This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft File: E5WjqPyN003W88lQxmH0shJxdaU.mft (raw, json) Hash identifier: DbEOxPFllhX3clEf3vXedFf+mgDDNkpaFW0+NtP9j9g= Subject key identifier: 25:B2:A3:7F:6E:7F:C8:CD:9A:C5:FD:2D:D1:2A:A3:53:11:A1:12:8E Authority key identifier: 13:95:A3:A8:FC:8D:D3:4D:D6:F3:C9:50:C6:61:F4:B2:12:71:75:A5 Certificate issuer: /CN=1395a3a8fc8dd34dd6f3c950c661f4b2127175a5 Certificate serial: 019AF276AF697D78C8C6E98918964FBC3846 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:00:55 +0000 Manifest this update: Sat 06 Dec 2025 07:00:55 +0000 Manifest next update: Sun 07 Dec 2025 07:00:55 +0000 Files and hashes: 1: 7WkSNMeKo3hgBONjdlWZ4xeGZtA.roa (hash: l6jtovWx9ge466onVKmeSTTNETL8X/SNcFUw3TEBnWE=) 2: E5WjqPyN003W88lQxmH0shJxdaU.crl (hash: W8nZqsdWPgANhaTIcXWYgQgGIYXeJCQMWYUDRBYuk0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.crl rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:af:69:7d:78:c8:c6:e9:89:18:96:4f:bc:38:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1395a3a8fc8dd34dd6f3c950c661f4b2127175a5 Validity Not Before: Dec 6 07:00:55 2025 GMT Not After : Dec 7 07:00:55 2025 GMT Subject: CN=25b2a37f6e7fc8cd9ac5fd2dd12aa35311a1128e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a6:5a:f2:39:a4:8d:c5:82:f6:f2:5e:ed:9e: 61:ee:a3:03:b1:bc:be:99:ce:5b:b0:33:3d:89:ef: a5:39:8c:7a:8a:e2:57:46:e4:b9:55:05:12:89:b9: 2b:d7:b5:53:c5:85:85:29:6c:7c:d1:94:b9:45:86: e1:70:d4:a6:7b:30:63:10:29:a3:31:19:93:3d:31: ae:24:50:b2:ef:2d:5a:3e:f5:cd:88:38:58:e4:8e: c0:96:de:d3:5c:5e:50:68:b4:64:f7:9d:a4:b8:f7: fa:23:db:18:30:4e:95:e0:29:06:d7:bc:87:3a:23: 9c:3b:01:16:97:50:3e:1f:40:99:4d:7c:16:fa:3e: 11:6e:b9:d3:39:ee:5e:ea:2e:c8:03:5b:ff:4d:02: d0:7c:17:48:9e:f0:ae:28:bd:69:41:38:47:42:36: 6f:45:4a:92:91:71:bf:a1:17:98:8f:7e:64:c1:9e: dc:ab:6d:b2:83:f0:65:57:f2:04:d2:eb:cc:d9:f9: a8:58:2f:e7:60:a0:89:29:27:99:85:8a:d8:eb:d0: e2:58:c8:bd:ba:33:92:28:1e:da:26:13:b1:02:6f: 0b:67:a1:92:30:7a:1c:6c:6a:b6:f4:89:d3:11:d1: 4a:64:e5:2f:94:8f:bd:c7:c7:13:d2:c8:50:c5:d1: 86:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B2:A3:7F:6E:7F:C8:CD:9A:C5:FD:2D:D1:2A:A3:53:11:A1:12:8E X509v3 Authority Key Identifier: keyid:13:95:A3:A8:FC:8D:D3:4D:D6:F3:C9:50:C6:61:F4:B2:12:71:75:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:9b:30:bc:1e:78:79:f5:e6:27:af:a8:3e:51:8d:dd:0b:b5: 