This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft File: r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft (raw, json) Hash identifier: koWt44PCmwsfKDM1IOvrScg5KF1y2Pw2idmtk1ilVAs= Subject key identifier: 39:70:61:73:65:03:46:1C:F6:D9:83:3A:FD:8F:C3:87:42:15:53:93 Authority key identifier: AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38 Certificate issuer: /CN=af934ec694af68134b7514c10dcd13857b459e38 Certificate serial: 019B2DE707AD9D8A397062E70781AE7DF687 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft Manifest number: 117D Signing time: Wed 17 Dec 2025 20:01:14 +0000 Manifest this update: Wed 17 Dec 2025 20:01:14 +0000 Manifest next update: Thu 18 Dec 2025 20:01:14 +0000 Files and hashes: 1: 3KVjDh6tV6LcIk6BDE6xPuXzBDM.roa (hash: bQvllPBonHjb5qHCFeaDeGABQpp//k5Dnzxk+0td390=) 2: r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl (hash: g5bzUVRFoq/2iNmgpXRuDE/8RrNYeX8Ajocoz86o980=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:e7:07:ad:9d:8a:39:70:62:e7:07:81:ae:7d:f6:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af934ec694af68134b7514c10dcd13857b459e38 Validity Not Before: Dec 17 20:01:14 2025 GMT Not After : Dec 18 20:01:14 2025 GMT Subject: CN=397061736503461cf6d9833afd8fc38742155393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ad:ef:0c:c3:38:69:e7:e6:42:9c:d5:88:a7: 5f:eb:19:93:b8:b4:d9:66:2c:0c:ad:62:9a:6f:2f: ae:e0:1c:b2:d4:6c:b2:37:81:f9:05:d8:02:69:e8: f3:d0:51:ae:21:e5:32:2f:95:a2:1e:4a:cf:d6:f3: d4:5e:89:71:3a:72:b8:65:dd:1f:30:0e:ea:a8:4a: d8:98:d7:0e:43:ad:e4:24:64:7e:cc:b1:ef:07:4a: 29:08:02:74:e9:35:52:31:32:1b:5e:76:61:f1:51: 11:a2:a3:bb:72:d9:38:58:ec:6b:a3:53:49:6d:a6: b9:0c:d1:29:e7:91:6e:8c:cd:c8:5b:1a:02:c0:54: 76:d3:70:23:51:89:76:b6:27:f3:96:32:8a:f8:fc: 06:be:c3:72:3f:ce:2c:84:db:88:77:25:95:25:02: ee:89:21:87:c7:61:11:8f:f6:7d:57:2f:71:0f:ae: 2e:22:04:4b:0f:2c:8c:35:aa:b0:f4:83:d8:45:82: a4:f1:81:14:b5:67:1c:0d:af:5a:bf:d9:73:ad:ce: ae:91:05:71:69:a0:fc:94:6c:81:32:e6:4c:08:be: fe:f9:21:46:7c:f9:13:48:90:d1:f9:2c:c1:c5:6d: 9a:d1:5c:48:f9:55:92:01:38:f6:e4:34:22:5c:70: c0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:70:61:73:65:03:46:1C:F6:D9:83:3A:FD:8F:C3:87:42:15:53:93 X509v3 Authority Key Identifier: keyid:AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:dd:8f:8c:6a:ae:7c:d7:65:a5:d0:6a:11:d9:bc:01:90:39: