This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft File: 5EV2NuWtZuHw-7LBDfKQleY-mS8.mft (raw, json) Hash identifier: tP/EkNABXhvAc4vgRF0YHuCOoo8BaxEUuONA6u8OhOM= Subject key identifier: 6F:A0:AD:7E:43:91:BE:DD:29:C7:17:B8:79:B6:D8:AF:19:F5:F8:FE Authority key identifier: E4:45:76:36:E5:AD:66:E1:F0:FB:B2:C1:0D:F2:90:95:E6:3E:99:2F Certificate issuer: /CN=e4457636e5ad66e1f0fbb2c10df29095e63e992f Certificate serial: 019AF27693989AA08D944FCAA10DB6B1BE49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft Manifest number: 10E7 Signing time: Sat 06 Dec 2025 07:00:48 +0000 Manifest this update: Sat 06 Dec 2025 07:00:48 +0000 Manifest next update: Sun 07 Dec 2025 07:00:48 +0000 Files and hashes: 1: 5EV2NuWtZuHw-7LBDfKQleY-mS8.crl (hash: F1i+xCym93Hj0mQgmzfEThts5ymAaanzNM9boMYmGn4=) 2: 7dpbzZX7eYfnBG7vQSonxLufldI.roa (hash: MAdnQYRbZ0ATJEdytmIxDRxyJPZ/GK0bSNF0Uiu38tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.crl rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:93:98:9a:a0:8d:94:4f:ca:a1:0d:b6:b1:be:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4457636e5ad66e1f0fbb2c10df29095e63e992f Validity Not Before: Dec 6 07:00:48 2025 GMT Not After : Dec 7 07:00:48 2025 GMT Subject: CN=6fa0ad7e4391bedd29c717b879b6d8af19f5f8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2a:87:47:38:3c:0e:a2:44:26:41:20:19:1e: 06:6b:68:51:61:2d:60:7b:22:d1:17:6b:25:f5:ba: 41:49:8e:da:9d:3a:9a:b6:81:48:6f:03:95:39:da: 13:ff:74:da:15:9a:a8:54:19:7a:f6:1d:d4:e5:a7: 8a:fa:4e:47:4c:6b:b7:cc:79:9d:77:91:ff:6d:85: bd:6f:13:30:b4:08:58:31:4a:0a:4b:0d:ac:aa:a4: 19:9e:3e:58:b5:66:0e:aa:14:e0:c5:44:21:bc:2a: df:c4:8a:94:66:4d:03:5e:bb:c0:74:91:e6:97:fd: 10:07:91:e5:eb:7d:ee:f9:92:96:91:6e:f9:29:98: 34:c3:86:25:38:d4:73:d8:2b:ec:26:c3:cf:04:ae: 5d:d9:ca:ed:42:0a:ae:2d:af:71:ca:1d:29:09:9c: 70:96:03:ee:7d:d9:09:3d:7b:ad:1a:37:80:db:02: a4:43:51:28:99:f7:c1:a2:2e:71:8f:21:b5:f9:73: ab:92:c5:df:68:7a:52:fb:8c:05:87:84:b8:6d:75: 05:c5:93:4f:3f:a3:87:7e:31:d7:ec:7f:db:6f:67: 2c:36:d2:e4:2e:42:d4:f4:b6:6b:7f:7a:77:a4:22: 85:85:02:13:9c:0f:f7:f7:83:42:b5:51:71:3b:eb: 32:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A0:AD:7E:43:91:BE:DD:29:C7:17:B8:79:B6:D8:AF:19:F5:F8:FE X509v3 Authority Key Identifier: keyid:E4:45:76:36:E5:AD:66:E1:F0:FB:B2:C1:0D:F2:90:95:E6:3E:99:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9d:5c:44:3a:43:7d:87:34:bb:d1:4a:a1:f7:0b:70:6e:e1: 