This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft File: _5m8PRSR-CJfiBFk9ZMUS3olyOs.mft (raw, json) Hash identifier: ZmLYPbctJOCtq5QeurNHFdaryjaBq0l/Rr11mmAnoOE= Subject key identifier: 63:D4:E6:14:EB:52:FC:84:44:BE:83:A1:51:22:B7:BC:5E:6C:C9:08 Authority key identifier: FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB Certificate issuer: /CN=ff99bc3d1491f8225f881164f593144b7a25c8eb Certificate serial: 019B3CB50160CCDF63E94E47579B92FA5EF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft Manifest number: 115A Signing time: Sat 20 Dec 2025 17:00:53 +0000 Manifest this update: Sat 20 Dec 2025 17:00:53 +0000 Manifest next update: Sun 21 Dec 2025 17:00:53 +0000 Files and hashes: 1: DmxV1ufKd_5CUtgyMhTR3HZ9Ctc.roa (hash: cD2uBmETpIdrWKKJGmi5CrnlQnFYngKqgmK3aNdcBqA=) 2: _5m8PRSR-CJfiBFk9ZMUS3olyOs.crl (hash: 9n5ZxaTU4dsZnBTYlOo56xDgb78aqPbUt85Ujm/fjs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:01:60:cc:df:63:e9:4e:47:57:9b:92:fa:5e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff99bc3d1491f8225f881164f593144b7a25c8eb Validity Not Before: Dec 20 17:00:53 2025 GMT Not After : Dec 21 17:00:53 2025 GMT Subject: CN=63d4e614eb52fc8444be83a15122b7bc5e6cc908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d2:a3:ce:59:97:c6:9d:bb:7a:21:60:b4:05: 44:54:f8:d5:12:f8:a6:28:d1:b8:f2:d7:d8:ff:21: b7:46:63:42:a5:7f:87:9a:fa:bb:97:a9:58:2c:94: 7c:92:74:0b:95:53:53:6e:f5:1b:be:92:7e:bb:b4: 9f:47:b0:8f:a0:d8:2c:5f:3c:be:a3:7a:d5:6e:50: 4a:74:6d:90:89:f3:7a:70:d6:60:75:3f:0a:77:46: 9f:84:68:12:bc:8d:3c:8b:8a:92:33:82:1b:22:6e: 7c:68:6e:5e:fe:3d:35:df:de:94:7c:83:3a:80:e5: a2:c3:57:13:9e:2a:a6:68:4c:b7:e7:b8:f6:d5:37: d3:6f:8b:b8:69:99:b2:17:5e:41:7b:b6:4a:20:52: e0:b1:15:e8:b4:7b:37:a3:c0:42:4d:dd:c3:4a:48: d7:d4:4f:eb:70:6b:d5:2f:56:8c:8f:c7:61:cd:8c: a0:88:ab:80:ba:49:5c:12:90:74:3f:fb:22:33:fc: 2a:e2:53:d9:e0:ec:6c:7d:59:44:e2:01:f0:83:21: fc:c9:1f:70:0c:7c:18:63:30:1a:63:33:6b:5a:b9: 1f:60:72:bb:ef:86:7c:3b:ec:80:5f:de:e1:2e:7f: 1c:04:82:96:40:cb:74:26:6b:d8:ab:ab:52:51:ae: 17:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D4:E6:14:EB:52:FC:84:44:BE:83:A1:51:22:B7:BC:5E:6C:C9:08 X509v3 Authority Key Identifier: keyid:FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:8b:3f:99:1d:80:fb:8f:5b:9f:b2:0b:65:b9:a2:48:2e:d9: 22:26:6e:3c:f5:fc:89:b1:94:f1:d6:56:0d:c1:9b:26:da:37: