This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft File: 05aWp2gOlVKR_q-h77qfvP8viIs.mft (raw, json) Hash identifier: J2k6ENEUGrC2enXpjZBDqIS+hDusuv0yTTDk4L210pc= Subject key identifier: 06:2B:EF:D9:D5:F2:C8:C4:B7:BC:E2:FA:B5:40:11:CF:BF:73:C0:5C Authority key identifier: D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B Certificate issuer: /CN=d39696a7680e955291feafa1efba9fbcff2f888b Certificate serial: 019AF50B0174A19BF776BE8CE120863F3D50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft Manifest number: 1254 Signing time: Sat 06 Dec 2025 19:02:10 +0000 Manifest this update: Sat 06 Dec 2025 19:02:10 +0000 Manifest next update: Sun 07 Dec 2025 19:02:10 +0000 Files and hashes: 1: 05aWp2gOlVKR_q-h77qfvP8viIs.crl (hash: ro9m8scH9RkBq8MEL2fySIArtMORphWSZOzKl6hiEGs=) 2: rB2INOwVRpDLnI62nHFRLMGjim8.roa (hash: 4e9dGvThW6tLmtEOnyeNLHSG2RRsUkaY7l6l90Sl8lc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:01:74:a1:9b:f7:76:be:8c:e1:20:86:3f:3d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d39696a7680e955291feafa1efba9fbcff2f888b Validity Not Before: Dec 6 19:02:10 2025 GMT Not After : Dec 7 19:02:10 2025 GMT Subject: CN=062befd9d5f2c8c4b7bce2fab54011cfbf73c05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0d:0a:a6:d5:73:8e:61:c7:87:c4:66:6f:2b: 6b:a1:b6:c4:db:77:80:69:a7:72:82:48:47:f0:98: 3d:50:fa:42:e7:bd:5f:22:67:19:8f:26:c0:a3:70: 94:56:f0:df:04:26:db:40:f3:8f:15:bf:f9:da:cf: a4:a9:93:34:b2:48:93:8a:4a:7a:df:5d:bd:4f:20: 10:8e:3a:4a:e7:01:fb:29:14:a8:d9:76:2e:f6:1d: 94:37:21:ae:35:0b:87:dc:e7:68:39:c2:76:46:5f: 76:58:7f:40:08:70:da:98:9b:c6:b6:bd:25:4a:4d: fd:a4:b6:10:b9:69:5d:74:9d:5f:e7:98:76:42:d9: 58:17:3b:44:23:b0:7b:f6:91:9f:1f:ae:5e:b1:56: 8c:15:71:1c:fc:1d:7a:6b:54:80:af:19:6e:a3:ff: 3e:eb:1f:31:df:b0:a1:2e:65:92:97:c1:50:9f:42: a3:73:f0:0c:f4:44:06:7d:c7:39:3b:f3:7d:a9:c8: 55:d4:3f:50:28:dd:37:e2:25:26:10:20:87:0d:39: ae:8b:73:9f:2e:8d:b3:cb:95:c7:de:67:57:3f:6c: 17:85:80:dd:2f:06:52:ab:62:d3:68:28:55:20:a0: ae:ec:f2:95:bb:f8:a9:75:52:39:99:19:54:f0:5a: 6e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2B:EF:D9:D5:F2:C8:C4:B7:BC:E2:FA:B5:40:11:CF:BF:73:C0:5C X509v3 Authority Key Identifier: keyid:D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:48:6f:2b:87:db:de:e4:f3:8f:2f:4e:e7:43:7c:66:df:6c: 47:8a:74:f2:67:6f:28:2d:d3:dd:e8:45:09:db:30:91:ae:a4: e4:54:fe:3a:8d:e2:5f:2e:8c:5c:b6:78:ee:62:9b:4a:2b:02: d4:2c:e9:52:fd:de:b3:df:6f:40:cb:a5:56:3b:ef:6a:42:a7: 78:2f:b9:fc:8b:d2:26:eb:c9:b6:2d:36:17:19:fb:fa:97:21: 1c:46:d0:b3:7e:a8:e8:76:5c:eb:a3:14:c6:e5:2d:57:a2:bf: 5e:24:97:f6:39:de:60:16:c0:e6:57:03:7d:6b:16:43:fc:a0: 98:eb:00:65:36:1d:5f:7d:8f:12:e4:24:47:1d:dd:00:2d:17: a2:69:99:01:d3:1a:c2:7b:9a:a2:25:92:14:75:de:1e:3e:f2: ab:4f:e5:4d:88:73:d0:2e:13:5f:5e:68:cc:9d:36:44:65:cd: 1e:35:90:f4:56:3a:08:3d:9c:ce:9a:35:cd:a9:e7:9f:3c:38: ae:af:d8:79:30:7a:00:37:ce:9e:83:10:99:3d:63:bd:3c:e1: 7b:dc:a6:48:3c:5f:f3:8d:2d:88:0e:5a:c2:24:37:e7:d3:a3: 81:76:e5:93:06:3c:eb:5d:52:1c:2c:22:f2:1f:c9:4e:94:93: 9a:fa:c3:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CwF0oZv3dr6M4SCGPz1QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzOTY5NmE3NjgwZTk1NTI5MWZlYWZhMWVmYmE5ZmJjZmYy Zjg4OGIwHhcNMjUxMjA2MTkwMjEwWhcNMjUxMjA3MTkwMjEwWjAzMTEwLwYDVQQD EygwNjJiZWZkOWQ1ZjJjOGM0YjdiY2UyZmFiNTQwMTFjZmJmNzNjMDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw0KptVzjmHHh8RmbytrobbE23eA aadygkhH8Jg9UPpC571fImcZjybAo3CUVvDfBCbbQPOPFb/52s+kqZM0skiTikp6 3129TyAQjjpK5wH7KRSo2XYu9h2UNyGuNQuH3OdoOcJ2Rl92WH9ACHDamJvGtr0l Sk39pLYQuWlddJ1f55h2QtlYFztEI7B79pGfH65esVaMFXEc/B16a1SArxluo/8+ 6x8x37ChLmWSl8FQn0Kjc/AM9EQGfcc5O/N9qchV1D9QKN034iUmECCHDTmui3Of Lo2zy5XH3mdXP2wXhYDdLwZSq2LTaChVIKCu7PKVu/ipdVI5mRlU8FpuYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYr79nV8sjEt7zi+rVAEc+/c8BcMB8GA1UdIwQY MBaAFNOWlqdoDpVSkf6voe+6n7z/L4iLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy82OGU4NTctZTJlOS00MmQ1LTg2NGUt Y2M3YWQxNmQxYjBjLzEvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy82OGU4NTctZTJlOS00MmQ1LTg2NGUtY2M3YWQxNmQxYjBj LzEvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0hvK4fb 3uTzjy9O50N8Zt9sR4p08mdvKC3T3ehFCdswka6k5FT+Oo3iXy6MXLZ47mKbSisC 1CzpUv3es99vQMulVjvvakKneC+5/IvSJuvJti02Fxn7+pchHEbQs36o6HZc66MU xuUtV6K/XiSX9jneYBbA5lcDfWsWQ/ygmOsAZTYdX32PEuQkRx3dAC0XommZAdMa wnuaoiWSFHXeHj7yq0/lTYhz0C4TX15ozJ02RGXNHjWQ9FY6CD2czpo1zannnzw4 rq/YeTB6ADfOnoMQmT1jvTzhe9ymSDxf840tiA5awiQ359OjgXblkwY8611SHCwi 8h/JTpSTmvrDZw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:50:06 2025 by rpki-client