This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft File: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft (raw, json) Hash identifier: nZT4k6Nv3h7VqNrwCRXf0ByE4lVz9vWIDKO86sucxqA= Subject key identifier: DB:8D:2E:57:45:DD:9E:29:EC:E7:7A:C4:39:2B:2C:2C:1A:AC:DE:BA Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C Certificate issuer: /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c Certificate serial: 019B4F2911C7CBFE5A3E9160FFAF8C79ECED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft Manifest number: 0B41 Signing time: Wed 24 Dec 2025 07:00:50 +0000 Manifest this update: Wed 24 Dec 2025 07:00:50 +0000 Manifest next update: Thu 25 Dec 2025 07:00:50 +0000 Files and hashes: 1: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl (hash: 9GjBY0YlsGPVuP1xFr2lx/9dyM3mF7BwjiXm3EoI1wc=) 2: m4ZSJvHCvVAdAoCa8Dy3Jfpj2Po.roa (hash: aprBkCfkVmxisnK2NR7zrUxKt0p0KhHf/uKOAfeW9gI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:11:c7:cb:fe:5a:3e:91:60:ff:af:8c:79:ec:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c Validity Not Before: Dec 24 07:00:50 2025 GMT Not After : Dec 25 07:00:50 2025 GMT Subject: CN=db8d2e5745dd9e29ece77ac4392b2c2c1aacdeba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6a:67:c3:31:9f:9a:ce:2f:ca:a5:15:65:8e: de:5c:d5:3f:68:94:54:c0:6d:31:45:87:2a:eb:d7: ad:e0:78:3b:41:cc:0d:a2:dd:e8:b1:51:23:2a:72: 38:b3:e6:c8:f6:2f:79:31:d4:27:08:11:26:cf:49: b3:5b:50:db:58:bf:da:67:e8:c7:10:1d:bf:01:c9: a8:82:c9:26:93:0c:63:02:f1:99:86:97:3a:18:84: 72:4f:83:3c:20:10:20:fe:9a:e1:b0:85:63:bc:3f: f7:68:d1:e4:8c:1f:47:01:71:1d:02:3c:a1:b2:bb: 6d:f3:61:35:58:01:b7:cc:7c:57:ba:b8:64:a4:26: c7:2f:5b:1f:39:27:c8:9e:43:21:1b:43:e6:8b:21: 90:e2:a6:03:cd:89:1f:88:6b:f8:9f:f5:2b:87:33: 04:59:f7:f1:2f:e7:b8:eb:5d:d4:33:e5:ec:48:76: a7:d8:b5:bc:ef:b0:d0:f0:a8:28:e9:dc:cc:e0:98: 10:b6:27:95:1b:34:09:48:f9:a6:95:06:d1:58:da: 85:96:18:72:ea:7d:d8:05:4c:27:bf:a6:db:5f:88: b5:4e:ce:db:bd:e8:66:41:b9:01:95:67:16:b1:c1: 5f:99:78:7c:95:cb:bd:60:78:2a:a8:00:d9:9c:be: 79:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8D:2E:57:45:DD:9E:29:EC:E7:7A:C4:39:2B:2C:2C:1A:AC:DE:BA X509v3 Authority Key Identifier: keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b6:a9:eb:85:09:50:cd:f1:f0:69:12:25:98:cf:0d:0d:db: b0:27:84:b6:93:25:b1:6b:ea:71:32:bd:85:90:1b:d9:7c:39: 