ef:1d:b8:94:02:c9:8d:33:cd:9b:65:71:88:a2:91:8c:ba:77: d5:e0:ab:d5:5c:b7:3b:04:d5:e5:e4:1f:92:a8:b0:d5:bb:7a: 4b:a6:f9:0d:fc:89:23:ee:8a:bd:89:08:57:74:c2:06:94:f9: 69:9c:fa:77:b0:ba:a6:a3:04:fd:7b:0e:d8:1a:e7:33:2d:33: d3:0d:54:15:07:ad:42:da:09:6a:c2:d2:52:06:9f:23:50:5a: e2:79:46:a6:b6:04:4b:ad:76:07:c1:b0:6e:01:0e:4c:25:3b: 75:cf:41:c8:a0:c2:e3:78:09:35:0d:47:65:58:34:5e:8a:1a: d1:fe:67:45:a6:1b:42:d2:58:3d:fb:bf:66:b0:7c:2c:a7:64: 25:25:98:91:83:81:91:5a:39:76:d7:b5:db:15:08:82:53:ab: d2:bb:46:96:f4:fb:5c:9c:ea:17:00:a5:bf:e3:3b:28:29:30: 09:a7:b6:f0:eb:dc:bd:f8:c0:2a:b9:72:17:17:7d:8b:13:96: f0:4d:25:74:ed:3c:14:24:5c:a7:7b:d8:79:ce:c4:31:3e:e6: 50:5c:46:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tQFgzN9j6U5HV5uS+l72MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOTliYzNkMTQ5MWY4MjI1Zjg4MTE2NGY1OTMxNDRiN2Ey NWM4ZWIwHhcNMjUxMjIwMTcwMDUzWhcNMjUxMjIxMTcwMDUzWjAzMTEwLwYDVQQD Eyg2M2Q0ZTYxNGViNTJmYzg0NDRiZTgzYTE1MTIyYjdiYzVlNmNjOTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNKjzlmXxp27eiFgtAVEVPjVEvim KNG48tfY/yG3RmNCpX+Hmvq7l6lYLJR8knQLlVNTbvUbvpJ+u7SfR7CPoNgsXzy+ o3rVblBKdG2QifN6cNZgdT8Kd0afhGgSvI08i4qSM4IbIm58aG5e/j01396UfIM6 gOWiw1cTniqmaEy357j21TfTb4u4aZmyF15Be7ZKIFLgsRXotHs3o8BCTd3DSkjX 1E/rcGvVL1aMj8dhzYygiKuAuklcEpB0P/siM/wq4lPZ4OxsfVlE4gHwgyH8yR9w DHwYYzAaYzNrWrkfYHK774Z8O+yAX97hLn8cBIKWQMt0JmvYq6tSUa4XqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPU5hTrUvyERL6DoVEit7xebMkIMB8GA1UdIwQY MBaAFP+ZvD0UkfgiX4gRZPWTFEt6JcjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzVtOFBSU1ItQ0pmaUJGazlaTVVTM29seU9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kYTM0MDYtMDRmOS00N2IwLWExMTkt Yjg4YWZlZjEzMzY3LzEvXzVtOFBSU1ItQ0pmaUJGazlaTVVTM29seU9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9kYTM0MDYtMDRmOS00N2IwLWExMTktYjg4YWZlZjEzMzY3 LzEvXzVtOFBSU1ItQ0pmaUJGazlaTVVTM29seU9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn4s/mR2A +49bn7ILZbmiSC7ZIiZuPPX8ibGU8dZWDcGbJto37x24lALJjTPNm2VxiKKRjLp3 1eCr1Vy3OwTV5eQfkqiw1bt6S6b5DfyJI+6KvYkIV3TCBpT5aZz6d7C6pqME/XsO 2BrnMy0z0w1UFQetQtoJasLSUgafI1Ba4nlGprYES612B8GwbgEOTCU7dc9ByKDC 43gJNQ1HZVg0Xooa0f5nRaYbQtJYPfu/ZrB8LKdkJSWYkYOBkVo5dte12xUIglOr 0rtGlvT7XJzqFwClv+M7KCkwCae28OvcvfjAKrlyFxd9ixOW8E0ldO08FCRcp3vY ec7EMT7mUFxGjQ== -----END CERTIFICATE-----Generated at Sat Dec 20 19:00:09 2025 by rpki-client