This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft File: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft (raw, json) Hash identifier: VzTbFwQIydGN06DiSeTFunzPhLLId+Bxd9F8GS/Kn4g= Subject key identifier: AC:DA:BE:04:16:3C:8F:2C:A1:3B:27:DC:F4:82:7A:DA:8B:88:03:E9 Authority key identifier: 57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D Certificate issuer: /CN=5797245d78078985c147dccbe0ec6d168dd9982d Certificate serial: 019B31C3B985F8FA7615575E8FC9DE2D432F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft Manifest number: 146D Signing time: Thu 18 Dec 2025 14:01:09 +0000 Manifest this update: Thu 18 Dec 2025 14:01:09 +0000 Manifest next update: Fri 19 Dec 2025 14:01:09 +0000 Files and hashes: 1: LXZlJTG3YsWQvmeHm3moz8YZuWw.roa (hash: mxP6NSnPOQlaHwnP8UnNjh2RIRc/bI9gDbXBJw+o1lw=) 2: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl (hash: FD7RZ6vJGem0sMVXQK0tOWAaw2BUAuCnud6Zz1BnOQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:b9:85:f8:fa:76:15:57:5e:8f:c9:de:2d:43:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5797245d78078985c147dccbe0ec6d168dd9982d Validity Not Before: Dec 18 14:01:09 2025 GMT Not After : Dec 19 14:01:09 2025 GMT Subject: CN=acdabe04163c8f2ca13b27dcf4827ada8b8803e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:42:c8:a9:75:b3:90:33:96:a6:aa:c4:b5:65: fd:83:91:15:a2:57:bb:c7:93:dd:f3:ec:7d:c5:c5: b7:09:9c:e3:4a:a2:57:1d:06:df:97:5b:93:4c:72: a8:14:f9:aa:d9:8b:ae:e3:e5:9a:7f:8a:9b:45:a8: f8:ea:1e:72:48:3c:fa:08:2c:3c:79:39:b4:d4:ae: a8:35:79:68:a4:5d:34:56:c3:18:41:fd:d8:a6:ec: c9:bc:da:5b:dc:8c:14:bd:16:8a:67:61:3b:3c:2e: 27:8f:47:3d:a5:23:df:ff:c8:31:f1:e4:8f:a7:84: 11:8c:a3:18:61:0c:f0:fd:48:a3:a0:8b:52:be:5a: 1d:5d:12:a7:0a:c5:12:38:38:41:39:59:44:13:62: 29:14:92:06:1b:4c:9c:5d:fc:79:ee:9b:82:25:5a: e7:1f:df:99:45:59:8c:cf:f6:a5:eb:ea:b3:dd:ab: a0:06:fe:80:cc:f1:d7:62:b2:5c:1a:34:2e:88:bf: c2:47:b7:81:a6:f7:63:20:77:46:46:84:35:0b:4a: 79:47:07:64:5d:4b:ef:db:1c:6f:56:36:45:06:c8: 13:98:ea:d3:6d:b6:fe:a4:68:c2:c4:37:60:d2:9b: a2:b3:75:05:99:0d:1a:01:f7:66:7d:6f:87:c1:d1: c5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DA:BE:04:16:3C:8F:2C:A1:3B:27:DC:F4:82:7A:DA:8B:88:03:E9 X509v3 Authority Key Identifier: keyid:57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:b7:7d:5c:2a:4c:4a:96:d5:f2:7c:77:bb:bb:f1:46:41:a9: 