This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft File: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft (raw, json) Hash identifier: vzEz1c4Zaswi3sRxrgO/wibKtj7hhIXmSwvQU2sL4UQ= Subject key identifier: 37:A7:93:C5:99:24:C7:2F:DA:E2:B9:51:C2:95:D6:C9:76:1E:D4:8C Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C Certificate issuer: /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c Certificate serial: 019B0D802F0959C26BC29966D4201E74C8F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft Manifest number: 0B1F Signing time: Thu 11 Dec 2025 13:01:02 +0000 Manifest this update: Thu 11 Dec 2025 13:01:02 +0000 Manifest next update: Fri 12 Dec 2025 13:01:02 +0000 Files and hashes: 1: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl (hash: 4GiJscUm8YyQ5dpio3WtwKjhMCLUmBkiuiEGTENT6rE=) 2: m4ZSJvHCvVAdAoCa8Dy3Jfpj2Po.roa (hash: aprBkCfkVmxisnK2NR7zrUxKt0p0KhHf/uKOAfeW9gI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:2f:09:59:c2:6b:c2:99:66:d4:20:1e:74:c8:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c Validity Not Before: Dec 11 13:01:02 2025 GMT Not After : Dec 12 13:01:02 2025 GMT Subject: CN=37a793c59924c72fdae2b951c295d6c9761ed48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9a:d9:78:60:d6:68:df:2c:c1:c7:94:53:f1: 04:16:f1:e1:5a:d1:0f:b4:21:1e:f9:15:2e:86:53: 34:83:4d:20:df:bb:4f:72:ae:e3:ed:10:55:cf:a4: a4:aa:b8:64:58:c3:c3:14:2e:56:ca:ed:99:c2:e7: 33:89:54:9a:6e:ed:38:70:6a:d7:d6:da:03:5b:60: 4e:ae:5e:ca:02:e7:06:0e:f5:93:a7:21:ab:8b:8e: 2f:d8:be:c1:38:88:d1:c1:17:5d:4d:73:2f:bf:f0: 63:62:00:0b:13:46:00:49:46:85:ac:6a:e6:e4:83: 8d:38:8c:8e:14:19:2d:6e:3c:5f:99:dc:fb:27:8a: a9:68:e7:c5:fd:d1:6f:f9:2c:e4:92:69:d7:06:77: b5:4a:a3:43:fe:fb:1f:c3:f1:6f:5a:c9:68:36:90: 07:fd:e3:d4:c7:8d:7d:0e:ba:fa:72:9d:0c:77:71: f5:d6:95:7f:3e:0d:f3:45:21:7f:b6:1f:90:b5:1b: 36:7a:3d:2f:a8:89:23:5f:f5:69:75:cd:a5:a3:85: c8:b6:67:29:25:94:86:d0:55:f2:67:60:d6:20:74: e0:9d:6f:7d:e4:80:d9:d4:03:d2:df:bd:f4:71:a1: 88:d2:b4:ff:e1:f6:c9:01:15:f4:e8:4a:cc:56:9e: 21:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A7:93:C5:99:24:C7:2F:DA:E2:B9:51:C2:95:D6:C9:76:1E:D4:8C X509v3 Authority Key Identifier: keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:5e:2d:27:7d:6e:01:f0:01:87:00:f4:f3:ff:9b:d8:36:96: 85:2d:f0:11:c5:72:40:81:41:d2:fe:a7:83:fb:c2:17:ec:ff: 