This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft File: 05aWp2gOlVKR_q-h77qfvP8viIs.mft (raw, json) Hash identifier: qJER4f/paZsh3Oq3NfI2cCxnbdlmmFexhYQ4TGGiyGE= Subject key identifier: 79:C6:84:17:BF:D0:82:84:B7:3B:2A:FB:DF:1E:FE:1E:E6:A2:F4:B3 Authority key identifier: D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B Certificate issuer: /CN=d39696a7680e955291feafa1efba9fbcff2f888b Certificate serial: 019B2EFA8952671C45E4A97E8A2EE4D800FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft Manifest number: 1272 Signing time: Thu 18 Dec 2025 01:02:09 +0000 Manifest this update: Thu 18 Dec 2025 01:02:09 +0000 Manifest next update: Fri 19 Dec 2025 01:02:09 +0000 Files and hashes: 1: 05aWp2gOlVKR_q-h77qfvP8viIs.crl (hash: AIU4FNRGY4kPRMR+491wbXf1/sAhPVY3YGIFI3lk2Oo=) 2: rB2INOwVRpDLnI62nHFRLMGjim8.roa (hash: 4e9dGvThW6tLmtEOnyeNLHSG2RRsUkaY7l6l90Sl8lc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:89:52:67:1c:45:e4:a9:7e:8a:2e:e4:d8:00:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d39696a7680e955291feafa1efba9fbcff2f888b Validity Not Before: Dec 18 01:02:09 2025 GMT Not After : Dec 19 01:02:09 2025 GMT Subject: CN=79c68417bfd08284b73b2afbdf1efe1ee6a2f4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f2:56:77:ed:5c:2f:2b:45:a5:2e:bb:17:2f: a7:63:6f:1a:68:ed:13:57:f7:20:5c:28:d7:3a:fa: 5b:a9:bd:d6:8f:e4:85:a5:d2:a3:c3:4f:26:15:20: 04:40:7d:7a:9b:d6:ac:04:db:3a:e7:2c:5b:35:99: e5:0e:91:1f:34:15:ab:39:05:4b:30:99:4b:e4:b0: 69:35:b5:79:1d:91:08:af:9b:e6:ca:b8:d3:b3:7d: 0b:c8:3e:f0:b0:9f:ed:c9:af:a0:9a:f3:9a:06:7e: 71:6f:67:6f:39:f8:38:46:3b:db:35:bc:91:67:18: 77:c4:73:35:0f:21:77:5a:28:4f:c4:12:9b:2c:b4: 08:d6:5f:03:49:74:f9:ef:a7:d0:8b:60:03:5c:40: cb:91:d9:e8:53:35:7d:6d:ef:5f:0b:2d:d2:e0:49: b4:48:1a:1f:89:61:7d:b4:c6:4b:88:10:75:a2:05: 4b:66:e7:c0:9f:3a:9b:84:74:91:82:b8:6a:04:74: 4e:3e:16:b6:0e:74:9f:58:e1:e3:30:db:b1:6f:6c: 53:ef:68:49:c1:62:41:77:0a:5e:6d:3d:54:8d:ba: 6d:99:a9:10:d4:ac:eb:2b:18:61:88:7e:3a:1f:3d: 5e:0f:5c:6c:1c:d1:86:2f:47:24:fb:3a:e6:c2:34: 90:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C6:84:17:BF:D0:82:84:B7:3B:2A:FB:DF:1E:FE:1E:E6:A2:F4:B3 X509v3 Authority Key Identifier: keyid:D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:2a:11:a1:db:63:ae:5c:90:1f:9d:ff:40:05:8f:aa:f0:80: 