This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft File: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft (raw, json) Hash identifier: eKlhw6Bmeh/LD6tyxtb2DfJ48oEwY6OuOctNSn0DVVU= Subject key identifier: 28:7B:D9:20:AA:5B:43:3F:41:67:55:B2:71:43:0B:B1:23:A4:93:86 Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18 Certificate issuer: /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518 Certificate serial: 019AF50AAA80F1FF08A15DD5FACCB47EBC0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft Manifest number: 1136 Signing time: Sat 06 Dec 2025 19:01:48 +0000 Manifest this update: Sat 06 Dec 2025 19:01:48 +0000 Manifest next update: Sun 07 Dec 2025 19:01:48 +0000 Files and hashes: 1: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl (hash: vjUG/MsBZE3vez0YEczwZeMzUMkjEitaLUpyseyGOBs=) 2: FrjAEg86v5SV-4VLldw-NEA5C1M.roa (hash: Rm7Xoat+7nBF56KNvwJMCJ6wscvSb/PfpXRNxa3KAIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:aa:80:f1:ff:08:a1:5d:d5:fa:cc:b4:7e:bc:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518 Validity Not Before: Dec 6 19:01:48 2025 GMT Not After : Dec 7 19:01:48 2025 GMT Subject: CN=287bd920aa5b433f416755b271430bb123a49386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8d:1f:e7:c6:d9:a7:ae:45:af:a2:30:30:d8: e7:df:c7:d3:1b:b9:44:43:6f:8a:3c:b6:72:49:b3: a6:ae:32:6a:77:1e:5c:7a:7d:b5:c2:ff:cd:5f:bc: 4a:7a:28:91:4e:46:d6:b5:9c:30:0d:8a:9d:42:9f: 82:ab:bb:38:47:df:e1:91:7b:92:36:2e:e3:6a:2a: fc:06:64:92:f1:7e:11:0e:8d:eb:20:7f:c0:8e:dc: a0:64:e1:30:5b:b2:0d:2d:a2:c6:c6:b2:11:e4:45: 4d:8a:2f:b4:6a:46:99:52:38:cf:f6:31:f9:91:01: e7:0d:fa:ce:17:bb:15:07:86:e9:6e:ad:08:99:38: 95:41:91:c3:8f:b7:94:fe:58:59:d7:75:0b:13:82: 78:75:fe:02:b2:30:3d:02:3e:60:72:03:91:3f:0a: 17:0f:ef:c2:a5:79:fb:d7:8c:29:3b:a7:a8:a1:b2: b6:11:5b:6e:6e:77:36:21:ba:d0:8f:53:95:f9:a7: e2:88:bd:7f:d2:3e:5e:4c:75:69:51:85:46:0f:bf: 8a:4a:d1:90:28:0a:16:e5:a6:91:63:57:99:47:55: bb:28:bc:89:70:57:0f:af:e0:de:0b:dd:fc:07:d6: 70:a5:58:bf:fc:27:cd:b2:cd:4e:45:a4:cb:62:b6: 47:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7B:D9:20:AA:5B:43:3F:41:67:55:B2:71:43:0B:B1:23:A4:93:86 X509v3 Authority Key Identifier: keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:2b:d8:3b:c6:f6:6d:35:ef:ed:81:b2:5a:89:50:93:06:20: 95:1b:4c:cc:4c:b6:cb:02:86:75:8e:8f:ee:ec:c8:43:53:dd: 42:aa:a6:3a:69:cc:79:73:58:7d:bd:9f:79:de:43:22:f9:58: 65:b8:61:e8:05:2b:4b:72:a9:05:a4:52:a6:67:00:6e:98:11: 6b:6e:10:46:00:61:5f:98:b7:46:f2:18:65:08:33:18:4e:95: 47:74:6d:1e:bd:61:06:be:65:aa:e2:15:93:02:b7:07:a2:76: a2:31:1a:a3:67:26:a8:51:4b:08:96:a3:39:a5:ba:8c:0d:dc: 8d:b0:04:83:5a:38:07:3a:cb:8d:22:d0:4d:2f:a0:ab:38:ac: f4:dc:f9:9a:e0:c9:61:6f:06:3c:4e:7a:46:85:3e:7b:06:63: 0e:0a:7e:84:c1:75:e8:e7:50:bc:a6:7a:f3:9a:1c:88:86:5c: 56:cb:7e:d3:8a:1a:e5:de:9c:57:f8:9e:c9:6c:7a:8d:3a:c3: 32:54:7b:70:3e:e8:7e:d2:21:49:08:eb:46:8b:14:60:76:68: 71:e4:40:64:38:36:12:38:6b:10:fc:4b:f2:ee:ef:22:92:c6: f6:b2:f6:d7:87:c5:4c:17:ea:83:89:9d:9e:18:6b:28:ac:65: b8:af:51:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CqqA8f8IoV3V+sy0frwMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MTg1MTIwZTdhM2I5NjJiOWZmZTRhYmVkMTZkMGFhM2Ez MjA1MTgwHhcNMjUxMjA2MTkwMTQ4WhcNMjUxMjA3MTkwMTQ4WjAzMTEwLwYDVQQD EygyODdiZDkyMGFhNWI0MzNmNDE2NzU1YjI3MTQzMGJiMTIzYTQ5Mzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo0f58bZp65Fr6IwMNjn38fTG7lE Q2+KPLZySbOmrjJqdx5cen21wv/NX7xKeiiRTkbWtZwwDYqdQp+Cq7s4R9/hkXuS Ni7jair8BmSS8X4RDo3rIH/AjtygZOEwW7INLaLGxrIR5EVNii+0akaZUjjP9jH5 kQHnDfrOF7sVB4bpbq0ImTiVQZHDj7eU/lhZ13ULE4J4df4CsjA9Aj5gcgORPwoX D+/CpXn714wpO6eoobK2EVtubnc2IbrQj1OV+afiiL1/0j5eTHVpUYVGD7+KStGQ KAoW5aaRY1eZR1W7KLyJcFcPr+DeC938B9ZwpVi//CfNss1ORaTLYrZH/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCh72SCqW0M/QWdVsnFDC7EjpJOGMB8GA1UdIwQY MBaAFOcYUSDno7liuf/kq+0W0Ko6MgUYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXhoUklPZWp1V0s1Xy1TcjdSYlFxam95QlJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84MDAwMWQtYjU4MS00NWZiLTkxMzgt ODljNjQyMGQ2ZjM2LzEvNXhoUklPZWp1V0s1Xy1TcjdSYlFxam95QlJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84MDAwMWQtYjU4MS00NWZiLTkxMzgtODljNjQyMGQ2ZjM2 LzEvNXhoUklPZWp1V0s1Xy1TcjdSYlFxam95QlJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcivYO8b2 bTXv7YGyWolQkwYglRtMzEy2ywKGdY6P7uzIQ1PdQqqmOmnMeXNYfb2fed5DIvlY Zbhh6AUrS3KpBaRSpmcAbpgRa24QRgBhX5i3RvIYZQgzGE6VR3RtHr1hBr5lquIV kwK3B6J2ojEao2cmqFFLCJajOaW6jA3cjbAEg1o4BzrLjSLQTS+gqzis9Nz5muDJ YW8GPE56RoU+ewZjDgp+hMF16OdQvKZ685ociIZcVst+04oa5d6cV/ieyWx6jTrD MlR7cD7oftIhSQjrRosUYHZoceRAZDg2EjhrEPxL8u7vIpLG9rL214fFTBfqg4md nhhrKKxluK9Rsw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:51:18 2025 by rpki-client