This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft File: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft (raw, json) Hash identifier: pyTOlL3ya8eDETqxDv8uF+GKcG186ht8KO4aZ6ZRQok= Subject key identifier: 8C:BB:A9:B1:B2:18:14:AD:06:77:15:15:8E:22:C1:A0:4E:A3:5E:EC Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8 Certificate issuer: /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8 Certificate serial: 019B3FB5AFDD7BD5F62FBAEF3E0DB84DAE84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 07:00:30 +0000 Manifest this update: Sun 21 Dec 2025 07:00:30 +0000 Manifest next update: Mon 22 Dec 2025 07:00:30 +0000 Files and hashes: 1: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl (hash: jnzMwx4zuNH1SlBfZ7Mi2jqfuRohuvxYCBYWvi+S7AU=) 2: H9LigG1-eoyksArBLiDVRw0BhjU.roa (hash: oha3QLmkXpQFYs1KCF6A8sqvDCo/E/9M5bF7ey6N14M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:af:dd:7b:d5:f6:2f:ba:ef:3e:0d:b8:4d:ae:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8 Validity Not Before: Dec 21 07:00:30 2025 GMT Not After : Dec 22 07:00:30 2025 GMT Subject: CN=8cbba9b1b21814ad067715158e22c1a04ea35eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fa:9e:30:e8:9e:d6:d9:99:0a:46:e5:79:43: 42:af:08:88:0c:66:f3:6a:c1:e1:91:72:7f:b4:97: 22:21:c2:54:ef:b0:d0:6b:b8:69:97:b9:03:59:cd: 70:d1:55:15:e2:d2:ab:56:76:c6:4b:92:96:3e:13: 1b:20:4d:29:f2:72:d6:b0:d6:66:9b:15:b7:02:db: ba:b9:81:4f:61:93:c8:86:61:ab:fe:7e:e7:02:db: ad:a9:7c:48:86:73:15:ef:17:0d:f2:25:d0:23:de: c3:ae:f8:00:ff:8d:a6:4d:c3:92:18:12:8f:68:ac: 7b:a3:fb:50:9c:43:e1:41:97:7a:cf:55:ec:7b:bb: e5:18:44:20:aa:36:e3:b3:f0:8d:9f:6c:23:7c:44: ff:99:b7:8c:ea:9c:d8:fa:1b:ec:b0:e7:3a:79:5d: 8e:fd:a3:43:54:88:fb:6c:6c:78:dc:b7:6c:04:aa: 71:72:ad:75:a6:fd:7d:ea:ef:fb:aa:fc:0d:77:ba: 64:43:b3:0e:d2:3b:27:3b:93:db:01:dc:1a:8f:1d: 53:78:00:fc:f7:05:13:7e:41:2c:8d:8a:ad:b9:04: b9:b3:01:63:f4:6c:f0:b8:2b:68:ab:36:be:5e:6e: 6b:5f:7b:5e:fa:dc:61:56:d6:24:8b:5a:f1:06:58: 70:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BB:A9:B1:B2:18:14:AD:06:77:15:15:8E:22:C1:A0:4E:A3:5E:EC X509v3 Authority Key Identifier: keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:2f:92:c1:67:b4:f5:eb:2e:56:ea:f3:fc:35:56:d3:4b:ac: 1c:6d:0d:f1:d6:44:04:b4:8f:86:52:06:f6:16:f7:73:ca:dc: d9:da:fb:26:87:7b:48:be:c2:03:f5:00:3e:55:40:9e:79:25: 9a:2a:17:c6:6a:7f:eb:d8:55:9f:94:0b:f4:c0:be:00:80:11: 61:b3:f7:fc:04:49:37:e0:4e:6e:b4:67:28:6c:aa:b9:0e:1b: 46:dc:bf:9b:83:d8:8f:14:aa:09:3a:0c:ed:ad:53:01:7a:10: 26:40:87:7a:40:4f:94:90:f8:95:ec:64:8e:03:0e:88:2a:6d: 79:04:59:57:d4:8d:d0:f5:86:d2:50:81:66:75:db:f3:71:25: 8c:32:21:08:57:13:17:e4:bd:66:5b:f3:88:8d:0a:9c:9d:63: 3d:b4:f9:76:a5:14:0b:76:ee:e5:8f:8f:37:0b:23:dc:82:64: d7:e9:6a:26:6b:bc:80:4f:64:16:a8:58:be:6c:04:c6:92:36: d5:51:e3:07:5b:80:0b:a5:23:16:13:be:cd:3f:c4:53:e2:9f: 6a:cc:93:c7:34:5d:46:0d:cf:3c:b9:91:73:bb:f0:29:fc:23: 37:8d:9f:68:83:3f:ae:22:91:b1:3f:46:41:40:18:fe:d8:c9: 99:7d:8b:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ta/de9X2L7rvPg24Ta6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZTVjNGM5OWQ2MTMxMDQ5OTgyYWY5YWQ5Yjg2NjAyYjI5 MjliYjgwHhcNMjUxMjIxMDcwMDMwWhcNMjUxMjIyMDcwMDMwWjAzMTEwLwYDVQQD Eyg4Y2JiYTliMWIyMTgxNGFkMDY3NzE1MTU4ZTIyYzFhMDRlYTM1ZWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPqeMOie1tmZCkbleUNCrwiIDGbz asHhkXJ/tJciIcJU77DQa7hpl7kDWc1w0VUV4tKrVnbGS5KWPhMbIE0p8nLWsNZm mxW3Atu6uYFPYZPIhmGr/n7nAtutqXxIhnMV7xcN8iXQI97DrvgA/42mTcOSGBKP aKx7o/tQnEPhQZd6z1Xse7vlGEQgqjbjs/CNn2wjfET/mbeM6pzY+hvssOc6eV2O /aNDVIj7bGx43LdsBKpxcq11pv196u/7qvwNd7pkQ7MO0jsnO5PbAdwajx1TeAD8 9wUTfkEsjYqtuQS5swFj9GzwuCtoqza+Xm5rX3te+txhVtYki1rxBlhw4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIy7qbGyGBStBncVFY4iwaBOo17sMB8GA1UdIwQY MBaAFOflxMmdYTEEmYKvmtm4ZgKykpu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNS1YRXlaMWhNUVNaZ3EtYTJiaG1BcktTbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lNzA5ZGUtNmIyZC00YmU0LTg1MDMt YTFlNDg3N2NlZTQ4LzEvNS1YRXlaMWhNUVNaZ3EtYTJiaG1BcktTbTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9lNzA5ZGUtNmIyZC00YmU0LTg1MDMtYTFlNDg3N2NlZTQ4 LzEvNS1YRXlaMWhNUVNaZ3EtYTJiaG1BcktTbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiC+SwWe0 9esuVurz/DVW00usHG0N8dZEBLSPhlIG9hb3c8rc2dr7Jod7SL7CA/UAPlVAnnkl mioXxmp/69hVn5QL9MC+AIARYbP3/ARJN+BObrRnKGyquQ4bRty/m4PYjxSqCToM 7a1TAXoQJkCHekBPlJD4lexkjgMOiCpteQRZV9SN0PWG0lCBZnXb83EljDIhCFcT F+S9ZlvziI0KnJ1jPbT5dqUUC3bu5Y+PNwsj3IJk1+lqJmu8gE9kFqhYvmwExpI2 1VHjB1uAC6UjFhO+zT/EU+KfasyTxzRdRg3PPLmRc7vwKfwjN42faIM/riKRsT9G QUAY/tjJmX2Lxg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:32:25 2025 by rpki-client