This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft File: F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft (raw, json) Hash identifier: 234SFT7nA2O9qrpti2wkQmIugQXzZEBqfF9nu6H3b98= Subject key identifier: 81:B5:D8:AB:22:73:E3:C6:DA:CA:42:1B:BF:5D:C8:DA:D9:4E:32:9D Authority key identifier: 17:9A:0E:21:25:1F:28:C2:32:86:44:62:0B:0D:27:9C:AC:60:D8:CC Certificate issuer: /CN=179a0e21251f28c2328644620b0d279cac60d8cc Certificate serial: 019AF088379D61EDA7366AC011435DE745F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft Manifest number: 0A4D Signing time: Fri 05 Dec 2025 22:00:50 +0000 Manifest this update: Fri 05 Dec 2025 22:00:50 +0000 Manifest next update: Sat 06 Dec 2025 22:00:50 +0000 Files and hashes: 1: F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl (hash: UHphgJn6ZZfVIOptoo/DA9rU8+I8Ngx8lkBjCKfoIFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:37:9d:61:ed:a7:36:6a:c0:11:43:5d:e7:45:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=179a0e21251f28c2328644620b0d279cac60d8cc Validity Not Before: Dec 5 22:00:50 2025 GMT Not After : Dec 6 22:00:50 2025 GMT Subject: CN=81b5d8ab2273e3c6daca421bbf5dc8dad94e329d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0d:f2:a0:6f:28:15:d5:04:8b:01:af:97:d9: 7f:10:c7:d2:8d:a1:45:7d:29:bc:9a:0f:0e:24:2b: 6d:21:07:d6:99:04:0b:e0:cf:a6:62:7a:97:04:c5: ee:79:26:ec:40:0f:94:08:ec:14:91:d1:ea:0e:8a: 16:96:d5:fe:8c:c9:e8:64:a9:16:cc:0f:29:6f:74: 91:71:7e:9d:85:aa:4a:31:00:e8:b8:3f:92:98:8b: ea:14:44:b7:bf:19:cf:87:48:24:88:de:e8:67:49: 07:73:8e:4d:a3:34:a8:73:af:20:b9:79:16:9f:f6: 5a:20:6a:9d:fc:76:63:9a:7a:cb:8a:4d:76:0f:8b: 69:da:e3:57:ba:1e:92:b1:49:aa:f8:06:bc:cb:17: a0:c2:bd:ed:5b:62:e0:6d:ea:68:5b:31:bf:45:aa: 2f:53:aa:c6:6b:b3:89:4c:fe:cc:01:c5:dc:8e:4e: 9f:56:52:98:0d:70:59:9d:17:8e:38:37:2c:b7:c7: 46:bd:85:18:8b:69:42:6e:5c:fc:48:98:ed:0e:34: de:93:56:f1:54:73:02:d3:0e:d3:df:c3:9d:51:c8: 7e:70:a0:2b:ad:a0:00:b5:2b:d7:0d:b9:75:0c:fd: 2f:cb:5a:bb:d3:f1:33:d1:3e:9a:cc:31:a6:46:54: 39:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B5:D8:AB:22:73:E3:C6:DA:CA:42:1B:BF:5D:C8:DA:D9:4E:32:9D X509v3 Authority Key Identifier: keyid:17:9A:0E:21:25:1F:28:C2:32:86:44:62:0B:0D:27:9C:AC:60:D8:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:81:8b:ad:b0:eb:67:76:08:14:dd:29:09:e6:be:a8:48:b0: 25:8e:0a:08:dd:17:00:17:8f:94:5b:de:72:9a:06:c8:85:74: 