This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft File: i5PlZ68ZipTh_PBf4P58khCVqEo.mft (raw, json) Hash identifier: lCD3Ej/1mD7OXj0iEY4PVry+y0sm0kYGPlbLMDuSddw= Subject key identifier: DF:E0:B7:66:DA:7F:09:C7:76:C4:05:8B:80:A7:16:75:C1:A4:B3:88 Authority key identifier: 8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A Certificate issuer: /CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a Certificate serial: 019AF27661E1A3048421B0CE8C88064CBC82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft Manifest number: 0C0B Signing time: Sat 06 Dec 2025 07:00:35 +0000 Manifest this update: Sat 06 Dec 2025 07:00:35 +0000 Manifest next update: Sun 07 Dec 2025 07:00:35 +0000 Files and hashes: 1: 6DAE46YGraEJYVV3HiGtZg9tT3U.roa (hash: 9Q8yRtyc9v/k/ONyDJo3tJ6f8FW5cGNXex+XpsJxg2Q=) 2: i5PlZ68ZipTh_PBf4P58khCVqEo.crl (hash: wxIVuXzYyjFTNI3H+1YuoV8gzYTWGVLbwP+W82jVCz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:61:e1:a3:04:84:21:b0:ce:8c:88:06:4c:bc:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a Validity Not Before: Dec 6 07:00:35 2025 GMT Not After : Dec 7 07:00:35 2025 GMT Subject: CN=dfe0b766da7f09c776c4058b80a71675c1a4b388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4f:42:d0:68:c5:1a:dd:ad:a1:9e:e1:c9:b6: 93:0e:9c:bc:00:e2:f5:cd:93:bb:63:ae:b0:53:8f: d3:40:6e:2a:c9:0b:96:56:cb:1c:fb:d6:74:f7:17: d9:5e:fa:d8:11:8d:fa:10:40:33:bc:d6:16:2a:86: 2b:87:ba:2d:e2:88:cf:7c:41:2c:4c:37:69:df:ee: 59:86:58:7b:96:28:39:80:7b:3a:33:e0:01:aa:5c: 6d:c7:5b:88:5b:ef:3f:b7:bb:36:0a:52:9d:2c:94: 14:71:8a:f6:6f:c1:20:fa:df:02:e6:6f:ab:c6:5e: c2:7c:c1:40:fb:8c:13:74:2f:3d:4b:60:64:3a:69: 22:56:1b:49:db:f4:f8:c8:5e:ba:9b:1d:00:fd:22: 79:63:85:4d:48:ec:77:24:a9:93:91:b9:c3:60:8c: 48:3e:93:dc:ec:31:a0:c4:53:a5:7a:d5:5d:ee:0b: ea:5c:10:1c:45:f3:bc:da:1f:d0:98:be:c9:0b:1e: 23:1b:a8:20:6c:aa:68:bc:16:2c:0d:6a:46:b8:a4: fd:82:ac:4f:91:41:97:94:8b:87:78:d2:e5:08:97: a7:ee:f4:29:6d:6a:13:be:93:2b:59:12:77:ff:17: 73:1b:ab:33:4d:97:03:c3:77:25:81:02:97:af:19: 4f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E0:B7:66:DA:7F:09:C7:76:C4:05:8B:80:A7:16:75:C1:A4:B3:88 X509v3 Authority Key Identifier: keyid:8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:bb:6f:12:63:61:52:94:46:9a:fe:29:f6:05:ae:01:45:fc: 7d:b1:cb:f8:d2:59:59:e1:e8:11:12:f2:cc:4b:82:73:7b:ca: 