This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft File: 5trj7-CjZ5faQ8vVj23_mcO73Y0.mft (raw, json) Hash identifier: a1PQ75Gade/xuZJif66MsW1fzxXbPXq5NPgohpyRis8= Subject key identifier: D7:44:57:F9:AA:91:59:69:28:2A:02:33:EA:05:DC:A1:04:15:63:CC Authority key identifier: E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D Certificate issuer: /CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d Certificate serial: 019B19BBADEA5802AB159EA8B60CF58A2A9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft Manifest number: 1775 Signing time: Sat 13 Dec 2025 22:01:28 +0000 Manifest this update: Sat 13 Dec 2025 22:01:28 +0000 Manifest next update: Sun 14 Dec 2025 22:01:28 +0000 Files and hashes: 1: 5trj7-CjZ5faQ8vVj23_mcO73Y0.crl (hash: TgsTpi41AIJOdy1QyGTyzvLlrZ2Hj+5e+dLcJ2+zG6s=) 2: jtdGItGjIscVK6iUpNCTUSGRedQ.roa (hash: FnwkKHIg+SdV2PfeNPF4IQR2s2fhTwukNFGZU8AgQ9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:ad:ea:58:02:ab:15:9e:a8:b6:0c:f5:8a:2a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d Validity Not Before: Dec 13 22:01:28 2025 GMT Not After : Dec 14 22:01:28 2025 GMT Subject: CN=d74457f9aa915969282a0233ea05dca1041563cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5b:50:b7:23:04:92:27:c1:dc:1e:26:b5:6f: d0:f5:d4:54:8b:d9:bc:88:f9:70:7c:40:bb:f1:53: 7a:83:70:6c:61:8b:69:49:97:8c:18:a7:dc:e4:aa: 7a:88:67:f5:2f:00:83:61:eb:73:a5:e7:8c:27:aa: 20:85:e0:a7:75:28:09:f3:95:4f:19:82:50:d5:5e: 7e:26:f9:27:96:ab:46:d0:3c:a9:8c:09:8e:e5:ca: 96:77:04:c0:c4:20:b6:5a:87:65:2f:75:15:19:b7: 24:ad:62:4c:38:d2:d9:a6:f9:cf:ab:cd:21:8d:25: 08:71:dc:52:ac:86:13:79:7a:1c:9d:94:f9:4b:a9: d9:f4:35:91:bf:45:24:d4:e3:d0:2d:22:ea:20:6a: 72:92:cc:21:9d:c0:84:ef:6c:c9:4c:2a:d9:56:86: a4:2c:ad:8c:cd:5f:7b:bc:aa:81:29:eb:60:12:2f: f4:97:95:f7:d4:37:3f:ec:bb:af:a9:cd:ed:10:45: cf:91:ed:9a:5c:db:2c:65:b9:d5:e7:a1:f8:cd:e9: 02:38:98:c7:88:e3:9d:46:0a:b7:14:75:45:a2:e0: 0f:e3:86:05:06:a1:46:cf:71:5e:ba:e8:67:97:4d: 77:19:fd:da:ce:4b:de:d3:bd:97:e2:08:63:27:94: 7b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:44:57:F9:AA:91:59:69:28:2A:02:33:EA:05:DC:A1:04:15:63:CC X509v3 Authority Key Identifier: keyid:E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:f0:80:1f:c4:cb:4e:03:33:c0:2d:c1:ae:80:5b:0b:1d:c7: 67:17:3c:2a:29:64:02:b6:31:0a:b8:bc:12:64:c8:f2:95:42: 