This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft File: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json) Hash identifier: BGmNL8/58SWb3uyw4qIdR3rk3uM+RDgeVIfcQqJLTLA= Subject key identifier: 4E:A5:89:E6:7D:9B:AB:8A:6C:0B:D1:20:D3:58:75:81:C4:D2:D3:F8 Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9 Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9 Certificate serial: 019AF5E5BFC5FE95DBDEC335253595EB2247 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft Manifest number: 113F Signing time: Sat 06 Dec 2025 23:01:05 +0000 Manifest this update: Sat 06 Dec 2025 23:01:05 +0000 Manifest next update: Sun 07 Dec 2025 23:01:05 +0000 Files and hashes: 1: GhdbZGuzA1z36-UUonZ5zaCX38Q.roa (hash: gEgIQ1ixFSRgI4FI7VMbdhgtgY8jLC1wmNutDGTQS80=) 2: NItMcfmuUtS9SnSR4ZKm4r93TXs.roa (hash: F3sutapYp582NIFvW6vfwf2KF7d5dSaqH83k0FhwJoc=) 3: QCQJObKakvoo4ygnw5Fh20FS0Ts.roa (hash: pr5RHo/glhDEkjitYcq1TogKj+NW5j/LUqIM2EWPEaw=) 4: UVdJ6rkBr4eKgNxEkOLstufV6r8.roa (hash: +gXeK3tudL2I9QvUvgp4q5Jq/oJHp1PYKMtr+laCpNs=) 5: VtsYZXVJAZoFqneDgMrcdY1ZLqo.roa (hash: iydD1kql5GaDH+9KnMFCTe4zA6F46avj8WklVHWfoCY=) 6: YaM_6GNAfAUY1a7EBWWPiZdkY80.roa (hash: imYp4kHblD7OJu3xkBBiybF6gSfL+pAE8EuXrkCO7Ws=) 7: eulbDis-0B0z9GbHcqEo9NdV9rU.roa (hash: r5N8Yg0+954vST6YgvvV4VsOdx/dWOgqxmrlpu8jwtw=) 8: peZQPUG6EREQXk9fJ6XL9FgtEhs.roa (hash: dkv5IIQlSg33elfikzY5ije40KJ3f2E2+53gSCvVzhE=) 9: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: jRc2Ggr5OmeDVrFqtLUjt3lId9qhLZnobviJWfDx0H4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:bf:c5:fe:95:db:de:c3:35:25:35:95:eb:22:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9 Validity Not Before: Dec 6 23:01:05 2025 GMT Not After : Dec 7 23:01:05 2025 GMT Subject: CN=4ea589e67d9bab8a6c0bd120d3587581c4d2d3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:07:9d:e8:9b:a4:43:24:54:25:25:e6:2a:a6: 44:56:c8:d0:92:8a:f4:fa:65:b1:6c:09:ff:0a:ba: ee:92:72:f8:c3:b0:0d:0f:ce:2b:c8:19:92:9f:61: dd:74:79:43:ad:73:0f:38:d9:36:73:4f:53:4b:1f: 60:08:11:ad:61:f2:94:07:b5:40:64:ff:8d:91:43: 27:2b:e5:c1:65:eb:5f:02:c2:7b:bd:66:13:e1:32: 32:55:ff:b0:aa:0a:5e:d3:51:2c:34:4f:2a:71:57: b5:9f:ff:1b:36:1b:40:ac:89:1f:09:c6:fb:6e:da: a2:c5:ee:f2:3b:5f:0f:13:9f:ea:15:36:3e:7a:09: 0c:aa:8c:5d:f7:80:de:6a:06:f3:32:2a:64:bd:d6: 25:0b:6b:b9:20:e3:de:ab:da:0d:b7:96:d4:6f:32: 0a:69:d1:9d:36:e4:1e:2c:ef:10:f4:8a:46:fb:a0: c2:38:20:31:f0:b5:61:13:8e:76:2e:66:11:81:93: 8d:dc:26:30:1b:2e:1b:7d:ef:3b:6b:8d:aa:4a:4e: 16:70:cc:16:7a:ca:52:72:7a:d5:7f:06:d4:c8:34: 04:ec:60:28:fd:4e:4e:54:3a:c6:b3:48:6d:6c:ad: e1:02:2c:34:d0:ee:67:ff:c8:ed:e6:d1:73:b1:b9: cc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A5:89:E6:7D:9B:AB:8A:6C:0B:D1:20:D3:58:75:81:C4:D2:D3:F8 X509v3 Authority Key Identifier: keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:5f:47:ca:88:31:59:4a:1d:7f:b1:1d:e3:5f:77:d1:d1:21: 8d:ea:7e:f9:2f:4b:e6:df:5d:a9:61:de:55:3a:8e:e1:9b:76: a7:38:36:a1:d6:8e:fe:bf:76:24:70:c6:8b:66:80:97:9f:4c: cc:fc:bc:78:fa:f4:e0:ad:86:2f:d7:c0:d4:2c:b2:07:fc:a5: ef:fa:9c:f3:6e:2a:1e:b0:84:9a:22:45:aa:1c:8e:1e:b6:ad: 5f:94:ce:76:06:d1:c1:95:6f:bb:44:02:b0:50:44:c5:41:a9: ea:d7:e8:47:a9:8c:b1:ad:0e:24:0f:b5:0d:c2:b5:d4:94:8b: 8f:da:dd:d3:f2:3f:d2:0f:ed:fa:fb:59:ce:80:9d:a0:d9:8e: 12:cf:4d:ca:2c:5a:cc:e4:0a:25:ae:a3:88:a7:1d:bd:d9:b1: e8:28:9d:8b:db:b7:98:6f:46:cd:0f:b4:88:5d:d9:fb:73:91: 12:de:98:26:29:1c:a7:df:e6:49:44:3b:32:6f:d1:30:7f:f6: 87:fa:e7:60:c5:7d:1d:e1:f8:3f:ca:0e:8b:57:54:cc:d8:cc: aa:74:0d:c5:37:99:89:2b:38:bf:c4:89:64:b6:9e:4e:35:da: 18:7f:31:4b:5c:e2:d6:de:fe:df:cd:1f:f6:1b:41:56:86:18: 5e:c5:9b:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15b/F/pXb3sM1JTWV6yJHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOTNkZjg3N2JmMmYwY2YwMWE5NzE4OTczZWFlZWU4N2Iw Njk3ZDkwHhcNMjUxMjA2MjMwMTA1WhcNMjUxMjA3MjMwMTA1WjAzMTEwLwYDVQQD Eyg0ZWE1ODllNjdkOWJhYjhhNmMwYmQxMjBkMzU4NzU4MWM0ZDJkM2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQed6JukQyRUJSXmKqZEVsjQkor0 +mWxbAn/CrruknL4w7AND84ryBmSn2HddHlDrXMPONk2c09TSx9gCBGtYfKUB7VA ZP+NkUMnK+XBZetfAsJ7vWYT4TIyVf+wqgpe01EsNE8qcVe1n/8bNhtArIkfCcb7 btqixe7yO18PE5/qFTY+egkMqoxd94DeagbzMipkvdYlC2u5IOPeq9oNt5bUbzIK adGdNuQeLO8Q9IpG+6DCOCAx8LVhE452LmYRgZON3CYwGy4bfe87a42qSk4WcMwW espScnrVfwbUyDQE7GAo/U5OVDrGs0htbK3hAiw00O5n/8jt5tFzsbnMbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6lieZ9m6uKbAvRINNYdYHE0tP4MB8GA1UdIwQY MBaAFLOT34d78vDPAalxiXPq7uh7BpfZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczVQZmgzdnk4TThCcVhHSmMtcnU2SHNHbDlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85Mzc1ZTMtMzc3ZS00YjcwLWJhMzYt Mzk2YmM3MjBlMmI0LzEvczVQZmgzdnk4TThCcVhHSmMtcnU2SHNHbDlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85Mzc1ZTMtMzc3ZS00YjcwLWJhMzYtMzk2YmM3MjBlMmI0 LzEvczVQZmgzdnk4TThCcVhHSmMtcnU2SHNHbDlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP19Hyogx WUodf7Ed41930dEhjep++S9L5t9dqWHeVTqO4Zt2pzg2odaO/r92JHDGi2aAl59M zPy8ePr04K2GL9fA1CyyB/yl7/qc824qHrCEmiJFqhyOHratX5TOdgbRwZVvu0QC sFBExUGp6tfoR6mMsa0OJA+1DcK11JSLj9rd0/I/0g/t+vtZzoCdoNmOEs9Nyixa zOQKJa6jiKcdvdmx6Cidi9u3mG9GzQ+0iF3Z+3OREt6YJikcp9/mSUQ7Mm/RMH/2 h/rnYMV9HeH4P8oOi1dUzNjMqnQNxTeZiSs4v8SJZLaeTjXaGH8xS1zi1t7+380f 9htBVoYYXsWbuQ== -----END CERTIFICATE-----Generated at Sun Dec 7 05:09:22 2025 by rpki-client