This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft File: 5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft (raw, json) Hash identifier: t7fQZBkJyD+A0VpTGBrGfnLyKNKKe+88v9b9rwt9PDc= Subject key identifier: E8:DA:61:29:86:06:CA:C7:C8:FC:A7:BE:BF:B1:85:7C:11:A5:CD:9F Authority key identifier: E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85 Certificate issuer: /CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085 Certificate serial: 019AF61C43B245E59FC67E6BAA3191DACDD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft Manifest number: 1762 Signing time: Sun 07 Dec 2025 00:00:38 +0000 Manifest this update: Sun 07 Dec 2025 00:00:38 +0000 Manifest next update: Mon 08 Dec 2025 00:00:38 +0000 Files and hashes: 1: 5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl (hash: DBHasvzEGhMleOdt7BHkSuNTPmw/uWJ3nJxQZH1LF04=) 2: dFrITcK-gyFXGF4gMBJMUn82DUw.roa (hash: JzRq8pBFAlmY9cNlSptGZN7KGuqVF/MkHyhE1GubBM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:43:b2:45:e5:9f:c6:7e:6b:aa:31:91:da:cd:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085 Validity Not Before: Dec 7 00:00:38 2025 GMT Not After : Dec 8 00:00:38 2025 GMT Subject: CN=e8da61298606cac7c8fca7bebfb1857c11a5cd9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e6:6b:6e:1b:f3:b0:71:cf:bc:7b:3a:17:ea: e9:60:86:8c:3b:dc:54:17:b4:50:d3:b5:80:23:6d: fb:14:62:5c:09:e7:77:ff:be:2b:c2:64:a6:f0:00: 41:b5:63:30:1a:aa:5e:4b:a1:e3:d6:51:25:fb:91: 70:1f:64:18:4f:bc:6c:8e:30:81:2f:e9:c8:f4:16: d3:86:ac:87:b2:cc:cb:77:79:41:56:dd:1e:e4:d0: 32:8b:6b:66:e1:85:d6:b4:b7:d9:df:31:d9:3b:52: d1:0f:31:48:95:75:b4:c9:83:85:0f:db:aa:56:4a: d2:93:ed:06:e9:2c:85:4b:bb:c9:3b:c8:14:1a:75: b5:5c:46:29:cf:5d:ff:40:0d:8d:6f:12:4a:85:03: 22:82:2a:c1:96:05:8e:58:71:b3:d9:ca:90:49:b7: 43:56:5d:ba:01:f3:b2:d9:96:be:72:5c:88:d0:b6: 0b:a3:aa:ed:0f:d6:c3:01:6b:8d:d1:ce:19:1c:7e: 52:e3:ea:00:13:59:b6:bc:3e:1a:8a:06:60:fd:43: 22:b8:62:a3:28:a8:ff:71:6a:e8:7e:f4:b2:ce:19: e7:81:72:f1:92:ee:6b:d2:0c:98:65:56:6d:0a:9e: 34:9c:a5:98:52:a7:4b:82:25:47:f8:a5:65:b9:59: 71:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DA:61:29:86:06:CA:C7:C8:FC:A7:BE:BF:B1:85:7C:11:A5:CD:9F X509v3 Authority Key Identifier: keyid:E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a9:6f:8e:da:7b:4d:bd:e1:79:45:e5:7d:eb:4f:0a:ae:10: 5c:54:90:aa:98:d5:5b:f1:d5:0c:fb:e4:8e:3e:ee:a8:b5:63: 