65:2d:b2:21:42:29:7b:a5:17:f7:b9:e1:a4:b3:a9:6e:2e:eb: 37:9b:5a:3d:5c:ab:d4:09:ff:1f:57:e0:38:c0:de:fd:e3:fc: d5:9c:94:e1:8d:9f:5d:1f:0e:5d:29:30:cd:dc:bc:86:b6:66: dc:d4:9c:97:29:2e:fd:56:c1:cd:e7:96:6e:cf:84:7d:fe:46: 09:55:1a:96:bb:d9:78:cc:fb:24:cb:3e:6c:07:4f:10:4e:af: 8e:20:f3:fb:ef:e3:3b:36:e2:be:41:90:07:69:f6:f6:6c:ba: 8e:a4:64:4b:53:da:42:8c:d9:86:8f:8d:1b:37:1b:bc:d5:8d: aa:b5:5f:c9:d2:59:1b:87:9a:37:0d:38:e0:3e:03:64:17:98: 05:9b:87:dd:26:7a:48:ef:8e:ca:6e:a9:57:4b:a0:9a:2d:74: 44:03:01:b0:b0:23:7a:79:1e:6d:88:dc:9f:14:4e:c2:3a:e1: 07:b4:cf:c9:52:46:ce:12:7a:08:98:de:ac:ec:b9:aa:4a:ff: 68:33:14:9b:78:dc:e4:11:68:3e:63:b2:42:b6:d7:f8:eb:49: 04:81:d4:45:e7:44:72:e6:32:44:3a:d2:26:21:13:9f:3a:c9: 76:73:17:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpOYmqCNlE/KoQ22sb5JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NDU3NjM2ZTVhZDY2ZTFmMGZiYjJjMTBkZjI5MDk1ZTYz ZTk5MmYwHhcNMjUxMjA2MDcwMDQ4WhcNMjUxMjA3MDcwMDQ4WjAzMTEwLwYDVQQD Eyg2ZmEwYWQ3ZTQzOTFiZWRkMjljNzE3Yjg3OWI2ZDhhZjE5ZjVmOGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyqHRzg8DqJEJkEgGR4Ga2hRYS1g eyLRF2sl9bpBSY7anTqatoFIbwOVOdoT/3TaFZqoVBl69h3U5aeK+k5HTGu3zHmd d5H/bYW9bxMwtAhYMUoKSw2sqqQZnj5YtWYOqhTgxUQhvCrfxIqUZk0DXrvAdJHm l/0QB5Hl633u+ZKWkW75KZg0w4YlONRz2CvsJsPPBK5d2crtQgquLa9xyh0pCZxw lgPufdkJPXutGjeA2wKkQ1EomffBoi5xjyG1+XOrksXfaHpS+4wFh4S4bXUFxZNP P6OHfjHX7H/bb2csNtLkLkLU9LZrf3p3pCKFhQITnA/394NCtVFxO+syZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+grX5Dkb7dKccXuHm22K8Z9fj+MB8GA1UdIwQY MBaAFORFdjblrWbh8PuywQ3ykJXmPpkvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUVWMk51V3RadUh3LTdMQkRmS1FsZVktbVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84YzlmMTktYTcwMC00ODMyLWJlMjEt YjBkNWU4YmU4NTNjLzEvNUVWMk51V3RadUh3LTdMQkRmS1FsZVktbVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS84YzlmMTktYTcwMC00ODMyLWJlMjEtYjBkNWU4YmU4NTNj LzEvNUVWMk51V3RadUh3LTdMQkRmS1FsZVktbVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX51cRDpD fYc0u9FKofcLcG7hZS2yIUIpe6UX97nhpLOpbi7rN5taPVyr1An/H1fgOMDe/eP8 1ZyU4Y2fXR8OXSkwzdy8hrZm3NSclyku/VbBzeeWbs+Eff5GCVUalrvZeMz7JMs+ bAdPEE6vjiDz++/jOzbivkGQB2n29my6jqRkS1PaQozZho+NGzcbvNWNqrVfydJZ G4eaNw044D4DZBeYBZuH3SZ6SO+Oym6pV0ugmi10RAMBsLAjenkebYjcnxROwjrh B7TPyVJGzhJ6CJjerOy5qkr/aDMUm3jc5BFoPmOyQrbX+OtJBIHURedEcuYyRDrS JiETnzrJdnMX1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:50 2025 by rpki-client