This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft File: t5IgqAXkN4VH5Duscxzob-ARRcc.mft (raw, json) Hash identifier: 3nBY0ZyBWVySPrcjf9q+3WLm/tTWbYBMFtkfmxRzKro= Subject key identifier: 31:A7:D2:7D:52:80:8F:2E:8A:57:B8:C8:99:17:1A:FB:2A:5A:4F:84 Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7 Certificate issuer: /CN=b79220a805e4378547e43bac731ce86fe01145c7 Certificate serial: 019AF23FF5C59E10834E2A55CD86744EE10D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft Manifest number: 177B Signing time: Sat 06 Dec 2025 06:01:09 +0000 Manifest this update: Sat 06 Dec 2025 06:01:09 +0000 Manifest next update: Sun 07 Dec 2025 06:01:09 +0000 Files and hashes: 1: E1LywobBcmK6AnOJwTgaLZby7Ro.roa (hash: n5sH5ypDKZX50nW+CdvdagJLuCKGRa+qpkP+9kKp1iw=) 2: JsHUF9nO0Ubmx66NjwjSoa2db5s.roa (hash: 5Bntxxf/DOq1AqaoIFJIGiKuLbRTvnWBZ2d4WFO6pPY=) 3: MbqoSUw94G_kpX-xAxVWXxjX0io.roa (hash: R1upzBkGFuu3S6c70j9aIqWiLLfM3rhDbfCwHwN7UrE=) 4: dxIfYzd-HHl4lIaAqTEGfA9c7sQ.roa (hash: 1wNUGeXyusk9X3ieKOx2o0ugjj6lBznwR37kiJNdRxw=) 5: qBWUDdq6JGEqcxPlF6Ytcy33dJA.roa (hash: 00VI12BlUP26JR+mPLQ+RfjLscfTifDKz5JZWGxyZBQ=) 6: rAdBLvyRbVu9ByeGD622HSDJlBU.roa (hash: CZZqdpQQG94RuUVqGtWwcTYbY/5K07OCSVEcHRuO4vA=) 7: t5IgqAXkN4VH5Duscxzob-ARRcc.crl (hash: AB4K57A9JHZS4FaAUhRjEeNGhaszZLkgsQFBmnH7zTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f5:c5:9e:10:83:4e:2a:55:cd:86:74:4e:e1:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7 Validity Not Before: Dec 6 06:01:09 2025 GMT Not After : Dec 7 06:01:09 2025 GMT Subject: CN=31a7d27d52808f2e8a57b8c899171afb2a5a4f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:65:05:b3:4a:60:24:1f:c2:77:a8:b9:50:24: f0:86:30:5e:54:68:b0:e7:88:b8:47:e8:c4:5b:16: 77:92:d9:60:d3:45:8c:14:24:e2:be:e9:39:75:a3: 50:5b:be:f0:d9:80:e3:06:e9:64:00:4f:88:89:69: ee:84:63:b4:0f:1f:55:a4:6a:0f:63:db:8c:7a:47: f5:cf:c7:54:2f:ce:f4:83:1c:2a:73:ba:0f:b1:19: 0d:70:56:be:4a:84:8e:dc:77:0f:64:ae:a5:99:40: 3d:6a:79:97:90:9a:69:c0:f7:04:be:6e:8f:44:58: f4:75:3a:84:ac:8b:fb:a5:de:13:fa:8e:f7:92:45: b4:53:b5:1e:87:73:8a:19:41:ca:28:ab:ec:64:0c: 26:8a:69:6c:69:c1:cb:00:a1:1f:3b:53:27:fd:cd: 94:da:59:27:1d:07:6f:d7:15:61:6c:79:eb:14:8d: ba:d3:1e:f3:86:63:a1:13:45:d3:7d:f0:d7:62:2c: ac:2c:9e:e7:bc:0f:5f:3b:a7:43:c2:49:11:5b:bf: a4:16:30:fb:b0:c3:2e:90:cb:b8:a4:ad:27:57:64: 0a:65:70:f1:85:ba:a0:df:cf:92:2d:1f:84:64:7d: 0a:22:fd:2f:a1:ce:6a:3a:64:13:24:8c:17:1a:16: ad:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A7:D2:7D:52:80:8F:2E:8A:57:B8:C8:99:17:1A:FB:2A:5A:4F:84 X509v3 Authority Key Identifier: keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a3:a5:5a:9f:49:23:04:af:27:f9:12:bb:cb:ab:7f:a1:e9: a8:df:4c:30:ee:e1:df:e4:24:eb:83:af:c0:53:8a:c1:22:e6: 6b:3d:fe:90:4b:0c:9f:28:bd:18:fe:2c:da:e9:ed:ae:dc:99: d1:5c:94:b0:8a:5a:7d:f8:2f:fe:0a:01:e1:06:2a:de:f1:2e: 5a:4e:87:42:fb:43:71:89:0b:ff:14:9a:c2:71:3c:d7:ad:3f: 09:c2:1d:6d:08:5f:26:76:45:f7:71:8c:89:c1:38:b3:42:b6: 14:75:80:1c:12:77:5d:b1:9d:9c:9f:6b:e9:bd:36:48:82:23: 78:37:6e:36:f0:99:ee:8e:d4:9a:10:fc:3d:a9:8f:e8:e4:3d: 7b:59:83:25:ce:76:6c:e5:24:ee:a2:15:45:4f:a0:50:f6:60: 24:df:75:09:07:b8:94:9d:13:33:25:5d:96:34:0a:56:f3:ef: e8:50:c5:bc:41:b0:90:7e:24:10:f3:d3:29:67:90:0d:a8:2b: 23:0a:6a:eb:dc:33:2a:51:69:49:32:77:28:1b:22:72:e8:f6: a1:a9:4a:8a:a6:26:0b:a2:05:c3:ba:a6:6c:ba:d7:bd:94:db: 76:4b:42:18:f1:a7:36:19:96:de:c0:f0:9c:03:17:1f:8b:99: 08:90:97:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/XFnhCDTipVzYZ0TuENMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OTIyMGE4MDVlNDM3ODU0N2U0M2JhYzczMWNlODZmZTAx MTQ1YzcwHhcNMjUxMjA2MDYwMTA5WhcNMjUxMjA3MDYwMTA5WjAzMTEwLwYDVQQD EygzMWE3ZDI3ZDUyODA4ZjJlOGE1N2I4Yzg5OTE3MWFmYjJhNWE0Zjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGUFs0pgJB/Cd6i5UCTwhjBeVGiw 54i4R+jEWxZ3ktlg00WMFCTivuk5daNQW77w2YDjBulkAE+IiWnuhGO0Dx9VpGoP Y9uMekf1z8dUL870gxwqc7oPsRkNcFa+SoSO3HcPZK6lmUA9anmXkJppwPcEvm6P RFj0dTqErIv7pd4T+o73kkW0U7Ueh3OKGUHKKKvsZAwmimlsacHLAKEfO1Mn/c2U 2lknHQdv1xVhbHnrFI260x7zhmOhE0XTffDXYiysLJ7nvA9fO6dDwkkRW7+kFjD7 sMMukMu4pK0nV2QKZXDxhbqg38+SLR+EZH0KIv0voc5qOmQTJIwXGhatwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGn0n1SgI8uile4yJkXGvsqWk+EMB8GA1UdIwQY MBaAFLeSIKgF5DeFR+Q7rHMc6G/gEUXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDkt NDIzYWZjMmI2OGI4LzEvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDktNDIzYWZjMmI2OGI4 LzEvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFaOlWp9J IwSvJ/kSu8urf6HpqN9MMO7h3+Qk64OvwFOKwSLmaz3+kEsMnyi9GP4s2untrtyZ 0VyUsIpaffgv/goB4QYq3vEuWk6HQvtDcYkL/xSawnE8160/CcIdbQhfJnZF93GM icE4s0K2FHWAHBJ3XbGdnJ9r6b02SIIjeDduNvCZ7o7UmhD8PamP6OQ9e1mDJc52 bOUk7qIVRU+gUPZgJN91CQe4lJ0TMyVdljQKVvPv6FDFvEGwkH4kEPPTKWeQDagr Iwpq69wzKlFpSTJ3KBsicuj2oalKiqYmC6IFw7qmbLrXvZTbdktCGPGnNhmW3sDw nAMXH4uZCJCXNg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:37:14 2025 by rpki-client