49:7a:48:23:9a:8d:df:f0:52:c5:4a:a5:f7:ea:55:34:aa:97: 4c:b1:ca:a5:77:34:f3:c9:ba:5a:8e:1e:e7:16:8c:f1:23:e5: dc:c3:f5:e0:fa:68:53:59:8d:da:55:d2:87:33:99:3b:be:0d: e3:9e:2f:82:4f:5b:f3:1f:0b:cb:11:12:72:d6:c9:37:ba:b3: cc:62:e4:d0:a2:67:cb:a2:dc:f7:69:e2:35:c1:08:b7:73:59: 2e:fa:33:a0:c1:fc:79:e5:fa:45:44:22:53:54:3b:6e:25:e4: 51:cb:55:5f:6a:8c:08:16:a1:ea:16:5f:a8:84:aa:1e:2b:70: bd:e5:0c:a8:4c:bd:b2:f6:07:8d:84:92:59:52:d6:59:f1:55: 3d:a3:37:9a:f6:ef:2c:17:da:aa:6b:30:0e:a6:f9:1f:28:eb: fd:a6:00:c6:3f:c6:b5:94:be:65:1a:e4:ee:a7:6b:da:b0:9e: a0:e3:ca:e2:ca:20:b0:f6:e7:f2:6e:b4:b4:72:90:00:8e:b5: 2c:be:c7:ff:81:fa:32:5c:f7:f9:43:3d:b8:05:c4:bc:52:c8: 6f:12:e8:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiDedYe2nNmrAEUNd50XyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OWEwZTIxMjUxZjI4YzIzMjg2NDQ2MjBiMGQyNzljYWM2 MGQ4Y2MwHhcNMjUxMjA1MjIwMDUwWhcNMjUxMjA2MjIwMDUwWjAzMTEwLwYDVQQD Eyg4MWI1ZDhhYjIyNzNlM2M2ZGFjYTQyMWJiZjVkYzhkYWQ5NGUzMjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6w3yoG8oFdUEiwGvl9l/EMfSjaFF fSm8mg8OJCttIQfWmQQL4M+mYnqXBMXueSbsQA+UCOwUkdHqDooWltX+jMnoZKkW zA8pb3SRcX6dhapKMQDouD+SmIvqFES3vxnPh0gkiN7oZ0kHc45NozSoc68guXkW n/ZaIGqd/HZjmnrLik12D4tp2uNXuh6SsUmq+Aa8yxegwr3tW2LgbepoWzG/Raov U6rGa7OJTP7MAcXcjk6fVlKYDXBZnReOODcst8dGvYUYi2lCblz8SJjtDjTek1bx VHMC0w7T38OdUch+cKArraAAtSvXDbl1DP0vy1q70/Ez0T6azDGmRlQ5DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIG12Ksic+PG2spCG79dyNrZTjKdMB8GA1UdIwQY MBaAFBeaDiElHyjCMoZEYgsNJ5ysYNjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVvT0lTVWZLTUl5aGtSaUN3MG5uS3hnMk13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82NTM1NzgtM2YwYS00MDU5LWE3MWMt MTMxNmM0ZTY5NDRhLzEvRjVvT0lTVWZLTUl5aGtSaUN3MG5uS3hnMk13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS82NTM1NzgtM2YwYS00MDU5LWE3MWMtMTMxNmM0ZTY5NDRh LzEvRjVvT0lTVWZLTUl5aGtSaUN3MG5uS3hnMk13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIGLrbDr Z3YIFN0pCea+qEiwJY4KCN0XABePlFvecpoGyIV0SXpII5qN3/BSxUql9+pVNKqX TLHKpXc088m6Wo4e5xaM8SPl3MP14PpoU1mN2lXShzOZO74N454vgk9b8x8LyxES ctbJN7qzzGLk0KJny6Lc92niNcEIt3NZLvozoMH8eeX6RUQiU1Q7biXkUctVX2qM CBah6hZfqISqHitwveUMqEy9svYHjYSSWVLWWfFVPaM3mvbvLBfaqmswDqb5Hyjr /aYAxj/GtZS+ZRrk7qdr2rCeoOPK4sogsPbn8m60tHKQAI61LL7H/4H6Mlz3+UM9 uAXEvFLIbxLoyA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:24 2025 by rpki-client