This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft File: p5ROOKJ1k6RvXEoqli9YO49r5GA.mft (raw, json) Hash identifier: r6PPH/KIzuTKQTe64dVeTm6qxAKsXNJsABzNiepQUDo= Subject key identifier: C9:58:93:2C:A8:11:B3:D5:89:CA:0F:0A:5F:E5:4C:2E:8B:21:FA:AF Authority key identifier: A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60 Certificate issuer: /CN=a7944e38a27593a46f5c4a2a962f583b8f6be460 Certificate serial: 019B19BAF3F10A3F10373E0326666106B8D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft Manifest number: 1363 Signing time: Sat 13 Dec 2025 22:00:41 +0000 Manifest this update: Sat 13 Dec 2025 22:00:41 +0000 Manifest next update: Sun 14 Dec 2025 22:00:41 +0000 Files and hashes: 1: p5ROOKJ1k6RvXEoqli9YO49r5GA.crl (hash: 2k9P1kh+1/cUJhPk+JBawc9wyW0w3dOCb9zhjnBqMn4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 22:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:ba:f3:f1:0a:3f:10:37:3e:03:26:66:61:06:b8:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7944e38a27593a46f5c4a2a962f583b8f6be460 Validity Not Before: Dec 13 22:00:41 2025 GMT Not After : Dec 14 22:00:41 2025 GMT Subject: CN=c958932ca811b3d589ca0f0a5fe54c2e8b21faaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1a:ae:96:b2:c0:8e:d4:18:79:44:eb:82:9c: 82:f4:33:d0:bf:34:e9:7d:d9:10:62:1a:30:af:08: 7a:f8:e1:2a:46:ea:a0:3f:a2:84:4a:59:53:65:17: ee:7b:5f:ad:ef:ed:67:b2:50:ee:cf:c0:9b:ce:e5: 33:e5:e9:20:1c:f6:4b:e2:d0:12:76:1f:97:17:c8: f5:3d:20:43:c2:c5:5a:3c:15:4e:5c:4a:4f:45:72: ab:cb:9c:0b:d8:b6:09:b5:80:20:28:3e:21:e3:6d: 13:97:c0:b3:ee:87:14:96:a6:84:d9:2a:73:6b:e7: 8a:17:4a:29:4b:09:90:9c:b7:84:a8:f9:0f:ce:7a: 4f:79:de:bb:c8:cc:3d:55:c1:d9:81:b7:1c:f2:5f: d0:a3:16:c4:90:83:0a:ba:9f:ae:53:4b:9e:75:39: eb:f9:4b:c2:63:64:64:be:c9:08:93:7f:43:7c:30: 96:ae:95:43:f2:74:b8:24:04:c9:39:4e:c5:e7:79: 78:4d:b8:0f:6f:f5:38:9f:2c:ab:4b:7b:3c:56:ed: 2e:70:a5:47:e7:cc:a2:45:94:a4:d4:08:b2:d6:1f: 05:74:88:27:a6:85:51:23:49:78:15:dc:46:b0:49: 1b:d3:23:97:55:96:24:c5:b4:18:dc:18:40:50:17: 07:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:58:93:2C:A8:11:B3:D5:89:CA:0F:0A:5F:E5:4C:2E:8B:21:FA:AF X509v3 Authority Key Identifier: keyid:A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c1:7f:4b:7f:7c:4a:32:71:52:bc:96:c3:0c:07:98:ce:06: 69:96:6f:98:99:7e:29:23:aa:c6:87:fe:d5:19:64:34:96:7b: ca:e4:8c:b1:f7:8f:d7:dd:ca:1a:cf:81:a6:46:9e:64:b2:13: 32:3d:45:e1:07:52:c8:e7:dc:5c:46:d5:db:c0:66:e4:44:59: 5d:95:2e:84:f1:65:80:9f:1f:f0:e8:45:b7:a7:79:2e:0a:ae: 60:f0:cd:0b:68:89:26:c6:19:ff:4a:fb:f3:8c:cb:22:71:db: 35:7f:83:e0:10:57:ef:c9:49:88:14:b0:e5:7c:79:22:71:d5: 92:17:5f:62:9a:8f:5d:9d:70:c7:b6:38:5e:57:76:d0:ef:f8: 78:fc:42:51:ee:05:25:38:44:b9:bf:1e:1a:4f:ea:36:02:d6: 53:75:b3:2d:25:50:ce:f5:c3:30:b7:d7:db:fa:84:06:96:73: f5:a5:bc:60:e6:15:21:9f:d4:f4:03:03:cb:81:7b:b4:cb:db: f4:dc:bf:af:35:c3:5d:67:80:47:08:03:3b:77:70:1c:91:8f: 30:c4:db:8f:21:ca:52:51:24:18:ea:a2:dd:5a:b4:2b:e3:fd: 2b:a9:91:48:59:c0:c8:6b:15:44:ea:cf:75:d3:8f:38:db:ac: 24:69:51:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZuvPxCj8QNz4DJmZhBrjZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OTQ0ZTM4YTI3NTkzYTQ2ZjVjNGEyYTk2MmY1ODNiOGY2 YmU0NjAwHhcNMjUxMjEzMjIwMDQxWhcNMjUxMjE0MjIwMDQxWjAzMTEwLwYDVQQD EyhjOTU4OTMyY2E4MTFiM2Q1ODljYTBmMGE1ZmU1NGMyZThiMjFmYWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxqulrLAjtQYeUTrgpyC9DPQvzTp fdkQYhowrwh6+OEqRuqgP6KESllTZRfue1+t7+1nslDuz8CbzuUz5ekgHPZL4tAS dh+XF8j1PSBDwsVaPBVOXEpPRXKry5wL2LYJtYAgKD4h420Tl8Cz7ocUlqaE2Spz a+eKF0opSwmQnLeEqPkPznpPed67yMw9VcHZgbcc8l/QoxbEkIMKup+uU0uedTnr +UvCY2RkvskIk39DfDCWrpVD8nS4JATJOU7F53l4TbgPb/U4nyyrS3s8Vu0ucKVH 58yiRZSk1Aiy1h8FdIgnpoVRI0l4FdxGsEkb0yOXVZYkxbQY3BhAUBcHowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlYkyyoEbPVicoPCl/lTC6LIfqvMB8GA1UdIwQY MBaAFKeUTjiidZOkb1xKKpYvWDuPa+RgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDVST09LSjFrNlJ2WEVvcWxpOVlPNDlyNUdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83MWQ4OWYtMWYxOS00ZWJlLTlhMDIt ZWU4YWU4ODJjNWM3LzEvcDVST09LSjFrNlJ2WEVvcWxpOVlPNDlyNUdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS83MWQ4OWYtMWYxOS00ZWJlLTlhMDItZWU4YWU4ODJjNWM3 LzEvcDVST09LSjFrNlJ2WEVvcWxpOVlPNDlyNUdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8F/S398 SjJxUryWwwwHmM4GaZZvmJl+KSOqxof+1RlkNJZ7yuSMsfeP193KGs+BpkaeZLIT Mj1F4QdSyOfcXEbV28Bm5ERZXZUuhPFlgJ8f8OhFt6d5LgquYPDNC2iJJsYZ/0r7 84zLInHbNX+D4BBX78lJiBSw5Xx5InHVkhdfYpqPXZ1wx7Y4Xld20O/4ePxCUe4F JThEub8eGk/qNgLWU3WzLSVQzvXDMLfX2/qEBpZz9aW8YOYVIZ/U9AMDy4F7tMvb 9Ny/rzXDXWeARwgDO3dwHJGPMMTbjyHKUlEkGOqi3Vq0K+P9K6mRSFnAyGsVROrP ddOPONusJGlRfg== -----END CERTIFICATE-----Generated at Sun Dec 14 07:48:16 2025 by rpki-client