This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft File: v5gt73eibXzBlHOzpAZNzFIX5HE.mft (raw, json) Hash identifier: IYIJYSejynR6n+qjHpUk3h9aZKyyn9h48/ujLMsgjmY= Subject key identifier: 76:EB:55:D2:63:23:2F:30:AE:DC:CE:82:E5:F3:D6:9A:DC:CA:50:86 Authority key identifier: BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71 Certificate issuer: /CN=bf982def77a26d7cc19473b3a4064dcc5217e471 Certificate serial: 019AF209426CD651B9E5603D0A3C63281C10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:24 +0000 Manifest this update: Sat 06 Dec 2025 05:01:24 +0000 Manifest next update: Sun 07 Dec 2025 05:01:24 +0000 Files and hashes: 1: JoXkjArh1eQOEzJmDg5eyKhlAZU.roa (hash: IpnTumi25Jm35YnmbE0mTeFwDsMDbPll4BvRMHinz6I=) 2: v5gt73eibXzBlHOzpAZNzFIX5HE.crl (hash: ry9YOXpAHSlMO6Lm5zvJnutg3c07plJ7I/olx+d7IQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:42:6c:d6:51:b9:e5:60:3d:0a:3c:63:28:1c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf982def77a26d7cc19473b3a4064dcc5217e471 Validity Not Before: Dec 6 05:01:24 2025 GMT Not After : Dec 7 05:01:24 2025 GMT Subject: CN=76eb55d263232f30aedcce82e5f3d69adcca5086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:86:22:28:6a:31:82:36:75:32:5e:1f:a5:cd: f7:f0:6c:3d:e0:1b:3e:45:24:1d:10:ad:43:ea:17: 1b:e7:5c:bd:56:9f:86:f3:76:b1:19:2e:9d:8e:f7: bc:bf:d0:cc:75:69:59:0b:d4:bd:e2:88:f9:1f:6b: 89:78:2b:c5:70:e2:6a:24:1b:e2:a0:5f:29:cc:ca: 3b:6d:4c:8c:ad:d1:82:8a:3b:d3:03:45:9d:9d:26: 42:97:99:0c:b8:b3:84:36:8b:1b:65:eb:c7:36:d3: 05:03:8c:c6:90:64:11:b9:2b:74:31:a5:71:ea:ee: 33:d6:90:a3:e1:14:63:25:3e:a1:e2:1e:23:31:84: 79:5c:33:4d:49:b2:99:5d:0c:0b:48:55:b7:b4:d3: a7:6c:3e:66:aa:7f:0c:37:34:e3:3d:b3:7d:a5:cd: 9b:e4:3b:08:91:ef:a0:05:69:f0:ce:0e:b4:84:cc: e0:67:5a:c9:ea:36:98:e5:5a:3b:46:52:7f:3c:e8: 13:ad:1f:26:51:c7:55:ff:23:49:a2:06:5a:68:a5: 16:a0:14:e3:82:68:f3:80:95:24:97:72:00:55:fc: 81:32:ff:c4:1c:6b:3a:52:e4:70:32:80:00:c8:3f: b4:c3:7a:b0:b7:0b:5d:c4:40:04:56:a4:63:c5:e2: 6e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:EB:55:D2:63:23:2F:30:AE:DC:CE:82:E5:F3:D6:9A:DC:CA:50:86 X509v3 Authority Key Identifier: keyid:BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:4d:0e:2f:5f:6a:a1:32:34:73:c4:01:9c:41:18:7a:29:f7: 90:c4:04:c9:bd:97:31:fb:c6:3c:d4:c3:b3:ff:02:eb:80:1d: ba:a4:a4:27:45:ed:f6:c1:06:42:b0:4f:7f:18:3c:42:f1:04: 95:56:69:cf:e7:77:d2:10:3e:c7:e0:42:8e:aa:37:fd:f7:3e: c3:c4:5f:25:db:db:47:82:c0:c5:15:73:99:5b:c6:a0:93:c1: 03:77:39:68:a5:fd:22:bc:78:6d:42:8d:7a:e2:a9:92:69:5b: be:0b:c7:d3:c0:32:ed:2e:a3:4b:1e:75:de:a5:82:1f:21:b9: d9:6a:d3:7f:9e:88:71:2f:6d:f9:0f:f1:0b:2c:45:41:97:dd: 67:21:f3:da:ab:5b:e1:04:ae:90:43:43:a6:eb:c0:1c:11:bf: 33:03:0f:bf:dc:11:c3:d7:1f:ae:73:65:1f:62:e3:4e:13:7f: 58:c4:c6:4e:01:cf:73:09:4c:30:ac:04:83:b8:92:13:e6:9f: e3:03:35:6a:48:5c:66:08:74:83:c2:83:f2:1e:97:43:47:8d: 4f:e9:53:70:2d:a4:a2:8b:64:e8:0b:c4:bf:f5:da:c0:02:53: 48:1f:f7:6a:5f:cd:9d:5b:1a:85:38:99:4b:09:3c:4c:cb:f8: cf:12:48:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUJs1lG55WA9CjxjKBwQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmOTgyZGVmNzdhMjZkN2NjMTk0NzNiM2E0MDY0ZGNjNTIx N2U0NzEwHhcNMjUxMjA2MDUwMTI0WhcNMjUxMjA3MDUwMTI0WjAzMTEwLwYDVQQD Eyg3NmViNTVkMjYzMjMyZjMwYWVkY2NlODJlNWYzZDY5YWRjY2E1MDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YYiKGoxgjZ1Ml4fpc338Gw94Bs+ RSQdEK1D6hcb51y9Vp+G83axGS6djve8v9DMdWlZC9S94oj5H2uJeCvFcOJqJBvi oF8pzMo7bUyMrdGCijvTA0WdnSZCl5kMuLOENosbZevHNtMFA4zGkGQRuSt0MaVx 6u4z1pCj4RRjJT6h4h4jMYR5XDNNSbKZXQwLSFW3tNOnbD5mqn8MNzTjPbN9pc2b 5DsIke+gBWnwzg60hMzgZ1rJ6jaY5Vo7RlJ/POgTrR8mUcdV/yNJogZaaKUWoBTj gmjzgJUkl3IAVfyBMv/EHGs6UuRwMoAAyD+0w3qwtwtdxEAEVqRjxeJuPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbrVdJjIy8wrtzOguXz1prcylCGMB8GA1UdIwQY MBaAFL+YLe93om18wZRzs6QGTcxSF+RxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjVndDczZWliWHpCbEhPenBBWk56RklYNUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZmEwOTEtYjE2Zi00NTI3LThiMDAt MWRkYWMyYjA4NDA0LzEvdjVndDczZWliWHpCbEhPenBBWk56RklYNUhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZmEwOTEtYjE2Zi00NTI3LThiMDAtMWRkYWMyYjA4NDA0 LzEvdjVndDczZWliWHpCbEhPenBBWk56RklYNUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALE0OL19q oTI0c8QBnEEYein3kMQEyb2XMfvGPNTDs/8C64AduqSkJ0Xt9sEGQrBPfxg8QvEE lVZpz+d30hA+x+BCjqo3/fc+w8RfJdvbR4LAxRVzmVvGoJPBA3c5aKX9Irx4bUKN euKpkmlbvgvH08Ay7S6jSx513qWCHyG52WrTf56IcS9t+Q/xCyxFQZfdZyHz2qtb 4QSukENDpuvAHBG/MwMPv9wRw9cfrnNlH2LjThN/WMTGTgHPcwlMMKwEg7iSE+af 4wM1akhcZgh0g8KD8h6XQ0eNT+lTcC2kootk6AvEv/XawAJTSB/3al/NnVsahTiZ Swk8TMv4zxJIBw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:25:27 2025 by rpki-client