1f:09:e2:c4:80:0b:62:01:0d:e5:3b:c6:76:20:83:cf:bc:9d: 00:dc:71:3e:b3:60:9a:6d:3c:87:8e:f4:a3:c4:7d:f9:c0:14: 28:81:3f:b9:0c:34:d4:11:31:1a:6b:4f:ed:d7:e8:f7:fc:e6: eb:fc:16:f4:61:09:76:04:e0:67:98:6a:bd:07:da:8c:d0:bc: 06:0a:6d:63:6f:85:e4:2c:c0:06:bd:3e:d6:9d:35:39:73:1c: 3a:b5:48:1a:1e:74:e7:39:16:76:39:ef:22:41:1e:09:ea:ec: ae:eb:61:8e:38:52:2a:fb:eb:08:37:ab:d3:51:46:7c:51:1a: 7c:49:bd:ac:51:06:21:7f:61:53:3a:75:36:fb:3a:a0:f5:fb: 24:10:70:60:1c:de:d9:26:cc:d2:c7:aa:33:2e:d3:c4:c3:cb: 5c:8c:bd:14:da:ed:9c:c9:fe:4f:d3:7d:a7:2d:bc:7a:07:5a: 71:1f:5b:9e:e3:d5:61:68:42:3d:db:92:5c:ed:65:fb:97:50: 52:b4:dc:61:e7:d4:42:4d:98:60:0b:15:d8:28:fb:63:66:3d: 54:55:1c:1d:33:16:59:3e:38:14:12:0a:f6:57:aa:a8:0c:24: 05:92:50:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw7mF+Pp2FVdej8neLUMvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3OTcyNDVkNzgwNzg5ODVjMTQ3ZGNjYmUwZWM2ZDE2OGRk OTk4MmQwHhcNMjUxMjE4MTQwMTA5WhcNMjUxMjE5MTQwMTA5WjAzMTEwLwYDVQQD EyhhY2RhYmUwNDE2M2M4ZjJjYTEzYjI3ZGNmNDgyN2FkYThiODgwM2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArULIqXWzkDOWpqrEtWX9g5EVole7 x5Pd8+x9xcW3CZzjSqJXHQbfl1uTTHKoFPmq2Yuu4+Waf4qbRaj46h5ySDz6CCw8 eTm01K6oNXlopF00VsMYQf3YpuzJvNpb3IwUvRaKZ2E7PC4nj0c9pSPf/8gx8eSP p4QRjKMYYQzw/UijoItSvlodXRKnCsUSODhBOVlEE2IpFJIGG0ycXfx57puCJVrn H9+ZRVmMz/al6+qz3augBv6AzPHXYrJcGjQuiL/CR7eBpvdjIHdGRoQ1C0p5Rwdk XUvv2xxvVjZFBsgTmOrTbbb+pGjCxDdg0puis3UFmQ0aAfdmfW+HwdHFoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzavgQWPI8soTsn3PSCetqLiAPpMB8GA1UdIwQY MBaAFFeXJF14B4mFwUfcy+DsbRaN2ZgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjVja1hYZ0hpWVhCUjl6TDRPeHRGbzNabUMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xMTE1NzktYWUxOS00MjUxLTk3ODUt NzNlMzhjY2UxMzgzLzEvVjVja1hYZ0hpWVhCUjl6TDRPeHRGbzNabUMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8xMTE1NzktYWUxOS00MjUxLTk3ODUtNzNlMzhjY2UxMzgz LzEvVjVja1hYZ0hpWVhCUjl6TDRPeHRGbzNabUMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7d9XCpM SpbV8nx3u7vxRkGpHwnixIALYgEN5TvGdiCDz7ydANxxPrNgmm08h470o8R9+cAU KIE/uQw01BExGmtP7dfo9/zm6/wW9GEJdgTgZ5hqvQfajNC8BgptY2+F5CzABr0+ 1p01OXMcOrVIGh505zkWdjnvIkEeCersruthjjhSKvvrCDer01FGfFEafEm9rFEG IX9hUzp1Nvs6oPX7JBBwYBze2SbM0seqMy7TxMPLXIy9FNrtnMn+T9N9py28egda cR9bnuPVYWhCPduSXO1l+5dQUrTcYefUQk2YYAsV2Cj7Y2Y9VFUcHTMWWT44FBIK 9leqqAwkBZJQsw== -----END CERTIFICATE-----Generated at Thu Dec 18 15:40:56 2025 by rpki-client