This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft File: 5gRDG1VUd8GaP0xcttEHNljVs-M.mft (raw, json) Hash identifier: OWvQEdTOS6rq1Wk50pXDUs4PURXw9x+ZjFhJZ+V3Wtk= Subject key identifier: 0F:BF:62:41:FB:AE:03:4D:B3:DC:35:2A:2B:19:7F:46:04:FE:2E:72 Authority key identifier: E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3 Certificate issuer: /CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3 Certificate serial: 019B7523F1C9193425135C6B4B6BC0593DA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft Manifest number: 0DE7 Signing time: Wed 31 Dec 2025 16:00:48 +0000 Manifest this update: Wed 31 Dec 2025 16:00:48 +0000 Manifest next update: Thu 01 Jan 2026 16:00:48 +0000 Files and hashes: 1: 5gRDG1VUd8GaP0xcttEHNljVs-M.crl (hash: JzCVngiBTR5omBwQ4V5U1al8Jt+Azb7fcrpwvbxqdFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:23:f1:c9:19:34:25:13:5c:6b:4b:6b:c0:59:3d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3 Validity Not Before: Dec 31 16:00:48 2025 GMT Not After : Jan 1 16:00:48 2026 GMT Subject: CN=0fbf6241fbae034db3dc352a2b197f4604fe2e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fa:60:13:bf:14:04:de:11:fb:8e:4a:70:23: 7f:c0:77:24:a7:0a:d5:64:64:9b:7a:25:33:6d:dc: 0e:5e:7d:b8:bd:80:9a:75:36:03:c3:4a:0d:b7:e7: ee:64:3f:92:9b:a5:aa:75:6d:80:f9:d0:5a:06:26: c9:d9:48:9c:dc:25:1b:02:f9:62:a4:15:bf:1e:f0: fc:12:c4:de:cf:1f:f5:bc:2e:b1:4d:ca:21:54:39: a8:23:31:87:08:08:95:0d:87:70:c1:63:40:89:78: 10:e9:b6:1c:76:78:50:73:55:ca:80:b2:12:58:89: 61:04:38:f9:d7:3d:48:33:24:d0:0e:af:eb:3b:eb: 48:64:8a:18:1f:06:15:b5:0f:40:87:ed:c7:3f:3a: e5:91:3f:56:15:44:44:45:f6:8d:69:2c:df:76:08: 4f:83:fd:75:86:6e:b4:c7:37:58:c0:f5:2b:6b:95: 79:b7:f9:ee:b2:b1:ee:6e:dc:53:32:db:5f:a6:62: 9a:bd:a6:92:37:d6:20:11:5c:3e:03:8a:47:f5:ae: 63:84:4c:98:f1:3b:7c:b7:d7:97:79:f4:2d:f3:51: 3a:a9:77:2c:73:c0:8b:0d:cb:67:b4:ec:9a:e7:b1: 11:30:de:f9:b9:e2:c6:e8:9f:c6:93:51:eb:ba:1f: 54:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BF:62:41:FB:AE:03:4D:B3:DC:35:2A:2B:19:7F:46:04:FE:2E:72 X509v3 Authority Key Identifier: keyid:E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:b1:aa:97:ab:9a:9a:c8:e9:28:37:8d:37:5d:a5:3d:e0:d5: 80:dc:d2:04:3f:79:6b:44:c1:f4:52:4b:ad:46:03:76:33:e5: b6:29:11:2a:35:ea:b6:58:d6:c6:64:29:ad:ca:f8:3e:3e:3a: