This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft File: 5zqbo56LjiuL9OiCUq-_3czN0aE.mft (raw, json) Hash identifier: umvoirtVlr/0+FBk8sH4JHncLAd2OvUvIctoWybh01o= Subject key identifier: 95:93:B3:52:9C:29:6F:8E:98:FD:7D:43:D4:1C:EA:0D:76:CA:D1:59 Authority key identifier: E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1 Certificate issuer: /CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1 Certificate serial: 019B4814206CFA0A6DBE8F1DCA1051407C2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft Manifest number: 10B5 Signing time: Mon 22 Dec 2025 22:00:37 +0000 Manifest this update: Mon 22 Dec 2025 22:00:37 +0000 Manifest next update: Tue 23 Dec 2025 22:00:37 +0000 Files and hashes: 1: 5zqbo56LjiuL9OiCUq-_3czN0aE.crl (hash: uA+UCve4Hl6nRl7vx2vpN2QSxTEDZukZJI8TauGiy4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:20:6c:fa:0a:6d:be:8f:1d:ca:10:51:40:7c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1 Validity Not Before: Dec 22 22:00:37 2025 GMT Not After : Dec 23 22:00:37 2025 GMT Subject: CN=9593b3529c296f8e98fd7d43d41cea0d76cad159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ed:08:21:9f:80:5b:dc:f9:10:cf:00:5c:79: bb:5d:0e:ce:79:a1:a1:36:a4:f6:71:2d:87:86:84: 46:5a:ff:ab:27:4c:81:d1:e0:d9:71:11:d8:19:60: 69:c6:b0:d0:25:69:f5:eb:b9:b2:26:63:1e:a0:9f: 9e:4c:8b:74:a7:72:e7:02:12:93:f8:f4:94:9b:9e: a3:2a:c1:1f:0b:80:6a:bb:df:d1:2f:1d:b2:fd:d5: 15:86:da:2b:f6:8e:ae:00:6c:cd:b1:8f:66:38:72: e8:54:95:e2:6c:7f:24:25:d0:3e:fe:21:81:be:ff: 08:13:6d:7a:29:72:84:2d:e4:b3:e7:a4:1c:90:f8: 4b:59:24:f0:80:a8:d3:5b:c5:6d:05:73:5c:72:42: 1d:3b:df:03:c7:fa:77:d3:48:c8:bc:ec:d2:56:d9: f4:e6:89:75:40:ca:b6:87:65:fb:b7:46:bd:50:22: b5:1b:fe:fd:06:7b:c6:6c:f5:1f:22:b2:f9:e8:e7: 28:6f:cf:49:41:36:8e:70:28:44:f2:53:10:7a:86: ae:ee:9e:ca:d2:67:9d:26:6f:f2:9c:1a:9c:96:fd: 83:10:af:1d:ea:37:af:6f:74:5c:5e:f8:05:db:f1: 0c:d4:df:f1:37:b1:29:a9:c7:eb:06:e9:3e:88:8f: 97:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:93:B3:52:9C:29:6F:8E:98:FD:7D:43:D4:1C:EA:0D:76:CA:D1:59 X509v3 Authority Key Identifier: keyid:E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ca:e2:7a:43:80:b8:23:6a:b4:12:9e:15:2a:da:10:34:9e: 08:ce:fd:d7:7f:47:fc:6f:6c:f7:9a:12:52:66:29:a7:49:aa: d3:c7:b7:5e:1c:79:96:2d:cd:48:7f:80:72:e9:ea:35:a5:b3: 75:99:53:ae:74:fd:ef:01:38:29:33:b2:4d:38:84:28:11:55: ac:bc:11:65:7d:9b:c5:ee:54:dd:39:89:56:66:c2:88:3c:df: fb:bd:5f:a4:ae:17:3c:5f:ed:5c:74:39:4b:e3:ef:33:83:db: 5e:f1:85:22:c8:6a:04:6c:1f:77:b8:32:09:19:b8:9d:c1:eb: 5b:a4:a8:31:ec:4f:02:7e:d1:27:46:91:61:c9:74:4e:8e:b8: 26:14:ee:22:3a:29:5d:7a:44:d2:f6:23:a6:bb:ac:05:02:c0: 74:24:db:d3:85:fd:89:24:74:a1:4e:f9:30:2b:78:d9:8a:32: e2:4e:73:be:b3:69:fa:aa:38:70:28:d4:15:f9:9b:00:50:91: 70:c9:c5:61:fd:07:a9:0b:14:d8:93:b4:9b:7c:0c:bb:78:cf: 9a:e6:53:b2:72:72:49:b8:78:13:45:a8:5a:eb:39:6e:16:dd: 56:94:05:4a:26:7e:69:78:48:f8:fe:b7:7f:83:fa:1f:f6:67: 61:bc:9e:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFCBs+gptvo8dyhBRQHwqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3M2E5YmEzOWU4YjhlMmI4YmY0ZTg4MjUyYWZiZmRkY2Nj ZGQxYTEwHhcNMjUxMjIyMjIwMDM3WhcNMjUxMjIzMjIwMDM3WjAzMTEwLwYDVQQD Eyg5NTkzYjM1MjljMjk2ZjhlOThmZDdkNDNkNDFjZWEwZDc2Y2FkMTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu0IIZ+AW9z5EM8AXHm7XQ7OeaGh NqT2cS2HhoRGWv+rJ0yB0eDZcRHYGWBpxrDQJWn167myJmMeoJ+eTIt0p3LnAhKT +PSUm56jKsEfC4Bqu9/RLx2y/dUVhtor9o6uAGzNsY9mOHLoVJXibH8kJdA+/iGB vv8IE216KXKELeSz56QckPhLWSTwgKjTW8VtBXNcckIdO98Dx/p300jIvOzSVtn0 5ol1QMq2h2X7t0a9UCK1G/79BnvGbPUfIrL56Ocob89JQTaOcChE8lMQeoau7p7K 0medJm/ynBqclv2DEK8d6jevb3RcXvgF2/EM1N/xN7EpqcfrBuk+iI+XSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWTs1KcKW+OmP19Q9Qc6g12ytFZMB8GA1UdIwQY MBaAFOc6m6Oei44ri/ToglKvv93MzdGhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXpxYm81NkxqaXVMOU9pQ1VxLV8zY3pOMGFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yZjUwM2QtNmNjMS00MzVlLTg3MWEt N2ZhNGY1OGM0ZmI5LzEvNXpxYm81NkxqaXVMOU9pQ1VxLV8zY3pOMGFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yZjUwM2QtNmNjMS00MzVlLTg3MWEtN2ZhNGY1OGM0ZmI5 LzEvNXpxYm81NkxqaXVMOU9pQ1VxLV8zY3pOMGFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcriekOA uCNqtBKeFSraEDSeCM79139H/G9s95oSUmYpp0mq08e3Xhx5li3NSH+AcunqNaWz dZlTrnT97wE4KTOyTTiEKBFVrLwRZX2bxe5U3TmJVmbCiDzf+71fpK4XPF/tXHQ5 S+PvM4PbXvGFIshqBGwfd7gyCRm4ncHrW6SoMexPAn7RJ0aRYcl0To64JhTuIjop XXpE0vYjprusBQLAdCTb04X9iSR0oU75MCt42Yoy4k5zvrNp+qo4cCjUFfmbAFCR cMnFYf0HqQsU2JO0m3wMu3jPmuZTsnJySbh4E0WoWus5bhbdVpQFSiZ+aXhI+P63 f4P6H/ZnYbyeCw== -----END CERTIFICATE-----Generated at Tue Dec 23 06:45:42 2025 by rpki-client