This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json) Hash identifier: fHDUrjXC/WrjGfbLzYhRHPHLznmx6iK1FJvZQxBYBO8= Subject key identifier: 17:FE:E3:8D:1B:E1:A1:5C:3D:3B:FA:A9:49:2C:60:A0:71:17:3B:07 Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C Certificate issuer: /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c Certificate serial: 019B1916B3508B1BCCB87833C12491B9E74B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft Manifest number: 0C98 Signing time: Sat 13 Dec 2025 19:01:16 +0000 Manifest this update: Sat 13 Dec 2025 19:01:16 +0000 Manifest next update: Sun 14 Dec 2025 19:01:16 +0000 Files and hashes: 1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: WrQJFZw0KOQ61tBWuY0dK7o21txkHNn6N2jwPgq7ueA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:b3:50:8b:1b:cc:b8:78:33:c1:24:91:b9:e7:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c Validity Not Before: Dec 13 19:01:16 2025 GMT Not After : Dec 14 19:01:16 2025 GMT Subject: CN=17fee38d1be1a15c3d3bfaa9492c60a071173b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1a:68:61:52:72:d1:67:ea:a0:cf:b5:d5:b5: 0c:13:66:48:15:e1:5b:2f:94:61:4c:57:68:bd:92: 48:30:13:80:29:12:2a:7e:a4:69:cc:36:83:35:e2: 8c:85:cb:47:a5:cb:98:47:40:45:4f:d2:82:7e:83: 32:3e:47:1b:54:ff:37:02:de:cc:8d:cc:38:dd:ea: 24:23:e6:da:dd:9a:9c:cf:be:b0:1b:69:da:8c:1a: 4e:f2:e0:ca:48:94:97:bd:aa:68:19:26:43:cc:1d: 8e:f1:eb:fb:46:35:f7:18:2e:ac:d4:02:b6:ba:09: 04:e1:9f:1b:cb:e0:97:a2:62:1f:72:63:00:d2:85: 28:53:a8:e2:8b:40:42:a3:1b:3b:64:1d:a2:3c:db: 92:dc:33:e7:12:6d:2e:74:51:c4:e1:6c:91:b6:fa: 62:e4:85:a0:21:56:cc:79:ee:6f:05:d0:56:ed:e0: 42:e9:e1:b1:37:dc:55:20:8f:54:7b:88:90:9d:f6: bf:3b:c5:37:aa:6d:2b:9a:85:77:9e:70:92:ac:30: af:81:8d:1d:00:bd:1b:ee:bc:1c:3f:22:21:ea:a0: 7a:9a:be:c4:80:86:f2:2b:27:ec:fe:b7:56:ef:5b: ce:03:5a:3c:31:ae:a1:eb:03:74:f7:f6:db:44:2d: c0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FE:E3:8D:1B:E1:A1:5C:3D:3B:FA:A9:49:2C:60:A0:71:17:3B:07 X509v3 Authority Key Identifier: keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:10:92:26:4a:02:b2:d2:27:ef:f7:48:82:39:50:b4:da:71: b1:87:bb:68:27:47:f4:ed:11:06:bd:61:08:98:8f:91:84:3c: e6:4e:95:89:55:24:45:f7:ac:e5:a6:80:be:29:48:fb:05:9c: e4:db:ed:28:ee:29:0c:6e:47:7c:f1:79:9a:c0:30:cc:5c:e3: 09:4b:d9:06:02:2c:82:31:a7:d2:83:0a:30:f1:16:a0:de:4f: 62:c9:db:07:62:ee:53:3e:6c:da:fd:73:de:d2:57:1c:78:77: 1b:68:7d:5d:01:fd:8c:25:25:c4:8e:e0:79:16:1b:6b:3b:66: 33:81:46:7d:17:0b:3c:87:74:c8:98:f7:66:17:07:d7:14:0c: 29:43:a5:6c:52:d1:e6:36:16:ce:b6:22:5c:bc:4b:b6:71:ef: 84:11:59:d7:5a:e7:3f:09:e2:42:48:5e:2d:b2:a3:ec:a0:07: 99:62:d5:c9:45:f6:48:02:46:cf:b5:2d:39:35:f1:60:9f:10: 94:66:a1:eb:00:12:6f:87:e4:d8:77:09:d4:5f:42:54:d4:34: 9a:26:02:ac:3c:ef:d6:4f:9f:22:ae:fe:b3:04:4b:b7:40:22: 82:88:ce:59:be:36:9d:81:3a:9e:94:67:7f:6d:e3:f0:3a:f7: 63:99:2d:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFrNQixvMuHgzwSSRuedLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MWQ3MTdmYjJkNDM3ZDQxMWQ4NzFhZjdiOWZiY2IwMWU4 OWY5NmMwHhcNMjUxMjEzMTkwMTE2WhcNMjUxMjE0MTkwMTE2WjAzMTEwLwYDVQQD EygxN2ZlZTM4ZDFiZTFhMTVjM2QzYmZhYTk0OTJjNjBhMDcxMTczYjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshpoYVJy0WfqoM+11bUME2ZIFeFb L5RhTFdovZJIMBOAKRIqfqRpzDaDNeKMhctHpcuYR0BFT9KCfoMyPkcbVP83At7M jcw43eokI+ba3Zqcz76wG2najBpO8uDKSJSXvapoGSZDzB2O8ev7RjX3GC6s1AK2 ugkE4Z8by+CXomIfcmMA0oUoU6jii0BCoxs7ZB2iPNuS3DPnEm0udFHE4WyRtvpi 5IWgIVbMee5vBdBW7eBC6eGxN9xVII9Ue4iQnfa/O8U3qm0rmoV3nnCSrDCvgY0d AL0b7rwcPyIh6qB6mr7EgIbyKyfs/rdW71vOA1o8Ma6h6wN09/bbRC3AeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBf+440b4aFcPTv6qUksYKBxFzsHMB8GA1UdIwQY MBaAFOUdcX+y1DfUEdhxr3ufvLAeiflsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVIxeGY3TFVOOVFSMkhHdmU1LThzQjZKLVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xMmVkNjUtNDE1Yi00OGZiLWEzZDkt MzE0ZDVlMmI2NmNhLzEvNVIxeGY3TFVOOVFSMkhHdmU1LThzQjZKLVd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8xMmVkNjUtNDE1Yi00OGZiLWEzZDktMzE0ZDVlMmI2NmNh LzEvNVIxeGY3TFVOOVFSMkhHdmU1LThzQjZKLVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxCSJkoC stIn7/dIgjlQtNpxsYe7aCdH9O0RBr1hCJiPkYQ85k6ViVUkRfes5aaAvilI+wWc 5NvtKO4pDG5HfPF5msAwzFzjCUvZBgIsgjGn0oMKMPEWoN5PYsnbB2LuUz5s2v1z 3tJXHHh3G2h9XQH9jCUlxI7geRYbaztmM4FGfRcLPId0yJj3ZhcH1xQMKUOlbFLR 5jYWzrYiXLxLtnHvhBFZ11rnPwniQkheLbKj7KAHmWLVyUX2SAJGz7UtOTXxYJ8Q lGah6wASb4fk2HcJ1F9CVNQ0miYCrDzv1k+fIq7+swRLt0AigojOWb42nYE6npRn f23j8Dr3Y5kt2Q== -----END CERTIFICATE-----Generated at Sun Dec 14 00:06:16 2025 by rpki-client