This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft File: F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft (raw, json) Hash identifier: aZZwhQy10cwlvUkNsexUFx4C9vgU+VaHqenwUygq/Jc= Subject key identifier: 0C:07:FF:96:9C:32:8A:04:A2:6C:55:CB:56:80:B2:E4:03:92:07:0A Authority key identifier: 17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72 Certificate issuer: /CN=1792582aa0b18d6073592f121a6e563fec424672 Certificate serial: 019AF5E620459C360366A7DD655D1BD6BF75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft Manifest number: 0802 Signing time: Sat 06 Dec 2025 23:01:30 +0000 Manifest this update: Sat 06 Dec 2025 23:01:30 +0000 Manifest next update: Sun 07 Dec 2025 23:01:30 +0000 Files and hashes: 1: F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl (hash: VGd8qYvi/AeNavEsT/bJt5eunZbXKtvKFLNVsWcgTR8=) 2: X1Hk6Afe1QrSetXg0Fl8YXsPzIQ.roa (hash: XOR8QJ4EQ0MnwLrp2DnXgyEFhnN9pPQ9poUD3LAPUHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:20:45:9c:36:03:66:a7:dd:65:5d:1b:d6:bf:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1792582aa0b18d6073592f121a6e563fec424672 Validity Not Before: Dec 6 23:01:30 2025 GMT Not After : Dec 7 23:01:30 2025 GMT Subject: CN=0c07ff969c328a04a26c55cb5680b2e40392070a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d5:8e:34:fd:e1:50:cf:c6:e3:3a:9e:dd:70: ce:ca:05:b9:d4:5a:a7:f1:17:19:27:09:17:3e:d3: 04:fd:3c:ec:e5:f6:48:82:6c:a8:74:4e:df:0a:70: 88:38:3e:76:f2:cc:cc:c9:34:9c:44:af:75:47:df: 37:0b:00:5d:96:0c:e1:26:83:0c:2b:8d:ca:a3:f4: 21:b0:7e:7c:15:1c:5f:9e:ed:8f:96:1d:f3:62:36: 2f:c1:d1:21:6d:ac:99:a4:02:10:c5:03:4d:57:38: 9f:5a:b1:83:57:a9:4f:98:ce:4c:2d:66:5d:6a:32: 14:90:87:d4:8f:bd:bd:07:f6:d1:7a:5a:38:e4:41: 23:a6:43:fb:75:81:19:39:c0:e8:c5:00:4b:ee:bf: 19:18:b1:eb:19:9d:ef:6b:51:0b:84:38:59:de:73: c4:64:f6:17:38:70:c4:64:d2:70:a2:ba:34:bb:08: 56:d1:f7:82:d3:8b:af:f7:ef:ec:4b:b2:fa:df:80: 1a:40:b1:71:b8:83:9a:e6:6d:8f:a7:3a:74:50:33: 84:74:95:4b:fb:79:c0:1a:9a:10:81:3e:a9:48:e2: 1d:9f:e7:5f:39:6d:c2:05:c3:ee:6a:7b:ac:88:48: db:7d:9a:60:cc:8d:ea:3e:3e:66:71:62:ae:2c:9d: cf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:07:FF:96:9C:32:8A:04:A2:6C:55:CB:56:80:B2:E4:03:92:07:0A X509v3 Authority Key Identifier: keyid:17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:03:c4:86:0c:f9:43:18:58:35:7b:dd:b4:e9:8f:e2:6f:12: