This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft File: B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft (raw, json) Hash identifier: 0XKmwy1nKtyDomAxXJMPyUMIvYPhDweRD0N8A/N8bmo= Subject key identifier: 73:EE:CB:74:71:6C:74:7D:BE:41:EC:63:2D:77:1A:83:A8:82:34:5F Authority key identifier: 07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38 Certificate issuer: /CN=079889d9de4f07014beb2c0a312cd73652a3fc38 Certificate serial: 019AF2094808433F813FC79A676E00782625 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:01:25 +0000 Manifest this update: Sat 06 Dec 2025 05:01:25 +0000 Manifest next update: Sun 07 Dec 2025 05:01:25 +0000 Files and hashes: 1: B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl (hash: m5bSpHE7Jxyu0a+K9CCrl4zUhcETK4mdSFP2G6PZ4xE=) 2: NU7LpjX_c-YRDnvo18YVHXBujbY.roa (hash: odut5lYelTDd0ROdgEZa5uhbKyC1bMMR57mT+YqgUgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:48:08:43:3f:81:3f:c7:9a:67:6e:00:78:26:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=079889d9de4f07014beb2c0a312cd73652a3fc38 Validity Not Before: Dec 6 05:01:25 2025 GMT Not After : Dec 7 05:01:25 2025 GMT Subject: CN=73eecb74716c747dbe41ec632d771a83a882345f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:fb:17:81:9f:02:64:91:e6:db:3d:36:11:a5: b4:20:47:b8:c3:0b:8e:9f:90:b2:f0:10:12:f6:5f: bf:70:b9:75:6c:29:f6:1c:eb:bd:56:08:87:42:4d: b5:97:af:d6:9c:42:ef:dd:8c:8e:29:1e:57:48:e4: 1e:05:11:fe:3a:e5:46:7c:6c:c1:64:65:1a:9a:a2: c2:c5:bf:8f:fd:41:51:25:4c:ce:91:63:28:e7:f9: fd:04:3f:63:43:00:ef:16:18:5e:b0:46:ce:c0:7d: 61:03:0a:ec:a1:2f:c8:ab:67:22:f5:40:78:76:45: 2d:02:8f:f7:59:df:f6:8e:5a:4a:f0:64:69:44:93: 42:f5:46:26:88:5b:15:c7:36:92:4d:e8:67:41:43: a7:d2:d6:ac:b8:d5:4d:35:38:9b:fe:ec:a7:1d:bd: 07:4d:31:5c:d0:d0:28:f7:b1:c7:5e:6b:29:3f:6f: 56:92:90:8c:5a:34:da:26:81:8c:1a:14:b8:3b:78: 17:98:89:b5:7f:20:57:32:5c:a4:c7:0d:95:8f:51: 6b:3d:e7:96:64:10:7b:21:d5:8d:ef:74:09:d4:75: c3:4b:4a:ee:70:fb:b9:a4:65:29:ad:44:f8:23:85: 20:b3:98:12:bf:c0:ca:b7:03:d9:49:bc:5d:9f:17: 4a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EE:CB:74:71:6C:74:7D:BE:41:EC:63:2D:77:1A:83:A8:82:34:5F X509v3 Authority Key Identifier: keyid:07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:cc:ef:51:64:7a:55:6c:c6:1a:38:e2:d1:30:f2:88:93:e5: ca:84:ce:f8:41:2c:f7:24:c3:e0:68:43:4b:c4:0b:0e:4e:ea: 