This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft File: i5PlZ68ZipTh_PBf4P58khCVqEo.mft (raw, json) Hash identifier: OAVf1UavAI9CFryiWh6PhwX2VqKf3Qs7kIT3Bt8jZ6M= Subject key identifier: 91:B0:62:63:8A:7B:4F:C9:BD:A6:F5:B8:A7:D4:2F:4C:5E:0B:A8:D9 Authority key identifier: 8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A Certificate issuer: /CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a Certificate serial: 019B2A77A1199E768D3B2BBAC3544F4C8B71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft Manifest number: 0C28 Signing time: Wed 17 Dec 2025 04:00:41 +0000 Manifest this update: Wed 17 Dec 2025 04:00:41 +0000 Manifest next update: Thu 18 Dec 2025 04:00:41 +0000 Files and hashes: 1: 6DAE46YGraEJYVV3HiGtZg9tT3U.roa (hash: 9Q8yRtyc9v/k/ONyDJo3tJ6f8FW5cGNXex+XpsJxg2Q=) 2: i5PlZ68ZipTh_PBf4P58khCVqEo.crl (hash: H4FHxxE/sF4cVVX58/cnpSgte9xcerHTdXXACYIDUzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:77:a1:19:9e:76:8d:3b:2b:ba:c3:54:4f:4c:8b:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a Validity Not Before: Dec 17 04:00:41 2025 GMT Not After : Dec 18 04:00:41 2025 GMT Subject: CN=91b062638a7b4fc9bda6f5b8a7d42f4c5e0ba8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5e:13:d9:bc:39:67:99:71:63:4f:ef:cb:c1: 15:b1:12:ea:0a:b1:70:0a:db:be:44:d5:31:c6:ab: c0:72:2c:60:12:40:5a:5b:bc:17:57:87:00:3e:8b: 32:a6:0d:eb:f7:1d:cd:54:fc:49:01:c9:35:10:18: 3e:26:c2:80:f9:28:d4:36:5a:2b:97:36:01:ef:c9: e7:34:5e:81:0f:e9:e6:b0:ca:85:c8:dd:9d:89:9b: 08:8d:65:09:76:a7:44:39:26:ac:7a:74:f1:a4:d4: b7:2b:12:6e:ff:11:0e:d0:2d:f8:c2:4b:1b:c9:47: f9:8d:2d:0b:ca:86:f2:02:c0:1c:2f:4c:5f:72:81: b4:c4:15:d9:11:5a:21:b6:e7:7e:23:75:ed:af:aa: a3:33:4e:97:43:6f:ae:14:f7:09:3b:45:2e:7d:61: 5f:ae:c3:70:31:26:ff:61:90:0d:30:7a:08:54:81: 7b:bc:f1:72:2b:56:8b:a5:db:8c:73:2a:b4:bc:d6: dc:66:ed:6c:0e:b8:47:d3:1d:5b:cd:ff:55:d1:a8: 04:95:73:b3:85:b8:6a:2b:b6:99:d0:fc:65:ab:e9: 51:19:47:c4:eb:a8:08:77:74:37:f9:1e:78:12:43: 32:f3:1e:3d:dc:17:8f:ef:e1:93:79:c9:0b:4a:c7: 03:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B0:62:63:8A:7B:4F:C9:BD:A6:F5:B8:A7:D4:2F:4C:5E:0B:A8:D9 X509v3 Authority Key Identifier: keyid:8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:f4:dd:79:e6:39:dc:b1:1a:e5:ed:2a:81:bb:11:92:e8:7a: f9:eb:0a:fa:63:9c:1d:02:2b:95:42:e6:2f:52:87:c7:ed:cb: db:60:3d:22:a6:6f:79:7b:c0:2d:2f:ff:ab:5f:22:5f:2f:2a: 4c:ce:a3:03:17:d4:95:42:9e:e1:fc:44:55:56:29:56:d7:40: 2c:e0:79:4f:fd:3d:f3:6c:c5:d5:32:a2:05:70:7c:d5:9f:16: 51:3a:d2:a9:e9:51:2d:08:f7:a0:1c:e1:36:28:0e:2f:7a:77: f5:1e:d7:80:91:fd:93:b1:fe:d9:80:d8:0f:96:68:0d:a1:7d: 13:fe:3e:d0:eb:70:4a:60:5f:03:68:98:98:5f:19:21:eb:4a: 02:02:c2:47:0d:d7:6a:95:f3:3d:4c:14:15:ca:86:1f:a6:0a: 98:a4:a0:e7:15:a9:be:f5:23:c1:74:d0:e0:3d:e2:41:3c:16: f5:b4:83:9c:37:49:01:40:7e:4b:ff:8d:3f:4c:d2:f4:d0:38: 1b:00:ad:2b:cf:b2:70:f7:24:b3:62:16:28:56:e3:7f:e2:4d: 88:4d:5a:c3:fe:ed:b2:29:70:ae:55:99:ab:f0:5c:e0:80:a4: 8c:6f:ed:20:0a:0b:2b:89:8c:30:ed:8d:a7:18:31:e4:2d:62: 36:e7:48:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqd6EZnnaNOyu6w1RPTItxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOTNlNTY3YWYxOThhOTRlMWZjZjA1ZmUwZmU3YzkyMTA5 NWE4NGEwHhcNMjUxMjE3MDQwMDQxWhcNMjUxMjE4MDQwMDQxWjAzMTEwLwYDVQQD Eyg5MWIwNjI2MzhhN2I0ZmM5YmRhNmY1YjhhN2Q0MmY0YzVlMGJhOGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo14T2bw5Z5lxY0/vy8EVsRLqCrFw Ctu+RNUxxqvAcixgEkBaW7wXV4cAPosypg3r9x3NVPxJAck1EBg+JsKA+SjUNlor lzYB78nnNF6BD+nmsMqFyN2diZsIjWUJdqdEOSasenTxpNS3KxJu/xEO0C34wksb yUf5jS0LyobyAsAcL0xfcoG0xBXZEVohtud+I3Xtr6qjM06XQ2+uFPcJO0UufWFf rsNwMSb/YZANMHoIVIF7vPFyK1aLpduMcyq0vNbcZu1sDrhH0x1bzf9V0agElXOz hbhqK7aZ0Pxlq+lRGUfE66gId3Q3+R54EkMy8x493BeP7+GTeckLSscDdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGwYmOKe0/Jvab1uKfUL0xeC6jZMB8GA1UdIwQY MBaAFIuT5WevGYqU4fzwX+D+fJIQlahKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTVQbFo2OFppcFRoX1BCZjRQNThraENWcUVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jZjEzMGQtZWZkNC00ZGZiLWExYTMt YTJiZjBhMThjZGRjLzEvaTVQbFo2OFppcFRoX1BCZjRQNThraENWcUVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9jZjEzMGQtZWZkNC00ZGZiLWExYTMtYTJiZjBhMThjZGRj LzEvaTVQbFo2OFppcFRoX1BCZjRQNThraENWcUVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt/TdeeY5 3LEa5e0qgbsRkuh6+esK+mOcHQIrlULmL1KHx+3L22A9IqZveXvALS//q18iXy8q TM6jAxfUlUKe4fxEVVYpVtdALOB5T/0982zF1TKiBXB81Z8WUTrSqelRLQj3oBzh NigOL3p39R7XgJH9k7H+2YDYD5ZoDaF9E/4+0OtwSmBfA2iYmF8ZIetKAgLCRw3X apXzPUwUFcqGH6YKmKSg5xWpvvUjwXTQ4D3iQTwW9bSDnDdJAUB+S/+NP0zS9NA4 GwCtK8+ycPcks2IWKFbjf+JNiE1aw/7tsilwrlWZq/Bc4ICkjG/tIAoLK4mMMO2N pxgx5C1iNudI+g== -----END CERTIFICATE-----Generated at Wed Dec 17 13:42:16 2025 by rpki-client