This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft File: 5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft (raw, json) Hash identifier: NGd1wNoBkLi0G+33Tb1ULvSt8sd4usoa502fFqU/UHQ= Subject key identifier: 10:0B:01:35:EA:3A:8B:76:CF:87:88:13:C0:A2:46:84:DB:33:BE:A5 Authority key identifier: E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85 Certificate issuer: /CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085 Certificate serial: 019B35D70F0CE3C8EA2D71E6C387F4230CC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 09:00:45 +0000 Manifest this update: Fri 19 Dec 2025 09:00:45 +0000 Manifest next update: Sat 20 Dec 2025 09:00:45 +0000 Files and hashes: 1: 5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl (hash: d5fvcar1OEElYWsVn5HiIEyhhYoeCVnBs4GTzVAozv8=) 2: dFrITcK-gyFXGF4gMBJMUn82DUw.roa (hash: JzRq8pBFAlmY9cNlSptGZN7KGuqVF/MkHyhE1GubBM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:0f:0c:e3:c8:ea:2d:71:e6:c3:87:f4:23:0c:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7fec2833d3c8e232903cdd3afc03ecdbe83b085 Validity Not Before: Dec 19 09:00:45 2025 GMT Not After : Dec 20 09:00:45 2025 GMT Subject: CN=100b0135ea3a8b76cf878813c0a24684db33bea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ed:c6:58:74:24:fe:1a:26:43:0e:4c:3e:44: 1b:65:20:c7:a4:3f:3c:b0:ac:6e:6a:cb:b2:59:99: c3:8f:63:22:f9:a5:ce:4c:d5:1b:89:8f:bd:54:1b: 16:f6:ea:35:bf:b8:d0:8f:f0:b1:fa:86:f7:ae:28: 43:ba:51:cd:35:78:19:19:26:46:71:0b:ba:ec:8d: 41:35:0b:d7:11:c3:a5:84:df:63:94:41:c0:e0:21: be:21:b2:3e:20:ec:3c:94:f9:bf:e2:df:b9:de:b1: 92:3a:6b:f8:84:48:43:7c:8a:c8:1b:91:08:10:0a: 63:c3:5b:2c:47:7b:c6:9d:23:38:8f:48:23:af:91: bc:dc:41:93:f6:80:a6:14:fd:d2:c7:95:5c:99:17: cf:8a:96:0c:5e:04:a0:3f:f5:af:fb:97:57:ac:ae: 56:53:e5:6c:65:33:15:d2:f1:17:59:db:fb:8f:62: 94:55:a5:e9:a3:f8:3a:1d:2c:0e:4b:44:a3:11:1a: 8c:f4:4f:57:41:ad:fb:56:dd:0f:47:ae:93:32:24: 44:20:62:93:18:22:ab:50:f8:76:0d:5e:8a:3d:ad: 36:12:95:b0:7f:34:ba:9d:71:c1:f3:06:cf:77:68: 0b:a8:09:e6:5c:19:15:3a:b2:33:7d:11:8d:d3:6d: 3a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0B:01:35:EA:3A:8B:76:CF:87:88:13:C0:A2:46:84:DB:33:BE:A5 X509v3 Authority Key Identifier: keyid:E7:FE:C2:83:3D:3C:8E:23:29:03:CD:D3:AF:C0:3E:CD:BE:83:B0:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7Cgz08jiMpA83Tr8A-zb6DsIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d3dba0-d715-495f-9178-393a4080c747/1/5_7Cgz08jiMpA83Tr8A-zb6DsIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:fa:95:6f:62:7d:f5:a7:91:65:33:8d:37:87:b1:5e:51:46: