This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft File: 5_y3rNVfY0m52BRheGwSRY-G9y4.mft (raw, json) Hash identifier: lcqbdoMN2LkOzOg3JvUo2q7E5DWik/+P+XKZyvB5rwk= Subject key identifier: 47:58:58:D0:93:58:A9:8A:BC:88:F1:F0:A5:91:90:3E:18:9C:12:53 Authority key identifier: E7:FC:B7:AC:D5:5F:63:49:B9:D8:14:61:78:6C:12:45:8F:86:F7:2E Certificate issuer: /CN=e7fcb7acd55f6349b9d81461786c12458f86f72e Certificate serial: 019AF2769F9A111AAD22C65BE5B9F994032B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 07:00:51 +0000 Manifest this update: Sat 06 Dec 2025 07:00:51 +0000 Manifest next update: Sun 07 Dec 2025 07:00:51 +0000 Files and hashes: 1: 5_y3rNVfY0m52BRheGwSRY-G9y4.crl (hash: fy8aP75AtUpLy54/xanpFJYHK+NFv+w1bzM+7uMqBrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:9f:9a:11:1a:ad:22:c6:5b:e5:b9:f9:94:03:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7fcb7acd55f6349b9d81461786c12458f86f72e Validity Not Before: Dec 6 07:00:51 2025 GMT Not After : Dec 7 07:00:51 2025 GMT Subject: CN=475858d09358a98abc88f1f0a591903e189c1253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2e:3f:cf:4b:01:ef:05:56:60:4c:97:5e:a7: 5b:bc:2c:bd:b5:8d:56:b9:a3:17:93:f4:62:aa:83: 21:67:3e:ae:65:de:35:50:88:85:5d:17:35:8e:73: c3:49:b2:00:33:e8:aa:15:8a:0f:d8:b6:ff:26:26: 0e:b3:93:b6:93:04:c4:2c:ed:d1:1a:58:60:19:6e: 6f:82:e7:db:c3:0f:bc:6b:0e:72:fe:23:2b:bf:96: 35:a3:e9:00:1f:bd:55:be:8c:9c:f9:2d:4e:e7:b0: 51:bd:c0:98:1d:fc:eb:e7:48:67:5f:9c:34:92:fb: e5:8e:42:16:6e:cc:f8:03:e4:6f:d0:e5:34:ae:83: d4:bc:ac:ba:31:3d:a7:aa:53:39:ab:55:26:6f:97: 64:3b:74:ae:7e:1a:92:15:a2:37:d2:9d:7c:53:f0: d5:f2:66:a2:a7:f5:69:7f:ea:b1:3a:7f:ed:f9:f4: d7:1b:b5:51:46:40:3b:ad:6a:7b:70:25:32:97:08: 18:cb:9c:a3:f9:19:c4:85:06:76:d9:c5:97:c0:6d: 36:b2:47:af:5f:6b:8c:a6:e3:8a:8c:2d:40:84:65: 3f:15:e1:6d:1f:1d:29:26:e1:c6:b9:29:b4:77:b5: f9:15:2a:87:5b:ba:3a:19:cf:7f:7b:3b:4e:9b:38: c9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:58:58:D0:93:58:A9:8A:BC:88:F1:F0:A5:91:90:3E:18:9C:12:53 X509v3 Authority Key Identifier: keyid:E7:FC:B7:AC:D5:5F:63:49:B9:D8:14:61:78:6C:12:45:8F:86:F7:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f3:66:b5:77:38:c1:56:09:9b:29:26:cb:09:91:e1:9a:d6: d2:ff:b7:79:07:c9:f3:29:95:32:d7:3c:34:c6:db:4b:2d:6d: 00:d6:b3:db:5b:35:38:33:0b:1d:5f:6e:62:4a:99:4d:b7:d7: a4:a2:cf:2b:c5:e5:1b:d7:57:75:19:b7:5d:a7:fd:23:b2:e1: b7:b6:b7:52:45:86:77:9e:3b:18:b7:78:e8:96:ed:43:5a:b0: 0b:a7:be:7a:fa:2e:23:70:55:9c:d5:9f:19:d3:78:24:1e:e3: f3:03:09:8b:09:39:36:e5:66:e6:12:bf:c1:aa:c1:f7:85:2a: 35:68:55:70:84:41:5c:e5:41:02:b6:b7:bb:ec:98:11:de:28: 99:fb:78:8e:0b:da:78:60:41:8e:67:db:28:c0:06:d3:1b:4b: eb:47:a3:3b:b0:d1:5b:f9:f4:8d:9d:2c:a2:b3:a5:d2:1e:b0: e4:c9:4b:a3:ee:4f:0e:2d:92:dc:22:f3:ef:7f:59:07:fd:9b: 93:80:6c:e8:6b:8d:05:5d:11:27:04:ac:93:c7:df:44:e0:a4: 9b:09:05:10:94:d4:dc:13:8b:ad:37:8f:01:eb:31:19:93:42: 8a:84:1a:bc:1f:51:79:fe:c4:f7:23:ea:25:6f:87:ea:1c:03: 41:7d:41:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydp+aERqtIsZb5bn5lAMrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZmNiN2FjZDU1ZjYzNDliOWQ4MTQ2MTc4NmMxMjQ1OGY4 NmY3MmUwHhcNMjUxMjA2MDcwMDUxWhcNMjUxMjA3MDcwMDUxWjAzMTEwLwYDVQQD Eyg0NzU4NThkMDkzNThhOThhYmM4OGYxZjBhNTkxOTAzZTE4OWMxMjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy4/z0sB7wVWYEyXXqdbvCy9tY1W uaMXk/RiqoMhZz6uZd41UIiFXRc1jnPDSbIAM+iqFYoP2Lb/JiYOs5O2kwTELO3R GlhgGW5vgufbww+8aw5y/iMrv5Y1o+kAH71Vvoyc+S1O57BRvcCYHfzr50hnX5w0 kvvljkIWbsz4A+Rv0OU0roPUvKy6MT2nqlM5q1Umb5dkO3SufhqSFaI30p18U/DV 8maip/Vpf+qxOn/t+fTXG7VRRkA7rWp7cCUylwgYy5yj+RnEhQZ22cWXwG02skev X2uMpuOKjC1AhGU/FeFtHx0pJuHGuSm0d7X5FSqHW7o6Gc9/eztOmzjJ8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdYWNCTWKmKvIjx8KWRkD4YnBJTMB8GA1UdIwQY MBaAFOf8t6zVX2NJudgUYXhsEkWPhvcuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV95M3JOVmZZMG01MkJSaGVHd1NSWS1HOXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82OTgzMzktNTkwNS00NjM3LWI5ODMt Y2RiM2E2NTdkOWVlLzEvNV95M3JOVmZZMG01MkJSaGVHd1NSWS1HOXk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82OTgzMzktNTkwNS00NjM3LWI5ODMtY2RiM2E2NTdkOWVl LzEvNV95M3JOVmZZMG01MkJSaGVHd1NSWS1HOXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfNmtXc4 wVYJmykmywmR4ZrW0v+3eQfJ8ymVMtc8NMbbSy1tANaz21s1ODMLHV9uYkqZTbfX pKLPK8XlG9dXdRm3Xaf9I7Lht7a3UkWGd547GLd46JbtQ1qwC6e+evouI3BVnNWf GdN4JB7j8wMJiwk5NuVm5hK/warB94UqNWhVcIRBXOVBAra3u+yYEd4omft4jgva eGBBjmfbKMAG0xtL60ejO7DRW/n0jZ0sorOl0h6w5MlLo+5PDi2S3CLz739ZB/2b k4Bs6GuNBV0RJwSsk8ffROCkmwkFEJTU3BOLrTePAesxGZNCioQavB9Ref7E9yPq JW+H6hwDQX1B/w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:46:59 2025 by rpki-client