98:f4:2f:d8:22:17:f8:dd:e4:d5:91:f7:cb:e6:1a:5a:6f:05: b3:51:c6:69:da:32:9e:55:08:0e:2e:8b:31:66:12:c5:c7:25: d9:ca:7f:8a:59:29:6b:5d:47:7e:bf:bc:7b:61:c4:41:13:ea: 99:47:d9:87:64:49:4d:66:0c:51:97:fa:d5:ce:a2:5b:a2:54: 96:eb:f4:13:f9:5c:a5:58:3c:51:f7:f8:8b:1a:aa:40:0d:1c: dc:30:ec:f7:9e:95:f1:8e:86:b3:21:ca:37:8d:de:a9:30:e3: 7a:c2:06:84:a0:aa:6d:14:72:87:72:5e:fc:d3:05:e7:93:f4: 16:b6:50:02:4c:01:d9:fd:9c:89:ac:64:b7:8b:b3:d6:14:a6: 5b:b5:6d:7f:e5:35:e8:b5:e5:04:a0:85:02:f1:db:45:33:95: 28:87:b2:d0:6f:e2:2a:c9:be:52:ab:e6:af:4d:12:4b:0a:b7: ea:06:c2:f9:13:af:72:69:73:7f:5b:5e:b6:38:d4:56:e5:c7: 23:8c:5c:77:12:b2:a5:da:22:08:4a:d1:e1:8b:00:6d:82:b8: 5c:13:d0:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUgIQz+BP8eaZ24AeCYlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OTg4OWQ5ZGU0ZjA3MDE0YmViMmMwYTMxMmNkNzM2NTJh M2ZjMzgwHhcNMjUxMjA2MDUwMTI1WhcNMjUxMjA3MDUwMTI1WjAzMTEwLwYDVQQD Eyg3M2VlY2I3NDcxNmM3NDdkYmU0MWVjNjMyZDc3MWE4M2E4ODIzNDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PsXgZ8CZJHm2z02EaW0IEe4wwuO n5Cy8BAS9l+/cLl1bCn2HOu9VgiHQk21l6/WnELv3YyOKR5XSOQeBRH+OuVGfGzB ZGUamqLCxb+P/UFRJUzOkWMo5/n9BD9jQwDvFhhesEbOwH1hAwrsoS/Iq2ci9UB4 dkUtAo/3Wd/2jlpK8GRpRJNC9UYmiFsVxzaSTehnQUOn0tasuNVNNTib/uynHb0H TTFc0NAo97HHXmspP29WkpCMWjTaJoGMGhS4O3gXmIm1fyBXMlykxw2Vj1FrPeeW ZBB7IdWN73QJ1HXDS0rucPu5pGUprUT4I4Ugs5gSv8DKtwPZSbxdnxdKiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPuy3RxbHR9vkHsYy13GoOogjRfMB8GA1UdIwQY MBaAFAeYidneTwcBS+ssCjEs1zZSo/w4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjVpSjJkNVBCd0ZMNnl3S01TelhObEtqX0RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9kZDM5NDAtZmZkNi00YjY5LTlmMDEt ZmQ4ZDI1YTI2M2QyLzEvQjVpSjJkNVBCd0ZMNnl3S01TelhObEtqX0RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9kZDM5NDAtZmZkNi00YjY5LTlmMDEtZmQ4ZDI1YTI2M2Qy LzEvQjVpSjJkNVBCd0ZMNnl3S01TelhObEtqX0RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVczvUWR6 VWzGGjji0TDyiJPlyoTO+EEs9yTD4GhDS8QLDk7qmPQv2CIX+N3k1ZH3y+YaWm8F s1HGadoynlUIDi6LMWYSxccl2cp/ilkpa11Hfr+8e2HEQRPqmUfZh2RJTWYMUZf6 1c6iW6JUluv0E/lcpVg8Uff4ixqqQA0c3DDs956V8Y6GsyHKN43eqTDjesIGhKCq bRRyh3Je/NMF55P0FrZQAkwB2f2ciaxkt4uz1hSmW7Vtf+U16LXlBKCFAvHbRTOV KIey0G/iKsm+Uqvmr00SSwq36gbC+ROvcmlzf1tetjjUVuXHI4xcdxKypdoiCErR 4YsAbYK4XBPQoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:19 2025 by rpki-client