This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
File: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft (raw, json)
Hash identifier: W1CFuS4G41rpPVj0rXkbKKIg9cJpShGiN+n065vtgN0=
Subject key identifier: 80:ED:A1:00:2C:4A:16:AF:50:C6:D3:2A:80:B4:96:66:85:FA:5F:7A
Authority key identifier: E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
Certificate issuer: /CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Certificate serial: 019AF50A4B7A06D96CA54060627E81C04676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
Manifest number: 0376
Signing time: Sat 06 Dec 2025 19:01:23 +0000
Manifest this update: Sat 06 Dec 2025 19:01:23 +0000
Manifest next update: Sun 07 Dec 2025 19:01:23 +0000
Files and hashes: 1: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl (hash: fxPPN6+Lr1PpLbneeT00ZYSCfextjJHqPik34ilP588=)
2: GqkvkcQA2bbgQwHJ2b6jWAleiGg.roa (hash: EGM2nICbqAUwB5CP81F3mXlaWH5q4kAR9J7Mx82LHRQ=)
3: U_pf5mr7mVogKbgEVCSPIKt6P1Q.roa (hash: A+REPWck5DlDgbp9k+f3tR4pBhovVcICYPMhumJUrjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:0a:4b:7a:06:d9:6c:a5:40:60:62:7e:81:c0:46:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Validity
Not Before: Dec 6 19:01:23 2025 GMT
Not After : Dec 7 19:01:23 2025 GMT
Subject: CN=80eda1002c4a16af50c6d32a80b4966685fa5f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b2:08:e7:b7:7e:d2:cc:01:8a:89:4f:ae:40:
d4:20:50:50:8d:b6:16:89:41:29:d5:3d:22:20:eb:
f6:02:9b:79:7f:ac:38:34:da:47:99:0d:cd:f0:00:
a3:66:f7:f8:44:9a:3b:e8:a6:ae:34:89:84:76:48:
4a:19:e1:2a:c4:d9:fc:e1:7c:c9:d3:86:9f:da:02:
c8:e2:47:9e:3c:e3:f3:71:a4:01:b6:48:e1:da:8f:
9a:01:34:fd:5e:8b:4a:a7:34:89:f0:69:b6:f0:07:
0b:a4:4a:39:cf:b9:1f:7a:0e:78:0c:f1:fa:3a:9d:
d9:73:f1:79:bd:b6:09:29:b6:16:7b:d9:2d:63:86:
2d:98:ac:29:ef:ab:da:9b:53:87:99:03:b8:9e:60:
fe:e2:88:b5:2a:ea:53:67:9d:27:07:ff:f2:ea:a5:
62:4a:5e:c1:52:16:f1:0f:91:be:36:38:61:ba:9c:
26:df:7f:03:46:f9:98:f9:bd:5e:82:39:3b:7e:a8:
48:91:f9:a6:63:a0:e1:70:7c:08:fe:b8:6b:4e:59:
86:09:fe:ce:f4:59:4f:24:e0:10:d2:a7:bb:ca:ec:
74:39:1b:ff:36:43:e6:77:18:95:45:8f:34:0b:ee:
ef:73:ac:3e:2a:37:ad:f8:de:30:33:f0:d7:59:96:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:ED:A1:00:2C:4A:16:AF:50:C6:D3:2A:80:B4:96:66:85:FA:5F:7A
X509v3 Authority Key Identifier:
keyid:E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:51:79:9f:d4:a4:19:52:32:32:96:45:80:b0:06:7f:06:6e:
06:36:7f:93:1c:47:dc:ff:50:e2:fb:ab:d7:3f:44:7d:63:60:
2c:75:53:30:ec:08:6d:74:5b:c5:af:4b:6d:c3:a3:3f:d2:43:
32:2d:dd:96:db:a6:1f:1a:81:34:bd:0c:91:96:b7:c7:db:a0:
66:11:c2:89:69:85:97:27:36:c8:9e:c8:b6:87:1e:4c:45:b7:
96:68:e5:f1:dd:3a:d3:f7:ca:2f:7b:65:fa:f2:57:b7:b7:7c:
ac:74:f3:30:bb:f4:71:15:65:01:6a:b4:81:33:5c:8d:80:41:
4d:78:56:7d:56:15:30:f3:8b:8d:f0:06:50:4f:78:5f:13:5e:
ea:53:b5:12:d4:cf:95:87:4f:4e:48:32:b2:c7:8a:59:13:48:
9f:ff:0b:bb:20:67:3c:21:96:c3:1b:1b:cb:a9:ae:d8:02:96:
7c:21:85:45:62:1f:58:4e:90:c8:ef:fc:5d:78:2c:1d:04:1b:
36:c5:34:5b:a4:a8:ea:e6:32:f8:86:77:dc:2e:85:3d:ce:1a:
c7:29:59:a5:f8:9e:36:d5:62:e3:e4:4e:20:2c:47:92:3d:da:
db:b7:4d:73:d7:98:fe:39:31:fb:c2:7f:b1:ba:5d:e5:e2:7d:
5c:93:3b:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr1Ckt6BtlspUBgYn6BwEZ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzI5ZWU4OTYzNmJhMzRmZTU2YmQ3MmU3NThmNTgyYWRl
NzBlNTIwHhcNMjUxMjA2MTkwMTIzWhcNMjUxMjA3MTkwMTIzWjAzMTEwLwYDVQQD
Eyg4MGVkYTEwMDJjNGExNmFmNTBjNmQzMmE4MGI0OTY2Njg1ZmE1ZjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LII57d+0swBiolPrkDUIFBQjbYW
iUEp1T0iIOv2Apt5f6w4NNpHmQ3N8ACjZvf4RJo76KauNImEdkhKGeEqxNn84XzJ
04af2gLI4keePOPzcaQBtkjh2o+aATT9XotKpzSJ8Gm28AcLpEo5z7kfeg54DPH6
Op3Zc/F5vbYJKbYWe9ktY4YtmKwp76vam1OHmQO4nmD+4oi1KupTZ50nB//y6qVi
Sl7BUhbxD5G+Njhhupwm338DRvmY+b1egjk7fqhIkfmmY6DhcHwI/rhrTlmGCf7O
9FlPJOAQ0qe7yux0ORv/NkPmdxiVRY80C+7vc6w+Kjet+N4wM/DXWZYkmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDtoQAsShavUMbTKoC0lmaF+l96MB8GA1UdIwQY
MBaAFOVynuiWNro0/la9cudY9YKt5w5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhLZTZKWTJ1alQtVnIxeTUxajFncTNuRGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hMTdhZTctOGU4Ni00M2ZkLWI4NTAt
YzEzOGJkMWMxNzFlLzEvNVhLZTZKWTJ1alQtVnIxeTUxajFncTNuRGxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9hMTdhZTctOGU4Ni00M2ZkLWI4NTAtYzEzOGJkMWMxNzFl
LzEvNVhLZTZKWTJ1alQtVnIxeTUxajFncTNuRGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVF5n9Sk
GVIyMpZFgLAGfwZuBjZ/kxxH3P9Q4vur1z9EfWNgLHVTMOwIbXRbxa9LbcOjP9JD
Mi3dltumHxqBNL0MkZa3x9ugZhHCiWmFlyc2yJ7ItoceTEW3lmjl8d060/fKL3tl
+vJXt7d8rHTzMLv0cRVlAWq0gTNcjYBBTXhWfVYVMPOLjfAGUE94XxNe6lO1EtTP
lYdPTkgysseKWRNIn/8LuyBnPCGWwxsby6mu2AKWfCGFRWIfWE6QyO/8XXgsHQQb
NsU0W6So6uYy+IZ33C6FPc4axylZpfieNtVi4+ROICxHkj3a27dNc9eY/jkx+8J/
sbpd5eJ9XJM7Eg==
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:01:54 2025 by rpki-client