This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft File: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft (raw, json) Hash identifier: 6mFjnXI/4c5R4gmdqunS7AuueNz+nR08pvmvX7Esx4w= Subject key identifier: C0:03:2E:0E:18:69:C6:36:4F:AC:43:2F:C8:49:A1:42:CA:DE:47:83 Authority key identifier: 17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A Certificate issuer: /CN=17972d43835cd6a66e54e5a5856ce57de282d43a Certificate serial: 019AF5AE610EBC157AB867B1CD0E5FFE5EF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft Manifest number: 0E5D Signing time: Sat 06 Dec 2025 22:00:37 +0000 Manifest this update: Sat 06 Dec 2025 22:00:37 +0000 Manifest next update: Sun 07 Dec 2025 22:00:37 +0000 Files and hashes: 1: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl (hash: mN//XMdVs1mcGZOoMfbH7QVpesgKWUh2shATVU0nj7Q=) 2: nD9K7BuoobBm0UoH5h6nnInzZ5M.roa (hash: n+EpS4FTLeyovvcIgss8uVwl4+ZqeSqmuV4HpNA3yWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:61:0e:bc:15:7a:b8:67:b1:cd:0e:5f:fe:5e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17972d43835cd6a66e54e5a5856ce57de282d43a Validity Not Before: Dec 6 22:00:37 2025 GMT Not After : Dec 7 22:00:37 2025 GMT Subject: CN=c0032e0e1869c6364fac432fc849a142cade4783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0e:db:5c:f3:32:13:2c:14:fb:ab:68:00:f3: f1:40:0a:e0:9a:ce:51:6c:78:ce:d1:ab:76:12:0b: 37:03:09:06:04:bb:a2:21:c9:c3:8a:07:dd:5e:ca: 39:1a:97:0b:6b:07:2b:e4:48:e8:9a:b8:0a:1a:be: 8c:c6:fe:45:5a:db:b1:5d:78:31:27:a1:7b:be:6b: da:18:3e:27:ce:09:23:21:12:a1:8f:d5:68:c7:90: 4d:83:46:e2:64:d2:7c:cb:01:60:e8:de:7d:05:97: da:d4:0b:45:14:99:c2:5a:f3:99:06:ee:b9:8b:89: dc:3e:58:e5:64:b0:5d:ad:c6:2b:ee:b8:05:a7:ce: f9:3d:40:d1:24:f3:c1:56:84:9b:62:31:a3:f3:6f: 2e:ff:36:84:3b:0f:7b:42:20:f5:1b:3f:31:d9:79: e5:7e:9e:0e:cb:9a:ac:74:56:65:c0:c9:e5:a8:12: e6:3a:74:0d:cb:2e:8e:3e:9f:9d:b8:1f:b2:5b:3b: b2:25:2a:24:3f:10:0a:64:44:37:65:d9:1b:77:36: a2:bb:64:62:b2:01:c4:b8:82:70:d1:08:e4:8f:ce: 19:73:7a:86:47:89:88:07:a9:30:97:22:19:90:7b: ab:23:2c:e9:8a:0b:27:bf:34:45:8b:16:40:93:1f: 79:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:03:2E:0E:18:69:C6:36:4F:AC:43:2F:C8:49:A1:42:CA:DE:47:83 X509v3 Authority Key Identifier: keyid:17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:94:de:b4:4e:49:19:15:23:cd:8c:71:9d:db:1f:2a:ac:98: bf:60:72:6b:19:9f:49:3c:3f:65:7f:1e:8a:c4:9d:ef:fe:b8: 9f:cc:4d:a6:52:05:31:73:8c:48:00:14:2a:b4:00:d1:fe:94: 97:46:fe:fb:79:9d:07:f0:75:ab:27:0e:a0:e9:e7:d5:76:4b: 0a:5d:df:56:c6:3c:8d:91:6c:c9:8c:7a:da:54:79:ca:71:c9: 7a:07:e2:2b:40:a5:55:00:8b:97:98:02:cf:1d:c9:28:10:7d: 40:2e:c7:15:2b:dc:d8:63:6d:30:33:8b:b2:3a:21:db:f3:49: c9:58:eb:a4:1e:0f:22:ff:43:fc:ba:ad:cb:fe:39:16:d8:d1: b1:eb:18:89:22:8a:21:e8:61:4e:10:ca:38:c3:7a:d6:17:48: 5b:39:4b:44:91:c9:81:cc:f6:3a:a9:54:6f:35:ce:35:2c:d7: c8:25:77:97:3e:44:3d:ca:e2:00:22:e7:63:e6:58:ba:93:56: 44:07:67:a7:c7:a9:95:7b:df:0a:4a:54:1e:42:84:f7:7b:a5: 00:19:75:85:64:11:e2:5b:a5:7c:13:35:e1:94:7d:84:dd:23: 1e:58:bc:32:1e:d4:d9:9b:fe:a2:bc:02:ee:1d:99:c7:23:4e: 50:e4:bd:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rmEOvBV6uGexzQ5f/l72MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTcyZDQzODM1Y2Q2YTY2ZTU0ZTVhNTg1NmNlNTdkZTI4 MmQ0M2EwHhcNMjUxMjA2MjIwMDM3WhcNMjUxMjA3MjIwMDM3WjAzMTEwLwYDVQQD EyhjMDAzMmUwZTE4NjljNjM2NGZhYzQzMmZjODQ5YTE0MmNhZGU0NzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6A7bXPMyEywU+6toAPPxQArgms5R bHjO0at2Egs3AwkGBLuiIcnDigfdXso5GpcLawcr5EjomrgKGr6Mxv5FWtuxXXgx J6F7vmvaGD4nzgkjIRKhj9Vox5BNg0biZNJ8ywFg6N59BZfa1AtFFJnCWvOZBu65 i4ncPljlZLBdrcYr7rgFp875PUDRJPPBVoSbYjGj828u/zaEOw97QiD1Gz8x2Xnl fp4Oy5qsdFZlwMnlqBLmOnQNyy6OPp+duB+yWzuyJSokPxAKZEQ3Zdkbdzaiu2Ri sgHEuIJw0Qjkj84Zc3qGR4mIB6kwlyIZkHurIyzpigsnvzRFixZAkx95/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMADLg4YacY2T6xDL8hJoULK3keDMB8GA1UdIwQY MBaAFBeXLUODXNamblTlpYVs5X3igtQ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWIt OTA5NWVjYzg3ODc4LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWItOTA5NWVjYzg3ODc4 LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJTetE5J GRUjzYxxndsfKqyYv2ByaxmfSTw/ZX8eisSd7/64n8xNplIFMXOMSAAUKrQA0f6U l0b++3mdB/B1qycOoOnn1XZLCl3fVsY8jZFsyYx62lR5ynHJegfiK0ClVQCLl5gC zx3JKBB9QC7HFSvc2GNtMDOLsjoh2/NJyVjrpB4PIv9D/Lqty/45FtjRsesYiSKK IehhThDKOMN61hdIWzlLRJHJgcz2OqlUbzXONSzXyCV3lz5EPcriACLnY+ZYupNW RAdnp8eplXvfCkpUHkKE93ulABl1hWQR4lulfBM14ZR9hN0jHli8Mh7U2Zv+orwC 7h2ZxyNOUOS98w== -----END CERTIFICATE-----Generated at Sat Dec 6 23:42:31 2025 by rpki-client