This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft File: 5zcPsJ5SI60eRI9MDxYv6plae1Y.mft (raw, json) Hash identifier: uzMq+wkJszaesKxlV464M8Q/wojfdKYg9uxubnNhuoU= Subject key identifier: 33:2E:D9:D6:3C:EC:7B:BE:C3:50:B8:FF:22:52:63:B1:A0:DE:D1:9A Authority key identifier: E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56 Certificate issuer: /CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56 Certificate serial: 019B0E2635B0AE0B16CFC49600DD92905A81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft Manifest number: 158F Signing time: Thu 11 Dec 2025 16:02:23 +0000 Manifest this update: Thu 11 Dec 2025 16:02:23 +0000 Manifest next update: Fri 12 Dec 2025 16:02:23 +0000 Files and hashes: 1: 5zcPsJ5SI60eRI9MDxYv6plae1Y.crl (hash: bBlcnM7lrBjA7OlWL+ESLTa826Z7zPn1MkMK/ZbsD0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:35:b0:ae:0b:16:cf:c4:96:00:dd:92:90:5a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56 Validity Not Before: Dec 11 16:02:23 2025 GMT Not After : Dec 12 16:02:23 2025 GMT Subject: CN=332ed9d63cec7bbec350b8ff225263b1a0ded19a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:54:2e:cf:22:cd:ea:f6:cf:81:37:6f:4f:08: af:cf:e7:e3:de:ec:d0:90:cb:57:02:6e:e3:e5:e4: fe:ba:3c:95:6c:17:07:b3:8e:12:da:bd:1b:68:6e: ea:5c:35:c9:9d:46:b2:e8:3c:ac:4b:ef:5c:cf:6d: 7e:06:17:b8:d0:1a:98:54:bc:df:96:04:91:95:fc: c8:07:d7:3a:82:16:70:60:12:85:2c:67:50:44:98: 43:4b:96:68:c8:bc:b4:01:dc:82:9b:72:47:70:ef: 82:36:fb:65:1d:0c:74:a6:48:ab:a4:b8:c6:8b:67: 37:0a:dd:81:23:ed:3d:bc:fa:54:57:a2:9f:04:67: 37:7e:38:98:ee:8d:ba:2d:66:20:40:12:73:b6:ee: c3:da:c0:47:b8:df:ea:0d:3d:8b:a1:24:c6:13:4f: 4f:3e:51:60:48:53:33:d1:e8:85:ae:df:4a:8b:cd: e6:ef:ba:0f:98:2a:d7:26:fd:96:f8:b1:68:82:2a: 91:fc:94:df:72:2a:c4:02:e9:ec:db:b1:46:07:b2: ee:22:38:f0:9a:3d:db:31:d9:ef:c6:be:5d:d1:14: 1c:89:12:7b:46:cb:d5:b5:46:63:00:a6:d2:19:6f: e7:99:f5:07:fb:c6:22:a3:60:e5:81:ee:43:06:89: f8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2E:D9:D6:3C:EC:7B:BE:C3:50:B8:FF:22:52:63:B1:A0:DE:D1:9A X509v3 Authority Key Identifier: keyid:E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:eb:80:e3:63:dc:bb:39:af:e6:d0:25:1c:1f:31:fb:aa:d1: 77:1a:95:ed:bd:c9:b4:28:78:e7:1d:76:0c:f2:18:34:84:1d: 2a:10:e9:26:be:8b:91:79:5a:f6:d4:18:36:38:e6:9b:d7:48: 28:f2:f0:06:9d:fa:ad:e7:d4:cc:c0:71:6d:33:12:27:53:e7: 3f:25:f5:6a:ca:03:28:f9:a8:6f:63:c7:7e:f4:d2:b2:43:a0: a8:b1:87:bd:d6:b3:aa:04:77:6d:2f:31:c4:ab:66:ae:72:11: f3:15:0f:bf:27:47:bb:9f:3e:19:e3:0f:31:e9:d0:c0:40:34: 94:65:6c:93:c5:50:c4:d0:05:50:7a:e9:03:85:c1:c0:20:13: 9a:b9:01:20:9a:38:49:0e:41:89:28:cc:d4:f0:fe:da:64:7f: 21:e1:fc:96:fb:a0:ac:ef:56:da:d3:92:f2:09:6b:f2:b9:5c: f5:54:f6:f3:0d:f7:90:bc:a8:8b:6b:49:18:36:ea:15:25:33: fd:4a:e9:72:b7:49:bf:da:6a:c0:30:01:c6:27:be:3e:1a:29: ef:25:02:d2:8e:5e:ee:1e:4f:03:98:46:b4:00:90:5d:e4:76: 4f:db:b5:4e:5e:9a:fa:e7:9c:d5:15:4a:fe:05:dc:80:45:12: ff:d5:e3:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJjWwrgsWz8SWAN2SkFqBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MzcwZmIwOWU1MjIzYWQxZTQ0OGY0YzBmMTYyZmVhOTk1 YTdiNTYwHhcNMjUxMjExMTYwMjIzWhcNMjUxMjEyMTYwMjIzWjAzMTEwLwYDVQQD EygzMzJlZDlkNjNjZWM3YmJlYzM1MGI4ZmYyMjUyNjNiMWEwZGVkMTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVQuzyLN6vbPgTdvTwivz+fj3uzQ kMtXAm7j5eT+ujyVbBcHs44S2r0baG7qXDXJnUay6DysS+9cz21+Bhe40BqYVLzf lgSRlfzIB9c6ghZwYBKFLGdQRJhDS5ZoyLy0AdyCm3JHcO+CNvtlHQx0pkirpLjG i2c3Ct2BI+09vPpUV6KfBGc3fjiY7o26LWYgQBJztu7D2sBHuN/qDT2LoSTGE09P PlFgSFMz0eiFrt9Ki83m77oPmCrXJv2W+LFogiqR/JTfcirEAuns27FGB7LuIjjw mj3bMdnvxr5d0RQciRJ7RsvVtUZjAKbSGW/nmfUH+8Yio2Dlge5DBon4FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMu2dY87Hu+w1C4/yJSY7Gg3tGaMB8GA1UdIwQY MBaAFOc3D7CeUiOtHkSPTA8WL+qZWntWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXpjUHNKNVNJNjBlUkk5TUR4WXY2cGxhZTFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84ZjIyOTMtN2RiYS00MzdiLWFmODUt OTdlMzU1ZTUxZWYzLzEvNXpjUHNKNVNJNjBlUkk5TUR4WXY2cGxhZTFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC84ZjIyOTMtN2RiYS00MzdiLWFmODUtOTdlMzU1ZTUxZWYz LzEvNXpjUHNKNVNJNjBlUkk5TUR4WXY2cGxhZTFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+uA42Pc uzmv5tAlHB8x+6rRdxqV7b3JtCh45x12DPIYNIQdKhDpJr6LkXla9tQYNjjmm9dI KPLwBp36refUzMBxbTMSJ1PnPyX1asoDKPmob2PHfvTSskOgqLGHvdazqgR3bS8x xKtmrnIR8xUPvydHu58+GeMPMenQwEA0lGVsk8VQxNAFUHrpA4XBwCATmrkBIJo4 SQ5BiSjM1PD+2mR/IeH8lvugrO9W2tOS8glr8rlc9VT28w33kLyoi2tJGDbqFSUz /UrpcrdJv9pqwDABxie+Phop7yUC0o5e7h5PA5hGtACQXeR2T9u1Tl6a+uec1RVK /gXcgEUS/9XjOw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:06:24 2025 by rpki-client