This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft File: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft (raw, json) Hash identifier: fdKPnXUjxYmphXmBeL/ArIVHm7Zeusf5MPQc3ARMHPw= Subject key identifier: F4:E3:75:D8:F1:22:52:3D:91:7A:B6:66:20:30:BC:8E:35:81:50:47 Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C Certificate issuer: /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c Certificate serial: 019B3BD904231246A29CD30933A3B4A783EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft Manifest number: 0B37 Signing time: Sat 20 Dec 2025 13:00:36 +0000 Manifest this update: Sat 20 Dec 2025 13:00:36 +0000 Manifest next update: Sun 21 Dec 2025 13:00:36 +0000 Files and hashes: 1: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl (hash: wqBmraXCERZJInRkQN5qmLJNIS64HxMzZNEhfNWZ10Y=) 2: m4ZSJvHCvVAdAoCa8Dy3Jfpj2Po.roa (hash: aprBkCfkVmxisnK2NR7zrUxKt0p0KhHf/uKOAfeW9gI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:04:23:12:46:a2:9c:d3:09:33:a3:b4:a7:83:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c Validity Not Before: Dec 20 13:00:36 2025 GMT Not After : Dec 21 13:00:36 2025 GMT Subject: CN=f4e375d8f122523d917ab6662030bc8e35815047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:ac:1f:a6:40:b3:98:ba:59:31:10:cb:36: 38:70:ea:25:4b:74:cd:99:f1:94:51:1a:36:92:8b: 10:9a:e5:ca:32:bb:83:a1:9e:24:75:8a:fe:3a:89: fa:97:80:2e:a0:a1:66:03:22:94:58:24:83:a1:8c: 7b:30:42:ca:d1:fc:fc:2e:2d:2e:42:41:82:fa:f6: 00:db:d8:e0:3d:17:92:af:11:70:f0:87:37:5f:43: 59:d6:01:4d:b5:ba:56:7b:04:74:45:09:52:51:9d: 79:1d:20:82:da:c5:5a:84:bf:38:d3:f7:af:e5:b1: e4:6b:94:de:b5:f4:4a:2d:69:15:a7:a1:3d:72:e6: 69:ad:f3:03:a0:e1:a7:af:83:c6:01:e2:b4:c0:ad: 86:60:9b:4b:66:30:fb:a1:a0:38:0e:bf:46:59:fe: cc:4b:76:f5:91:fa:f2:7e:4d:b7:c1:02:ab:bb:df: c1:27:83:07:b4:12:41:87:2c:00:3c:02:35:66:5a: 7d:3e:d7:dd:93:4b:dc:10:fd:94:df:b4:f2:49:f2: 19:f6:dc:2b:11:a8:21:7d:8c:27:e8:7a:3d:54:d5: d6:12:e9:88:e3:9f:40:c8:1a:4a:fe:2b:1a:50:e6: cd:ae:6f:2a:26:53:ce:b9:03:37:f1:d0:49:92:5e: 8b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E3:75:D8:F1:22:52:3D:91:7A:B6:66:20:30:BC:8E:35:81:50:47 X509v3 Authority Key Identifier: keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:56:40:79:08:bf:fa:7b:11:f0:03:4f:e3:8d:7e:8e:d9:d2: 93:56:0f:e9:08:87:2c:8f:f2:31:de:51:29:f8:ad:b1:1e:3d: 5a:b1:2e:67:3b:8f:b9:56:3e:f1:63:1e:2d:9d:9b:63:6d:74: f4:d2:18:38:3d:0f:e5:64:12:0b:e9:39:68:9e:c0:2f:ea:aa: 42:78:62:b1:40:74:00:2e:92:ee:42:a2:ca:13:8b:11:d5:f1: 9b:fb:46:81:3a:63:01:21:8b:4a:33:b0:0f:b2:ec:11:53:e4: 3d:c1:04:ba:8e:8c:ae:94:73:51:56:f1:d5:44:31:08:e3:0d: bf:ad:62:20:26:31:e9:7b:26:2a:c6:a2:08:3c:40:fc:9d:0d: 01:2f:41:f2:f0:a6:b9:4b:7b:09:b6:dd:43:da:e7:c7:80:7a: 47:7e:ea:50:bb:9d:8b:47:9b:29:5d:1a:4f:bd:31:11:78:a5: b9:78:4e:62:d7:53:98:85:79:f3:a7:ff:85:7b:17:67:2c:f6: 17:f1:79:9e:aa:b8:a6:db:81:70:63:15:ab:12:f5:3e:e3:e5: 68:5e:19:b4:40:12:27:46:10:be:72:10:92:c4:14:c1:69:da: 29:8e:9c:45:c6:ac:9e:f1:dd:38:ad:3d:f2:3c:ed:67:2b:d9: 41:7c:6a:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72QQjEkainNMJM6O0p4PqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0N2VlNWJlZTNlZDIzZjk0Mzc2MWU1OGYwZWVhOTdjN2M1 YmY4N2MwHhcNMjUxMjIwMTMwMDM2WhcNMjUxMjIxMTMwMDM2WjAzMTEwLwYDVQQD EyhmNGUzNzVkOGYxMjI1MjNkOTE3YWI2NjYyMDMwYmM4ZTM1ODE1MDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtymsH6ZAs5i6WTEQyzY4cOolS3TN mfGUURo2kosQmuXKMruDoZ4kdYr+Oon6l4AuoKFmAyKUWCSDoYx7MELK0fz8Li0u QkGC+vYA29jgPReSrxFw8Ic3X0NZ1gFNtbpWewR0RQlSUZ15HSCC2sVahL840/ev 5bHka5TetfRKLWkVp6E9cuZprfMDoOGnr4PGAeK0wK2GYJtLZjD7oaA4Dr9GWf7M S3b1kfryfk23wQKru9/BJ4MHtBJBhywAPAI1Zlp9Ptfdk0vcEP2U37TySfIZ9twr EaghfYwn6Ho9VNXWEumI459AyBpK/isaUObNrm8qJlPOuQM38dBJkl6LhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTjddjxIlI9kXq2ZiAwvI41gVBHMB8GA1UdIwQY MBaAFOR+5b7j7SP5Q3YeWPDuqXx8W/h8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUg3bHZ1UHRJX2xEZGg1WThPNnBmSHhiLUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy81ZWEyZmYtOGQ2Ni00YTExLTkzZjgt MmUyOTA4NTg4ODY1LzEvNUg3bHZ1UHRJX2xEZGg1WThPNnBmSHhiLUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy81ZWEyZmYtOGQ2Ni00YTExLTkzZjgtMmUyOTA4NTg4ODY1 LzEvNUg3bHZ1UHRJX2xEZGg1WThPNnBmSHhiLUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1ZAeQi/ +nsR8ANP441+jtnSk1YP6QiHLI/yMd5RKfitsR49WrEuZzuPuVY+8WMeLZ2bY210 9NIYOD0P5WQSC+k5aJ7AL+qqQnhisUB0AC6S7kKiyhOLEdXxm/tGgTpjASGLSjOw D7LsEVPkPcEEuo6MrpRzUVbx1UQxCOMNv61iICYx6XsmKsaiCDxA/J0NAS9B8vCm uUt7CbbdQ9rnx4B6R37qULudi0ebKV0aT70xEXiluXhOYtdTmIV586f/hXsXZyz2 F/F5nqq4ptuBcGMVqxL1PuPlaF4ZtEASJ0YQvnIQksQUwWnaKY6cRcasnvHdOK09 8jztZyvZQXxqlQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:16:54 2025 by rpki-client