This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft File: iF5uZejXQYIDljRWbNH6KysyVwI.mft (raw, json) Hash identifier: Y7B6+imT4L8hh3yrwHxWGa+HbNaW308mFHRwk78ckmU= Subject key identifier: 43:63:D1:08:18:E1:B5:74:E8:D0:38:FB:6D:41:6F:EC:80:8C:B8:89 Authority key identifier: 88:5E:6E:65:E8:D7:41:82:03:96:34:56:6C:D1:FA:2B:2B:32:57:02 Certificate issuer: /CN=885e6e65e8d74182039634566cd1fa2b2b325702 Certificate serial: 019AF841AD4AC613FF574BE6D2A3F8011140 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft Manifest number: 0365 Signing time: Sun 07 Dec 2025 10:00:45 +0000 Manifest this update: Sun 07 Dec 2025 10:00:45 +0000 Manifest next update: Mon 08 Dec 2025 10:00:45 +0000 Files and hashes: 1: 7R9_GJs-RL0ErJSF-LSh2qvUnoE.roa (hash: vAKa7err3VX58GgPpqscTS8KcHYZ802QYuzRZdVwrE8=) 2: iF5uZejXQYIDljRWbNH6KysyVwI.crl (hash: hpb90+FtbQUD3HojtMlPSiYd05O77BAUcixX8RggjPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.crl rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:41:ad:4a:c6:13:ff:57:4b:e6:d2:a3:f8:01:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885e6e65e8d74182039634566cd1fa2b2b325702 Validity Not Before: Dec 7 10:00:45 2025 GMT Not After : Dec 8 10:00:45 2025 GMT Subject: CN=4363d10818e1b574e8d038fb6d416fec808cb889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:01:34:ee:f7:77:38:e8:9e:08:45:b3:21:3d: d8:98:24:88:e1:f4:4c:68:45:5f:57:b5:49:15:28: 38:71:5e:3e:1d:fc:58:0e:a2:2b:9e:7f:b2:9b:27: f8:db:60:be:88:25:de:8f:e7:08:3a:29:ee:a1:fa: 32:2d:3e:bb:73:dd:9e:45:47:2b:47:f7:2b:5f:f9: 40:fb:c4:a5:a5:00:41:ad:59:c2:76:7b:9a:cd:48: d1:de:8c:d1:ab:13:1f:07:8c:19:56:01:7a:06:9b: 20:92:29:96:2c:39:69:b6:4d:89:be:93:ef:39:e7: 2f:e3:42:d7:50:51:98:21:85:84:44:17:26:d9:9e: ae:74:4a:6e:1e:0f:fd:ad:4c:28:6b:f2:fe:d2:71: 71:b0:19:65:d3:a3:bf:c9:0f:16:b7:89:c9:fa:13: 08:74:e0:b1:4b:8a:ef:e1:10:d3:d9:40:0a:2d:99: 8f:e6:cf:16:64:69:30:8c:de:c5:56:f0:8b:67:d0: 8c:13:cf:2a:c1:0d:db:3d:d5:a8:59:de:67:8f:f1: fe:f3:33:16:d0:70:94:d5:db:a5:bd:7e:be:11:c2: cd:d7:2b:93:79:86:bd:02:31:f6:49:d2:0e:60:7b: be:34:28:b4:64:0f:7e:4f:ad:82:cb:6a:5d:24:e4: 4c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:63:D1:08:18:E1:B5:74:E8:D0:38:FB:6D:41:6F:EC:80:8C:B8:89 X509v3 Authority Key Identifier: keyid:88:5E:6E:65:E8:D7:41:82:03:96:34:56:6C:D1:FA:2B:2B:32:57:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:0d:c0:bd:ae:dc:0a:d0:78:ba:20:ce:eb:df:96:e8:63:db: 