This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft File: 5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json) Hash identifier: hHyPD5PciJXrzmKEzHvepyxHMITKbSGIeCPi8QFkz0M= Subject key identifier: 47:FE:2C:46:37:98:84:F9:1C:B1:F7:BE:D3:31:74:5A:39:D7:7C:73 Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2 Certificate issuer: /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2 Certificate serial: 019AF8424734243EA3D4730E886D983DD032 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft Manifest number: 0482 Signing time: Sun 07 Dec 2025 10:01:24 +0000 Manifest this update: Sun 07 Dec 2025 10:01:24 +0000 Manifest next update: Mon 08 Dec 2025 10:01:24 +0000 Files and hashes: 1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: 59feQAmWaNIhzbkuu8mLCdXwHPEK/PvLcuyUKCZlx+o=) 2: GtnbuughA7lHebTG_DZyY-rxvp0.roa (hash: 0ytXaby9nsfJsM0kCLclgYx+EoqtC/Er8+W1ubhewEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:42:47:34:24:3e:a3:d4:73:0e:88:6d:98:3d:d0:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2 Validity Not Before: Dec 7 10:01:24 2025 GMT Not After : Dec 8 10:01:24 2025 GMT Subject: CN=47fe2c46379884f91cb1f7bed331745a39d77c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:35:66:bf:02:e1:d6:43:16:75:1e:19:0a:4a: 9a:0f:6e:98:52:bb:75:74:a8:34:74:48:08:07:9e: 45:64:4f:d6:7f:8e:3a:b7:dd:8c:27:d5:9b:bf:f5: e2:6f:f1:e8:2e:48:15:17:40:d9:71:71:cb:ef:92: 37:0b:54:2c:1a:80:d5:5b:e0:fa:19:b4:3e:c7:0e: 40:23:00:e4:50:6c:48:a0:2f:27:34:4f:d5:0b:59: 3e:1f:5c:a9:67:fb:6c:27:c9:6e:00:36:75:11:2a: 51:ab:ee:55:38:1e:a3:43:de:a0:2c:d4:43:5a:1b: 05:cc:6e:92:40:7c:b1:3f:3f:a3:6e:35:78:36:3e: 0c:50:e3:d7:ed:43:3a:4e:51:05:bb:8c:7b:9c:43: 3b:03:b1:4b:43:0e:a6:d6:17:8e:bd:16:e5:93:17: a2:f2:f1:ba:ce:d6:59:c3:87:d8:fd:f1:be:71:1d: 01:40:69:aa:35:3c:a3:05:a1:9f:67:71:cd:bb:17: 12:83:d7:32:5a:69:5e:95:e8:9d:6b:5b:ca:a3:4d: 2a:d0:1d:df:aa:9d:9c:bb:dc:bb:59:02:93:95:b6: 45:ea:0a:e8:21:78:10:b9:05:f6:91:1c:34:1a:fc: 56:e1:75:ac:8b:23:b9:f2:bd:3b:5f:ae:b0:30:6a: 0d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:FE:2C:46:37:98:84:F9:1C:B1:F7:BE:D3:31:74:5A:39:D7:7C:73 X509v3 Authority Key Identifier: keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:3f:14:05:e1:d8:3c:32:94:24:9c:cc:19:13:12:01:7a:61: f0:b8:16:15:df:4d:55:ea:ed:22:47:95:23:78:24:b5:88:85: 58:4c:8c:f7:e3:6b:49:f2:25:bb:db:60:3b:28:11:1f:6b:9d: c3:5b:33:98:33:6d:c4:42:d4:0b:15:fc:07:b2:3d:5e:67:6d: 88:ed:c2:e9:47:61:7b:e8:11:00:ee:03:01:42:46:77:0c:6a: 2c:ed:a8:1d:30:34:53:fa:70:d5:c2:ef:c3:4f:74:f1:6a:08: b1:ad:27:b9:29:f6:d0:d5:33:72:a8:a5:8c:7f:48:58:c7:2d: 9c:1e:d8:cf:99:97:97:58:59:ee:58:2f:cc:20:84:f1:c2:40: 3e:c6:72:42:19:f0:02:42:fd:ab:f6:8b:99:5a:13:88:9a:2f: 82:6b:44:e7:b3:3a:ba:75:8e:5f:a6:40:16:13:54:d9:af:56: 7b:de:7b:93:16:cf:d2:19:6f:b2:96:43:4d:fe:04:69:6b:8c: d5:48:c5:1f:26:c9:0e:85:28:84:de:66:25:4d:38:b4:3b:f7: 6f:e1:6b:96:b6:dc:dc:b0:ee:95:98:4f:27:6e:6a:df:45:26: 0e:e4:32:60:fa:8b:de:59:79:75:19:24:53:58:56:72:22:82: 76:27:1a:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4Qkc0JD6j1HMOiG2YPdAyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MmFjZmNiZDc5ZjIzMmM1ZDcyYTU1MGJjNGM2NmYxMTEw N2EwZTIwHhcNMjUxMjA3MTAwMTI0WhcNMjUxMjA4MTAwMTI0WjAzMTEwLwYDVQQD Eyg0N2ZlMmM0NjM3OTg4NGY5MWNiMWY3YmVkMzMxNzQ1YTM5ZDc3YzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjVmvwLh1kMWdR4ZCkqaD26YUrt1 dKg0dEgIB55FZE/Wf446t92MJ9Wbv/Xib/HoLkgVF0DZcXHL75I3C1QsGoDVW+D6 GbQ+xw5AIwDkUGxIoC8nNE/VC1k+H1ypZ/tsJ8luADZ1ESpRq+5VOB6jQ96gLNRD WhsFzG6SQHyxPz+jbjV4Nj4MUOPX7UM6TlEFu4x7nEM7A7FLQw6m1heOvRblkxei 8vG6ztZZw4fY/fG+cR0BQGmqNTyjBaGfZ3HNuxcSg9cyWmleleida1vKo00q0B3f qp2cu9y7WQKTlbZF6groIXgQuQX2kRw0GvxW4XWsiyO58r07X66wMGoNVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEf+LEY3mIT5HLH3vtMxdFo513xzMB8GA1UdIwQY MBaAFOUqz8vXnyMsXXKlULxMZvERB6DiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80MmExOTMtYjMwYi00MDNmLWJlZmUt MzI0NTQ1MGQzNzQyLzEvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80MmExOTMtYjMwYi00MDNmLWJlZmUtMzI0NTQ1MGQzNzQy LzEvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAET8UBeHY PDKUJJzMGRMSAXph8LgWFd9NVertIkeVI3gktYiFWEyM9+NrSfIlu9tgOygRH2ud w1szmDNtxELUCxX8B7I9XmdtiO3C6Udhe+gRAO4DAUJGdwxqLO2oHTA0U/pw1cLv w0908WoIsa0nuSn20NUzcqiljH9IWMctnB7Yz5mXl1hZ7lgvzCCE8cJAPsZyQhnw AkL9q/aLmVoTiJovgmtE57M6unWOX6ZAFhNU2a9We957kxbP0hlvspZDTf4EaWuM 1UjFHybJDoUohN5mJU04tDv3b+Frlrbc3LDulZhPJ25q30UmDuQyYPqL3ll5dRkk U1hWciKCdicaEA== -----END CERTIFICATE-----Generated at Sun Dec 7 13:12:13 2025 by rpki-client