7f:13:33:5f:bb:8a:8d:82:b3:cc:bb:02:3f:ab:ac:34:ee:4f: 0e:ec:e1:14:bf:11:c8:66:d7:10:3f:cb:62:d3:f5:31:1c:2f: 7b:d7:4e:29:eb:a6:99:8a:fc:b1:ed:ad:d8:08:df:27:ed:f4: 37:8c:cb:9f:16:fa:d9:c1:4c:b2:11:16:7c:d8:ce:05:19:5a: ca:22:51:f1:24:25:ec:18:6b:47:66:00:38:b5:a5:23:b1:a9: 5e:70:dd:79:9c:74:74:dd:9a:15:e1:5d:b3:0f:6e:a5:52:f5: e9:01:98:27:3f:79:1b:8a:92:68:1d:59:bc:6c:a5:0b:b1:ec: 89:69:f5:61:e3:ef:14:06:d6:66:55:07:58:d3:84:44:1f:c9: 55:c9:20:26:09:c0:a2:92:c6:7e:d1:15:05:29:d4:c0:0a:c3: f4:3a:7c:30:3b:a3:61:b1:36:08:4a:c8:90:38:08:74:ee:6d: 56:00:d1:f6:4d:cf:dc:00:85:7d:f1:bc:af:95:a4:fe:b3:56: 95:79:cd:9a:c5:44:87:a8:82:b2:f7:68:18:dd:6f:fe:b7:ee: 51:6a:11:ed:0e:dd:ed:b6:66:53:d4:d6:cf:c9:e2:cd:5c:87: e0:6a:36:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydq9pfXjIxumJGJZPvDhGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzOTVhM2E4ZmM4ZGQzNGRkNmYzYzk1MGM2NjFmNGIyMTI3 MTc1YTUwHhcNMjUxMjA2MDcwMDU1WhcNMjUxMjA3MDcwMDU1WjAzMTEwLwYDVQQD EygyNWIyYTM3ZjZlN2ZjOGNkOWFjNWZkMmRkMTJhYTM1MzExYTExMjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKZa8jmkjcWC9vJe7Z5h7qMDsby+ mc5bsDM9ie+lOYx6iuJXRuS5VQUSibkr17VTxYWFKWx80ZS5RYbhcNSmezBjECmj MRmTPTGuJFCy7y1aPvXNiDhY5I7Alt7TXF5QaLRk952kuPf6I9sYME6V4CkG17yH OiOcOwEWl1A+H0CZTXwW+j4RbrnTOe5e6i7IA1v/TQLQfBdInvCuKL1pQThHQjZv RUqSkXG/oReYj35kwZ7cq22yg/BlV/IE0uvM2fmoWC/nYKCJKSeZhYrY69DiWMi9 ujOSKB7aJhOxAm8LZ6GSMHocbGq29InTEdFKZOUvlI+9x8cT0shQxdGGiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWyo39uf8jNmsX9LdEqo1MRoRKOMB8GA1UdIwQY MBaAFBOVo6j8jdNN1vPJUMZh9LIScXWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTVXanFQeU4wMDNXODhsUXhtSDBzaEp4ZGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My81MmM0NDgtMWNiOS00YmViLThmYzIt ZjA0OGE5MjY2ZmNmLzEvRTVXanFQeU4wMDNXODhsUXhtSDBzaEp4ZGFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My81MmM0NDgtMWNiOS00YmViLThmYzItZjA0OGE5MjY2ZmNm LzEvRTVXanFQeU4wMDNXODhsUXhtSDBzaEp4ZGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5swvB54 efXmJ6+oPlGN3Qu1fxMzX7uKjYKzzLsCP6usNO5PDuzhFL8RyGbXED/LYtP1MRwv e9dOKeummYr8se2t2AjfJ+30N4zLnxb62cFMshEWfNjOBRlayiJR8SQl7BhrR2YA OLWlI7GpXnDdeZx0dN2aFeFdsw9upVL16QGYJz95G4qSaB1ZvGylC7HsiWn1YePv FAbWZlUHWNOERB/JVckgJgnAopLGftEVBSnUwArD9Dp8MDujYbE2CErIkDgIdO5t VgDR9k3P3ACFffG8r5Wk/rNWlXnNmsVEh6iCsvdoGN1v/rfuUWoR7Q7d7bZmU9TW z8nizVyH4Go2pw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:27:31 2025 by rpki-client