22:f5:95:7f:b3:dc:87:2d:c8:2a:d9:7a:b9:5b:70:61:7d:22: 90:8a:f8:35:91:7a:14:93:37:32:fe:32:4a:b0:96:67:ba:00: 0c:24:1b:f7:ee:47:35:b1:cd:93:f4:9e:85:90:2b:60:b9:80: a8:24:16:e7:a4:64:31:25:20:5d:5b:90:34:4b:79:8d:6c:52: 40:c1:04:1e:3d:f7:61:55:48:1f:de:aa:71:a1:eb:47:f1:70: 39:f4:9d:d4:ce:99:d7:d5:4b:61:aa:e0:87:f0:36:88:00:df: f4:68:03:f3:0d:9f:ca:a8:6e:23:9c:53:ce:67:d3:70:22:f2: 57:2c:45:e1:2b:32:86:94:20:4e:0f:92:7b:27:25:61:54:7c: 8d:f7:3f:d6:55:2a:7d:6a:67:31:ad:8f:7a:02:87:ff:c5:26: 49:23:2e:07:5f:46:bb:83:82:8e:42:91:b0:77:bd:11:4d:44: 0a:1e:ea:d8:80:70:b8:0c:7e:5b:ca:0f:e7:d4:3e:ee:87:8b: bd:09:2a:82:85:44:a6:7d:cf:3b:d7:b8:4c:93:ed:68:d5:6c: e8:18:e7:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu63qWAKrFZ6otgz1iiqaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZGFlM2VmZTBhMzY3OTdkYTQzY2JkNThmNmRmZjk5YzNi YmRkOGQwHhcNMjUxMjEzMjIwMTI4WhcNMjUxMjE0MjIwMTI4WjAzMTEwLwYDVQQD EyhkNzQ0NTdmOWFhOTE1OTY5MjgyYTAyMzNlYTA1ZGNhMTA0MTU2M2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtltQtyMEkifB3B4mtW/Q9dRUi9m8 iPlwfEC78VN6g3BsYYtpSZeMGKfc5Kp6iGf1LwCDYetzpeeMJ6ogheCndSgJ85VP GYJQ1V5+JvknlqtG0DypjAmO5cqWdwTAxCC2WodlL3UVGbckrWJMONLZpvnPq80h jSUIcdxSrIYTeXocnZT5S6nZ9DWRv0Uk1OPQLSLqIGpykswhncCE72zJTCrZVoak LK2MzV97vKqBKetgEi/0l5X31Dc/7Luvqc3tEEXPke2aXNssZbnV56H4zekCOJjH iOOdRgq3FHVFouAP44YFBqFGz3Feuuhnl013Gf3azkve072X4ghjJ5R7dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdEV/mqkVlpKCoCM+oF3KEEFWPMMB8GA1UdIwQY MBaAFOba4+/go2eX2kPL1Y9t/5nDu92NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXRyajctQ2paNWZhUTh2VmoyM19tY083M1kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9kMTI1ZmQtYzM5Yy00MjcyLThjYWQt NmMyZmZiNGI2MWU2LzEvNXRyajctQ2paNWZhUTh2VmoyM19tY083M1kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9kMTI1ZmQtYzM5Yy00MjcyLThjYWQtNmMyZmZiNGI2MWU2 LzEvNXRyajctQ2paNWZhUTh2VmoyM19tY083M1kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/CAH8TL TgMzwC3BroBbCx3HZxc8KilkArYxCri8EmTI8pVCIvWVf7Pchy3IKtl6uVtwYX0i kIr4NZF6FJM3Mv4ySrCWZ7oADCQb9+5HNbHNk/SehZArYLmAqCQW56RkMSUgXVuQ NEt5jWxSQMEEHj33YVVIH96qcaHrR/FwOfSd1M6Z19VLYargh/A2iADf9GgD8w2f yqhuI5xTzmfTcCLyVyxF4SsyhpQgTg+SeyclYVR8jfc/1lUqfWpnMa2PegKH/8Um SSMuB19Gu4OCjkKRsHe9EU1ECh7q2IBwuAx+W8oP59Q+7oeLvQkqgoVEpn3PO9e4 TJPtaNVs6BjnkQ== -----END CERTIFICATE-----Generated at Sun Dec 14 03:33:44 2025 by rpki-client