This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft File: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft (raw, json) Hash identifier: bG7sWkwJIOo1nRYq+q5jxXN09I0EWjWrloNLF+YfEBY= Subject key identifier: CD:6F:22:93:F8:50:A8:51:B7:58:D3:01:56:9B:61:8A:BA:8C:2D:DD Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C Certificate issuer: /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c Certificate serial: 019B5ABFD75746811E423FE10C9C3DC9BB0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft Manifest number: 0B47 Signing time: Fri 26 Dec 2025 13:01:20 +0000 Manifest this update: Fri 26 Dec 2025 13:01:20 +0000 Manifest next update: Sat 27 Dec 2025 13:01:20 +0000 Files and hashes: 1: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl (hash: 9gSC6KiU/SyyvHMcWgi8iMPLcNaMB22RRtrhY4xablI=) 2: m4ZSJvHCvVAdAoCa8Dy3Jfpj2Po.roa (hash: aprBkCfkVmxisnK2NR7zrUxKt0p0KhHf/uKOAfeW9gI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:d7:57:46:81:1e:42:3f:e1:0c:9c:3d:c9:bb:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c Validity Not Before: Dec 26 13:01:20 2025 GMT Not After : Dec 27 13:01:20 2025 GMT Subject: CN=cd6f2293f850a851b758d301569b618aba8c2ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:13:fa:d2:18:5b:1d:36:e5:1e:0f:58:3c:1d: d8:22:6b:34:07:57:1f:35:d8:36:d2:8e:4e:5b:30: fd:5a:57:a4:7d:f5:57:4e:72:70:8c:ec:cc:59:87: be:06:12:3f:ec:cd:94:94:fb:bf:8e:4b:1b:80:96: 93:ce:34:5d:46:06:8e:9c:8a:ac:76:fd:6c:1a:20: cb:81:5d:51:a4:ef:f8:ea:66:e7:ae:3c:b0:ea:6e: 2b:2d:f0:64:da:65:cb:54:1c:37:8b:bc:32:06:8b: 9c:a9:ce:66:53:2d:f7:20:14:66:ca:68:57:30:a0: 83:7c:1c:4b:76:7a:00:9f:2f:35:be:55:9e:16:d1: 83:fb:a3:91:ac:84:76:b1:40:ea:1c:68:03:97:8b: 3c:0b:6b:d7:7d:12:1b:c0:5e:b6:bf:b1:5a:ae:bc: 0d:a4:71:93:e1:13:eb:df:f2:b2:31:c4:55:38:d5: ae:a8:b9:55:f9:82:b8:88:6c:13:d7:71:7c:07:6e: b3:cc:06:71:80:11:07:8d:60:db:92:47:fc:68:d6: e9:28:b8:61:7e:f2:08:5c:8c:12:85:14:e9:2e:97: b0:71:95:69:50:05:c7:53:1d:bf:05:b4:f6:8a:0e: 65:79:8c:6d:88:26:c1:d5:0b:97:bc:02:df:73:1d: 1a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:6F:22:93:F8:50:A8:51:B7:58:D3:01:56:9B:61:8A:BA:8C:2D:DD X509v3 Authority Key Identifier: keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:0f:49:5a:0c:5a:87:ff:fe:69:85:07:5a:24:40:78:dd:67: 4f:e1:6a:80:28:ed:90:66:66:20:13:98:2f:ba:af:ba:8d:3e: b9:74:1d:ad:06:94:d6:a5:ab:b3:df:e6:27:68:76:e9:74:5e: 6d:1c:0d:59:5a:c8:08:9a:e7:43:40:a7:41:a7:01:9e:08:dc: 6e:05:91:04:71:08:09:16:0a:d3:23:2d:d7:c1:8c:7b:59:6d: 24:c7:41:02:bf:23:bf:42:85:49:39:1d:a9:3e:b3:dc:39:90: 3d:67:54:f4:7a:ef:4b:f2:d7:60:62:c3:4e:52:53:c8:bd:85: 7e:11:58:86:ad:75:fe:0a:63:06:58:22:6a:50:ce:ed:e1:dd: 29:0c:48:08:e7:51:d5:2b:c7:5d:6d:e8:a1:03:75:6b:9a:c6: d6:0b:82:13:27:2b:f0:49:f5:aa:2d:b7:0d:b3:05:fd:61:fe: da:c0:f0:e6:d2:3a:18:6e:30:f3:6b:c2:4b:6d:cf:53:4e:ed: 13:e9:96:bb:99:84:3a:a5:1d:96:77:ac:24:c7:8e:f1:3a:88: 07:c5:db:9e:7e:fd:46:19:aa:bf:d7:32:9b:18:45:46:c3:1a: 88:ba:02:85:2c:90:8c:31:c1:6b:a9:2f:79:65:cc:b3:20:5c: 2f:12:1a:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav9dXRoEeQj/hDJw9ybsNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0N2VlNWJlZTNlZDIzZjk0Mzc2MWU1OGYwZWVhOTdjN2M1 YmY4N2MwHhcNMjUxMjI2MTMwMTIwWhcNMjUxMjI3MTMwMTIwWjAzMTEwLwYDVQQD EyhjZDZmMjI5M2Y4NTBhODUxYjc1OGQzMDE1NjliNjE4YWJhOGMyZGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RP60hhbHTblHg9YPB3YIms0B1cf Ndg20o5OWzD9WlekffVXTnJwjOzMWYe+BhI/7M2UlPu/jksbgJaTzjRdRgaOnIqs dv1sGiDLgV1RpO/46mbnrjyw6m4rLfBk2mXLVBw3i7wyBoucqc5mUy33IBRmymhX MKCDfBxLdnoAny81vlWeFtGD+6ORrIR2sUDqHGgDl4s8C2vXfRIbwF62v7FarrwN pHGT4RPr3/KyMcRVONWuqLlV+YK4iGwT13F8B26zzAZxgBEHjWDbkkf8aNbpKLhh fvIIXIwShRTpLpewcZVpUAXHUx2/BbT2ig5leYxtiCbB1QuXvALfcx0amwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1vIpP4UKhRt1jTAVabYYq6jC3dMB8GA1UdIwQY MBaAFOR+5b7j7SP5Q3YeWPDuqXx8W/h8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUg3bHZ1UHRJX2xEZGg1WThPNnBmSHhiLUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy81ZWEyZmYtOGQ2Ni00YTExLTkzZjgt MmUyOTA4NTg4ODY1LzEvNUg3bHZ1UHRJX2xEZGg1WThPNnBmSHhiLUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy81ZWEyZmYtOGQ2Ni00YTExLTkzZjgtMmUyOTA4NTg4ODY1 LzEvNUg3bHZ1UHRJX2xEZGg1WThPNnBmSHhiLUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQg9JWgxa h//+aYUHWiRAeN1nT+FqgCjtkGZmIBOYL7qvuo0+uXQdrQaU1qWrs9/mJ2h26XRe bRwNWVrICJrnQ0CnQacBngjcbgWRBHEICRYK0yMt18GMe1ltJMdBAr8jv0KFSTkd qT6z3DmQPWdU9HrvS/LXYGLDTlJTyL2FfhFYhq11/gpjBlgialDO7eHdKQxICOdR 1SvHXW3ooQN1a5rG1guCEycr8En1qi23DbMF/WH+2sDw5tI6GG4w82vCS23PU07t E+mWu5mEOqUdlnesJMeO8TqIB8Xbnn79Rhmqv9cymxhFRsMaiLoChSyQjDHBa6kv eWXMsyBcLxIaPg== -----END CERTIFICATE-----Generated at Fri Dec 26 22:48:45 2025 by rpki-client