This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft File: 5RZFNJeeYKVkcBIysuUgCIlUJgY.mft (raw, json) Hash identifier: v/mzN1IAzk6b5n1FheS0JqcWa8ecFofYziD191JkOKk= Subject key identifier: 8D:FA:84:51:BF:84:57:A8:D3:BE:E0:E1:76:96:3A:34:CC:9A:76:64 Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06 Certificate issuer: /CN=e5164534979e60a564701232b2e5200889542606 Certificate serial: 019B736CDC388C120A0CB7E0B4D8433E2CEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft Manifest number: 0851 Signing time: Wed 31 Dec 2025 08:01:12 +0000 Manifest this update: Wed 31 Dec 2025 08:01:12 +0000 Manifest next update: Thu 01 Jan 2026 08:01:12 +0000 Files and hashes: 1: 5RZFNJeeYKVkcBIysuUgCIlUJgY.crl (hash: TLuZpx9zhilQdAC3ZGs9MYCLNuJLLFejrPZw573SdL8=) 2: d099hTA9N0rBX0a4mIMTtvx7dLM.roa (hash: LT02ny7o04CIcPy2ptlO2f83f/uDQvGL+KruqdAn2tw=) 3: jfgLmk_8BZt8FNL99fA-Isnp7jU.roa (hash: 3hldq5xpp8oSt4a5EF6tgPHwrwLntpc0Iw/stE0N/MY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:6c:dc:38:8c:12:0a:0c:b7:e0:b4:d8:43:3e:2c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5164534979e60a564701232b2e5200889542606 Validity Not Before: Dec 31 08:01:12 2025 GMT Not After : Jan 1 08:01:12 2026 GMT Subject: CN=8dfa8451bf8457a8d3bee0e176963a34cc9a7664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f0:57:bb:f4:29:21:ae:d7:2a:ac:16:09:b9: 64:31:97:3f:26:ef:c4:af:a7:60:cb:40:75:c7:4c: 3d:ff:e0:1b:b7:ec:19:88:2b:f9:55:35:70:5d:12: e9:e8:a2:c9:3f:8c:5e:4f:51:bf:39:9f:3b:f9:cd: c3:f3:8e:10:6c:60:ca:43:8a:ca:5c:b8:a8:a9:e2: b8:df:d1:43:d3:b6:3b:49:2d:16:00:d7:d4:65:bf: 02:d8:22:75:f3:44:a7:eb:c5:df:3a:02:31:c9:86: 6d:01:ac:18:88:a8:f2:f1:81:00:8b:65:78:5d:53: 2f:6b:ea:4d:b8:42:91:a8:41:88:47:75:8d:d2:4b: 93:04:db:d4:27:7b:34:59:f1:f3:26:1c:e3:6c:87: 37:f7:78:b7:1e:40:c3:3d:c3:a2:a2:24:d7:f0:19: 5c:03:3b:47:21:54:d4:7d:6f:69:f7:82:17:03:ff: 1d:41:8c:bf:4b:3d:67:f6:49:1c:c5:8a:af:e4:b4: 1f:1b:1e:22:14:15:24:62:76:71:94:e8:79:d7:99: 37:15:e3:a1:97:6e:1f:0c:c8:ff:20:b0:38:85:fd: ec:72:f8:ae:ce:26:cc:63:03:31:f8:69:59:2b:98: df:4a:9a:09:b0:ed:a3:e2:a5:07:15:04:e9:d7:46: 3f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FA:84:51:BF:84:57:A8:D3:BE:E0:E1:76:96:3A:34:CC:9A:76:64 X509v3 Authority Key Identifier: keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ab:66:1b:cc:66:ee:33:e2:c9:f7:d7:cf:b1:ca:79:54:b3: