This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft File: 5318qB7lnVNFA7L3tj22K11ExW4.mft (raw, json) Hash identifier: Zk7bvp84r0SKEVqDC65SD3UGLvjhzjRI5Ie08rTBIx4= Subject key identifier: 82:57:A4:FF:D7:FB:D4:13:07:79:3C:D2:9E:01:6E:95:3F:7A:79:64 Authority key identifier: E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E Certificate issuer: /CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e Certificate serial: 019B5976A338CD6693E756398ACD83E9C49A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft Manifest number: 0FFF Signing time: Fri 26 Dec 2025 07:01:45 +0000 Manifest this update: Fri 26 Dec 2025 07:01:45 +0000 Manifest next update: Sat 27 Dec 2025 07:01:45 +0000 Files and hashes: 1: 5318qB7lnVNFA7L3tj22K11ExW4.crl (hash: Y345miY3rnGg5vclu2VHB82xbDLctnRI2eLLtDz/bks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:a3:38:cd:66:93:e7:56:39:8a:cd:83:e9:c4:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e Validity Not Before: Dec 26 07:01:45 2025 GMT Not After : Dec 27 07:01:45 2025 GMT Subject: CN=8257a4ffd7fbd41307793cd29e016e953f7a7964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:67:be:6a:e1:de:91:77:41:5a:b3:c6:5e:e0: b2:6a:ad:24:26:b5:f7:f0:c4:0a:96:60:bf:38:5e: 93:46:9d:56:fc:00:47:9f:3a:92:c8:f6:87:79:ac: e8:96:48:9c:dc:ed:89:16:06:96:2b:51:28:60:22: 30:4b:ff:df:67:b4:40:5d:e5:9e:c1:d6:14:ea:f7: df:29:d1:3d:e2:f5:b5:9e:dc:1a:51:cf:4f:be:29: 85:c2:b8:10:33:44:64:db:fa:c1:4c:69:35:d4:4d: 34:1e:cb:81:14:29:3c:9b:3e:90:0a:70:2d:b7:44: f9:56:a6:32:78:c9:49:59:32:13:a0:00:9e:f3:7b: 88:54:ae:6e:6b:d4:12:1c:a7:63:66:0f:04:12:dd: ba:9b:c7:95:33:ca:7e:03:5e:3b:dc:c6:c2:66:0d: 17:00:92:d7:68:8b:87:ba:b9:c4:05:fe:4e:00:01: 1d:71:4f:ba:6f:0b:e4:df:d2:29:be:c8:1b:d1:ae: 22:08:c3:71:2f:74:4f:15:09:42:fe:e8:fd:be:20: ce:aa:41:7b:6d:c5:32:c3:19:ff:20:95:df:21:63: 50:d3:9e:f4:1a:e7:17:6c:92:f9:c8:ca:bc:d2:8d: 95:c2:c7:fe:bb:54:dd:b5:53:dd:f9:97:e1:e8:35: 0c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:57:A4:FF:D7:FB:D4:13:07:79:3C:D2:9E:01:6E:95:3F:7A:79:64 X509v3 Authority Key Identifier: keyid:E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:33:87:09:81:47:f5:5b:93:e9:6c:19:c5:e7:c7:6d:e3:3c: ec:0b:a9:46:11:bd:20:9c:8c:53:3e:77:fb:ee:3f:bc:08:ad: d8:4b:29:23:86:e6:72:26:74:1e:37:49:24:7a:df:a4:0c:93: 80:1c:3d:f9:16:17:3c:9e:ca:e3:7e:95:46:14:27:23:69:b4: 3c:91:d0:9a:be:2c:8e:a5:db:cd:bb:85:78:ab:f8:0c:61:8c: da:74:0e:4e:3b:d8:ef:e1:48:f7:1c:0d:83:20:48:46:60:8a: 36:68:b7:3e:9d:3d:aa:dc:69:14:16:3d:7a:4c:8e:da:4b:02: ae:e9:78:05:3b:6a:d2:6e:db:c2:1a:8d:86:aa:5e:79:f4:60: 88:3f:dc:17:17:30:1f:5a:7c:ce:8c:14:63:18:68:2a:4a:31: 4f:ac:75:db:6e:98:07:de:ec:29:c2:6f:2a:6f:c8:8c:1c:9a: 45:bc:c1:20:44:e1:10:0b:c9:43:39:9f:70:b7:d8:54:0d:e9: 98:39:2f:a9:25:9b:bb:90:74:3a:f2:f1:da:0c:a0:b5:90:44: 58:ca:28:77:89:df:49:a1:6b:00:d5:a3:f6:08:ca:70:25:07: d4:22:09:7e:b0:07:7a:d1:91:3b:b3:22:a0:f0:8f:45:8d:62: 2e:cf:be:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdqM4zWaT51Y5is2D6cSaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3N2Q3Y2E4MWVlNTlkNTM0NTAzYjJmN2I2M2RiNjJiNWQ0 NGM1NmUwHhcNMjUxMjI2MDcwMTQ1WhcNMjUxMjI3MDcwMTQ1WjAzMTEwLwYDVQQD Eyg4MjU3YTRmZmQ3ZmJkNDEzMDc3OTNjZDI5ZTAxNmU5NTNmN2E3OTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWe+auHekXdBWrPGXuCyaq0kJrX3 8MQKlmC/OF6TRp1W/ABHnzqSyPaHeazolkic3O2JFgaWK1EoYCIwS//fZ7RAXeWe wdYU6vffKdE94vW1ntwaUc9PvimFwrgQM0Rk2/rBTGk11E00HsuBFCk8mz6QCnAt t0T5VqYyeMlJWTIToACe83uIVK5ua9QSHKdjZg8EEt26m8eVM8p+A1473MbCZg0X AJLXaIuHurnEBf5OAAEdcU+6bwvk39Ipvsgb0a4iCMNxL3RPFQlC/uj9viDOqkF7 bcUywxn/IJXfIWNQ0570GucXbJL5yMq80o2Vwsf+u1TdtVPd+Zfh6DUM6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJXpP/X+9QTB3k80p4BbpU/enlkMB8GA1UdIwQY MBaAFOd9fKge5Z1TRQOy97Y9titdRMVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTMxOHFCN2xuVk5GQTdMM3RqMjJLMTFFeFc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8zMGY2Y2YtZWY5Yi00OTNhLTgzOTQt NWMyMDBjNmU3ZDM0LzEvNTMxOHFCN2xuVk5GQTdMM3RqMjJLMTFFeFc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8zMGY2Y2YtZWY5Yi00OTNhLTgzOTQtNWMyMDBjNmU3ZDM0 LzEvNTMxOHFCN2xuVk5GQTdMM3RqMjJLMTFFeFc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqTOHCYFH 9VuT6WwZxefHbeM87AupRhG9IJyMUz53++4/vAit2EspI4bmciZ0HjdJJHrfpAyT gBw9+RYXPJ7K436VRhQnI2m0PJHQmr4sjqXbzbuFeKv4DGGM2nQOTjvY7+FI9xwN gyBIRmCKNmi3Pp09qtxpFBY9ekyO2ksCrul4BTtq0m7bwhqNhqpeefRgiD/cFxcw H1p8zowUYxhoKkoxT6x1226YB97sKcJvKm/IjByaRbzBIEThEAvJQzmfcLfYVA3p mDkvqSWbu5B0OvLx2gygtZBEWMood4nfSaFrANWj9gjKcCUH1CIJfrAHetGRO7Mi oPCPRY1iLs++lA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:49 2025 by rpki-client