This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft File: 5HZ7Uea0grnnp0g2YqXb7huNhaA.mft (raw, json) Hash identifier: CBjfR1wfgsC1IQNQpNRnsnT636KjxgmyGYby9rZQk8k= Subject key identifier: E0:40:C5:B7:79:50:7E:C8:43:24:04:E5:F2:B6:BC:26:65:9C:1F:82 Authority key identifier: E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0 Certificate issuer: /CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0 Certificate serial: 019AF2093A30FA60984DDFE8C4EF1AB6D0C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:22 +0000 Manifest this update: Sat 06 Dec 2025 05:01:22 +0000 Manifest next update: Sun 07 Dec 2025 05:01:22 +0000 Files and hashes: 1: 1-2kAM8E1UL_Pvf9Vzt6AdGfyh8o.roa (hash: Ohp9jg/lWKCAW1pqYiDBNHfJGsbI7n6Nnedeq9nVw0Y=) 2: 5HZ7Uea0grnnp0g2YqXb7huNhaA.crl (hash: Tyb65bx7uBgBZzsz/ttOV/tZjfqfOEb/7c54stqJZCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:3a:30:fa:60:98:4d:df:e8:c4:ef:1a:b6:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0 Validity Not Before: Dec 6 05:01:22 2025 GMT Not After : Dec 7 05:01:22 2025 GMT Subject: CN=e040c5b779507ec8432404e5f2b6bc26659c1f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:64:2e:f9:c4:2b:8e:c7:81:c4:2b:e4:94:7f: 95:db:78:24:e7:11:e8:a2:31:c6:45:a8:16:d0:d2: 8a:98:f2:24:ee:b7:de:a3:cd:66:0c:5a:4e:68:7a: fb:b1:45:58:19:fa:ae:71:ce:b3:b0:39:77:9d:25: ee:98:79:77:00:54:d7:4e:72:9d:2a:af:56:d0:e4: 17:d4:94:fa:3c:c9:e6:db:42:a8:29:47:d0:ad:68: 39:82:fc:46:cb:36:52:dd:8a:a9:3d:a1:dd:88:a1: 19:ac:28:b1:34:53:4b:9a:de:a9:ff:88:a0:66:68: fc:f6:2c:c2:60:eb:b0:62:71:4c:51:fc:20:52:15: c7:ea:16:d5:f8:1d:51:b0:07:43:09:23:c2:6c:03: 58:e1:6c:5f:6c:0b:cd:30:c2:45:e1:82:3d:75:3c: 48:f6:7a:4e:92:ff:c4:c6:a2:22:33:dd:e2:e6:3e: 72:1b:a7:bd:0d:d8:ad:74:fb:ea:e8:5d:6a:51:2b: 4e:c4:0e:8a:51:ab:eb:a4:4d:5a:b6:0a:92:24:60: 17:e3:f7:2d:24:fd:d4:8b:62:d2:14:72:0b:70:7f: 77:20:eb:8c:4d:0b:c4:6f:17:dc:51:7f:98:7e:14: 4f:e3:56:5a:51:0d:ad:4b:c1:02:66:10:68:50:62: 63:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:40:C5:B7:79:50:7E:C8:43:24:04:E5:F2:B6:BC:26:65:9C:1F:82 X509v3 Authority Key Identifier: keyid:E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:6f:b1:8c:59:10:6b:69:28:81:e1:79:63:90:29:81:4f:1b: 99:0f:80:15:72:2a:a3:61:59:77:b3:31:6f:9f:31:31:c7:56: 0a:4b:86:50:b8:29:dd:65:49:98:d8:a0:b0:fc:83:c5:82:d2: 