71:3a:dd:46:cc:ef:30:35:0d:ca:e2:13:9a:58:35:c7:5a:61: 0b:55:4c:0c:e7:00:59:83:15:a4:d4:a7:d1:f9:41:3e:38:71: 9b:5c:f9:3f:31:47:d6:0d:70:9e:fc:34:15:08:d8:d2:cd:c4: c4:2a:ce:dc:b5:77:72:d7:2e:95:d9:5e:ee:33:9e:e3:52:c2: 12:95:95:23:39:5e:ba:85:bd:fa:e8:29:79:b0:1b:7b:30:36: b2:d9:0a:0c:48:68:e9:55:fe:89:a1:b2:66:f7:f3:d0:a1:96: a1:0c:0c:c2:f2:dc:2e:61:c8:b6:03:fd:df:91:f7:e9:de:37: d4:e1:8c:47:5d:a5:30:3b:19:cf:f5:58:49:cb:bc:40:7d:64: 98:df:ff:c0:12:09:e7:02:d5:81:d5:ae:f2:87:97:85:fa:f3: 92:59:de:e1:21:78:ee:54:9c:d5:ce:4d:eb:71:ed:d3:62:53: f8:e1:77:a6:99:26:c6:b7:34:3b:7d:81:b4:b0:15:6e:4e:ae: 1e:41:36:55:ee:bf:f0:01:78:de:43:25:10:25:47:b1:be:67: 8a:25:3b:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmHhowSEIbDOjIgGTLyCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOTNlNTY3YWYxOThhOTRlMWZjZjA1ZmUwZmU3YzkyMTA5 NWE4NGEwHhcNMjUxMjA2MDcwMDM1WhcNMjUxMjA3MDcwMDM1WjAzMTEwLwYDVQQD EyhkZmUwYjc2NmRhN2YwOWM3NzZjNDA1OGI4MGE3MTY3NWMxYTRiMzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU9C0GjFGt2toZ7hybaTDpy8AOL1 zZO7Y66wU4/TQG4qyQuWVssc+9Z09xfZXvrYEY36EEAzvNYWKoYrh7ot4ojPfEEs TDdp3+5Zhlh7lig5gHs6M+ABqlxtx1uIW+8/t7s2ClKdLJQUcYr2b8Eg+t8C5m+r xl7CfMFA+4wTdC89S2BkOmkiVhtJ2/T4yF66mx0A/SJ5Y4VNSOx3JKmTkbnDYIxI PpPc7DGgxFOletVd7gvqXBAcRfO82h/QmL7JCx4jG6ggbKpovBYsDWpGuKT9gqxP kUGXlIuHeNLlCJen7vQpbWoTvpMrWRJ3/xdzG6szTZcDw3clgQKXrxlPdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/gt2bafwnHdsQFi4CnFnXBpLOIMB8GA1UdIwQY MBaAFIuT5WevGYqU4fzwX+D+fJIQlahKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTVQbFo2OFppcFRoX1BCZjRQNThraENWcUVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jZjEzMGQtZWZkNC00ZGZiLWExYTMt YTJiZjBhMThjZGRjLzEvaTVQbFo2OFppcFRoX1BCZjRQNThraENWcUVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9jZjEzMGQtZWZkNC00ZGZiLWExYTMtYTJiZjBhMThjZGRj LzEvaTVQbFo2OFppcFRoX1BCZjRQNThraENWcUVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLtvEmNh UpRGmv4p9gWuAUX8fbHL+NJZWeHoERLyzEuCc3vKcTrdRszvMDUNyuITmlg1x1ph C1VMDOcAWYMVpNSn0flBPjhxm1z5PzFH1g1wnvw0FQjY0s3ExCrO3LV3ctculdle 7jOe41LCEpWVIzleuoW9+ugpebAbezA2stkKDEho6VX+iaGyZvfz0KGWoQwMwvLc LmHItgP935H36d431OGMR12lMDsZz/VYScu8QH1kmN//wBIJ5wLVgdWu8oeXhfrz klne4SF47lSc1c5N63Ht02JT+OF3ppkmxrc0O32BtLAVbk6uHkE2Ve6/8AF43kMl ECVHsb5niiU7zQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:39:49 2025 by rpki-client