8c:e4:5f:57:31:af:1d:4a:be:21:65:5c:ef:ef:bd:b5:b1:16: 22:d5:94:c3:3e:a2:76:cd:14:6c:f7:77:87:c1:a8:73:a7:0b: b4:51:00:06:e7:cf:73:b5:c3:63:9e:52:5d:b2:c8:d9:4c:78: b7:b0:6f:ca:30:df:4a:6b:92:b1:a5:18:65:e3:4b:5a:bf:da: 07:47:7e:b0:84:63:9e:df:41:0a:14:4a:bf:b4:bd:35:6c:b3: 51:3c:57:cf:0a:26:a2:b9:cc:cf:63:10:ab:75:21:83:2e:25: 2c:27:bb:54:00:ea:b6:f5:62:c8:9a:a4:9e:03:d7:a0:a1:ae: 38:70:32:d2:d8:57:d9:c3:90:8f:0b:9a:17:05:4b:db:fe:5b: bc:ff:dc:2d:d3:2e:1e:67:92:57:ac:24:4d:51:22:d2:f4:03: 4c:35:d0:15:38:40:90:37:df:b6:88:98:15:3c:c3:d4:2e:8a: 15:8c:9a:e2:63:04:7e:cb:9b:40:a5:7b:b6:4e:38:47:38:ba: d7:9e:06:ff:c9:64:24:0c:ce:d7:9f:2c:e8:0b:1c:5c:d2:e3: ce:a7:07:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgC8JWcJrwplm1CAedMjyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0N2VlNWJlZTNlZDIzZjk0Mzc2MWU1OGYwZWVhOTdjN2M1 YmY4N2MwHhcNMjUxMjExMTMwMTAyWhcNMjUxMjEyMTMwMTAyWjAzMTEwLwYDVQQD EygzN2E3OTNjNTk5MjRjNzJmZGFlMmI5NTFjMjk1ZDZjOTc2MWVkNDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJrZeGDWaN8swceUU/EEFvHhWtEP tCEe+RUuhlM0g00g37tPcq7j7RBVz6SkqrhkWMPDFC5Wyu2ZwucziVSabu04cGrX 1toDW2BOrl7KAucGDvWTpyGri44v2L7BOIjRwRddTXMvv/BjYgALE0YASUaFrGrm 5IONOIyOFBktbjxfmdz7J4qpaOfF/dFv+SzkkmnXBne1SqND/vsfw/FvWsloNpAH /ePUx419Drr6cp0Md3H11pV/Pg3zRSF/th+QtRs2ej0vqIkjX/Vpdc2lo4XItmcp JZSG0FXyZ2DWIHTgnW995IDZ1APS3730caGI0rT/4fbJARX06ErMVp4hvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDenk8WZJMcv2uK5UcKV1sl2HtSMMB8GA1UdIwQY MBaAFOR+5b7j7SP5Q3YeWPDuqXx8W/h8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUg3bHZ1UHRJX2xEZGg1WThPNnBmSHhiLUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy81ZWEyZmYtOGQ2Ni00YTExLTkzZjgt MmUyOTA4NTg4ODY1LzEvNUg3bHZ1UHRJX2xEZGg1WThPNnBmSHhiLUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy81ZWEyZmYtOGQ2Ni00YTExLTkzZjgtMmUyOTA4NTg4ODY1 LzEvNUg3bHZ1UHRJX2xEZGg1WThPNnBmSHhiLUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQF4tJ31u AfABhwD08/+b2DaWhS3wEcVyQIFB0v6ng/vCF+z/jORfVzGvHUq+IWVc7++9tbEW ItWUwz6ids0UbPd3h8Goc6cLtFEABufPc7XDY55SXbLI2Ux4t7BvyjDfSmuSsaUY ZeNLWr/aB0d+sIRjnt9BChRKv7S9NWyzUTxXzwomornMz2MQq3Uhgy4lLCe7VADq tvViyJqkngPXoKGuOHAy0thX2cOQjwuaFwVL2/5bvP/cLdMuHmeSV6wkTVEi0vQD TDXQFThAkDfftoiYFTzD1C6KFYya4mMEfsubQKV7tk44Rzi6154G/8lkJAzO158s 6AscXNLjzqcHzw== -----END CERTIFICATE-----Generated at Thu Dec 11 15:52:16 2025 by rpki-client