This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft File: 5zqbo56LjiuL9OiCUq-_3czN0aE.mft (raw, json) Hash identifier: 4gOyCl74XfFzayzhzudGTkGkNRzyyjtPAGn6h8tchbM= Subject key identifier: F5:83:3C:01:6E:48:27:FB:FA:5D:D4:52:78:9A:F4:C4:2F:CD:0C:BF Authority key identifier: E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1 Certificate issuer: /CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1 Certificate serial: 019B3C7FA330DCB0EF9D1B7AD7F9F4FB12A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft Manifest number: 10AF Signing time: Sat 20 Dec 2025 16:02:36 +0000 Manifest this update: Sat 20 Dec 2025 16:02:36 +0000 Manifest next update: Sun 21 Dec 2025 16:02:36 +0000 Files and hashes: 1: 5zqbo56LjiuL9OiCUq-_3czN0aE.crl (hash: la/5ZSpkcSuNMi+m0F3phSnqjvALUSn4GCpY4qBv7Sc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:a3:30:dc:b0:ef:9d:1b:7a:d7:f9:f4:fb:12:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1 Validity Not Before: Dec 20 16:02:36 2025 GMT Not After : Dec 21 16:02:36 2025 GMT Subject: CN=f5833c016e4827fbfa5dd452789af4c42fcd0cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:39:72:ca:61:8a:c5:13:d3:18:f9:cb:48:8c: 16:45:c6:08:87:6b:20:ae:5b:c1:7a:5c:5b:87:01: 7b:46:e8:9d:85:35:33:e0:09:4b:6b:ca:1e:19:79: d3:06:3f:fb:3c:f5:92:f4:c5:86:a3:9f:08:0c:81: af:66:63:62:af:a3:3a:c4:ef:b7:8c:40:1c:ab:b6: 1d:d2:d6:9a:26:4f:5b:4c:9e:32:ea:01:f3:ad:cd: ae:7a:0c:0b:67:cf:d9:62:0d:44:0b:a3:da:67:cd: cb:12:4b:b5:28:c0:0c:69:73:2d:7e:76:ea:e5:13: 61:ef:06:a4:9e:02:a8:68:4e:9c:cc:7a:10:f0:76: d3:a5:a9:9c:08:54:de:bb:47:c7:b9:ad:ad:03:44: bd:74:b8:b3:80:c3:81:0f:df:91:68:97:69:bf:ac: a6:fe:0c:92:74:90:e2:36:f1:bd:d0:60:f6:38:bf: 37:36:89:a4:f3:47:fd:6d:0d:85:85:3c:be:1b:0e: 22:cd:1f:32:2d:22:3e:93:f9:e6:1c:69:6f:75:8d: 07:73:c7:60:0b:c6:85:35:2a:11:98:e1:65:89:4d: a2:90:8d:88:62:f8:50:4e:a8:0b:62:be:09:5a:f2: 77:56:df:2d:e5:1c:81:da:72:c9:5b:1e:84:b6:c9: af:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:83:3C:01:6E:48:27:FB:FA:5D:D4:52:78:9A:F4:C4:2F:CD:0C:BF X509v3 Authority Key Identifier: keyid:E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:dd:ea:a4:1a:9e:d9:d6:b7:5e:59:a1:f8:d0:54:5f:7d:c9: 78:16:7e:b7:6c:49:29:65:a2:42:17:5f:3e:80:5c:75:2b:84: 57:23:57:74:a2:e0:f6:88:05:8a:11:86:e7:ab:6b:c5:99:a1: 