This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft File: _5m8PRSR-CJfiBFk9ZMUS3olyOs.mft (raw, json) Hash identifier: ViXZP/EZlgNaWRre2QR/s85b8Xnch0QJWzuaZ+Y1e4o= Subject key identifier: E9:EC:CD:D0:1E:C0:F4:57:94:BF:03:B4:C2:9F:E3:79:00:75:58:BE Authority key identifier: FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB Certificate issuer: /CN=ff99bc3d1491f8225f881164f593144b7a25c8eb Certificate serial: 019AF16435EF60C21AEC97F1B8BACD731AAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft Manifest number: 1133 Signing time: Sat 06 Dec 2025 02:01:07 +0000 Manifest this update: Sat 06 Dec 2025 02:01:07 +0000 Manifest next update: Sun 07 Dec 2025 02:01:07 +0000 Files and hashes: 1: DmxV1ufKd_5CUtgyMhTR3HZ9Ctc.roa (hash: cD2uBmETpIdrWKKJGmi5CrnlQnFYngKqgmK3aNdcBqA=) 2: _5m8PRSR-CJfiBFk9ZMUS3olyOs.crl (hash: 9JOTnwvmj0gZIei/6wBzVNp3E8y3kVfStSDX0u5BqZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:35:ef:60:c2:1a:ec:97:f1:b8:ba:cd:73:1a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff99bc3d1491f8225f881164f593144b7a25c8eb Validity Not Before: Dec 6 02:01:07 2025 GMT Not After : Dec 7 02:01:07 2025 GMT Subject: CN=e9eccdd01ec0f45794bf03b4c29fe379007558be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:85:e1:9a:4b:30:ac:2b:5c:3a:1c:95:47:b3: 9e:b6:82:22:04:dc:27:f4:bd:27:7c:39:47:fa:37: 89:d3:b2:c8:a6:88:e5:b2:6b:bb:43:d4:df:73:22: 88:20:05:b5:5b:c3:e1:37:54:c6:0a:c5:d1:56:05: fe:7f:83:1f:0c:f6:3b:5e:78:ba:e8:76:cc:90:2a: eb:ec:1d:06:b0:55:82:47:67:de:57:84:ef:f6:0c: d5:55:58:8c:65:81:fc:b9:bd:a9:13:d4:25:dd:e7: 7d:c5:6f:8e:9a:84:1b:02:91:fa:2b:45:fa:33:c4: 42:a6:36:2b:02:46:94:7c:ee:69:d6:6a:1c:ad:f5: 76:fb:e2:97:26:b3:37:99:55:2e:92:1f:47:08:2a: 13:a7:60:77:08:5f:af:97:ba:7f:5e:02:26:6e:75: 0a:e8:3d:c5:94:57:30:ac:63:2b:5c:9f:5c:e5:c9: 1b:3a:91:f0:81:8c:cc:09:d4:f9:29:a9:00:7e:6d: 77:34:84:79:5f:dd:59:a8:ba:69:6d:2b:02:de:34: da:59:43:d7:14:f6:ca:ad:9c:9a:93:7f:3c:7d:12: 4e:04:92:3d:2f:aa:0c:8f:93:08:da:f0:3f:90:8f: 4d:07:f0:e1:dd:aa:ca:b6:08:74:41:d8:db:83:fd: bc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EC:CD:D0:1E:C0:F4:57:94:BF:03:B4:C2:9F:E3:79:00:75:58:BE X509v3 Authority Key Identifier: keyid:FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:31:ad:40:28:a0:bc:77:2f:46:2e:10:03:9d:13:64:34:b4: 7d:7a:a0:20:bf:b9:96:58:56:f3:a7:d2:8a:cf:cf:03:5f:64: e0:3e:68:f9:89:9b:e6:eb:f8:22:63:93:ff:24:9e:87:19:84: 6e:ca:b0:b8:9e:6f:2c:ca:b6:b8:09:bc:19:af:c3:3d:40:1f: 29:cb:e0:d2:04:dd:27:30:1d:bf:90:68:1c:5d:59:2e:67:b8: 39:f2:08:70:c2:d7:c9:f4:bd:df:23:d4:6f:a8:46:6d:bc:ba: 83:37:7f:e3:d5:0a:79:4e:6d:2a:e6:b0:6f:83:83:8f:e5:0c: 85:4d:98:2f:14:5c:f5:0e:8a:b1:73:4b:ee:71:66:c2:a1:6f: 4c:c6:1b:7e:e8:45:c9:6c:c2:8a:8f:9b:9c:d4:81:b4:1e:cb: 24:81:1a:eb:7a:ed:f5:29:4b:dd:af:88:e3:69:ea:ce:c2:ab: c1:96:3f:ea:21:1b:64:1c:c4:ef:5d:7a:98:37:0a:8f:ec:d5: 78:50:6c:d1:84:53:c9:65:f6:f8:b2:eb:41:8c:f3:92:2b:ae: e4:ec:5a:f3:7e:92:51:17:20:6d:89:7b:75:33:42:bf:63:db: f3:ed:5f:71:9c:94:3e:f9:fa:53:13:d9:de:d6:c7:b6:c5:cf: 20:c4:c2:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDXvYMIa7JfxuLrNcxqrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOTliYzNkMTQ5MWY4MjI1Zjg4MTE2NGY1OTMxNDRiN2Ey NWM4ZWIwHhcNMjUxMjA2MDIwMTA3WhcNMjUxMjA3MDIwMTA3WjAzMTEwLwYDVQQD EyhlOWVjY2RkMDFlYzBmNDU3OTRiZjAzYjRjMjlmZTM3OTAwNzU1OGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YXhmkswrCtcOhyVR7OetoIiBNwn 9L0nfDlH+jeJ07LIpojlsmu7Q9TfcyKIIAW1W8PhN1TGCsXRVgX+f4MfDPY7Xni6 6HbMkCrr7B0GsFWCR2feV4Tv9gzVVViMZYH8ub2pE9Ql3ed9xW+OmoQbApH6K0X6 M8RCpjYrAkaUfO5p1mocrfV2++KXJrM3mVUukh9HCCoTp2B3CF+vl7p/XgImbnUK 6D3FlFcwrGMrXJ9c5ckbOpHwgYzMCdT5KakAfm13NIR5X91ZqLppbSsC3jTaWUPX FPbKrZyak388fRJOBJI9L6oMj5MI2vA/kI9NB/Dh3arKtgh0Qdjbg/28xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnszdAewPRXlL8DtMKf43kAdVi+MB8GA1UdIwQY MBaAFP+ZvD0UkfgiX4gRZPWTFEt6JcjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzVtOFBSU1ItQ0pmaUJGazlaTVVTM29seU9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kYTM0MDYtMDRmOS00N2IwLWExMTkt Yjg4YWZlZjEzMzY3LzEvXzVtOFBSU1ItQ0pmaUJGazlaTVVTM29seU9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9kYTM0MDYtMDRmOS00N2IwLWExMTktYjg4YWZlZjEzMzY3 LzEvXzVtOFBSU1ItQ0pmaUJGazlaTVVTM29seU9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjGtQCig vHcvRi4QA50TZDS0fXqgIL+5llhW86fSis/PA19k4D5o+Ymb5uv4ImOT/ySehxmE bsqwuJ5vLMq2uAm8Ga/DPUAfKcvg0gTdJzAdv5BoHF1ZLme4OfIIcMLXyfS93yPU b6hGbby6gzd/49UKeU5tKuawb4ODj+UMhU2YLxRc9Q6KsXNL7nFmwqFvTMYbfuhF yWzCio+bnNSBtB7LJIEa63rt9SlL3a+I42nqzsKrwZY/6iEbZBzE7116mDcKj+zV eFBs0YRTyWX2+LLrQYzzkiuu5Oxa836SURcgbYl7dTNCv2Pb8+1fcZyUPvn6UxPZ 3tbHtsXPIMTCLA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:16 2025 by rpki-client