This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json) Hash identifier: V1ct3m59EEuzzUN56HPIKH3hYwOLMCtjlzsS9p1jWMI= Subject key identifier: FA:62:7A:78:A2:46:DF:F2:8B:C4:5F:78:C8:FD:C3:59:2B:0D:53:9E Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19 Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719 Certificate serial: 019AF163E05F7067599E50F19B9F4E856B4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft Manifest number: 1484 Signing time: Sat 06 Dec 2025 02:00:45 +0000 Manifest this update: Sat 06 Dec 2025 02:00:45 +0000 Manifest next update: Sun 07 Dec 2025 02:00:45 +0000 Files and hashes: 1: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: Ow/dkbe21d0X7JJ1i8ok5+4pIElfTB8vZzneXRpVSw0=) 2: S3W2ppn5lk20Aj8MVEUOEbDf3k4.roa (hash: R7kQC03lqKwuWWDRl2P6LnNUl2gU+UQxb/V3srvulwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e0:5f:70:67:59:9e:50:f1:9b:9f:4e:85:6b:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719 Validity Not Before: Dec 6 02:00:45 2025 GMT Not After : Dec 7 02:00:45 2025 GMT Subject: CN=fa627a78a246dff28bc45f78c8fdc3592b0d539e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4f:e9:b2:a7:16:14:d4:5d:f5:fb:90:0e:29: d1:81:6c:79:b1:60:95:31:9c:96:cc:f1:52:e5:22: ed:cc:82:c9:a4:cd:c8:da:3d:ec:e6:fa:a5:83:9f: 73:38:87:b3:01:1a:cf:0d:32:03:ea:b5:c5:71:ad: 49:3c:e9:71:37:af:d1:26:66:f5:e2:08:31:69:64: e7:a9:66:66:c1:f3:49:dc:1c:40:6d:6d:2b:bf:a5: 45:ca:0c:50:7f:27:33:f0:94:f5:91:3c:45:06:d7: a1:ed:d0:6c:42:ff:8b:f2:52:3d:23:94:7c:27:5f: 5e:7b:63:ae:9d:06:17:65:bf:27:b0:e8:e8:61:70: 63:0b:c6:60:46:c3:73:d5:bf:a7:5b:1f:93:16:97: 9f:7a:e9:bb:4b:0c:ac:90:00:82:bb:81:86:4e:2b: 58:fd:75:2d:19:d5:ca:79:11:75:03:b5:97:7b:9e: dd:cb:52:c9:18:dd:4d:46:61:0b:62:58:14:b3:b6: 50:95:ff:99:45:92:f3:fa:7b:f3:c3:44:e2:56:b0: 93:69:76:11:47:f3:55:58:f2:43:64:19:32:60:35: d1:f9:d8:68:90:09:98:63:02:1d:e8:da:de:7b:ea: a5:c8:61:36:14:4e:1f:94:32:a5:1f:19:bf:23:67: e4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:62:7A:78:A2:46:DF:F2:8B:C4:5F:78:C8:FD:C3:59:2B:0D:53:9E X509v3 Authority Key Identifier: keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:38:b6:b5:57:5d:01:35:a6:85:2a:a8:ff:9a:c0:7e:90:bd: b3:2c:36:32:a7:f9:ef:fd:f4:0f:56:91:c6:fe:3d:ab:76:25: 6f:6c:4e:46:a7:11:f2:4d:4c:84:cc:e5:cd:5c:94:f6:ae:a1: 2e:40:8b:0d:de:67:78:c9:ee:0f:25:61:65:be:58:65:f8:17: a6:9f:48:f5:ef:73:a5:bf:ae:2f:8a:cb:69:d1:d6:f8:18:64: 31:4e:20:41:98:e2:6d:1c:f2:ed:ba:c7:06:25:8d:b5:76:f1: 6b:ba:b3:5e:ee:55:1b:44:9b:1d:a2:c4:5a:53:1a:22:2c:d3: 20:96:11:30:0c:8e:d8:3c:16:d4:99:21:b6:36:0c:3e:97:1b: 82:15:c0:fb:44:2e:02:5b:02:5c:89:fb:01:59:57:56:05:1d: 8d:c0:18:5b:0d:96:a8:65:e9:9b:bc:f9:86:80:96:ca:01:fd: 50:f7:35:5b:98:64:ca:9c:b8:76:a1:af:1c:19:aa:05:69:6f: 1a:94:82:e7:8e:35:cd:20:07:e3:4e:95:b8:7b:5c:45:be:31: 72:89:1d:f9:7a:e4:80:57:a3:9a:43:5c:44:b8:e3:1c:c8:ee: 78:8d:a9:9b:89:1e:38:25:69:a5:92:85:7f:4c:9d:97:34:81: f6:67:7b:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+BfcGdZnlDxm59OhWtKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OTRiNzAwNzA1ZTBiYWE3MzZhNWRkMDkwYWNkMWNiOTEy YzE3MTkwHhcNMjUxMjA2MDIwMDQ1WhcNMjUxMjA3MDIwMDQ1WjAzMTEwLwYDVQQD EyhmYTYyN2E3OGEyNDZkZmYyOGJjNDVmNzhjOGZkYzM1OTJiMGQ1MzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7k/psqcWFNRd9fuQDinRgWx5sWCV MZyWzPFS5SLtzILJpM3I2j3s5vqlg59zOIezARrPDTID6rXFca1JPOlxN6/RJmb1 4ggxaWTnqWZmwfNJ3BxAbW0rv6VFygxQfycz8JT1kTxFBteh7dBsQv+L8lI9I5R8 J19ee2OunQYXZb8nsOjoYXBjC8ZgRsNz1b+nWx+TFpefeum7SwyskACCu4GGTitY /XUtGdXKeRF1A7WXe57dy1LJGN1NRmELYlgUs7ZQlf+ZRZLz+nvzw0TiVrCTaXYR R/NVWPJDZBkyYDXR+dhokAmYYwId6Nree+qlyGE2FE4flDKlHxm/I2fk9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpieniiRt/yi8RfeMj9w1krDVOeMB8GA1UdIwQY MBaAFAeUtwBwXguqc2pd0JCs0cuRLBcZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjVTM0FIQmVDNnB6YWwzUWtLelJ5NUVzRnhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82YmFjM2ItM2QwYS00MWM4LTg5MzYt OTRlMDJjOWYxNTBjLzEvQjVTM0FIQmVDNnB6YWwzUWtLelJ5NUVzRnhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy82YmFjM2ItM2QwYS00MWM4LTg5MzYtOTRlMDJjOWYxNTBj LzEvQjVTM0FIQmVDNnB6YWwzUWtLelJ5NUVzRnhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTi2tVdd ATWmhSqo/5rAfpC9syw2Mqf57/30D1aRxv49q3Ylb2xORqcR8k1MhMzlzVyU9q6h LkCLDd5neMnuDyVhZb5YZfgXpp9I9e9zpb+uL4rLadHW+BhkMU4gQZjibRzy7brH BiWNtXbxa7qzXu5VG0SbHaLEWlMaIizTIJYRMAyO2DwW1JkhtjYMPpcbghXA+0Qu AlsCXIn7AVlXVgUdjcAYWw2WqGXpm7z5hoCWygH9UPc1W5hkypy4dqGvHBmqBWlv GpSC5441zSAH406VuHtcRb4xcokd+XrkgFejmkNcRLjjHMjueI2pm4keOCVppZKF f0ydlzSB9md76Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:38 2025 by rpki-client