This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft File: 5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft (raw, json) Hash identifier: CF1dHIIdvVQ3RKkG+LTNALB98vCFaX7Oz6Y0VjFpH+M= Subject key identifier: E7:72:E2:57:44:21:09:26:6A:E9:96:B8:0D:71:FB:CC:4F:47:98:11 Authority key identifier: E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA Certificate issuer: /CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba Certificate serial: 019AF3C0723E021CDF0DA0255834E447AE3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 13:01:06 +0000 Manifest this update: Sat 06 Dec 2025 13:01:06 +0000 Manifest next update: Sun 07 Dec 2025 13:01:06 +0000 Files and hashes: 1: 5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl (hash: 2vJFLuTIIusrokrKDxbl86juaCOBjHfouoy4cUL0mWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:72:3e:02:1c:df:0d:a0:25:58:34:e4:47:ae:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba Validity Not Before: Dec 6 13:01:06 2025 GMT Not After : Dec 7 13:01:06 2025 GMT Subject: CN=e772e257442109266ae996b80d71fbcc4f479811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a7:b5:06:8a:cc:39:f0:99:92:42:fe:7d:42: 36:7f:bc:d7:ac:9b:90:cf:70:b4:cb:30:55:53:4e: 25:4f:af:f9:e3:27:ce:2a:16:18:07:49:04:c5:c4: c4:47:66:b2:c3:20:46:0f:ac:54:a4:bc:fc:85:e0: 5e:a1:c2:5e:21:70:a6:32:40:e1:b4:ed:b3:73:4a: 99:9f:75:a8:33:15:58:31:60:93:ed:80:41:85:22: 57:69:f3:f5:84:6f:85:cd:84:97:e9:87:cb:b0:a2: 47:89:31:fa:db:6d:93:a6:e0:20:ae:92:4b:1b:ce: 73:da:7e:e8:c0:bd:75:f5:c5:28:15:65:54:04:0e: 21:c5:c0:bf:89:22:da:0d:ad:12:72:82:cc:fb:c8: 0e:3b:f2:7e:e8:8a:6a:94:9c:0b:30:8b:8a:b9:44: d0:ca:c2:b4:97:a9:e8:c2:d9:58:c9:11:bc:e8:f2: 1a:fb:ae:91:2a:6b:77:7c:ce:45:0d:c8:22:4d:72: ff:5c:4e:b8:3a:f5:5c:40:d7:6e:ea:dc:09:a2:24: 02:83:94:b0:ed:cc:ed:d8:46:f6:a9:0d:76:15:ce: 28:01:0f:79:e3:e2:84:6d:e1:98:7f:26:5b:27:8c: 9a:0b:00:6b:6b:89:2d:5a:83:61:40:dd:27:fd:16: 67:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:72:E2:57:44:21:09:26:6A:E9:96:B8:0D:71:FB:CC:4F:47:98:11 X509v3 Authority Key Identifier: keyid:E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:d2:8b:e0:e2:cb:5b:10:b6:33:a0:0d:49:d4:64:4c:fd:ed: d4:97:5f:3e:89:76:92:0d:f7:8e:d5:ea:3f:de:50:79:00:31: dc:91:cc:58:c8:3f:0b:a2:24:17:1c:09:da:8e:ff:8c:f2:3c: 5d:bc:e2:4d:b2:ed:24:96:3d:1b:88:d8:49:2e:62:49:3d:d5: 1e:6f:3a:e5:1b:60:c9:9a:1c:88:f4:cc:af:1c:b6:e2:4d:e2: 43:b4:a9:88:76:74:f5:1d:2a:e9:3b:74:d3:49:c7:d7:80:c2: 00:03:47:45:2e:65:4b:cc:82:3b:ca:fc:71:0a:bf:c4:34:a5: 8c:00:3a:b2:33:79:05:81:1a:6a:47:6b:5e:e0:aa:7d:7e:4c: 19:6f:06:b0:88:aa:aa:4b:3b:fa:d8:fc:23:19:5f:8b:10:7a: 51:bc:d8:d4:ee:c5:15:4a:20:f1:4a:dc:0b:12:36:7e:93:86: 4f:0f:e4:84:40:f3:0e:25:ae:99:6c:99:6f:01:0d:d8:34:24: 24:e9:22:e0:ab:3e:c0:93:8b:59:3b:0b:eb:05:21:b3:e2:10: 4f:7e:0b:60:b6:00:e8:a7:5b:1a:d4:41:66:4b:cb:2b:aa:e1: 08:ba:e7:56:8e:3c:5c:4f:e2:b6:52:b1:9e:6d:f3:dd:85:d2: d1:25:70:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwHI+AhzfDaAlWDTkR649MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MzNiMmVhYjdlMjM0Njg3YmU5N2Y4YzM1ZDZlNmNjM2Uy ZGZjYmEwHhcNMjUxMjA2MTMwMTA2WhcNMjUxMjA3MTMwMTA2WjAzMTEwLwYDVQQD EyhlNzcyZTI1NzQ0MjEwOTI2NmFlOTk2YjgwZDcxZmJjYzRmNDc5ODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsae1BorMOfCZkkL+fUI2f7zXrJuQ z3C0yzBVU04lT6/54yfOKhYYB0kExcTER2aywyBGD6xUpLz8heBeocJeIXCmMkDh tO2zc0qZn3WoMxVYMWCT7YBBhSJXafP1hG+FzYSX6YfLsKJHiTH6222TpuAgrpJL G85z2n7owL119cUoFWVUBA4hxcC/iSLaDa0ScoLM+8gOO/J+6IpqlJwLMIuKuUTQ ysK0l6nowtlYyRG86PIa+66RKmt3fM5FDcgiTXL/XE64OvVcQNdu6twJoiQCg5Sw 7czt2Eb2qQ12Fc4oAQ954+KEbeGYfyZbJ4yaCwBra4ktWoNhQN0n/RZnTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdy4ldEIQkmaumWuA1x+8xPR5gRMB8GA1UdIwQY MBaAFOczsuq34jRoe+l/jDXW5sw+Lfy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXpPeTZyZmlOR2g3NlgtTU5kYm16RDR0X0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85MzYwZjUtMWRlYi00YjQzLWEzMmYt YWM0NGJjNTY5YTc4LzEvNXpPeTZyZmlOR2g3NlgtTU5kYm16RDR0X0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85MzYwZjUtMWRlYi00YjQzLWEzMmYtYWM0NGJjNTY5YTc4 LzEvNXpPeTZyZmlOR2g3NlgtTU5kYm16RDR0X0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeNKL4OLL WxC2M6ANSdRkTP3t1JdfPol2kg33jtXqP95QeQAx3JHMWMg/C6IkFxwJ2o7/jPI8 XbziTbLtJJY9G4jYSS5iST3VHm865RtgyZociPTMrxy24k3iQ7SpiHZ09R0q6Tt0 00nH14DCAANHRS5lS8yCO8r8cQq/xDSljAA6sjN5BYEaakdrXuCqfX5MGW8GsIiq qks7+tj8IxlfixB6UbzY1O7FFUog8UrcCxI2fpOGTw/khEDzDiWumWyZbwEN2DQk JOki4Ks+wJOLWTsL6wUhs+IQT34LYLYA6KdbGtRBZkvLK6rhCLrnVo48XE/itlKx nm3z3YXS0SVwoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:35:36 2025 by rpki-client