This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft File: 5iNO09jKltxRjTXB58kr6_z2zk0.mft (raw, json) Hash identifier: ZtLdyfWsaRbWUSkjCWReJiswFxRV5qZ3UysOCCBa4Rw= Subject key identifier: 15:83:4B:1B:8D:78:06:13:D2:CD:AA:A8:36:03:5E:A0:B1:0F:EA:17 Authority key identifier: E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D Certificate issuer: /CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d Certificate serial: 019AF68A1F17B79C8593B60D909BB782A253 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft Manifest number: 16F3 Signing time: Sun 07 Dec 2025 02:00:38 +0000 Manifest this update: Sun 07 Dec 2025 02:00:38 +0000 Manifest next update: Mon 08 Dec 2025 02:00:38 +0000 Files and hashes: 1: 5iNO09jKltxRjTXB58kr6_z2zk0.crl (hash: DjkI9rlpC0DrnM9wHca+TscBgRqtt+MxbYFjO5Hr9U0=) 2: 9wh4IjR2WdijxIEialrBfGScnoA.roa (hash: aGpT2hqWZX/M5kbSljEdFZvRHYfWgQ/Qc0ertXxiLJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:1f:17:b7:9c:85:93:b6:0d:90:9b:b7:82:a2:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d Validity Not Before: Dec 7 02:00:38 2025 GMT Not After : Dec 8 02:00:38 2025 GMT Subject: CN=15834b1b8d780613d2cdaaa836035ea0b10fea17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:42:4f:55:67:a9:10:53:05:ad:2c:c0:73:c6: cc:59:7a:bc:8f:b8:32:74:7b:02:1b:15:b8:71:e2: a4:f1:94:b3:67:81:dc:12:4e:cf:68:ce:cf:7a:60: 92:6d:61:3c:03:d1:f4:80:0c:f3:fa:44:52:65:a7: f2:e2:c5:1b:11:2f:cc:10:ce:9c:36:b4:1c:e0:34: a0:44:c5:4d:c8:9f:9f:d3:71:05:a8:03:01:4d:6c: 8e:5b:a2:f0:ec:70:0f:65:07:67:c3:c5:5f:8f:86: 38:e7:3c:b2:f2:12:ed:5c:15:18:c2:3a:2f:96:cb: f6:16:6c:d9:af:ce:53:3a:ab:4e:fd:39:d5:1c:b0: d7:74:bc:05:6e:9e:07:aa:6e:d0:d0:39:bd:41:4a: b4:61:a9:cd:32:ec:dd:30:b1:f4:07:72:ed:81:2d: d4:7c:21:43:4f:3d:44:93:97:3a:01:8e:d2:2f:39: 6d:09:17:ab:1b:49:73:ec:8b:d4:4e:86:10:40:92: 3e:b5:62:e5:90:ed:22:99:f8:77:48:ce:3e:73:60: bb:34:32:30:2a:18:67:81:5f:86:db:ac:98:5c:fb: bc:98:04:63:6f:f8:14:04:be:e4:0a:5c:c7:ea:c5: 86:75:8c:89:cb:5d:e6:d4:02:84:db:2d:4c:58:d6: cc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:83:4B:1B:8D:78:06:13:D2:CD:AA:A8:36:03:5E:A0:B1:0F:EA:17 X509v3 Authority Key Identifier: keyid:E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:9d:5a:81:8c:ee:b9:e1:2c:60:31:3e:28:2c:65:d2:5a:28: 87:06:e0:3c:ad:e9:d5:da:9e:89:35:6b:ee:35:2e:30:6e:5d: e4:82:cb:28:45:93:c0:42:17:4a:b2:ca:7e:f6:80:2d:cd:20: 33:10:e4:7b:56:a8:a9:8b:e4:32:69:a2:24:6d:07:1d:01:c0: 5a:7e:44:f0:0e:7e:6f:78:c7:04:09:20:a8:e4:e7:b7:5e:81: 6c:6a:d2:fc:d4:8e:2c:06:2f:43:b9:40:1e:29:66:3d:38:45: 01:8c:8d:61:cc:0d:0a:e9:9d:a0:d8:e1:40:1f:9b:62:ef:2e: a8:7f:4c:fc:a7:3e:9c:67:08:b8:de:b0:d2:25:73:c3:5b:bc: e0:d7:d3:a8:d8:5a:63:1b:f0:46:1f:92:e8:89:0c:bf:e5:5b: 48:92:5c:64:7b:68:65:e5:65:a5:97:f4:eb:6d:94:67:39:15: 10:41:58:78:f8:12:51:b0:ff:3c:14:31:5f:4d:b3:fc:14:3e: 0e:96:00:2f:53:ef:9a:df:86:f7:3e:f0:5f:99:3d:47:96:f8: 72:2f:bb:32:cc:08:6c:c5:b7:7e:4a:31:d4:67:0a:c9:d9:3f: 68:cd:1f:01:c7:f9:70:5b:6f:c4:ac:ba:2c:16:3c:08:6b:03: 5e:ae:19:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ih8Xt5yFk7YNkJu3gqJTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MjM0ZWQzZDhjYTk2ZGM1MThkMzVjMWU3YzkyYmViZmNm NmNlNGQwHhcNMjUxMjA3MDIwMDM4WhcNMjUxMjA4MDIwMDM4WjAzMTEwLwYDVQQD EygxNTgzNGIxYjhkNzgwNjEzZDJjZGFhYTgzNjAzNWVhMGIxMGZlYTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0JPVWepEFMFrSzAc8bMWXq8j7gy dHsCGxW4ceKk8ZSzZ4HcEk7PaM7PemCSbWE8A9H0gAzz+kRSZafy4sUbES/MEM6c NrQc4DSgRMVNyJ+f03EFqAMBTWyOW6Lw7HAPZQdnw8Vfj4Y45zyy8hLtXBUYwjov lsv2FmzZr85TOqtO/TnVHLDXdLwFbp4Hqm7Q0Dm9QUq0YanNMuzdMLH0B3LtgS3U fCFDTz1Ek5c6AY7SLzltCRerG0lz7IvUToYQQJI+tWLlkO0imfh3SM4+c2C7NDIw KhhngV+G26yYXPu8mARjb/gUBL7kClzH6sWGdYyJy13m1AKE2y1MWNbMzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWDSxuNeAYT0s2qqDYDXqCxD+oXMB8GA1UdIwQY MBaAFOYjTtPYypbcUY01wefJK+v89s5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWlOTzA5aktsdHhSalRYQjU4a3I2X3oyemswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC85YjY3NGMtMzY1Ny00YzI1LTk5NTMt M2Y3MDQwOTk3NjgyLzEvNWlOTzA5aktsdHhSalRYQjU4a3I2X3oyemswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC85YjY3NGMtMzY1Ny00YzI1LTk5NTMtM2Y3MDQwOTk3Njgy LzEvNWlOTzA5aktsdHhSalRYQjU4a3I2X3oyemswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvp1agYzu ueEsYDE+KCxl0loohwbgPK3p1dqeiTVr7jUuMG5d5ILLKEWTwEIXSrLKfvaALc0g MxDke1aoqYvkMmmiJG0HHQHAWn5E8A5+b3jHBAkgqOTnt16BbGrS/NSOLAYvQ7lA HilmPThFAYyNYcwNCumdoNjhQB+bYu8uqH9M/Kc+nGcIuN6w0iVzw1u84NfTqNha YxvwRh+S6IkMv+VbSJJcZHtoZeVlpZf0622UZzkVEEFYePgSUbD/PBQxX02z/BQ+ DpYAL1Pvmt+G9z7wX5k9R5b4ci+7MswIbMW3fkox1GcKydk/aM0fAcf5cFtvxKy6 LBY8CGsDXq4ZPw== -----END CERTIFICATE-----Generated at Sun Dec 7 06:09:32 2025 by rpki-client