:ac:9a:fc:1c:87:34:65: 49:db:da:be:e8:22:23:ea:fd:00:71:8a:82:76:1b: 79:31:56:1f:19:b4:a3:c2:b3:0d:6e:dd:e0:a0:1d: 8e:31:e3:23:e7:a7:86:07:cf:bc:8b:e1:5a:79:c2: b5:e1:c1:4d:06:98:fc:13:cf:aa:61:60:fe:09:13: da:00:d1:e5:2e:4a:2a:62:bb:b3:54:f1:aa:40:4e: 5c:95:2b:ff:28:88:38:06:0e:a2:c4:f5:9b:a4:ed: 12:11:55:52:d5:a2:6a:6b:e7:7f:03:d3:f3:5f:a0: dd:ca:10:17:79:ab:ac:39:65:92:2b:3f:15:b6:a6: 89:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D5:04:D0:46:DD:BF:EE:83:ED:2C:C8:1A:73:6A:1E:06:AC:DA:F2 X509v3 Authority Key Identifier: keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:f3:cb:1f:17:55:fe:ab:91:01:87:b4:4e:bf:42:16:e6:79: d0:19:af:4f:32:30:dc:34:87:ea:fe:fb:f3:5b:ae:bd:df:17: 98:f1:73:91:ee:9c:73:89:63:57:a8:a2:d3:6d:72:c0:ee:85: d8:86:60:11:19:0b:01:5e:42:53:66:1a:8a:6e:75:15:ba:9b: 18:84:61:0b:83:2e:d1:9d:89:0a:46:1e:2d:03:d5:d8:53:5f: 91:e4:23:4b:a2:45:29:c3:67:02:70:6e:f2:8c:ae:05:c5:aa: 40:47:3b:86:4b:e2:7e:68:1b:ae:c7:88:e6:8c:d5:aa:aa:dd: f3:25:31:ab:51:ce:6b:1a:9f:14:cf:50:ee:5c:18:9d:15:47: 84:ff:84:d9:9c:e4:aa:c9:23:ee:b2:d9:c5:b9:67:c2:f0:04: 60:ef:43:12:ed:25:6f:0b:d1:09:57:71:1f:db:6e:7a:20:b2: 2f:1d:72:0d:6c:fe:c3:a2:7a:b5:ed:4a:8d:fe:4a:25:31:d7: d5:6b:c8:37:b8:7c:43:81:93:03:d1:0f:9a:b9:c4:f7:d9:a5: f9:ba:98:41:90:b1:3a:a1:2a:cf:66:ef:57:c9:ab:52:1e:1d: bb:90:6c:3b:a6:cd:72:7b:e2:64:66:3b:c4:6e:f6:73:d0:7f: 09:f3:37:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbVcxqd03DWlrIbkfOMFzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NjdkYmU2YWM3NTVhOTA2M2MzNjBiMTUyNWU4NDRmZDJh NTdiOTMwHhcNMjUxMjIxMTUwMDQzWhcNMjUxMjIyMTUwMDQzWjAzMTEwLwYDVQQD EyhlZWQ1MDRkMDQ2ZGRiZmVlODNlZDJjYzgxYTczNmExZTA2YWNkYWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi58ZySwALEQKTITOwKz0ZkLX16Tz TydluOViG6ZeJeSc8tlxIl7+LsDzdwWFZGlcXB+3fP+BFcU+TwH2eb+pVCb/Hmry OUHXqnHyNI363iTP47Y2wtE82gCPbJmr+7NclxMd089/1awbH6vH2P6vbzTofYtS NppT1ahHwhmMmqya/ByHNGVJ29q+6CIj6v0AcYqCdht5MVYfGbSjwrMNbt3goB2O MeMj56eGB8+8i+FaecK14cFNBpj8E8+qYWD+CRPaANHlLkoqYruzVPGqQE5clSv/ KIg4Bg6ixPWbpO0SEVVS1aJqa+d/A9PzX6DdyhAXeausOWWSKz8VtqaJfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7VBNBG3b/ug+0syBpzah4GrNryMB8GA1UdIwQY MBaAFORn2+asdVqQY8NgsVJehE/SpXuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUdmYjVxeDFXcEJqdzJDeFVsNkVUOUtsZTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS83MTZmNDctMTBiOC00ZjM5LTg1OWYt ZWNlNTc3ZTMwN2FkLzEvNUdmYjVxeDFXcEJqdzJDeFVsNkVUOUtsZTVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS83MTZmNDctMTBiOC00ZjM5LTg1OWYtZWNlNTc3ZTMwN2Fk LzEvNUdmYjVxeDFXcEJqdzJDeFVsNkVUOUtsZTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvPLHxdV /quRAYe0Tr9CFuZ50BmvTzIw3DSH6v7781uuvd8XmPFzke6cc4ljV6ii021ywO6F 2IZgERkLAV5CU2Yaim51FbqbGIRhC4Mu0Z2JCkYeLQPV2FNfkeQjS6JFKcNnAnBu 8oyuBcWqQEc7hkvifmgbrseI5ozVqqrd8yUxq1HOaxqfFM9Q7lwYnRVHhP+E2Zzk qskj7rLZxblnwvAEYO9DEu0lbwvRCVdxH9tueiCyLx1yDWz+w6J6te1Kjf5KJTHX 1WvIN7h8Q4GTA9EPmrnE99ml+bqYQZCxOqEqz2bvV8mrUh4du5BsO6bNcnviZGY7 xG72c9B/CfM3GQ== -----END CERTIFICATE-----Generated at Sun Dec 21 23:17:28 2025 by rpki-client