This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft File: B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft (raw, json) Hash identifier: o41BDWD12Q+Q+ei8Ci1wR7ALMhE4JgNt6euRL/D6RRQ= Subject key identifier: 58:7F:15:69:73:3D:55:80:6F:EF:96:E2:A2:C3:C1:62:C9:37:4A:D8 Authority key identifier: 07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38 Certificate issuer: /CN=079889d9de4f07014beb2c0a312cd73652a3fc38 Certificate serial: 019B243E9EE6C6A3C1B1CAF7CD0C701E7167 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft Manifest number: 177D Signing time: Mon 15 Dec 2025 23:00:42 +0000 Manifest this update: Mon 15 Dec 2025 23:00:42 +0000 Manifest next update: Tue 16 Dec 2025 23:00:42 +0000 Files and hashes: 1: B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl (hash: cfeHsdn7rrCh751TQPZ2n+RoPRnv1C0d/XUsuxxA+gc=) 2: NU7LpjX_c-YRDnvo18YVHXBujbY.roa (hash: odut5lYelTDd0ROdgEZa5uhbKyC1bMMR57mT+YqgUgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:9e:e6:c6:a3:c1:b1:ca:f7:cd:0c:70:1e:71:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=079889d9de4f07014beb2c0a312cd73652a3fc38 Validity Not Before: Dec 15 23:00:42 2025 GMT Not After : Dec 16 23:00:42 2025 GMT Subject: CN=587f1569733d55806fef96e2a2c3c162c9374ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:15:9d:73:f4:aa:6f:fe:98:f7:44:63:bf:55: de:f6:b4:54:07:02:1a:ce:67:eb:17:ca:bb:e6:e3: 31:6c:dc:34:de:d2:e3:87:f1:39:2d:52:8e:0b:01: f7:88:5e:c2:e8:03:b8:2a:09:5f:2a:b5:ff:b2:b0: 4a:11:ae:ab:87:b0:db:08:41:8c:32:e7:d2:bf:f5: cd:5d:2b:23:5f:9b:57:c4:88:c4:4e:a1:e3:08:76: bd:3c:78:54:1b:a0:a7:42:78:f3:66:7d:a5:fe:4c: db:15:4e:17:e8:1e:79:7d:14:18:99:38:06:4d:73: 66:58:68:d2:81:f1:bf:bb:33:8b:0d:ba:73:a8:f7: e9:7e:6c:8a:36:58:b7:2b:84:0f:0e:2c:f5:0b:35: 5d:f5:a5:50:85:c0:fc:f9:12:49:df:55:bc:bf:a3: 7a:61:b2:e0:60:0b:e6:1e:00:b8:e0:39:e3:63:f1: 83:f2:58:db:65:34:20:e0:cb:1c:4e:2a:7b:5a:de: 98:b0:70:0f:45:37:bd:f7:f1:48:b9:c2:cc:a3:29: f4:f0:3c:23:8f:8d:c3:b4:df:a7:50:0a:08:6f:3e: f3:03:f0:50:e7:05:85:5b:0e:44:3a:ed:1e:ef:76: 93:9e:5a:e7:f7:26:01:20:e1:b3:18:87:1e:e1:87: de:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7F:15:69:73:3D:55:80:6F:EF:96:E2:A2:C3:C1:62:C9:37:4A:D8 X509v3 Authority Key Identifier: keyid:07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:a6:d5:c8:7d:a9:f2:d2:f1:d1:c4:54:f8:aa:f5:19:58:b8: 