ef:c6:39:4e:b0:f1:08:8d:89:8a:4a:99:ba:fb:87:e2:fb:69: 85:9c:78:12:ac:88:7c:bf:62:2a:8d:d3:b4:00:9e:dc:eb:19: 14:b7:b6:88:4e:f6:95:d3:b7:f7:97:d8:e5:33:e2:c2:bc:d0: 64:46:05:1e:58:a8:e3:bf:ec:0a:b3:b2:af:19:48:bc:4f:84: 89:51:da:c9:69:8b:17:b4:50:eb:81:ac:d7:1a:f6:f8:0f:c6: 8c:a4:b6:34:9f:2c:00:39:2f:40:52:fd:8c:c1:67:91:44:1b: 2d:4d:91:a3:ef:bf:e1:64:9c:43:25:4f:14:69:70:50:92:0b: 5d:ba:4f:5c:30:2f:90:d3:fa:e8:d9:73:b9:87:fe:fc:ac:9e: 60:c9:65:45:be:e8:43:e9:a8:6f:96:07:3c:41:d2:c2:4e:d2: a8:98:b7:89:c3:dc:eb:81:3e:e6:d2:0b:ab:73:73:c5:fd:02: fd:1f:ce:ab:ec:0d:0f:04:eb:88:f9:59:b4:b3:ad:03:5f:b8: 59:d4:07:1d:05:ff:bb:3f:cd:4f:f2:ff:fe:52:6f:ed:17:2d: 50:13:1f:e0:97:80:de:af:8e:33:01:73:93:b1:62:4b:0d:48: 78:fc:13:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15iBFnDYDZqfdZV0b1r91MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTI1ODJhYTBiMThkNjA3MzU5MmYxMjFhNmU1NjNmZWM0 MjQ2NzIwHhcNMjUxMjA2MjMwMTMwWhcNMjUxMjA3MjMwMTMwWjAzMTEwLwYDVQQD EygwYzA3ZmY5NjljMzI4YTA0YTI2YzU1Y2I1NjgwYjJlNDAzOTIwNzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNWONP3hUM/G4zqe3XDOygW51Fqn 8RcZJwkXPtME/Tzs5fZIgmyodE7fCnCIOD528szMyTScRK91R983CwBdlgzhJoMM K43Ko/QhsH58FRxfnu2Plh3zYjYvwdEhbayZpAIQxQNNVzifWrGDV6lPmM5MLWZd ajIUkIfUj729B/bRelo45EEjpkP7dYEZOcDoxQBL7r8ZGLHrGZ3va1ELhDhZ3nPE ZPYXOHDEZNJworo0uwhW0feC04uv9+/sS7L634AaQLFxuIOa5m2Ppzp0UDOEdJVL +3nAGpoQgT6pSOIdn+dfOW3CBcPuanusiEjbfZpgzI3qPj5mcWKuLJ3PXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwH/5acMooEomxVy1aAsuQDkgcKMB8GA1UdIwQY MBaAFBeSWCqgsY1gc1kvEhpuVj/sQkZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVKWUtxQ3hqV0J6V1M4U0dtNVdQLXhDUm5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yZDM2MDctYmU1OC00YTA1LTlkNjgt ZTg0ZjNiNDkyN2FkLzEvRjVKWUtxQ3hqV0J6V1M4U0dtNVdQLXhDUm5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8yZDM2MDctYmU1OC00YTA1LTlkNjgtZTg0ZjNiNDkyN2Fk LzEvRjVKWUtxQ3hqV0J6V1M4U0dtNVdQLXhDUm5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApwPEhgz5 QxhYNXvdtOmP4m8S78Y5TrDxCI2JikqZuvuH4vtphZx4EqyIfL9iKo3TtACe3OsZ FLe2iE72ldO395fY5TPiwrzQZEYFHlio47/sCrOyrxlIvE+EiVHayWmLF7RQ64Gs 1xr2+A/GjKS2NJ8sADkvQFL9jMFnkUQbLU2Ro++/4WScQyVPFGlwUJILXbpPXDAv kNP66NlzuYf+/KyeYMllRb7oQ+mob5YHPEHSwk7SqJi3icPc64E+5tILq3Nzxf0C /R/Oq+wNDwTriPlZtLOtA1+4WdQHHQX/uz/NT/L//lJv7RctUBMf4JeA3q+OMwFz k7FiSw1IePwTig== -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:06 2025 by rpki-client