This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft File: t5IgqAXkN4VH5Duscxzob-ARRcc.mft (raw, json) Hash identifier: M1BdRS0rZs5hv461Dk9EZe9aiOHnJrqPo0CXTZhVdKs= Subject key identifier: F4:51:37:D1:B6:30:6A:9B:C9:A9:0D:79:91:16:12:5C:80:D2:C1:E2 Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7 Certificate issuer: /CN=b79220a805e4378547e43bac731ce86fe01145c7 Certificate serial: 019B2175066EDBB039B9F3EC642EA382B907 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft Manifest number: 17B3 Signing time: Mon 15 Dec 2025 10:01:16 +0000 Manifest this update: Mon 15 Dec 2025 10:01:16 +0000 Manifest next update: Tue 16 Dec 2025 10:01:16 +0000 Files and hashes: 1: JsHUF9nO0Ubmx66NjwjSoa2db5s.roa (hash: 5Bntxxf/DOq1AqaoIFJIGiKuLbRTvnWBZ2d4WFO6pPY=) 2: MbqoSUw94G_kpX-xAxVWXxjX0io.roa (hash: R1upzBkGFuu3S6c70j9aIqWiLLfM3rhDbfCwHwN7UrE=) 3: Qxp8G0GHrPY_ovV-Gofksm_SUgU.roa (hash: Af72w72DOhFGo4gSaZA2KUx1ppl1t4vP93NtaVCafbA=) 4: dxIfYzd-HHl4lIaAqTEGfA9c7sQ.roa (hash: 1wNUGeXyusk9X3ieKOx2o0ugjj6lBznwR37kiJNdRxw=) 5: qBWUDdq6JGEqcxPlF6Ytcy33dJA.roa (hash: 00VI12BlUP26JR+mPLQ+RfjLscfTifDKz5JZWGxyZBQ=) 6: rAdBLvyRbVu9ByeGD622HSDJlBU.roa (hash: CZZqdpQQG94RuUVqGtWwcTYbY/5K07OCSVEcHRuO4vA=) 7: t5IgqAXkN4VH5Duscxzob-ARRcc.crl (hash: 4A0blAYFFIVfTTbd20Rzjekoi/jmJU4muaLRZ3Rt4P0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:06:6e:db:b0:39:b9:f3:ec:64:2e:a3:82:b9:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7 Validity Not Before: Dec 15 10:01:16 2025 GMT Not After : Dec 16 10:01:16 2025 GMT Subject: CN=f45137d1b6306a9bc9a90d799116125c80d2c1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:61:40:fc:19:5e:9d:b0:14:c6:64:fc:bd:aa: 6c:17:9c:bf:5e:b5:c0:1f:88:2a:d8:9c:fd:1e:fa: 3d:f1:af:af:60:69:b1:85:84:56:eb:80:30:4d:54: 57:8f:fe:7c:ea:cc:e0:d3:af:ce:b5:82:f5:5b:44: a5:65:f0:6b:23:f0:eb:f4:2b:37:60:3e:b1:df:bb: b4:4a:d1:85:85:7a:7e:97:6a:7e:45:bc:71:f2:f9: ee:7f:6c:d2:16:bb:b7:dd:5a:cb:ed:85:5b:b5:81: 2a:51:a6:35:7b:03:87:4c:3b:e4:05:f4:9d:1a:b5: 2c:6c:d7:98:3b:59:2f:c3:b9:73:55:5e:f8:83:d9: 23:40:1c:3f:71:82:ed:9e:2e:24:18:e4:f1:b9:06: 44:66:dc:54:53:71:0d:5c:cb:33:b2:e1:f7:8b:72: ce:1d:fc:9f:35:20:49:6e:e7:4b:68:df:55:18:36: 80:92:af:23:f5:cd:ed:24:cd:76:1b:9d:e9:2f:ef: 11:f5:81:b5:fd:b7:6e:e8:d4:61:fb:2d:05:5c:c6: 32:14:bf:df:7a:ef:47:c9:ed:b6:4f:01:3a:2d:b0: 4c:9c:79:30:ce:67:06:6a:dd:1d:e8:b5:9d:b5:13: 81:2d:07:cd:35:12:4f:02:08:b9:8b:dd:b5:9d:df: d0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:51:37:D1:B6:30:6A:9B:C9:A9:0D:79:91:16:12:5C:80:D2:C1:E2 X509v3 Authority Key Identifier: keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:06:11:a8:9f:be:7f:06:ff:83:b5:a8:60:fd:38:18:49:2c: f2:fb:0f:a0:62:cf:06:dd:59:bc:93:17:79:98:62:96:cf:f9: 3a:8a:b2:0a:36:33:eb:ae:5a:96:4f:96:0d:dd:d3:1f:c2:f4: 2b:6f:8d:2f:a0:38:de:a3:df:10:c6:2e:04:22:87:41:b2:ac: 52:36:b6:d9:bf:36:26:96:9d:a2:64:40:71:36:50:cc:9f:2c: 74:01:e0:18:c2:62:f3:b8:11:d2:91:27:4a:67:5e:78:94:66: c6:eb:f1:1f:31:58:f9:5a:45:1b:2a:5b:4b:69:55:cd:38:41: 89:2a:dc:30:ab:51:ff:4c:d8:ff:84:78:af:76:46:d3:a3:f4: 11:3d:09:d6:a8:34:11:34:c2:ce:1e:1e:0f:24:08:9e:e7:82: 03:6b:7a:63:40:4f:61:20:ae:51:33:f1:47:83:42:7f:7d:aa: 30:2e:09:0c:36:dc:ee:46:bb:64:e7:f1:e2:2b:43:f8:44:2a: e0:67:78:84:9e:e3:1e:14:07:b1:7e:d3:1f:78:fb:b6:da:53: 24:db:66:d4:c1:cf:48:8e:52:b2:48:57:24:ac:94:6d:2c:19: 7e:2c:cd:88:d2:e0:88:5d:3e:a7:c0:3b:73:9d:8a:a0:88:81: ed:a9:05:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdQZu27A5ufPsZC6jgrkHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OTIyMGE4MDVlNDM3ODU0N2U0M2JhYzczMWNlODZmZTAx MTQ1YzcwHhcNMjUxMjE1MTAwMTE2WhcNMjUxMjE2MTAwMTE2WjAzMTEwLwYDVQQD EyhmNDUxMzdkMWI2MzA2YTliYzlhOTBkNzk5MTE2MTI1YzgwZDJjMWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGFA/BlenbAUxmT8vapsF5y/XrXA H4gq2Jz9Hvo98a+vYGmxhYRW64AwTVRXj/586szg06/OtYL1W0SlZfBrI/Dr9Cs3 YD6x37u0StGFhXp+l2p+Rbxx8vnuf2zSFru33VrL7YVbtYEqUaY1ewOHTDvkBfSd GrUsbNeYO1kvw7lzVV74g9kjQBw/cYLtni4kGOTxuQZEZtxUU3ENXMszsuH3i3LO HfyfNSBJbudLaN9VGDaAkq8j9c3tJM12G53pL+8R9YG1/bdu6NRh+y0FXMYyFL/f eu9Hye22TwE6LbBMnHkwzmcGat0d6LWdtROBLQfNNRJPAgi5i921nd/QrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRRN9G2MGqbyakNeZEWElyA0sHiMB8GA1UdIwQY MBaAFLeSIKgF5DeFR+Q7rHMc6G/gEUXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDkt NDIzYWZjMmI2OGI4LzEvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDktNDIzYWZjMmI2OGI4 LzEvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgYRqJ++ fwb/g7WoYP04GEks8vsPoGLPBt1ZvJMXeZhils/5OoqyCjYz665alk+WDd3TH8L0 K2+NL6A43qPfEMYuBCKHQbKsUja22b82JpadomRAcTZQzJ8sdAHgGMJi87gR0pEn SmdeeJRmxuvxHzFY+VpFGypbS2lVzThBiSrcMKtR/0zY/4R4r3ZG06P0ET0J1qg0 ETTCzh4eDyQInueCA2t6Y0BPYSCuUTPxR4NCf32qMC4JDDbc7ka7ZOfx4itD+EQq 4Gd4hJ7jHhQHsX7TH3j7ttpTJNtm1MHPSI5SskhXJKyUbSwZfizNiNLgiF0+p8A7 c52KoIiB7akFuw== -----END CERTIFICATE-----Generated at Mon Dec 15 20:19:20 2025 by rpki-client