This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft File: f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft (raw, json) Hash identifier: 62J/KItfOdFWZ1GQxBEdePjY1/YUahVU2r4mEqcxO00= Subject key identifier: C0:8E:E4:1A:AC:32:3C:AD:BA:A7:37:4F:B7:B9:03:70:13:A1:2A:14 Authority key identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2 Certificate issuer: /CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2 Certificate serial: 019AF20929E040AE57CD7FF5BA1F7A2E0FE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 05:01:17 +0000 Manifest this update: Sat 06 Dec 2025 05:01:17 +0000 Manifest next update: Sun 07 Dec 2025 05:01:17 +0000 Files and hashes: 1: OtzZOisV1bM6sc-GLNPwmdom2N8.roa (hash: hJNg1q2HXpx1PLv5SMEFG6V3PCbaVExvvGGJiMCfNyI=) 2: f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl (hash: 7Tacy25D3Q0SJ6MC6eWPxtgC0g+vYUTd7mPDIe93XkA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:29:e0:40:ae:57:cd:7f:f5:ba:1f:7a:2e:0f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2 Validity Not Before: Dec 6 05:01:17 2025 GMT Not After : Dec 7 05:01:17 2025 GMT Subject: CN=c08ee41aac323cadbaa7374fb7b9037013a12a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e4:51:3e:24:60:63:f3:6c:f3:fd:bc:a1:6c: 99:13:12:96:70:81:50:85:cf:1e:54:dc:77:f9:32: 56:82:6e:c1:29:29:6e:bb:bf:77:82:fb:2b:55:1b: f6:62:4e:ae:4f:26:a7:6a:96:81:4b:a3:c0:0b:e7: 2a:ca:62:ba:6c:8e:4a:ec:56:a9:b4:3f:fb:26:b7: 78:28:8a:b1:28:9e:db:47:bc:f2:4c:3c:5d:2c:0f: cb:82:4a:bf:b7:06:ef:e9:ee:30:02:fd:b7:0b:1d: 5f:e4:d7:c4:b5:ea:00:06:43:fc:fc:72:8a:0b:56: 75:a9:15:ec:1d:08:81:b9:8e:2a:2a:90:dc:4c:be: da:2f:f1:16:33:eb:41:ce:39:56:dc:47:23:e9:e7: c1:71:0c:e9:8a:7e:c8:96:eb:12:33:4a:04:13:18: a3:e7:23:08:bd:2b:13:8b:76:2e:84:bd:23:06:f4: 00:ea:d5:b9:1a:0d:17:bc:d3:d7:24:8a:69:54:1b: 2e:03:8f:58:0d:93:8d:0a:a9:94:cb:9d:40:f2:99: 59:30:b6:77:96:d1:ba:c1:b8:1d:ff:93:90:81:79: 16:34:4a:f4:ef:1e:16:ac:4e:14:8f:1d:5c:82:ea: 06:74:b8:ae:52:19:21:49:53:0b:f0:0d:52:61:85: 16:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8E:E4:1A:AC:32:3C:AD:BA:A7:37:4F:B7:B9:03:70:13:A1:2A:14 X509v3 Authority Key Identifier: keyid:7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:0c:fa:45:ef:cc:95:2f:e6:d3:24:5a:b1:ed:cf:79:dd:55: d4:f7:2f:b3:db:da:78:4b:44:d7:aa:9e:14:65:ea:88:31:0b: 09:a9:81:55:fe:ee:32:a3:d1:76:32:42:8d:6c:66:69:3f:ab: ab:f1:26:e5:d2:75:49:06:6b:21:ee:a2:dd:1c:05:d2:b8:ac: c7:91:cf:21:2b:81:71:4f:90:bb:02:59:c1:c8:e2:a8:8b:c6: 8d:84:f3:20:e1:01:27:d3:60:06:88:25:a0:9f:70:c0:8e:66: 32:be:bb:78:28:1a:4a:51:c2:fb:12:2a:89:fa:ed:52:f2:3d: fc:4f:dd:67:4d:d9:38:f1:a0:c0:f9:a4:6a:97:6b:87:39:95: f4:df:f7:25:c6:33:2f:5c:69:69:9f:a6:86:fb:f3:c5:e2:d5: 37:26:00:c2:fa:9b:f4:7e:cf:6d:69:05:a5:c8:b0:13:ba:da: 57:10:82:52:d7:7c:37:e1:a3:7d:d9:7f:23:fe:2f:01:31:17: b1:ff:8e:eb:8a:bc:81:d2:71:72:9e:ed:46:44:7a:ec:d0:76: 08:f0:64:9f:55:76:ab:8c:bb:d2:f8:15:46:62:97:06:6e:03: 01:0d:0f:7c:b8:a0:67:e3:8e:f2:20:3e:8f:c2:d9:f0:e1:85: 21:ca:e7:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSngQK5XzX/1uh96Lg/lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmOTJkZjc2MTBmMDQ4ZjQzYmY0NGMzMzZkNDFjNmMxMTU3 ZWYwZTIwHhcNMjUxMjA2MDUwMTE3WhcNMjUxMjA3MDUwMTE3WjAzMTEwLwYDVQQD EyhjMDhlZTQxYWFjMzIzY2FkYmFhNzM3NGZiN2I5MDM3MDEzYTEyYTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeRRPiRgY/Ns8/28oWyZExKWcIFQ hc8eVNx3+TJWgm7BKSluu793gvsrVRv2Yk6uTyanapaBS6PAC+cqymK6bI5K7Fap tD/7Jrd4KIqxKJ7bR7zyTDxdLA/Lgkq/twbv6e4wAv23Cx1f5NfEteoABkP8/HKK C1Z1qRXsHQiBuY4qKpDcTL7aL/EWM+tBzjlW3Ecj6efBcQzpin7IlusSM0oEExij 5yMIvSsTi3YuhL0jBvQA6tW5Gg0XvNPXJIppVBsuA49YDZONCqmUy51A8plZMLZ3 ltG6wbgd/5OQgXkWNEr07x4WrE4Ujx1cguoGdLiuUhkhSVML8A1SYYUWfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCO5BqsMjytuqc3T7e5A3AToSoUMB8GA1UdIwQY MBaAFH+S33YQ8Ej0O/RMM21BxsEVfvDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OGJlMTgtMmYzNS00YzZhLWFhNmEt N2Y3MmY0NGI4OTgyLzEvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81OGJlMTgtMmYzNS00YzZhLWFhNmEtN2Y3MmY0NGI4OTgy LzEvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQz6Re/M lS/m0yRase3Ped1V1Pcvs9vaeEtE16qeFGXqiDELCamBVf7uMqPRdjJCjWxmaT+r q/Em5dJ1SQZrIe6i3RwF0risx5HPISuBcU+QuwJZwcjiqIvGjYTzIOEBJ9NgBogl oJ9wwI5mMr67eCgaSlHC+xIqifrtUvI9/E/dZ03ZOPGgwPmkapdrhzmV9N/3JcYz L1xpaZ+mhvvzxeLVNyYAwvqb9H7PbWkFpciwE7raVxCCUtd8N+Gjfdl/I/4vATEX sf+O64q8gdJxcp7tRkR67NB2CPBkn1V2q4y70vgVRmKXBm4DAQ0PfLigZ+OO8iA+ j8LZ8OGFIcrnRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:15 2025 by rpki-client