This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft File: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft (raw, json) Hash identifier: 0Hu/zPUjNsnHqhD3z2sLZgpuj9UyXk6INO4W2XxOfTM= Subject key identifier: B7:B1:12:75:6F:AF:1F:E6:C3:48:9B:E7:03:39:F7:36:F1:26:61:EC Authority key identifier: E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52 Certificate issuer: /CN=e5729ee89636ba34fe56bd72e758f582ade70e52 Certificate serial: 019B3E6CF1A7F5DC17D7FD12FCF10E3C390D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft Manifest number: 039C Signing time: Sun 21 Dec 2025 01:01:25 +0000 Manifest this update: Sun 21 Dec 2025 01:01:25 +0000 Manifest next update: Mon 22 Dec 2025 01:01:25 +0000 Files and hashes: 1: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl (hash: wdH44dTIH1UWSXKs+HgkT9G4JFr9YVhlRlyw2FDbVg0=) 2: GqkvkcQA2bbgQwHJ2b6jWAleiGg.roa (hash: EGM2nICbqAUwB5CP81F3mXlaWH5q4kAR9J7Mx82LHRQ=) 3: U_pf5mr7mVogKbgEVCSPIKt6P1Q.roa (hash: A+REPWck5DlDgbp9k+f3tR4pBhovVcICYPMhumJUrjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:f1:a7:f5:dc:17:d7:fd:12:fc:f1:0e:3c:39:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5729ee89636ba34fe56bd72e758f582ade70e52 Validity Not Before: Dec 21 01:01:25 2025 GMT Not After : Dec 22 01:01:25 2025 GMT Subject: CN=b7b112756faf1fe6c3489be70339f736f12661ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e8:4e:b9:45:9a:b1:f9:c7:9f:48:5f:19:e6: 5e:c8:44:2b:33:6f:7a:e1:cb:54:d9:04:0a:51:25: 56:cd:2c:01:71:90:3b:9c:be:11:cd:79:5b:fb:a7: d6:be:47:8e:53:e5:5e:49:fa:15:89:41:bc:5d:9f: c2:b3:7e:43:52:9b:ab:81:3e:11:98:f5:9d:3f:d6: c9:6e:1c:be:ad:63:3f:0d:9b:2c:62:3a:43:0f:47: 5f:cd:36:d2:bc:33:50:89:b0:4b:01:c9:78:3c:f9: 90:fc:6a:73:4e:32:93:7b:d4:31:9e:78:ae:ab:06: 78:01:bb:b0:71:71:c1:70:46:b5:62:0c:91:3c:44: 9a:5b:86:c7:47:77:86:73:ab:a3:6d:d2:4d:7c:83: 9f:6b:e7:37:33:84:7a:e7:e2:fb:e8:f8:b9:fe:10: a5:b0:4b:37:65:aa:63:8c:e7:c9:32:df:28:f7:fb: 03:af:1f:f0:a4:9c:06:3d:c2:72:3d:7c:54:84:52: 73:91:a0:b4:43:95:73:54:cc:ea:59:a9:67:40:a9: 89:2f:6e:71:92:5d:5d:8c:fc:2d:47:7c:dc:db:3b: d2:0f:c7:fb:91:97:73:84:57:af:8e:4d:92:9d:b4: a2:1c:3b:24:bb:83:d5:70:6c:9e:bc:eb:02:d6:80: 8b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B1:12:75:6F:AF:1F:E6:C3:48:9B:E7:03:39:F7:36:F1:26:61:EC X509v3 Authority Key Identifier: keyid:E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:55:f2:e1:aa:c8:ba:d5:7e:7c:b5:56:fe:0c:f6:8d:94:94: 