This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft File: 5gBvGrt1cn57wwwXnml00tGPjzg.mft (raw, json) Hash identifier: C/Uwxmeg4ooo/ZLw2rLI9YMkAMFf5BUyiE18oVvY6Zs= Subject key identifier: AD:E4:0B:8D:63:05:69:65:03:C9:D4:7A:E9:4B:FB:5C:DB:8F:B0:7D Authority key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38 Certificate issuer: /CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38 Certificate serial: 019B60C1389B5B2494EA275B3D30E8219170 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft Manifest number: 12F0 Signing time: Sat 27 Dec 2025 17:00:34 +0000 Manifest this update: Sat 27 Dec 2025 17:00:34 +0000 Manifest next update: Sun 28 Dec 2025 17:00:34 +0000 Files and hashes: 1: 5gBvGrt1cn57wwwXnml00tGPjzg.crl (hash: vQuTYOg4QiB+tDprihi16BbS7HFXErNsru7AmseywBc=) 2: Zi2_IuYzlaIRtsk8-q-uBBtZEgI.roa (hash: VlhL3UjyA76HwKj7J4uOubCMpMfYtpjO6fp5e/1c/W8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:c1:38:9b:5b:24:94:ea:27:5b:3d:30:e8:21:91:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38 Validity Not Before: Dec 27 17:00:34 2025 GMT Not After : Dec 28 17:00:34 2025 GMT Subject: CN=ade40b8d6305696503c9d47ae94bfb5cdb8fb07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6a:50:34:f3:a6:4f:df:03:90:e4:28:76:a0: 23:6d:ae:98:0d:4f:63:b2:4a:f1:c0:10:95:25:b9: 57:9e:cd:1f:03:ca:cf:df:f2:25:5c:d7:5a:2b:6d: e2:f6:8a:7e:0c:a8:b3:be:a8:7c:5d:b9:79:2d:a1: 64:ca:af:7a:62:c6:a1:d7:b7:9a:0b:aa:66:07:e8: 94:3f:bc:08:cb:aa:8e:73:a4:8d:ee:99:44:6e:8f: ec:b1:bf:29:f4:ae:eb:d7:3d:fc:fb:5b:ca:04:98: 57:1a:bb:4a:89:5f:44:9a:e9:8f:23:d9:df:16:12: e3:83:af:4e:86:bd:fd:70:ce:de:21:0f:23:ed:2a: 97:38:57:55:c4:04:51:07:1e:e7:ee:e4:8b:b4:33: 1f:79:6f:0b:7d:7b:54:0c:2b:a4:5d:57:5a:2f:57: 97:24:3f:31:25:21:34:ee:8e:66:e0:9d:d3:13:49: d1:df:d0:e2:99:8b:10:e3:1f:39:3c:4d:cc:c3:b1: de:fd:cd:1e:84:e6:16:0c:d9:09:ae:57:52:b9:8c: 2d:bc:b8:c6:7b:07:6e:03:0c:e8:64:fa:b1:7b:48: 87:7e:38:e3:39:c5:67:d9:2e:b1:d2:e1:3a:87:e0: e3:17:b0:60:1d:82:ff:bd:3c:26:ca:c6:78:6a:14: e2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E4:0B:8D:63:05:69:65:03:C9:D4:7A:E9:4B:FB:5C:DB:8F:B0:7D X509v3 Authority Key Identifier: keyid:E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:77:0c:69:88:c8:bd:3b:3c:9b:1a:08:de:bb:39:5d:fc:98: df:d7:6a:8a:36:87:35:1c:ab:2c:57:29:49:51:70:cb:1f:a3: 25:43:51:3a:99:74:b0:0e:71:5e:48:43:09:3c:f5:b1:2e:fa: 1e:8a:4a:4b:f0:8d:33:fd:e3:22:0d:8b:ac:35:7b:4d:11:78: 2f:71:b4:17:19:06:77:97:02:6e:b3:71:8b:e3:aa:df:24:10: 30:3e:a9:a1:19:aa:4f:d8:14:48:52:6e:b6:c5:98:00:2f:8c: b4:ea:cb:3c:09:7d:ac:c9:64:89:43:a8:ed:89:bc:7b:d1:4c: bc:08:34:37:29:27:bf:fc:ee:0e:14:2a:77:1e:c1:47:c1:6c: e8:42:21:04:82:2f:4f:69:62:a6:3a:42:4b:94:d6:de:63:61: 2c:fa:88:c7:7b:5d:ec:66:a9:6f:e1:ea:8b:d6:83:28:e2:39: 16:d8:97:d7:65:59:2f:6a:4e:97:72:01:a8:55:c2:d5:73:a3: 6d:cd:01:4b:01:da:2b:fc:6b:21:7c:9a:6a:cb:84:6a:f8:53: 84:bc:bb:2a:61:31:5d:a0:c5:f5:e9:7d:4e:af:6b:58:e0:e5: e5:f3:6c:42:82:16:33:07:c3:29:13:34:3f:7e:97:75:a6:f5: 45:ce:94:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgwTibWySU6idbPTDoIZFwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MDA2ZjFhYmI3NTcyN2U3YmMzMGMxNzllNjk3NGQyZDE4 ZjhmMzgwHhcNMjUxMjI3MTcwMDM0WhcNMjUxMjI4MTcwMDM0WjAzMTEwLwYDVQQD EyhhZGU0MGI4ZDYzMDU2OTY1MDNjOWQ0N2FlOTRiZmI1Y2RiOGZiMDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWpQNPOmT98DkOQodqAjba6YDU9j skrxwBCVJblXns0fA8rP3/IlXNdaK23i9op+DKizvqh8Xbl5LaFkyq96Ysah17ea C6pmB+iUP7wIy6qOc6SN7plEbo/ssb8p9K7r1z38+1vKBJhXGrtKiV9EmumPI9nf FhLjg69Ohr39cM7eIQ8j7SqXOFdVxARRBx7n7uSLtDMfeW8LfXtUDCukXVdaL1eX JD8xJSE07o5m4J3TE0nR39DimYsQ4x85PE3Mw7He/c0ehOYWDNkJrldSuYwtvLjG ewduAwzoZPqxe0iHfjjjOcVn2S6x0uE6h+DjF7BgHYL/vTwmysZ4ahTi9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3kC41jBWllA8nUeulL+1zbj7B9MB8GA1UdIwQY MBaAFOYAbxq7dXJ+e8MMF55pdNLRj484MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hMjdhMTktOTBiNS00NjcxLWJiYzEt NDcyZDg4MmU5ZDcyLzEvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9hMjdhMTktOTBiNS00NjcxLWJiYzEtNDcyZDg4MmU5ZDcy LzEvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOncMaYjI vTs8mxoI3rs5XfyY39dqijaHNRyrLFcpSVFwyx+jJUNROpl0sA5xXkhDCTz1sS76 HopKS/CNM/3jIg2LrDV7TRF4L3G0FxkGd5cCbrNxi+Oq3yQQMD6poRmqT9gUSFJu tsWYAC+MtOrLPAl9rMlkiUOo7Ym8e9FMvAg0Nyknv/zuDhQqdx7BR8Fs6EIhBIIv T2lipjpCS5TW3mNhLPqIx3td7Gapb+Hqi9aDKOI5FtiX12VZL2pOl3IBqFXC1XOj bc0BSwHaK/xrIXyaasuEavhThLy7KmExXaDF9el9Tq9rWODl5fNsQoIWMwfDKRM0 P36Xdab1Rc6UVw== -----END CERTIFICATE-----Generated at Sat Dec 27 21:03:55 2025 by rpki-client