37:dd:62:1e:c3:c5:fa:b4:d6:7a:26:ff:de:10:24:f5:5b:73: 97:ff:d0:07:10:0c:65:07:4f:ed:32:65:43:41:de:22:4e:95: 8d:38:2f:bc:e2:dc:52:81:9a:17:6d:1e:c3:c2:82:bd:87:d2: f7:e7:52:ed:fe:78:7f:07:1a:00:57:e8:6e:21:88:d1:08:10: 56:ea:3d:75:ad:0f:ea:96:f7:59:27:3e:16:be:ef:04:8b:d3: a5:78:23:eb:57:35:4a:63:ce:02:4e:2f:4a:8a:0b:c6:44:a8: 9b:66:c4:a2:9d:8d:5e:26:e0:75:d6:b6:94:46:e9:46:e3:a3: 2c:20:66:c2:1f:98:d1:9b:d2:8d:1d:5a:6d:c4:95:02:4d:1a: e2:9b:24:9d:fb:73:33:55:27:9c:57:c1:ca:f6:91:5e:c1:79: 07:25:b9:1e:2b:c1:ec:4d:ac:63:39:39:3b:ed:8c:df:99:22: 26:70:16:75:05:a6:e5:d3:e5:64:02:7e:82:75:2e:3a:e2:ca: 11:64:55:63:e4:8a:e2:7c:80:7c:f4:d2:c9:0b:01:6c:90:24: 91:85:7e:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKRHHy/5aPpFg/6+MeeztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0N2VlNWJlZTNlZDIzZjk0Mzc2MWU1OGYwZWVhOTdjN2M1 YmY4N2MwHhcNMjUxMjI0MDcwMDUwWhcNMjUxMjI1MDcwMDUwWjAzMTEwLwYDVQQD EyhkYjhkMmU1NzQ1ZGQ5ZTI5ZWNlNzdhYzQzOTJiMmMyYzFhYWNkZWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumpnwzGfms4vyqUVZY7eXNU/aJRU wG0xRYcq69et4Hg7QcwNot3osVEjKnI4s+bI9i95MdQnCBEmz0mzW1DbWL/aZ+jH EB2/AcmogskmkwxjAvGZhpc6GIRyT4M8IBAg/prhsIVjvD/3aNHkjB9HAXEdAjyh srtt82E1WAG3zHxXurhkpCbHL1sfOSfInkMhG0PmiyGQ4qYDzYkfiGv4n/UrhzME WffxL+e4613UM+XsSHan2LW877DQ8Kgo6dzM4JgQtieVGzQJSPmmlQbRWNqFlhhy 6n3YBUwnv6bbX4i1Ts7bvehmQbkBlWcWscFfmXh8lcu9YHgqqADZnL551QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNuNLldF3Z4p7Od6xDkrLCwarN66MB8GA1UdIwQY MBaAFOR+5b7j7SP5Q3YeWPDuqXx8W/h8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUg3bHZ1UHRJX2xEZGg1WThPNnBmSHhiLUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy81ZWEyZmYtOGQ2Ni00YTExLTkzZjgt MmUyOTA4NTg4ODY1LzEvNUg3bHZ1UHRJX2xEZGg1WThPNnBmSHhiLUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy81ZWEyZmYtOGQ2Ni00YTExLTkzZjgtMmUyOTA4NTg4ODY1 LzEvNUg3bHZ1UHRJX2xEZGg1WThPNnBmSHhiLUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLap64UJ UM3x8GkSJZjPDQ3bsCeEtpMlsWvqcTK9hZAb2Xw5N91iHsPF+rTWeib/3hAk9Vtz l//QBxAMZQdP7TJlQ0HeIk6VjTgvvOLcUoGaF20ew8KCvYfS9+dS7f54fwcaAFfo biGI0QgQVuo9da0P6pb3WSc+Fr7vBIvTpXgj61c1SmPOAk4vSooLxkSom2bEop2N Xibgdda2lEbpRuOjLCBmwh+Y0ZvSjR1abcSVAk0a4psknftzM1UnnFfByvaRXsF5 ByW5HivB7E2sYzk5O+2M35kiJnAWdQWm5dPlZAJ+gnUuOuLKEWRVY+SK4nyAfPTS yQsBbJAkkYV+Hg== -----END CERTIFICATE-----Generated at Wed Dec 24 11:27:23 2025 by rpki-client