This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft File: p5ROOKJ1k6RvXEoqli9YO49r5GA.mft (raw, json) Hash identifier: PcmjHQXBcsMJ6URzU4Z4XTyafXb5O/YsGC/+T2uvL+g= Subject key identifier: D2:1F:7C:3C:5D:9A:D3:70:CD:E2:60:50:75:91:FD:01:5F:8E:C4:99 Authority key identifier: A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60 Certificate issuer: /CN=a7944e38a27593a46f5c4a2a962f583b8f6be460 Certificate serial: 019AF31B3920489704B06D4A857246587272 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft Manifest number: 134F Signing time: Sat 06 Dec 2025 10:00:38 +0000 Manifest this update: Sat 06 Dec 2025 10:00:38 +0000 Manifest next update: Sun 07 Dec 2025 10:00:38 +0000 Files and hashes: 1: p5ROOKJ1k6RvXEoqli9YO49r5GA.crl (hash: F8sYmOIj58c2vNpNxsChwbTOxaRwDeZEwZ0BKsRLM5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:39:20:48:97:04:b0:6d:4a:85:72:46:58:72:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7944e38a27593a46f5c4a2a962f583b8f6be460 Validity Not Before: Dec 6 10:00:38 2025 GMT Not After : Dec 7 10:00:38 2025 GMT Subject: CN=d21f7c3c5d9ad370cde260507591fd015f8ec499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:28:1e:1b:d0:5a:64:ae:f1:55:cc:2a:0b:fd: 5f:de:16:b1:00:3f:e3:18:a9:4e:eb:d7:86:79:1f: 39:12:c1:34:a3:d0:ff:f1:9b:ce:08:da:b1:90:4c: a1:e3:63:9e:a3:ae:f5:f9:8d:9e:89:20:93:01:4d: 2f:a0:ad:f9:de:cb:3b:fe:38:00:64:0f:9d:29:49: 6c:1b:01:b4:1b:75:fd:84:f6:f0:db:30:0f:c7:b8: f9:e0:56:50:e1:71:7f:bd:93:c1:34:eb:54:1f:e3: cb:13:fb:a4:a6:1b:ac:c6:46:a7:b4:31:68:ed:0d: 6a:06:c1:77:03:a5:e2:9b:b1:b7:a8:14:c0:dd:a8: 63:39:60:06:d2:68:90:fa:3c:0c:0f:a0:f7:64:77: 72:60:2c:ae:f2:10:ac:6f:4e:ed:f2:cd:9b:2a:ec: 52:ca:b7:ac:61:ed:72:fd:05:3b:c6:1e:e0:37:2a: 00:79:c4:75:af:c5:6b:1d:f9:ae:9f:5f:8c:cb:be: 12:82:84:8f:c9:98:4d:51:66:04:44:c5:0d:4e:a3: a6:92:b6:b6:68:4d:d1:5f:7b:6e:ee:01:7a:2f:6e: 19:41:af:07:56:da:85:9d:ff:2c:de:85:03:a4:04: 5d:05:0b:c5:48:d5:14:c9:0f:fc:8a:cb:be:44:dc: 08:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1F:7C:3C:5D:9A:D3:70:CD:E2:60:50:75:91:FD:01:5F:8E:C4:99 X509v3 Authority Key Identifier: keyid:A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f2:e6:45:be:a8:69:cc:5b:39:4a:df:60:8c:a7:e7:cb:07: b4:e1:e5:93:6b:99:d0:3a:54:2a:e1:a6:0b:99:d6:87:97:c4: 5e:c0:b4:99:9e:a4:60:ed:39:9a:26:d3:07:26:81:7b:11:b5: e7:40:b4:4a:4b:5e:51:ef:ef:59:b7:dd:f0:16:83:c8:08:09: a9:88:c1:16:8f:d4:6b:a8:42:e9:b2:cd:cd:0c:40:4e:91:c4: 04:ef:9a:71:6f:d9:ad:79:5f:50:6c:d6:5e:f9:84:6d:49:9d: a1:f7:cb:54:e4:3a:f6:54:ac:97:e4:d5:5f:a6:b1:39:bf:c7: 4b:80:59:9a:dd:97:ee:8e:7c:11:39:a2:7d:66:33:dc:de:fd: 72:12:c3:01:a6:61:78:7e:7d:f7:e4:f8:44:d5:c2:67:79:d9: 06:75:a9:3a:c4:e6:95:32:9d:49:43:6c:d9:7c:5a:29:c8:6d: cc:24:f8:ff:cc:b9:1d:71:d4:7d:d6:ce:c8:01:51:69:3f:46: 95:ef:53:5d:80:e0:62:5a:3c:b3:24:cf:55:cf:43:eb:41:d1: 6a:4a:03:3b:73:f8:e4:3c:a6:11:d1:b4:aa:50:88:09:73:8b: 9b:70:5e:e7:01:75:19:47:6e:dd:6d:b9:58:90:5e:4a:db:77: fb:5f:ff:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzkgSJcEsG1KhXJGWHJyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OTQ0ZTM4YTI3NTkzYTQ2ZjVjNGEyYTk2MmY1ODNiOGY2 YmU0NjAwHhcNMjUxMjA2MTAwMDM4WhcNMjUxMjA3MTAwMDM4WjAzMTEwLwYDVQQD EyhkMjFmN2MzYzVkOWFkMzcwY2RlMjYwNTA3NTkxZmQwMTVmOGVjNDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCgeG9BaZK7xVcwqC/1f3haxAD/j GKlO69eGeR85EsE0o9D/8ZvOCNqxkEyh42Oeo671+Y2eiSCTAU0voK353ss7/jgA ZA+dKUlsGwG0G3X9hPbw2zAPx7j54FZQ4XF/vZPBNOtUH+PLE/ukphusxkantDFo 7Q1qBsF3A6Xim7G3qBTA3ahjOWAG0miQ+jwMD6D3ZHdyYCyu8hCsb07t8s2bKuxS yresYe1y/QU7xh7gNyoAecR1r8VrHfmun1+My74SgoSPyZhNUWYERMUNTqOmkra2 aE3RX3tu7gF6L24ZQa8HVtqFnf8s3oUDpARdBQvFSNUUyQ/8isu+RNwIZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIffDxdmtNwzeJgUHWR/QFfjsSZMB8GA1UdIwQY MBaAFKeUTjiidZOkb1xKKpYvWDuPa+RgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDVST09LSjFrNlJ2WEVvcWxpOVlPNDlyNUdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83MWQ4OWYtMWYxOS00ZWJlLTlhMDIt ZWU4YWU4ODJjNWM3LzEvcDVST09LSjFrNlJ2WEVvcWxpOVlPNDlyNUdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS83MWQ4OWYtMWYxOS00ZWJlLTlhMDItZWU4YWU4ODJjNWM3 LzEvcDVST09LSjFrNlJ2WEVvcWxpOVlPNDlyNUdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffLmRb6o acxbOUrfYIyn58sHtOHlk2uZ0DpUKuGmC5nWh5fEXsC0mZ6kYO05mibTByaBexG1 50C0SkteUe/vWbfd8BaDyAgJqYjBFo/Ua6hC6bLNzQxATpHEBO+acW/ZrXlfUGzW XvmEbUmdoffLVOQ69lSsl+TVX6axOb/HS4BZmt2X7o58ETmifWYz3N79chLDAaZh eH599+T4RNXCZ3nZBnWpOsTmlTKdSUNs2XxaKchtzCT4/8y5HXHUfdbOyAFRaT9G le9TXYDgYlo8syTPVc9D60HRakoDO3P45DymEdG0qlCICXOLm3Be5wF1GUdu3W25 WJBeStt3+1//eg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:53:36 2025 by rpki-client