08:0b:d9:08:11:e1:af:65:d6:fd:57:1f:2e:20:1a:5b:c5:de: d9:22:d1:7f:60:7c:c8:a4:c7:3b:b8:9e:36:12:f1:28:e3:aa: 36:d9:53:cc:3c:94:7e:2e:97:b9:85:b0:94:a2:e2:41:47:c8: 09:25:c3:7e:19:ab:2e:69:60:22:ea:a9:3e:ee:c1:b3:9f:99: e2:63:16:df:5a:b7:03:ed:1e:10:ad:9a:a9:a4:b6:39:5d:be: b5:4e:5b:b6:bb:f3:50:5f:76:a4:9f:27:0c:c3:9e:3a:87:81: f0:57:31:e2:89:d0:51:66:71:11:de:57:81:0a:98:dd:28:b4: 13:3b:d7:b0:66:1d:92:53:16:3b:da:8d:eb:8b:c0:80:f3:42: 78:40:91:aa:c0:04:7b:91:c5:d5:93:3a:f7:78:5c:e6:13:e4: a4:23:80:3a:fe:be:d8:06:74:b5:bd:08:30:56:9a:6b:c6:e3: 2e:bc:93:6d:a2:29:c5:0a:4f:07:91:5b:88:ab:ca:21:7e:50: ac:cc:9b:1a:66:31:d3:e5:e5:d7:ac:b1:47:67:9c:74:eb:1c: 5c:49:a8:aa:7d:fe:0e:fc:6c:4c:b9:2b:9e:12:10:6f:41:33: c6:5f:09:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4Qa1KxhP/V0vm0qP4ARFAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWU2ZTY1ZThkNzQxODIwMzk2MzQ1NjZjZDFmYTJiMmIz MjU3MDIwHhcNMjUxMjA3MTAwMDQ1WhcNMjUxMjA4MTAwMDQ1WjAzMTEwLwYDVQQD Eyg0MzYzZDEwODE4ZTFiNTc0ZThkMDM4ZmI2ZDQxNmZlYzgwOGNiODg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AE07vd3OOieCEWzIT3YmCSI4fRM aEVfV7VJFSg4cV4+HfxYDqIrnn+ymyf422C+iCXej+cIOinuofoyLT67c92eRUcr R/crX/lA+8SlpQBBrVnCdnuazUjR3ozRqxMfB4wZVgF6BpsgkimWLDlptk2JvpPv Oecv40LXUFGYIYWERBcm2Z6udEpuHg/9rUwoa/L+0nFxsBll06O/yQ8Wt4nJ+hMI dOCxS4rv4RDT2UAKLZmP5s8WZGkwjN7FVvCLZ9CME88qwQ3bPdWoWd5nj/H+8zMW 0HCU1dulvX6+EcLN1yuTeYa9AjH2SdIOYHu+NCi0ZA9+T62Cy2pdJORM3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENj0QgY4bV06NA4+21Bb+yAjLiJMB8GA1UdIwQY MBaAFIhebmXo10GCA5Y0VmzR+isrMlcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUY1dVplalhRWUlEbGpSV2JOSDZLeXN5VndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9iNWU0MzgtZTI5Mi00ZDIyLWE5MGUt Y2VlYmRmZGUwMWZjLzEvaUY1dVplalhRWUlEbGpSV2JOSDZLeXN5VndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9iNWU0MzgtZTI5Mi00ZDIyLWE5MGUtY2VlYmRmZGUwMWZj LzEvaUY1dVplalhRWUlEbGpSV2JOSDZLeXN5VndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKw3Ava7c CtB4uiDO69+W6GPbCAvZCBHhr2XW/VcfLiAaW8Xe2SLRf2B8yKTHO7ieNhLxKOOq NtlTzDyUfi6XuYWwlKLiQUfICSXDfhmrLmlgIuqpPu7Bs5+Z4mMW31q3A+0eEK2a qaS2OV2+tU5btrvzUF92pJ8nDMOeOoeB8Fcx4onQUWZxEd5XgQqY3Si0EzvXsGYd klMWO9qN64vAgPNCeECRqsAEe5HF1ZM693hc5hPkpCOAOv6+2AZ0tb0IMFaaa8bj LryTbaIpxQpPB5FbiKvKIX5QrMybGmYx0+Xl16yxR2ecdOscXEmoqn3+DvxsTLkr nhIQb0Ezxl8Jyg== -----END CERTIFICATE-----Generated at Sun Dec 7 15:20:32 2025 by rpki-client