This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft File: r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft (raw, json) Hash identifier: hq5gT/5TyzbJoQbXrxyT3pLkWTc+b9GeeO7kvF9Munw= Subject key identifier: 81:06:E0:99:9F:80:2F:B7:97:87:8D:BA:58:45:BF:29:96:4C:6E:CF Authority key identifier: AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2 Certificate issuer: /CN=af93102511e660263f8ef6e4c1f9ab32393839b2 Certificate serial: 019AF19B23DB58AD57FE5A817BF2B79AA50E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft Manifest number: 0BCD Signing time: Sat 06 Dec 2025 03:01:07 +0000 Manifest this update: Sat 06 Dec 2025 03:01:07 +0000 Manifest next update: Sun 07 Dec 2025 03:01:07 +0000 Files and hashes: 1: QyIQhrwBc_E0RzmwfCK0p-xEPL8.roa (hash: KU05TYN4aOywUPeCIgZViB5uKUpefnNLinujip3r7Ws=) 2: r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl (hash: e6E5iZyYLfVmhXJi8+rgqy7IkULiCGxYmNv38ndwMng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:23:db:58:ad:57:fe:5a:81:7b:f2:b7:9a:a5:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af93102511e660263f8ef6e4c1f9ab32393839b2 Validity Not Before: Dec 6 03:01:07 2025 GMT Not After : Dec 7 03:01:07 2025 GMT Subject: CN=8106e0999f802fb797878dba5845bf29964c6ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e0:b0:b4:07:22:4d:d5:7a:ad:a8:70:8f:ca: e0:dd:80:08:8f:87:c0:66:ea:d9:94:f5:ef:33:85: 07:f2:36:f9:c3:fd:3a:27:0c:f1:49:8e:a6:8a:29: a7:7d:ef:06:b8:3d:47:9b:80:1c:73:67:0f:2e:fa: 59:11:4a:95:75:dc:12:df:c8:5c:3a:f3:7d:e7:74: e4:1c:23:62:95:90:f3:7c:5b:9e:c3:f2:f5:31:7c: 34:59:5d:f0:65:5c:e5:4d:59:d2:2b:fd:4a:5a:72: 42:2a:57:3a:46:ca:3c:f6:dc:ce:21:b9:ca:0f:72: df:2e:40:2e:88:ef:94:b5:89:65:6b:5f:55:47:ef: aa:7d:17:01:a5:4e:14:d0:7c:23:bd:69:e4:9b:8c: 0e:f6:3c:99:78:77:a0:92:36:56:40:07:b0:17:73: 41:ea:c0:df:d0:4c:c3:d0:b9:50:b9:09:db:33:b8: ca:34:db:67:e6:df:94:f0:cd:cb:75:48:14:80:98: 11:c7:a6:62:c3:48:7b:d1:f5:38:2e:5f:40:13:7f: d6:11:b4:3e:a5:3e:1b:af:83:fa:a1:a8:c4:30:79: a8:c3:f5:34:de:ef:c9:e1:9b:6e:42:63:d7:31:cd: f0:4a:f3:5e:9f:7a:69:0d:94:67:95:77:3d:1a:91: 95:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:06:E0:99:9F:80:2F:B7:97:87:8D:BA:58:45:BF:29:96:4C:6E:CF X509v3 Authority Key Identifier: keyid:AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:9e:4b:96:25:99:77:dc:59:7d:7d:91:c3:0a:33:dc:a7:f8: