This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft File: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft (raw, json) Hash identifier: Dybc3igy1DRdBXFvN06SGW5Li2D/ZQFeHfanNdGupyM= Subject key identifier: 65:54:11:A1:70:6E:13:CA:A5:A4:1D:97:C6:78:01:9A:16:F9:3F:D6 Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e Certificate serial: 019AF465A372C634CF34F774E8A8FF5FF2FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft Manifest number: 1199 Signing time: Sat 06 Dec 2025 16:01:32 +0000 Manifest this update: Sat 06 Dec 2025 16:01:32 +0000 Manifest next update: Sun 07 Dec 2025 16:01:32 +0000 Files and hashes: 1: LsnRSFX0fJ6jFaMFhsNOF1N3rXk.roa (hash: dex17lVhtaQHFqLExDWweZahtCv1yqvsMMQYp4bDPYo=) 2: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl (hash: zT/io7kx3npIyyL20wYRARAp4kQ5gj9eEo7K4p74pXE=) 3: ZCv1BvgxYc7es0hHXD_Z0b-Ht0s.roa (hash: M90TxVMUtw28EWlnD72m1jWls/YScUzAXqX8GMvniY8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:a3:72:c6:34:cf:34:f7:74:e8:a8:ff:5f:f2:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e Validity Not Before: Dec 6 16:01:32 2025 GMT Not After : Dec 7 16:01:32 2025 GMT Subject: CN=655411a1706e13caa5a41d97c678019a16f93fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:73:05:b4:42:41:39:6d:eb:12:08:60:62:f0: bf:22:ce:0d:8d:08:5b:46:cc:b6:0f:27:37:f3:2a: 91:b0:93:ae:68:53:8a:64:f5:81:7d:0b:51:44:dd: 93:68:cc:26:09:3f:94:2c:68:7d:fe:5f:8c:75:2d: 06:24:fa:7f:20:93:27:a7:2f:ca:b3:e2:cc:c1:3f: a0:df:e2:af:2b:0e:11:e1:97:4a:61:e7:79:ff:7e: 60:38:09:11:cc:af:52:63:bc:e5:da:fe:25:23:52: 54:d2:ef:59:1b:34:8c:60:f9:a0:4a:bf:b4:cb:17: ce:9d:c3:c2:da:85:21:f7:27:73:0c:f2:2a:c0:78: 26:09:d8:de:c1:05:98:71:6b:44:3c:76:c7:59:c1: ea:bf:be:85:05:3e:32:ad:47:d0:eb:30:c3:cf:88: a2:71:f6:30:d3:17:7e:40:8d:c2:64:af:3b:0f:5a: 59:be:09:57:4e:93:10:dd:de:d8:23:6d:42:ec:32: 40:c1:b3:15:b9:21:e0:74:08:a7:c4:6b:d2:be:1d: d2:a6:27:fd:56:79:56:5d:c7:fd:29:e8:1f:40:78: 0d:0a:70:8a:13:73:22:20:21:ee:0a:ba:42:44:7f: dc:c8:0d:90:68:d0:2f:e1:2e:b1:2c:2d:94:1e:48: 2b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:54:11:A1:70:6E:13:CA:A5:A4:1D:97:C6:78:01:9A:16:F9:3F:D6 X509v3 Authority Key Identifier: keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:e6:90:34:1d:37:bc:ab:08:23:20:6a:9c:08:39:de:e9:5d: 4f:4a:e4:b7:32:0d:97:33:72:87:0b:ae:42:9d:43:0f:d5:1f: 41:20:43:5f:63:76:9a:01:fe:c2:83:c8:0c:f4:ff:37:8f:51: 86:ee:ff:5c:ff:b7:32:0b:d9:9c:4e:af:01:17:94:58:11:9a: 41:fc:59:1a:d8:d6:3e:c6:35:58:d1:cb:e2:93:7b:68:dd:a0: 44:e0:4e:d4:94:07:6c:f5:2a:d8:aa:45:50:c6:92:1c:5f:77: 5b:e6:84:c3:5c:17:f3:c3:9b:db:fd:83:6c:a3:58:b4:3d:8a: ed:9a:c1:f4:d9:b4:c8:a7:2b:8e:99:b7:53:a8:88:8b:9e:8c: 89:8e:b8:e9:04:aa:ff:e1:a8:b1:db:db:06:9f:47:6a:b1:1b: d6:07:0c:95:c8:36:8f:67:71:28:d2:3c:60:ec:7d:ac:9e:0c: a8:f9:76:cc:cf:13:4b:9d:5d:b8:d5:83:14:f2:93:b8:7d:da: 58:18:c8:4f:e6:ec:60:51:a2:ba:6b:04:43:f5:c6:c1:c3:3f: 85:14:32:b3:9e:4b:6c:dd:cb:a4:58:69:fc:7b:2c:cd:e7:5a: a4:49:62:90:88:24:15:95:e7:80:94:02:48:24:8f:e5:6b:f9: 22:71:c7:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZaNyxjTPNPd06Kj/X/L9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmOTY3MDNmMzBlMjA5OWEzZDkwMDZiZmE4NGU1YzZjNDg2 YThkMmUwHhcNMjUxMjA2MTYwMTMyWhcNMjUxMjA3MTYwMTMyWjAzMTEwLwYDVQQD Eyg2NTU0MTFhMTcwNmUxM2NhYTVhNDFkOTdjNjc4MDE5YTE2ZjkzZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXMFtEJBOW3rEghgYvC/Is4NjQhb Rsy2Dyc38yqRsJOuaFOKZPWBfQtRRN2TaMwmCT+ULGh9/l+MdS0GJPp/IJMnpy/K s+LMwT+g3+KvKw4R4ZdKYed5/35gOAkRzK9SY7zl2v4lI1JU0u9ZGzSMYPmgSr+0 yxfOncPC2oUh9ydzDPIqwHgmCdjewQWYcWtEPHbHWcHqv76FBT4yrUfQ6zDDz4ii cfYw0xd+QI3CZK87D1pZvglXTpMQ3d7YI21C7DJAwbMVuSHgdAinxGvSvh3Spif9 VnlWXcf9KegfQHgNCnCKE3MiICHuCrpCRH/cyA2QaNAv4S6xLC2UHkgrtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVUEaFwbhPKpaQdl8Z4AZoW+T/WMB8GA1UdIwQY MBaAFD+WcD8w4gmaPZAGv6hOXGxIao0uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4Nzkt OTMzN2YzNzQxNjhlLzEvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC84MzY0N2EtNDRlNS00MDQ5LWI4NzktOTMzN2YzNzQxNjhl LzEvUDVad1B6RGlDWm85a0FhX3FFNWNiRWhxalM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEeaQNB03 vKsIIyBqnAg53uldT0rktzINlzNyhwuuQp1DD9UfQSBDX2N2mgH+woPIDPT/N49R hu7/XP+3MgvZnE6vAReUWBGaQfxZGtjWPsY1WNHL4pN7aN2gROBO1JQHbPUq2KpF UMaSHF93W+aEw1wX88Ob2/2DbKNYtD2K7ZrB9Nm0yKcrjpm3U6iIi56MiY646QSq /+GosdvbBp9HarEb1gcMlcg2j2dxKNI8YOx9rJ4MqPl2zM8TS51duNWDFPKTuH3a WBjIT+bsYFGiumsEQ/XGwcM/hRQys55LbN3LpFhp/HsszedapElikIgkFZXngJQC SCSP5Wv5InHHqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:31:02 2025 by rpki-client