69:0f:26:69:8e:c7:9d:e6:ca:b7:bd:ab:08:26:18:dd:f4:e2: 96:d9:80:10:ce:3e:2c:7f:9a:d9:de:59:2e:7c:4a:73:0a:d5: 2a:27:6b:13:04:e6:11:95:1c:1a:48:9b:c7:97:fa:c9:f7:34: 00:f7:bf:07:bf:f3:f9:a3:2a:8a:a3:84:64:a1:c3:05:1b:94: 9a:62:bf:be:2a:ce:c0:ce:4c:85:10:80:13:87:3d:fb:34:ce: 60:77:bd:38:c3:13:9d:01:66:23:2e:ad:f6:8a:48:40:43:d4: 82:49:f6:ff:b1:87:a8:cb:f5:53:d3:d5:9d:f6:f8:13:7c:82: c2:44:c3:38:3c:36:be:7e:9e:47:86:03:3a:d4:bb:d1:51:26: 85:98:be:bf:aa:ee:8a:22:76:b5:e0:82:f1:09:43:f6:05:57: 05:11:fb:56:e6:cc:a4:78:95:67:d7:7e:3b:61:21:15:97:4d: 53:a2:da:98:d1:ce:12:4c:e0:8a:cd:78:70:ea:fc:b5:17:11: 15:53:26:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTow+mCYTd/oxO8attDAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NzY3YjUxZTZiNDgyYjllN2E3NDgzNjYyYTVkYmVlMWI4 ZDg1YTAwHhcNMjUxMjA2MDUwMTIyWhcNMjUxMjA3MDUwMTIyWjAzMTEwLwYDVQQD EyhlMDQwYzViNzc5NTA3ZWM4NDMyNDA0ZTVmMmI2YmMyNjY1OWMxZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWQu+cQrjseBxCvklH+V23gk5xHo ojHGRagW0NKKmPIk7rfeo81mDFpOaHr7sUVYGfqucc6zsDl3nSXumHl3AFTXTnKd Kq9W0OQX1JT6PMnm20KoKUfQrWg5gvxGyzZS3YqpPaHdiKEZrCixNFNLmt6p/4ig Zmj89izCYOuwYnFMUfwgUhXH6hbV+B1RsAdDCSPCbANY4WxfbAvNMMJF4YI9dTxI 9npOkv/ExqIiM93i5j5yG6e9DditdPvq6F1qUStOxA6KUavrpE1atgqSJGAX4/ct JP3Ui2LSFHILcH93IOuMTQvEbxfcUX+YfhRP41ZaUQ2tS8ECZhBoUGJjGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBAxbd5UH7IQyQE5fK2vCZlnB+CMB8GA1UdIwQY MBaAFOR2e1HmtIK556dINmKl2+4bjYWgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUhaN1VlYTBncm5ucDBnMllxWGI3aHVOaGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NDU3NjgtYmE4MC00ZTc2LWExZDgt YmRiZTE2ODA2NjE2LzEvNUhaN1VlYTBncm5ucDBnMllxWGI3aHVOaGFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83NDU3NjgtYmE4MC00ZTc2LWExZDgtYmRiZTE2ODA2NjE2 LzEvNUhaN1VlYTBncm5ucDBnMllxWGI3aHVOaGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsm+xjFkQ a2kogeF5Y5ApgU8bmQ+AFXIqo2FZd7Mxb58xMcdWCkuGULgp3WVJmNigsPyDxYLS aQ8maY7HnebKt72rCCYY3fTiltmAEM4+LH+a2d5ZLnxKcwrVKidrEwTmEZUcGkib x5f6yfc0APe/B7/z+aMqiqOEZKHDBRuUmmK/virOwM5MhRCAE4c9+zTOYHe9OMMT nQFmIy6t9opIQEPUgkn2/7GHqMv1U9PVnfb4E3yCwkTDODw2vn6eR4YDOtS70VEm hZi+v6ruiiJ2teCC8QlD9gVXBRH7VubMpHiVZ9d+O2EhFZdNU6LamNHOEkzgis14 cOr8tRcRFVMmwg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:10 2025 by rpki-client