3a:4a:fe:c8:0f:fe:95:c2:ab:d8:2e:24:5a:66:62:83:7b:45: 0b:83:18:02:8a:f7:7b:be:32:ea:c1:31:45:e8:ad:2c:4d:e6: 50:e8:ec:07:8d:b7:1a:ad:2b:f5:07:b7:26:28:9e:d9:a4:a8: dd:31:b0:a3:b5:3a:07:42:1e:93:24:95:9a:b1:4f:34:ca:0a: 61:1f:f6:5c:a3:e0:d8:4d:d1:f3:13:20:09:1d:f1:f6:0e:82: e9:ed:cd:88:6d:72:b2:ce:24:d2:55:29:68:eb:eb:40:fc:f3: 02:e8:7c:4d:4e:5a:99:1b:c2:81:3e:03:2f:9c:13:b7:cc:dd: f0:55:4f:31:50:74:9e:c1:30:7b:48:a3:78:40:9c:99:d0:5d: ce:d5:e2:b2:0a:a2:f4:b3:29:c4:9b:3e:44:92:dc:f1:92:6f: 7f:64:02:b6:5d:63:39:c5:1f:c5:02:86:96:e4:92:4e:3a:dd: c6:d4:30:e6:d6:a4:d8:75:0a:95:f4:1c:f5:83:34:f9:b7:04: bd:9b:9e:22:84:ad:78:e2:c7:08:8e:12:a7:fc:8d:74:aa:cc: 23:99:11:61:6b:38:a8:be:55:79:ed:f6:0d:26:24:ac:ac:11: d3:70:d5:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+olSZxxF5Kl+ii7k2AD9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzOTY5NmE3NjgwZTk1NTI5MWZlYWZhMWVmYmE5ZmJjZmYy Zjg4OGIwHhcNMjUxMjE4MDEwMjA5WhcNMjUxMjE5MDEwMjA5WjAzMTEwLwYDVQQD Eyg3OWM2ODQxN2JmZDA4Mjg0YjczYjJhZmJkZjFlZmUxZWU2YTJmNGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fJWd+1cLytFpS67Fy+nY28aaO0T V/cgXCjXOvpbqb3Wj+SFpdKjw08mFSAEQH16m9asBNs65yxbNZnlDpEfNBWrOQVL MJlL5LBpNbV5HZEIr5vmyrjTs30LyD7wsJ/tya+gmvOaBn5xb2dvOfg4RjvbNbyR Zxh3xHM1DyF3WihPxBKbLLQI1l8DSXT576fQi2ADXEDLkdnoUzV9be9fCy3S4Em0 SBofiWF9tMZLiBB1ogVLZufAnzqbhHSRgrhqBHROPha2DnSfWOHjMNuxb2xT72hJ wWJBdwpebT1UjbptmakQ1KzrKxhhiH46Hz1eD1xsHNGGL0ck+zrmwjSQTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnGhBe/0IKEtzsq+98e/h7movSzMB8GA1UdIwQY MBaAFNOWlqdoDpVSkf6voe+6n7z/L4iLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy82OGU4NTctZTJlOS00MmQ1LTg2NGUt Y2M3YWQxNmQxYjBjLzEvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy82OGU4NTctZTJlOS00MmQ1LTg2NGUtY2M3YWQxNmQxYjBj LzEvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCoRodtj rlyQH53/QAWPqvCAOkr+yA/+lcKr2C4kWmZig3tFC4MYAor3e74y6sExReitLE3m UOjsB423Gq0r9Qe3Jiie2aSo3TGwo7U6B0IekySVmrFPNMoKYR/2XKPg2E3R8xMg CR3x9g6C6e3NiG1yss4k0lUpaOvrQPzzAuh8TU5amRvCgT4DL5wTt8zd8FVPMVB0 nsEwe0ijeECcmdBdztXisgqi9LMpxJs+RJLc8ZJvf2QCtl1jOcUfxQKGluSSTjrd xtQw5tak2HUKlfQc9YM0+bcEvZueIoSteOLHCI4Sp/yNdKrMI5kRYWs4qL5Vee32 DSYkrKwR03DVtQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:09:04 2025 by rpki-client