bc:84:1d:11:67:b8:f6:93:53:53:1c:a4:af:2d:13:3e:fc:fc: ea:d0:b9:44:06:bf:83:b6:d2:fb:69:39:54:aa:38:b5:ed:9c: 76:a0:f0:37:d9:59:d3:ae:55:93:73:60:c7:03:26:31:93:9b: 84:2c:99:94:c5:4b:d0:b1:3e:36:4e:62:db:c2:af:08:4b:1c: 8b:34:09:9e:51:2f:9e:57:32:f2:6e:1b:53:76:18:4b:2a:c2: 75:31:77:e1:c2:03:f3:23:b6:f6:3a:4c:02:f3:05:bb:4c:59: 6f:38:40:13:fd:6a:28:fc:e4:8d:e4:da:9d:62:ff:53:43:a3: d4:cc:50:11:81:91:97:fe:9e:f5:4c:de:d5:17:98:cd:7d:be: 38:62:3f:bc:72:83:9c:f1:a2:45:f4:3b:6c:2b:62:5f:7f:ee: f5:92:b8:26:96:7a:4e:1f:aa:4a:5e:00:aa:35:43:f3:cf:55: e1:72:e2:ad:d6:67:90:dc:80:fc:3e:05:cd:d6:3e:8b:d2:8b: d7:0a:71:0c:12:4f:33:49:ca:dd:7a:ce:70:d7:14:a1:a2:3e: e6:19:2d:8d:e5:c0:ac:a1:b4:9c:a9:af:d0:26:66:95:f5:31: 8b:19:53:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11w8M48jqLXHmw4f0IwzFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZmVjMjgzM2QzYzhlMjMyOTAzY2RkM2FmYzAzZWNkYmU4 M2IwODUwHhcNMjUxMjE5MDkwMDQ1WhcNMjUxMjIwMDkwMDQ1WjAzMTEwLwYDVQQD EygxMDBiMDEzNWVhM2E4Yjc2Y2Y4Nzg4MTNjMGEyNDY4NGRiMzNiZWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO3GWHQk/homQw5MPkQbZSDHpD88 sKxuasuyWZnDj2Mi+aXOTNUbiY+9VBsW9uo1v7jQj/Cx+ob3rihDulHNNXgZGSZG cQu67I1BNQvXEcOlhN9jlEHA4CG+IbI+IOw8lPm/4t+53rGSOmv4hEhDfIrIG5EI EApjw1ssR3vGnSM4j0gjr5G83EGT9oCmFP3Sx5VcmRfPipYMXgSgP/Wv+5dXrK5W U+VsZTMV0vEXWdv7j2KUVaXpo/g6HSwOS0SjERqM9E9XQa37Vt0PR66TMiREIGKT GCKrUPh2DV6KPa02EpWwfzS6nXHB8wbPd2gLqAnmXBkVOrIzfRGN0206CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBALATXqOot2z4eIE8CiRoTbM76lMB8GA1UdIwQY MBaAFOf+woM9PI4jKQPN06/APs2+g7CFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV83Q2d6MDhqaU1wQTgzVHI4QS16YjZEc0lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kM2RiYTAtZDcxNS00OTVmLTkxNzgt MzkzYTQwODBjNzQ3LzEvNV83Q2d6MDhqaU1wQTgzVHI4QS16YjZEc0lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kM2RiYTAtZDcxNS00OTVmLTkxNzgtMzkzYTQwODBjNzQ3 LzEvNV83Q2d6MDhqaU1wQTgzVHI4QS16YjZEc0lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvqVb2J9 9aeRZTONN4exXlFGvIQdEWe49pNTUxykry0TPvz86tC5RAa/g7bS+2k5VKo4te2c dqDwN9lZ065Vk3NgxwMmMZObhCyZlMVL0LE+Nk5i28KvCEscizQJnlEvnlcy8m4b U3YYSyrCdTF34cID8yO29jpMAvMFu0xZbzhAE/1qKPzkjeTanWL/U0Oj1MxQEYGR l/6e9Uze1ReYzX2+OGI/vHKDnPGiRfQ7bCtiX3/u9ZK4JpZ6Th+qSl4AqjVD889V 4XLirdZnkNyA/D4FzdY+i9KL1wpxDBJPM0nK3XrOcNcUoaI+5hktjeXArKG0nKmv 0CZmlfUxixlTzA== -----END CERTIFICATE-----Generated at Fri Dec 19 12:54:46 2025 by rpki-client