This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft File: 5trj7-CjZ5faQ8vVj23_mcO73Y0.mft (raw, json) Hash identifier: R77Qiq9KsHieCNQtZP9O+p8f/wNHOQiZtWT60KH1fWw= Subject key identifier: 7B:EB:FE:17:AD:05:77:FB:3F:B9:53:51:79:B2:3D:1C:E8:78:B3:B0 Authority key identifier: E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D Certificate issuer: /CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d Certificate serial: 019B27416FDCB7BEC4C4EA36293967861218 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 13:02:38 +0000 Manifest this update: Tue 16 Dec 2025 13:02:38 +0000 Manifest next update: Wed 17 Dec 2025 13:02:38 +0000 Files and hashes: 1: 5trj7-CjZ5faQ8vVj23_mcO73Y0.crl (hash: CutfFJS2iRASRoddmZpn0iwnD8Ff8BEQIDmvkmli1Kg=) 2: jtdGItGjIscVK6iUpNCTUSGRedQ.roa (hash: FnwkKHIg+SdV2PfeNPF4IQR2s2fhTwukNFGZU8AgQ9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:41:6f:dc:b7:be:c4:c4:ea:36:29:39:67:86:12:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d Validity Not Before: Dec 16 13:02:38 2025 GMT Not After : Dec 17 13:02:38 2025 GMT Subject: CN=7bebfe17ad0577fb3fb9535179b23d1ce878b3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:83:88:7f:ce:3c:1a:16:95:86:ab:31:2b:94: b1:4d:91:c2:2c:47:f9:46:94:ee:1f:a8:ae:c5:1a: 05:7d:67:16:6d:a9:73:14:e0:71:96:3c:a6:10:3f: 73:09:48:17:04:45:f4:8e:68:69:cf:ec:de:68:3f: 0b:9a:db:43:8c:d4:68:d5:1d:30:3e:dc:9b:9f:96: 7e:49:25:78:d3:d7:7f:ec:53:47:dd:a0:5a:2f:65: 72:da:5a:b5:ae:2a:8f:f3:32:4a:95:93:9d:48:c4: 0c:e4:18:53:23:00:ce:0d:e0:ac:38:42:9a:de:74: 2a:44:04:94:50:97:8a:45:dd:6f:03:88:da:e0:30: 17:39:31:72:1e:6f:b1:c2:56:b4:b6:bd:48:38:e3: be:a4:44:2f:b5:cb:cd:31:2c:16:9f:05:89:ca:cf: af:52:4d:cc:4b:66:55:c0:a8:fc:80:34:96:17:45: 00:03:d3:3a:02:48:a0:c3:44:9e:81:4c:65:54:df: 38:7e:3a:d9:d4:f6:6c:43:97:c9:9e:75:27:4c:24: db:8c:4f:8d:d7:d5:da:75:04:57:a5:91:bd:79:9d: 41:84:5a:1e:7f:bb:0b:c6:df:1e:90:d9:5f:ac:55: 76:67:fd:f4:1a:eb:e6:c9:7f:8e:44:fc:f4:95:33: 17:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:EB:FE:17:AD:05:77:FB:3F:B9:53:51:79:B2:3D:1C:E8:78:B3:B0 X509v3 Authority Key Identifier: keyid:E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:e8:b9:f3:d8:ac:a4:6f:e4:c1:16:20:a5:17:42:50:77:2f: 5c:bd:9a:b3:32:45:aa:59:fd:66:c0:e6:d8:bc:f7:25:fc:b5: 25:4e:93:53:ec:db:1e:36:7d:62:6b:bd:92:f2:13:1d:3f:f9: b5:2f:4f:8d:55:cd:d8:f0:16:d5:56:00:81:cd:4e:69:cb:32: db:57:a9:1e:86:58:1c:4a:c2:5b:f7:81:f7:bd:cc:d5:32:b5: 66:30:e2:39:f2:b5:a5:73:ae:4a:67:f9:e6:e8:27:a3:e7:05: 24:40:e7:fb:69:72:f8:85:62:e2:f2:46:d9:33:e5:ea:c3:59: 61:68:d1:d6:2e:a0:5b:ee:74:23:50:c5:a5:97:33:8c:c6:24: 79:14:f8:cb:42:7c:bb:99:c3:03:99:da:e9:6d:b4:6b:96:9f: 14:6e:6d:e0:a0:7d:7f:8f:0f:b6:64:2a:de:8a:60:0a:46:e3: 09:e5:db:88:8e:71:cf:d0:ea:ec:9d:ff:e5:f2:df:25:f8:c8: 5a:cd:fc:54:5d:2a:0e:f8:d1:f3:e4:65:a8:ad:c1:c8:86:aa: 19:89:58:a7:e1:e3:08:2a:87:b7:72:38:51:79:76:37:67:80: 9b:15:14:ba:c3:94:05:3b:0b:bc:a3:fa:e7:ae:67:a4:6d:0b: 8b:c5:b0:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQW/ct77ExOo2KTlnhhIYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZGFlM2VmZTBhMzY3OTdkYTQzY2JkNThmNmRmZjk5YzNi YmRkOGQwHhcNMjUxMjE2MTMwMjM4WhcNMjUxMjE3MTMwMjM4WjAzMTEwLwYDVQQD Eyg3YmViZmUxN2FkMDU3N2ZiM2ZiOTUzNTE3OWIyM2QxY2U4NzhiM2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74OIf848GhaVhqsxK5SxTZHCLEf5 RpTuH6iuxRoFfWcWbalzFOBxljymED9zCUgXBEX0jmhpz+zeaD8LmttDjNRo1R0w Ptybn5Z+SSV409d/7FNH3aBaL2Vy2lq1riqP8zJKlZOdSMQM5BhTIwDODeCsOEKa 3nQqRASUUJeKRd1vA4ja4DAXOTFyHm+xwla0tr1IOOO+pEQvtcvNMSwWnwWJys+v Uk3MS2ZVwKj8gDSWF0UAA9M6Akigw0SegUxlVN84fjrZ1PZsQ5fJnnUnTCTbjE+N 19XadQRXpZG9eZ1BhFoef7sLxt8ekNlfrFV2Z/30GuvmyX+ORPz0lTMXDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvr/hetBXf7P7lTUXmyPRzoeLOwMB8GA1UdIwQY MBaAFOba4+/go2eX2kPL1Y9t/5nDu92NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXRyajctQ2paNWZhUTh2VmoyM19tY083M1kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9kMTI1ZmQtYzM5Yy00MjcyLThjYWQt NmMyZmZiNGI2MWU2LzEvNXRyajctQ2paNWZhUTh2VmoyM19tY083M1kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9kMTI1ZmQtYzM5Yy00MjcyLThjYWQtNmMyZmZiNGI2MWU2 LzEvNXRyajctQ2paNWZhUTh2VmoyM19tY083M1kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+i589is pG/kwRYgpRdCUHcvXL2aszJFqln9ZsDm2Lz3Jfy1JU6TU+zbHjZ9Ymu9kvITHT/5 tS9PjVXN2PAW1VYAgc1Oacsy21epHoZYHErCW/eB973M1TK1ZjDiOfK1pXOuSmf5 5ugno+cFJEDn+2ly+IVi4vJG2TPl6sNZYWjR1i6gW+50I1DFpZczjMYkeRT4y0J8 u5nDA5na6W20a5afFG5t4KB9f48PtmQq3opgCkbjCeXbiI5xz9Dq7J3/5fLfJfjI Ws38VF0qDvjR8+RlqK3ByIaqGYlYp+HjCCqHt3I4UXl2N2eAmxUUusOUBTsLvKP6 565npG0Li8Wwhg== -----END CERTIFICATE-----Generated at Tue Dec 16 19:13:22 2025 by rpki-client