f9:a4:11:fa:db:66:90:5a:e0:e1:f5:54:8a:11:b3:cd:d0:4d: cc:3a:3a:6d:18:c4:e3:c6:6f:0d:79:9c:c7:7e:34:0c:bf:a0: 7b:bf:19:25:77:3e:63:69:ab:81:ed:2f:f6:e4:be:01:33:86: 61:ca:1e:c2:bc:1f:45:87:38:7c:e2:fd:b6:b4:71:f1:53:22: 4d:cb:0f:dd:d8:bc:7f:be:f2:f8:19:b0:63:5e:90:43:0f:13: 64:43:b9:77:a9:b4:70:1b:8d:1e:10:d6:30:c9:c0:02:0f:b4: 8c:05:82:69:64:3a:e3:80:83:38:29:42:0e:63:f9:e8:6d:b3: d6:38:9e:96:74:2c:e3:f3:82:65:b8:83:f3:9a:3c:61:e7:b8: cf:f3:3f:67:4e:3c:7c:da:3c:e3:fc:4e:73:74:03:aa:01:7b: 7b:31:45:65:98:2c:dd:3e:ea:2f:d8:18:d0:8b:a1:86:25:9f: a6:04:b7:38:cb:9c:84:0a:3b:0a:a0:8e:bf:97:d7:b8:1d:c7: a8:48:48:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1I/HJGTQlE1xrS2vAWT2oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MDQ0MzFiNTU1NDc3YzE5YTNmNGM1Y2I2ZDEwNzM2NThk NWIzZTMwHhcNMjUxMjMxMTYwMDQ4WhcNMjYwMTAxMTYwMDQ4WjAzMTEwLwYDVQQD EygwZmJmNjI0MWZiYWUwMzRkYjNkYzM1MmEyYjE5N2Y0NjA0ZmUyZTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPpgE78UBN4R+45KcCN/wHckpwrV ZGSbeiUzbdwOXn24vYCadTYDw0oNt+fuZD+Sm6WqdW2A+dBaBibJ2Uic3CUbAvli pBW/HvD8EsTezx/1vC6xTcohVDmoIzGHCAiVDYdwwWNAiXgQ6bYcdnhQc1XKgLIS WIlhBDj51z1IMyTQDq/rO+tIZIoYHwYVtQ9Ah+3HPzrlkT9WFURERfaNaSzfdghP g/11hm60xzdYwPUra5V5t/nusrHubtxTMttfpmKavaaSN9YgEVw+A4pH9a5jhEyY 8Tt8t9eXefQt81E6qXcsc8CLDctntOya57ERMN75ueLG6J/Gk1Hruh9UEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+/YkH7rgNNs9w1KisZf0YE/i5yMB8GA1UdIwQY MBaAFOYEQxtVVHfBmj9MXLbRBzZY1bPjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWdSREcxVlVkOEdhUDB4Y3R0RUhObGpWcy1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kN2RjOGQtZTM4Ni00MDRjLTg4YjQt MjgzZWM0MmMyYzk0LzEvNWdSREcxVlVkOEdhUDB4Y3R0RUhObGpWcy1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9kN2RjOGQtZTM4Ni00MDRjLTg4YjQtMjgzZWM0MmMyYzk0 LzEvNWdSREcxVlVkOEdhUDB4Y3R0RUhObGpWcy1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbGql6ua msjpKDeNN12lPeDVgNzSBD95a0TB9FJLrUYDdjPltikRKjXqtljWxmQprcr4Pj46 +aQR+ttmkFrg4fVUihGzzdBNzDo6bRjE48ZvDXmcx340DL+ge78ZJXc+Y2mrge0v 9uS+ATOGYcoewrwfRYc4fOL9trRx8VMiTcsP3di8f77y+BmwY16QQw8TZEO5d6m0 cBuNHhDWMMnAAg+0jAWCaWQ644CDOClCDmP56G2z1jielnQs4/OCZbiD85o8Yee4 z/M/Z048fNo84/xOc3QDqgF7ezFFZZgs3T7qL9gY0IuhhiWfpgS3OMuchAo7CqCO v5fXuB3HqEhIKQ== -----END CERTIFICATE-----Generated at Thu Jan 1 01:01:58 2026 by rpki-client