89:72:62:99:12:36:35:b4:54:bd:91:26:db:48:54:a4:db:d9: b8:d6:6a:0a:ab:24:9f:c2:c3:97:00:f1:fa:88:49:52:1d:dc: ab:ad:71:5e:ab:63:89:23:4d:7d:75:cc:fd:c6:94:0c:c0:b9: 64:22:4c:d6:b2:be:7a:27:75:14:cd:31:ab:81:46:e8:72:62: 9a:c3:d7:0b:c0:a9:8f:d3:5e:3b:e3:84:16:db:84:91:53:20: 1b:0e:5f:5c:63:a8:f8:ed:ad:53:c7:77:c5:61:0d:74:a5:e3: bf:0b:3c:01:e7:85:73:08:33:cc:2f:c6:be:23:a8:42:0d:2e: 2e:1f:f8:f9:ba:d4:98:5f:1c:82:ff:3a:eb:51:82:0c:0e:d1: af:ce:71:0c:d9:e1:9e:a0:9d:14:31:de:b7:79:70:ce:b8:05: bc:f3:f9:43:fd:09:5e:3d:ff:c4:f9:ed:75:c3:ce:f6:a4:01: 9a:0d:15:8a:45:c9:18:48:a6:ed:07:30:3b:be:78:62:a6:f4: 74:5d:b1:e7:de:fe:05:88:a5:ef:fc:ef:5e:43:3f:71:82:12: e6:70:79:6f:b0:a9:69:9f:42:ad:2a:b2:c5:bd:c1:b7:7c:7e: 03:1a:8a:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bPGn9dwX1/0S/PEOPDkNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NzI5ZWU4OTYzNmJhMzRmZTU2YmQ3MmU3NThmNTgyYWRl NzBlNTIwHhcNMjUxMjIxMDEwMTI1WhcNMjUxMjIyMDEwMTI1WjAzMTEwLwYDVQQD EyhiN2IxMTI3NTZmYWYxZmU2YzM0ODliZTcwMzM5ZjczNmYxMjY2MWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ehOuUWasfnHn0hfGeZeyEQrM296 4ctU2QQKUSVWzSwBcZA7nL4RzXlb+6fWvkeOU+VeSfoViUG8XZ/Cs35DUpurgT4R mPWdP9bJbhy+rWM/DZssYjpDD0dfzTbSvDNQibBLAcl4PPmQ/GpzTjKTe9Qxnniu qwZ4AbuwcXHBcEa1YgyRPESaW4bHR3eGc6ujbdJNfIOfa+c3M4R65+L76Pi5/hCl sEs3ZapjjOfJMt8o9/sDrx/wpJwGPcJyPXxUhFJzkaC0Q5VzVMzqWalnQKmJL25x kl1djPwtR3zc2zvSD8f7kZdzhFevjk2SnbSiHDsku4PVcGyevOsC1oCLgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLexEnVvrx/mw0ib5wM59zbxJmHsMB8GA1UdIwQY MBaAFOVynuiWNro0/la9cudY9YKt5w5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVhLZTZKWTJ1alQtVnIxeTUxajFncTNuRGxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hMTdhZTctOGU4Ni00M2ZkLWI4NTAt YzEzOGJkMWMxNzFlLzEvNVhLZTZKWTJ1alQtVnIxeTUxajFncTNuRGxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hMTdhZTctOGU4Ni00M2ZkLWI4NTAtYzEzOGJkMWMxNzFl LzEvNVhLZTZKWTJ1alQtVnIxeTUxajFncTNuRGxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFXy4arI utV+fLVW/gz2jZSUiXJimRI2NbRUvZEm20hUpNvZuNZqCqskn8LDlwDx+ohJUh3c q61xXqtjiSNNfXXM/caUDMC5ZCJM1rK+eid1FM0xq4FG6HJimsPXC8Cpj9NeO+OE FtuEkVMgGw5fXGOo+O2tU8d3xWENdKXjvws8AeeFcwgzzC/GviOoQg0uLh/4+brU mF8cgv8661GCDA7Rr85xDNnhnqCdFDHet3lwzrgFvPP5Q/0JXj3/xPntdcPO9qQB mg0VikXJGEim7QcwO754Yqb0dF2x597+BYil7/zvXkM/cYIS5nB5b7CpaZ9CrSqy xb3Bt3x+AxqKDA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:58:39 2025 by rpki-client