76:25:0f:39:0d:e7:0c:e8:03:47:dd:01:8e:e7:88:4e:6b:ec: 57:48:30:de:69:76:8f:a6:25:52:64:8c:da:38:14:07:60:c2: 09:f4:df:f6:b8:52:c0:62:af:84:cb:36:8e:92:a8:10:cf:2f: c8:28:52:f5:c8:8c:cf:e7:b2:9a:94:b9:7a:0d:e0:37:68:bd: b5:91:e3:10:66:09:c1:4a:d7:37:27:ae:8e:94:8c:5b:f3:0a: 5d:62:c0:83:18:80:ea:24:08:21:33:fd:83:25:b2:cd:67:b8: cd:f2:f3:71:98:03:aa:71:98:77:b8:81:4a:43:b7:1e:05:4a: 95:94:24:bc:fb:9d:f6:10:30:4c:d3:25:61:8c:ad:9e:4c:29: b8:10:81:20:35:12:a0:21:d0:3f:08:13:51:60:c5:2e:ec:d4: f6:0c:e6:6d:de:0a:38:e0:9f:e4:c9:1a:bc:a5:8f:1c:d5:db: 43:12:28:82:69:94:33:3d:e0:b2:64:63:3a:a5:2b:ec:7c:58: 78:46:d4:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f6Mw3LDvnRt61/n0+xKlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3M2E5YmEzOWU4YjhlMmI4YmY0ZTg4MjUyYWZiZmRkY2Nj ZGQxYTEwHhcNMjUxMjIwMTYwMjM2WhcNMjUxMjIxMTYwMjM2WjAzMTEwLwYDVQQD EyhmNTgzM2MwMTZlNDgyN2ZiZmE1ZGQ0NTI3ODlhZjRjNDJmY2QwY2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTlyymGKxRPTGPnLSIwWRcYIh2sg rlvBelxbhwF7RuidhTUz4AlLa8oeGXnTBj/7PPWS9MWGo58IDIGvZmNir6M6xO+3 jEAcq7Yd0taaJk9bTJ4y6gHzrc2uegwLZ8/ZYg1EC6PaZ83LEku1KMAMaXMtfnbq 5RNh7wakngKoaE6czHoQ8HbTpamcCFTeu0fHua2tA0S9dLizgMOBD9+RaJdpv6ym /gySdJDiNvG90GD2OL83Nomk80f9bQ2FhTy+Gw4izR8yLSI+k/nmHGlvdY0Hc8dg C8aFNSoRmOFliU2ikI2IYvhQTqgLYr4JWvJ3Vt8t5RyB2nLJWx6EtsmvxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWDPAFuSCf7+l3UUnia9MQvzQy/MB8GA1UdIwQY MBaAFOc6m6Oei44ri/ToglKvv93MzdGhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXpxYm81NkxqaXVMOU9pQ1VxLV8zY3pOMGFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yZjUwM2QtNmNjMS00MzVlLTg3MWEt N2ZhNGY1OGM0ZmI5LzEvNXpxYm81NkxqaXVMOU9pQ1VxLV8zY3pOMGFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yZjUwM2QtNmNjMS00MzVlLTg3MWEtN2ZhNGY1OGM0ZmI5 LzEvNXpxYm81NkxqaXVMOU9pQ1VxLV8zY3pOMGFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANd3qpBqe 2da3Xlmh+NBUX33JeBZ+t2xJKWWiQhdfPoBcdSuEVyNXdKLg9ogFihGG56trxZmh diUPOQ3nDOgDR90BjueITmvsV0gw3ml2j6YlUmSM2jgUB2DCCfTf9rhSwGKvhMs2 jpKoEM8vyChS9ciMz+eympS5eg3gN2i9tZHjEGYJwUrXNyeujpSMW/MKXWLAgxiA 6iQIITP9gyWyzWe4zfLzcZgDqnGYd7iBSkO3HgVKlZQkvPud9hAwTNMlYYytnkwp uBCBIDUSoCHQPwgTUWDFLuzU9gzmbd4KOOCf5MkavKWPHNXbQxIogmmUMz3gsmRj OqUr7HxYeEbU+g== -----END CERTIFICATE-----Generated at Sat Dec 20 18:15:16 2025 by rpki-client