ff:7a:60:d4:63:42:61:0d:94:32:25:67:fd:ce:71:8b:2f:c6: 0b:c5:e4:4f:5f:51:6e:4f:f1:cf:ae:c3:8a:80:e1:5a:d7:9f: 17:a0:2e:e1:a7:83:5c:45:4a:aa:45:6e:04:15:7d:b3:06:23: 61:7c:ae:da:c6:f0:f3:b8:7e:e8:a8:36:6d:61:16:07:28:60: b3:eb:a0:ca:7e:08:cf:d1:48:d5:19:94:78:09:c6:c5:d2:f4: 3e:05:74:71:c8:d9:ac:e5:78:c2:e3:d0:bc:db:59:a9:80:3c: e5:3a:39:37:b9:5d:14:2e:c3:8a:d2:ef:a6:6a:b1:f2:1e:1a: 30:bd:38:be:0a:c2:9c:dc:3a:e3:9c:a9:08:7f:b3:66:cb:18: cd:8c:b9:f8:44:42:12:e0:f8:41:e6:6a:48:33:fc:ad:f7:ff: c1:0b:6b:a4:f3:81:9b:83:f4:4c:f9:6e:8a:57:af:4d:71:7e: 8f:77:8b:a4:96:cf:c3:16:38:8d:c1:c8:21:0b:65:ab:79:e6: 7b:bb:e1:26:65:95:26:24:bf:34:2b:99:5c:bd:60:d4:0e:84: e4:0d:41:53:bc:09:cf:ce:d7:fb:bf:1b:82:d5:60:0c:f1:5e: 4b:03:c1:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzbNw4jBIKDLfgtNhDPizvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MTY0NTM0OTc5ZTYwYTU2NDcwMTIzMmIyZTUyMDA4ODk1 NDI2MDYwHhcNMjUxMjMxMDgwMTEyWhcNMjYwMTAxMDgwMTEyWjAzMTEwLwYDVQQD Eyg4ZGZhODQ1MWJmODQ1N2E4ZDNiZWUwZTE3Njk2M2EzNGNjOWE3NjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/BXu/QpIa7XKqwWCblkMZc/Ju/E r6dgy0B1x0w9/+Abt+wZiCv5VTVwXRLp6KLJP4xeT1G/OZ87+c3D844QbGDKQ4rK XLioqeK439FD07Y7SS0WANfUZb8C2CJ180Sn68XfOgIxyYZtAawYiKjy8YEAi2V4 XVMva+pNuEKRqEGIR3WN0kuTBNvUJ3s0WfHzJhzjbIc393i3HkDDPcOioiTX8Blc AztHIVTUfW9p94IXA/8dQYy/Sz1n9kkcxYqv5LQfGx4iFBUkYnZxlOh515k3FeOh l24fDMj/ILA4hf3scviuzibMYwMx+GlZK5jfSpoJsO2j4qUHFQTp10Y/QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI36hFG/hFeo077g4XaWOjTMmnZkMB8GA1UdIwQY MBaAFOUWRTSXnmClZHASMrLlIAiJVCYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVJaRk5KZWVZS1ZrY0JJeXN1VWdDSWxVSmdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lNzdkN2ItYmMwZi00NjM1LTgxMDEt ZDFlZWIyOWM5NTFiLzEvNVJaRk5KZWVZS1ZrY0JJeXN1VWdDSWxVSmdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lNzdkN2ItYmMwZi00NjM1LTgxMDEtZDFlZWIyOWM5NTFi LzEvNVJaRk5KZWVZS1ZrY0JJeXN1VWdDSWxVSmdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6tmG8xm 7jPiyffXz7HKeVSz/3pg1GNCYQ2UMiVn/c5xiy/GC8XkT19Rbk/xz67DioDhWtef F6Au4aeDXEVKqkVuBBV9swYjYXyu2sbw87h+6Kg2bWEWByhgs+ugyn4Iz9FI1RmU eAnGxdL0PgV0ccjZrOV4wuPQvNtZqYA85To5N7ldFC7DitLvpmqx8h4aML04vgrC nNw645ypCH+zZssYzYy5+ERCEuD4QeZqSDP8rff/wQtrpPOBm4P0TPluilevTXF+ j3eLpJbPwxY4jcHIIQtlq3nme7vhJmWVJiS/NCuZXL1g1A6E5A1BU7wJz87X+78b gtVgDPFeSwPBrg== -----END CERTIFICATE-----Generated at Wed Dec 31 11:02:41 2025 by rpki-client