This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft File: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft (raw, json) Hash identifier: I+9JW7AEH282NO4J6yoXo5IP4pXzXofFORH+3L7WzCQ= Subject key identifier: 2E:9F:77:68:93:5E:49:9E:AC:CA:FC:E8:A0:52:8B:C1:46:97:CE:A1 Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F Certificate issuer: /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f Certificate serial: 019AF12D14158FB06F16F97C12DB624B3D13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft Manifest number: 1217 Signing time: Sat 06 Dec 2025 01:00:54 +0000 Manifest this update: Sat 06 Dec 2025 01:00:54 +0000 Manifest next update: Sun 07 Dec 2025 01:00:54 +0000 Files and hashes: 1: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl (hash: ZlwO8aV3SYEb1R/qQ80azW8AZkFYAA84OnU+2sFb9aM=) 2: V60g_4Hl1O4ws6xObJRepK5WbCI.roa (hash: WQJN9PGlNp52w8KNVApuftRmLkpbyYXJ0S9Q2EedPcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:14:15:8f:b0:6f:16:f9:7c:12:db:62:4b:3d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f Validity Not Before: Dec 6 01:00:54 2025 GMT Not After : Dec 7 01:00:54 2025 GMT Subject: CN=2e9f7768935e499eaccafce8a0528bc14697cea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f5:78:4c:dd:ed:90:ec:b9:94:74:d4:b9:44: 71:3c:a4:64:32:71:4e:4b:09:8b:f3:cb:fa:c9:42: 35:41:2e:9f:78:ef:cb:47:9f:fd:38:1b:13:b7:4a: b6:6d:b1:f5:4f:e7:d1:1a:78:b3:40:bb:79:bf:88: 21:07:44:8a:c9:43:b4:ba:c8:ac:c8:b6:65:7f:8e: 1f:0a:57:c2:18:7a:27:dc:af:26:fe:cb:dc:0a:3f: 89:81:f3:4d:b1:fe:2a:e0:e2:c1:9d:c3:95:6b:bd: 03:3d:cd:c0:3c:9d:b9:9b:27:90:b1:c9:48:72:89: 43:5e:ea:22:17:11:58:3b:1c:a3:d2:6e:d3:be:68: 09:54:06:61:d8:14:06:58:d4:a5:bd:14:de:a9:ac: ae:8d:a1:b0:bc:ee:f1:ff:8a:ad:53:c1:66:ab:b8: 16:ca:c8:f5:af:f0:03:ca:c2:64:25:78:78:bd:2d: fa:f9:9b:a7:a7:7d:7d:b3:99:ce:cb:9b:9c:6e:23: be:d9:bb:82:5f:ff:2f:5a:4b:da:4f:39:71:df:63: 58:7c:7f:45:5a:f8:06:5d:69:8b:b6:19:52:bd:c4: c9:c9:03:2b:54:f1:9f:91:1b:7c:82:92:af:c2:cc: 7a:31:e0:ff:70:1d:1d:d3:0b:16:d3:ad:c5:90:52: cb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9F:77:68:93:5E:49:9E:AC:CA:FC:E8:A0:52:8B:C1:46:97:CE:A1 X509v3 Authority Key Identifier: keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:2c:13:c0:f0:2e:ec:3d:cf:57:e5:51:d8:ec:7a:dc:93:22: c1:04:c7:c1:51:67:6c:17:c8:d0:ba:c6:0a:01:5a:4c:82:ba: fd:e0:51:1f:00:ad:1a:f8:f8:bb:f3:8d:04:9a:49:ac:b7:53: c4:18:02:84:de:2a:e9:86:98:11:54:84:f3:21:cf:5b:32:4d: 7b:99:9d:89:72:8f:67:11:db:59:47:d9:dc:ce:d2:b4:e7:85: b4:c3:ab:29:c5:05:02:dd:ab:2d:83:88:28:33:0f:c8:56:cf: 1c:c8:06:52:57:80:f9:40:44:05:ac:c7:7c:09:60:90:ab:9a: 66:90:c4:59:53:e1:d3:c0:22:a9:51:04:ee:d1:ae:f3:54:27: 34:a1:49:e1:8f:c4:31:ae:93:2b:2a:09:4e:dd:c3:a1:3b:19: 92:01:e6:90:4c:42:5c:76:ea:cb:05:12:0e:4d:9d:80:82:9f: 7f:95:aa:f8:85:39:82:4f:59:01:bc:d9:6f:aa:70:e9:d7:39: 6e:56:a2:b7:7c:d3:92:91:55:9f:b0:98:d8:e5:e7:c6:34:47: f8:ed:7f:2b:3d:be:42:c3:3f:b3:66:17:16:31:14:44:c8:c3: d6:b9:e9:fb:8f:6f:3e:0a:ea:37:80:58:1f:fc:28:cd:63:50: 2c:5a:03:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRQVj7BvFvl8EttiSz0TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZmQ5OTA5ZDE2YmFmMTFjYjk1OGM4ZDI3NGUyNGVjOTk0 NzQyMmYwHhcNMjUxMjA2MDEwMDU0WhcNMjUxMjA3MDEwMDU0WjAzMTEwLwYDVQQD EygyZTlmNzc2ODkzNWU0OTllYWNjYWZjZThhMDUyOGJjMTQ2OTdjZWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfV4TN3tkOy5lHTUuURxPKRkMnFO SwmL88v6yUI1QS6feO/LR5/9OBsTt0q2bbH1T+fRGnizQLt5v4ghB0SKyUO0usis yLZlf44fClfCGHon3K8m/svcCj+JgfNNsf4q4OLBncOVa70DPc3APJ25myeQsclI colDXuoiFxFYOxyj0m7TvmgJVAZh2BQGWNSlvRTeqayujaGwvO7x/4qtU8Fmq7gW ysj1r/ADysJkJXh4vS36+Zunp319s5nOy5ucbiO+2buCX/8vWkvaTzlx32NYfH9F WvgGXWmLthlSvcTJyQMrVPGfkRt8gpKvwsx6MeD/cB0d0wsW063FkFLLGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6fd2iTXkmerMr86KBSi8FGl86hMB8GA1UdIwQY MBaAFOf9mQnRa68Ry5WMjSdOJOyZR0IvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xZjAxZTMtNzdkMy00Y2Y3LWFlYTgt MTIyZmVlY2RlM2VhLzEvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8xZjAxZTMtNzdkMy00Y2Y3LWFlYTgtMTIyZmVlY2RlM2Vh LzEvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSwTwPAu 7D3PV+VR2Ox63JMiwQTHwVFnbBfI0LrGCgFaTIK6/eBRHwCtGvj4u/ONBJpJrLdT xBgChN4q6YaYEVSE8yHPWzJNe5mdiXKPZxHbWUfZ3M7StOeFtMOrKcUFAt2rLYOI KDMPyFbPHMgGUleA+UBEBazHfAlgkKuaZpDEWVPh08AiqVEE7tGu81QnNKFJ4Y/E Ma6TKyoJTt3DoTsZkgHmkExCXHbqywUSDk2dgIKff5Wq+IU5gk9ZAbzZb6pw6dc5 blait3zTkpFVn7CY2OXnxjRH+O1/Kz2+QsM/s2YXFjEURMjD1rnp+49vPgrqN4BY H/wozWNQLFoDHg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:36:01 2025 by rpki-client