38:1f:06:17:23:97:bd:0c:c5:03:6e:8f:01:f4:72:99:8d:cc: 81:be:7b:78:d0:d6:b0:9b:10:37:d4:5e:41:3b:0e:95:d7:05: e0:6c:cc:c4:a4:04:66:7e:3e:ec:65:4a:8f:0c:15:d0:3a:0c: 13:bf:63:40:48:63:ad:b3:95:86:3f:f1:c7:ed:66:17:7c:4b: 13:e5:4b:a0:f8:b2:47:ee:54:ee:87:95:7b:86:57:22:c1:99: a8:fe:78:84:81:16:ee:9d:0a:d5:91:ea:d5:6b:c9:0d:87:22: dd:ed:04:61:95:62:a1:57:00:4d:6a:f1:46:ff:f2:26:01:da: c4:c6:17:b0:84:ea:a3:bb:52:b9:9b:4d:0e:d2:6b:9d:16:57: 22:e1:77:47:00:63:bb:24:fc:a3:4e:61:c0:a6:cd:89:02:a4: 78:c7:a3:46:5e:ca:ba:df:e6:65:63:cb:41:51:25:34:65:1f: e6:df:23:10:9f:f1:98:8c:dc:83:40:b6:41:5e:98:1d:d1:3c: bf:46:2b:d6:69:f7:33:ba:de:34:87:78:54:76:6e:21:a0:72: 93:44:b0:98:0b:a5:e0:ab:3a:47:80:e3:5c:5a:10:35:0d:31: dc:54:dd:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPp7mxqPBscr3zQxwHnFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OTg4OWQ5ZGU0ZjA3MDE0YmViMmMwYTMxMmNkNzM2NTJh M2ZjMzgwHhcNMjUxMjE1MjMwMDQyWhcNMjUxMjE2MjMwMDQyWjAzMTEwLwYDVQQD Eyg1ODdmMTU2OTczM2Q1NTgwNmZlZjk2ZTJhMmMzYzE2MmM5Mzc0YWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BWdc/Sqb/6Y90Rjv1Xe9rRUBwIa zmfrF8q75uMxbNw03tLjh/E5LVKOCwH3iF7C6AO4KglfKrX/srBKEa6rh7DbCEGM MufSv/XNXSsjX5tXxIjETqHjCHa9PHhUG6CnQnjzZn2l/kzbFU4X6B55fRQYmTgG TXNmWGjSgfG/uzOLDbpzqPfpfmyKNli3K4QPDiz1CzVd9aVQhcD8+RJJ31W8v6N6 YbLgYAvmHgC44DnjY/GD8ljbZTQg4MscTip7Wt6YsHAPRTe99/FIucLMoyn08Dwj j43DtN+nUAoIbz7zA/BQ5wWFWw5EOu0e73aTnlrn9yYBIOGzGIce4Yfe2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFh/FWlzPVWAb++W4qLDwWLJN0rYMB8GA1UdIwQY MBaAFAeYidneTwcBS+ssCjEs1zZSo/w4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjVpSjJkNVBCd0ZMNnl3S01TelhObEtqX0RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9kZDM5NDAtZmZkNi00YjY5LTlmMDEt ZmQ4ZDI1YTI2M2QyLzEvQjVpSjJkNVBCd0ZMNnl3S01TelhObEtqX0RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9kZDM5NDAtZmZkNi00YjY5LTlmMDEtZmQ4ZDI1YTI2M2Qy LzEvQjVpSjJkNVBCd0ZMNnl3S01TelhObEtqX0RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6bVyH2p 8tLx0cRU+Kr1GVi4OB8GFyOXvQzFA26PAfRymY3Mgb57eNDWsJsQN9ReQTsOldcF 4GzMxKQEZn4+7GVKjwwV0DoME79jQEhjrbOVhj/xx+1mF3xLE+VLoPiyR+5U7oeV e4ZXIsGZqP54hIEW7p0K1ZHq1WvJDYci3e0EYZVioVcATWrxRv/yJgHaxMYXsITq o7tSuZtNDtJrnRZXIuF3RwBjuyT8o05hwKbNiQKkeMejRl7Kut/mZWPLQVElNGUf 5t8jEJ/xmIzcg0C2QV6YHdE8v0Yr1mn3M7reNId4VHZuIaByk0SwmAul4Ks6R4Dj XFoQNQ0x3FTd6w== -----END CERTIFICATE-----Generated at Tue Dec 16 07:04:20 2025 by rpki-client