4c:5c:50:be:32:74:f9:18:c2:ef:c7:52:65:13:e9:97:10:db: 5e:f5:71:cf:5e:1f:c0:11:72:7f:22:20:95:52:9b:0d:7a:cc: 61:55:37:5d:37:a6:7b:59:2b:fc:76:5a:f4:a6:22:71:6f:8b: 6d:65:4b:85:68:19:81:39:26:19:e7:ee:59:00:a3:da:09:dc: 6d:1f:06:1b:88:ee:cf:74:7b:c6:53:32:c3:29:46:6c:38:f5: 9c:47:a4:e7:b0:22:02:f5:46:9c:51:ab:ac:84:99:25:8e:ac: 6d:99:9b:f0:9f:15:ef:2d:c7:d9:ef:70:63:25:7b:88:a6:ce: b1:59:43:9d:9f:0a:dc:64:63:be:85:92:e1:fa:6a:72:da:37: 10:0a:85:b0:60:4a:95:ef:46:37:90:3a:d5:39:21:a8:7d:d7: 9b:a7:e2:6e:c0:67:e4:bd:9b:d9:be:10:49:75:e9:e0:d6:b9: f4:4c:82:02:ee:ee:a6:22:51:39:16:92:4f:95:5a:b0:9f:64: d4:fd:89:f2:bc:7a:73:f4:4b:5f:22:f5:8c:33:57:ff:4c:f7: 9a:dc:ad:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HEOyReWfxn5rqjGR2s3RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZmVjMjgzM2QzYzhlMjMyOTAzY2RkM2FmYzAzZWNkYmU4 M2IwODUwHhcNMjUxMjA3MDAwMDM4WhcNMjUxMjA4MDAwMDM4WjAzMTEwLwYDVQQD EyhlOGRhNjEyOTg2MDZjYWM3YzhmY2E3YmViZmIxODU3YzExYTVjZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+ZrbhvzsHHPvHs6F+rpYIaMO9xU F7RQ07WAI237FGJcCed3/74rwmSm8ABBtWMwGqpeS6Hj1lEl+5FwH2QYT7xsjjCB L+nI9BbThqyHsszLd3lBVt0e5NAyi2tm4YXWtLfZ3zHZO1LRDzFIlXW0yYOFD9uq VkrSk+0G6SyFS7vJO8gUGnW1XEYpz13/QA2NbxJKhQMigirBlgWOWHGz2cqQSbdD Vl26AfOy2Za+clyI0LYLo6rtD9bDAWuN0c4ZHH5S4+oAE1m2vD4aigZg/UMiuGKj KKj/cWrofvSyzhnngXLxku5r0gyYZVZtCp40nKWYUqdLgiVH+KVluVlxFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjaYSmGBsrHyPynvr+xhXwRpc2fMB8GA1UdIwQY MBaAFOf+woM9PI4jKQPN06/APs2+g7CFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV83Q2d6MDhqaU1wQTgzVHI4QS16YjZEc0lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kM2RiYTAtZDcxNS00OTVmLTkxNzgt MzkzYTQwODBjNzQ3LzEvNV83Q2d6MDhqaU1wQTgzVHI4QS16YjZEc0lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kM2RiYTAtZDcxNS00OTVmLTkxNzgtMzkzYTQwODBjNzQ3 LzEvNV83Q2d6MDhqaU1wQTgzVHI4QS16YjZEc0lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqlvjtp7 Tb3heUXlfetPCq4QXFSQqpjVW/HVDPvkjj7uqLVjTFxQvjJ0+RjC78dSZRPplxDb XvVxz14fwBFyfyIglVKbDXrMYVU3XTeme1kr/HZa9KYicW+LbWVLhWgZgTkmGefu WQCj2gncbR8GG4juz3R7xlMywylGbDj1nEek57AiAvVGnFGrrISZJY6sbZmb8J8V 7y3H2e9wYyV7iKbOsVlDnZ8K3GRjvoWS4fpqcto3EAqFsGBKle9GN5A61TkhqH3X m6fibsBn5L2b2b4QSXXp4Na59EyCAu7upiJRORaST5VasJ9k1P2J8rx6c/RLXyL1 jDNX/0z3mtytJA== -----END CERTIFICATE-----Generated at Sun Dec 7 06:58:08 2025 by rpki-client