f8:ec:5b:8b:5f:07:20:52:00:29:12:63:78:a5:55:85:01:3b: 8a:a7:93:2d:fd:a5:3c:e7:25:06:67:46:85:02:52:c1:ab:84: c1:2d:90:2a:73:45:78:9d:7c:31:30:5f:77:af:c8:b3:95:17: 42:32:d5:1b:ae:31:5f:dd:24:32:3e:71:e0:15:a6:e9:b6:0e: 62:b7:10:90:ea:38:29:a0:34:24:a7:c1:e5:56:a2:65:d1:a5: d7:cb:43:3d:44:6c:0e:2a:88:5f:cf:3e:2d:47:1d:95:09:61: f3:ef:f2:39:86:5e:47:22:58:f2:6a:1e:43:58:c2:eb:b3:9f: 84:8f:64:b6:ba:ad:06:92:e8:d3:2e:71:d0:f1:70:2c:cc:93: c6:27:4d:b3:37:df:e5:2f:2c:69:40:7d:45:3b:b1:1a:2b:58: d6:de:a4:d1:3b:71:5f:7a:c5:d4:e4:58:ac:d4:8a:e7:1e:b0: 79:86:90:2d:94:8e:72:18:19:a1:26:e5:ab:73:8e:dc:d1:6f: 36:42:a0:74:86:7c:32:e1:4a:35:66:ab:ed:56:02:80:a7:7b: b7:ec:d0:ff:07:e2:bb:e3:53:d4:5d:9d:ed:fd:ee:5f:c6:99: 89:07:54:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZst5wetnYo5cGLnB4GuffaHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOTM0ZWM2OTRhZjY4MTM0Yjc1MTRjMTBkY2QxMzg1N2I0 NTllMzgwHhcNMjUxMjE3MjAwMTE0WhcNMjUxMjE4MjAwMTE0WjAzMTEwLwYDVQQD EygzOTcwNjE3MzY1MDM0NjFjZjZkOTgzM2FmZDhmYzM4NzQyMTU1MzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva3vDMM4aefmQpzViKdf6xmTuLTZ ZiwMrWKaby+u4Byy1GyyN4H5BdgCaejz0FGuIeUyL5WiHkrP1vPUXolxOnK4Zd0f MA7qqErYmNcOQ63kJGR+zLHvB0opCAJ06TVSMTIbXnZh8VERoqO7ctk4WOxro1NJ baa5DNEp55FujM3IWxoCwFR203AjUYl2tifzljKK+PwGvsNyP84shNuIdyWVJQLu iSGHx2ERj/Z9Vy9xD64uIgRLDyyMNaqw9IPYRYKk8YEUtWccDa9av9lzrc6ukQVx aaD8lGyBMuZMCL7++SFGfPkTSJDR+SzBxW2a0VxI+VWSATj25DQiXHDAAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlwYXNlA0Yc9tmDOv2Pw4dCFVOTMB8GA1UdIwQY MBaAFK+TTsaUr2gTS3UUwQ3NE4V7RZ44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjVOT3hwU3ZhQk5MZFJUQkRjMFRoWHRGbmpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85OWJlODAtMTUyYy00YjY1LThiMzIt MDcxOGFhOGRkOWE3LzEvcjVOT3hwU3ZhQk5MZFJUQkRjMFRoWHRGbmpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85OWJlODAtMTUyYy00YjY1LThiMzItMDcxOGFhOGRkOWE3 LzEvcjVOT3hwU3ZhQk5MZFJUQkRjMFRoWHRGbmpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtd2PjGqu fNdlpdBqEdm8AZA5+Oxbi18HIFIAKRJjeKVVhQE7iqeTLf2lPOclBmdGhQJSwauE wS2QKnNFeJ18MTBfd6/Is5UXQjLVG64xX90kMj5x4BWm6bYOYrcQkOo4KaA0JKfB 5VaiZdGl18tDPURsDiqIX88+LUcdlQlh8+/yOYZeRyJY8moeQ1jC67OfhI9ktrqt BpLo0y5x0PFwLMyTxidNszff5S8saUB9RTuxGitY1t6k0TtxX3rF1ORYrNSK5x6w eYaQLZSOchgZoSblq3OO3NFvNkKgdIZ8MuFKNWar7VYCgKd7t+zQ/wfiu+NT1F2d 7f3uX8aZiQdUUA== -----END CERTIFICATE-----Generated at Thu Dec 18 00:24:20 2025 by rpki-client