e2:e6:aa:cc:4d:1d:dd:4f:f1:e4:fa:ff:54:cc:90:41:2c:91: 0a:38:c3:3f:0f:77:6c:b4:94:67:c5:cc:8e:b6:be:16:38:1a: 5d:0e:e6:69:da:ef:84:ad:38:42:aa:ad:a2:a1:ca:62:ab:76: 7e:b1:94:ba:68:15:b7:32:1e:b3:ea:77:cb:f4:11:69:e2:d3: 4a:5e:ae:f3:14:f1:0d:1a:ed:82:41:31:d4:5b:90:ba:4d:cc: 8e:e4:3e:e9:eb:75:59:6e:24:d6:0f:6a:3c:0a:0e:ef:ba:e3: ea:21:00:40:50:8f:d6:8c:f0:3d:0a:70:09:85:56:6e:3f:31: ea:33:93:4a:f3:47:04:76:f1:08:a7:42:7c:c0:2b:c2:db:7d: 0d:5d:03:6f:8d:9f:71:17:ca:a8:3c:fe:c8:44:2d:18:4f:67: da:ad:01:e7:b3:5c:bf:99:33:1e:e2:81:d7:95:2c:d2:92:d6: 7f:07:7c:8c:0a:7e:d1:72:32:86:da:e7:96:6f:99:10:ee:1b: a4:ca:b2:8c:d9:1d:4d:75:9f:10:a7:a4:a9:ba:f4:69:31:b6: d5:ca:88:57:b2:a3:ba:b4:d1:8f:9b:c4:41:ec:18:a6:a3:ae: d6:76:fc:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyPbWK1X/lqBe/K3mqUOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOTMxMDI1MTFlNjYwMjYzZjhlZjZlNGMxZjlhYjMyMzkz ODM5YjIwHhcNMjUxMjA2MDMwMTA3WhcNMjUxMjA3MDMwMTA3WjAzMTEwLwYDVQQD Eyg4MTA2ZTA5OTlmODAyZmI3OTc4NzhkYmE1ODQ1YmYyOTk2NGM2ZWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOCwtAciTdV6rahwj8rg3YAIj4fA ZurZlPXvM4UH8jb5w/06JwzxSY6miimnfe8GuD1Hm4Acc2cPLvpZEUqVddwS38hc OvN953TkHCNilZDzfFuew/L1MXw0WV3wZVzlTVnSK/1KWnJCKlc6Rso89tzOIbnK D3LfLkAuiO+UtYlla19VR++qfRcBpU4U0HwjvWnkm4wO9jyZeHegkjZWQAewF3NB 6sDf0EzD0LlQuQnbM7jKNNtn5t+U8M3LdUgUgJgRx6Ziw0h70fU4Ll9AE3/WEbQ+ pT4br4P6oajEMHmow/U03u/J4ZtuQmPXMc3wSvNen3ppDZRnlXc9GpGV2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEG4JmfgC+3l4eNulhFvymWTG7PMB8GA1UdIwQY MBaAFK+TECUR5mAmP4725MH5qzI5ODmyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjVNUUpSSG1ZQ1lfanZia3dmbXJNams0T2JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kMTZlOTYtMDMxMy00YzliLTljMDkt YTk1ZmUzMTAyNjQ1LzEvcjVNUUpSSG1ZQ1lfanZia3dmbXJNams0T2JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9kMTZlOTYtMDMxMy00YzliLTljMDktYTk1ZmUzMTAyNjQ1 LzEvcjVNUUpSSG1ZQ1lfanZia3dmbXJNams0T2JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT55LliWZ d9xZfX2Rwwoz3Kf44uaqzE0d3U/x5Pr/VMyQQSyRCjjDPw93bLSUZ8XMjra+Fjga XQ7madrvhK04QqqtoqHKYqt2frGUumgVtzIes+p3y/QRaeLTSl6u8xTxDRrtgkEx 1FuQuk3MjuQ+6et1WW4k1g9qPAoO77rj6iEAQFCP1ozwPQpwCYVWbj8x6jOTSvNH BHbxCKdCfMArwtt9DV0Db42fcRfKqDz+yEQtGE9n2q0B57Ncv5kzHuKB15Us0pLW fwd8jAp+0XIyhtrnlm+ZEO4bpMqyjNkdTXWfEKekqbr0aTG21cqIV7KjurTRj5vE QewYpqOu1nb8SA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:04 2025 by rpki-client