This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft File: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft (raw, json) Hash identifier: 2DsQWdemR/TrWdwzsJCSuVQQi8PAoTv3LdidX70espQ= Subject key identifier: 8C:B1:35:48:7A:51:7B:6E:6F:80:2E:3B:20:54:D8:F4:80:31:AE:D0 Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8 Certificate issuer: /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8 Certificate serial: 019B269B28132FFE96A423F351322678FB12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 10:01:01 +0000 Manifest this update: Tue 16 Dec 2025 10:01:01 +0000 Manifest next update: Wed 17 Dec 2025 10:01:01 +0000 Files and hashes: 1: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl (hash: fWZQX2F/n7narHPrnMUIs0N4ilLKRBFKd2Lch/EVHgk=) 2: H9LigG1-eoyksArBLiDVRw0BhjU.roa (hash: oha3QLmkXpQFYs1KCF6A8sqvDCo/E/9M5bF7ey6N14M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9b:28:13:2f:fe:96:a4:23:f3:51:32:26:78:fb:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8 Validity Not Before: Dec 16 10:01:01 2025 GMT Not After : Dec 17 10:01:01 2025 GMT Subject: CN=8cb135487a517b6e6f802e3b2054d8f48031aed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5b:f9:b3:7d:9b:0d:22:3d:ad:36:e6:45:4f: cd:b6:7c:a3:58:f9:b9:dd:ab:4a:47:3e:9a:4f:92: 47:7f:e7:dd:a2:42:c4:bf:4d:e8:64:85:59:07:09: 51:78:a4:20:0e:b3:fd:3f:89:1e:2f:cf:6a:c7:b4: c5:3a:cb:c4:a5:ce:7a:fc:eb:7f:90:79:b1:ba:e8: d2:60:1c:a3:1b:a2:16:2e:07:f2:e3:76:2e:c5:dd: 65:b4:74:13:5c:37:58:db:6d:12:88:c3:6e:9b:b6: cf:79:89:1f:36:9e:e4:cd:b2:75:08:ab:79:02:4f: 47:5f:51:ee:41:af:66:a4:d1:c5:a4:69:3b:ee:12: 23:74:82:4d:c5:f5:4d:b2:a5:d5:37:48:c3:34:29: 23:e5:4e:c4:ac:f0:12:ec:af:ec:02:a2:fa:c6:8c: da:81:eb:b8:e8:ad:df:0f:1a:31:b1:2f:6b:21:97: 71:a8:d9:ec:40:83:de:92:09:09:0d:6e:bd:55:ae: 61:94:78:f9:4a:6d:48:44:a7:6d:e9:7e:52:83:f6: cb:72:56:b6:8b:a3:ee:8b:8f:8d:0d:80:c1:a4:3c: af:e2:41:ab:ff:af:fd:1c:15:66:1e:5b:e3:7d:f4: 8e:47:b6:00:c8:65:4f:6f:ea:59:20:81:1e:1e:32: 33:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B1:35:48:7A:51:7B:6E:6F:80:2E:3B:20:54:D8:F4:80:31:AE:D0 X509v3 Authority Key Identifier: keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:4d:00:88:8f:16:36:86:82:ae:d1:6f:fe:2c:59:0d:45:db: b7:1a:34:06:67:99:24:5e:a7:09:56:39:89:88:47:eb:e8:2a: e8:0e:72:21:83:76:20:3e:c7:b5:14:23:e7:43:ac:ed:d0:1c: 67:6f:02:72:51:a1:a1:b5:a5:b2:a4:90:31:87:27:bc:51:06: 5e:92:e3:6d:d4:b6:91:eb:57:c6:45:3c:a5:9d:af:50:24:ad: a5:74:c3:34:13:9a:ef:b6:63:a3:4a:7e:56:e3:dd:fb:c9:56: f6:9a:28:4e:e9:aa:d3:4f:39:12:f3:c4:1b:cc:27:75:b4:18: d9:51:0e:3a:fa:7a:65:3b:72:5b:75:39:cc:98:33:4c:c5:fc: bb:08:6c:fc:a0:b8:df:c8:34:b9:31:52:c9:b0:ae:df:17:79: 98:89:86:dd:40:1f:7e:ed:82:b9:fb:10:4e:57:7a:7a:62:c2: 31:f3:75:b3:73:59:ed:d4:76:94:c8:82:2c:32:ee:b1:f7:ca: 65:43:2f:74:83:05:42:ac:72:be:ab:f4:be:6a:7d:d7:72:66: ec:8b:ad:c2:0b:57:69:3c:18:1d:33:6e:6f:f0:e1:dd:46:95: 89:05:f8:67:c2:26:62:a3:f8:69:6b:4c:cb:d6:89:5c:90:40: 94:ed:7b:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmmygTL/6WpCPzUTImePsSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZTVjNGM5OWQ2MTMxMDQ5OTgyYWY5YWQ5Yjg2NjAyYjI5 MjliYjgwHhcNMjUxMjE2MTAwMTAxWhcNMjUxMjE3MTAwMTAxWjAzMTEwLwYDVQQD Eyg4Y2IxMzU0ODdhNTE3YjZlNmY4MDJlM2IyMDU0ZDhmNDgwMzFhZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1v5s32bDSI9rTbmRU/NtnyjWPm5 3atKRz6aT5JHf+fdokLEv03oZIVZBwlReKQgDrP9P4keL89qx7TFOsvEpc56/Ot/ kHmxuujSYByjG6IWLgfy43Yuxd1ltHQTXDdY220SiMNum7bPeYkfNp7kzbJ1CKt5 Ak9HX1HuQa9mpNHFpGk77hIjdIJNxfVNsqXVN0jDNCkj5U7ErPAS7K/sAqL6xoza geu46K3fDxoxsS9rIZdxqNnsQIPekgkJDW69Va5hlHj5Sm1IRKdt6X5Sg/bLcla2 i6Pui4+NDYDBpDyv4kGr/6/9HBVmHlvjffSOR7YAyGVPb+pZIIEeHjIzDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyxNUh6UXtub4AuOyBU2PSAMa7QMB8GA1UdIwQY MBaAFOflxMmdYTEEmYKvmtm4ZgKykpu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNS1YRXlaMWhNUVNaZ3EtYTJiaG1BcktTbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lNzA5ZGUtNmIyZC00YmU0LTg1MDMt YTFlNDg3N2NlZTQ4LzEvNS1YRXlaMWhNUVNaZ3EtYTJiaG1BcktTbTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9lNzA5ZGUtNmIyZC00YmU0LTg1MDMtYTFlNDg3N2NlZTQ4 LzEvNS1YRXlaMWhNUVNaZ3EtYTJiaG1BcktTbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAck0AiI8W NoaCrtFv/ixZDUXbtxo0BmeZJF6nCVY5iYhH6+gq6A5yIYN2ID7HtRQj50Os7dAc Z28CclGhobWlsqSQMYcnvFEGXpLjbdS2ketXxkU8pZ2vUCStpXTDNBOa77Zjo0p+ VuPd+8lW9pooTumq0085EvPEG8wndbQY2VEOOvp6ZTtyW3U5zJgzTMX8uwhs/KC4 38g0uTFSybCu3xd5mImG3UAffu2CufsQTld6emLCMfN1s3NZ7dR2lMiCLDLusffK ZUMvdIMFQqxyvqv0vmp913Jm7IutwgtXaTwYHTNub/Dh3UaViQX4Z8ImYqP4aWtM y9aJXJBAlO17MA== -----END CERTIFICATE-----Generated at Tue Dec 16 17:43:59 2025 by rpki-client