This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft File: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft (raw, json) Hash identifier: GMsYoKQwb+TvDeVCtG8r7v4VLmeLRtlAxrELLNiYXDM= Subject key identifier: B7:E5:30:03:C7:03:93:C9:24:53:FC:73:D4:2A:3E:F4:30:53:1B:F2 Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94 Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94 Certificate serial: 019AF164071ACD69CD52613094EF99AE8FB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft Manifest number: 11F1 Signing time: Sat 06 Dec 2025 02:00:55 +0000 Manifest this update: Sat 06 Dec 2025 02:00:55 +0000 Manifest next update: Sun 07 Dec 2025 02:00:55 +0000 Files and hashes: 1: 5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl (hash: H2K8OqkPcS0T2zJ69baBdqWEUrH+/NDvtlm1ZfF2oDI=) 2: QjltdHgB4W_2eDHH-42Rsn7haU4.roa (hash: GyEMXz3VqmF7vL4u7u/PEu1jMNaIBLH5FqjmQMneOuk=) 3: ik_n3d34B4WKWLhhwqx1Hs4Gq10.roa (hash: SF4FNJqkU5gIwE/u+5gu4fhisTugNMrqP4zHCgZbpN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:07:1a:cd:69:cd:52:61:30:94:ef:99:ae:8f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94 Validity Not Before: Dec 6 02:00:55 2025 GMT Not After : Dec 7 02:00:55 2025 GMT Subject: CN=b7e53003c70393c92453fc73d42a3ef430531bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e1:01:ab:02:fb:d6:3a:b3:cb:aa:4a:77:bf: e7:11:60:80:3b:ea:19:33:c6:95:19:6e:4e:5b:54: c7:ba:91:60:ee:c4:c2:ab:5c:35:ef:03:32:9d:15: ca:08:48:e3:8d:e3:50:7f:2a:5e:aa:92:77:0e:f7: c5:7f:40:41:9b:c8:75:f7:03:9d:3b:de:1e:02:4c: 5d:a3:b4:35:71:f1:3a:5a:49:26:68:ca:ca:7a:98: 54:61:94:5d:71:81:be:eb:73:55:cb:2f:b4:7d:6c: 11:04:96:dd:a2:49:b5:96:14:0e:44:a4:b4:6c:41: a9:4d:be:ff:b7:39:4e:2a:29:b3:37:b0:fa:84:ba: 5b:b0:4a:52:e0:eb:ce:b1:71:63:18:b9:27:43:38: d8:eb:20:6f:11:06:a9:a3:48:72:b5:0f:e5:53:0a: 89:24:2b:3c:45:2d:0c:b5:e6:69:c6:a3:45:2a:0b: a8:5e:b2:35:a1:e9:f4:6c:1f:00:78:ea:75:4f:37: 75:77:fc:7c:59:5a:5d:a5:e6:90:23:c0:cc:7d:46: 63:5b:cb:93:cf:81:ee:05:ef:3d:aa:f6:0e:c4:e8: c5:c1:16:4b:71:6b:dc:96:50:cd:37:aa:cd:45:e0: 30:ed:b6:e8:e7:fd:1c:aa:bf:22:d8:2c:8e:e6:03: d4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E5:30:03:C7:03:93:C9:24:53:FC:73:D4:2A:3E:F4:30:53:1B:F2 X509v3 Authority Key Identifier: keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:98:87:6b:55:2d:29:91:8e:23:06:2c:fe:3a:c7:06:c6:98: c4:5d:38:73:e0:9b:dc:c2:f2:53:57:48:af:f3:a4:06:4b:a1: a9:f3:6c:02:69:8c:b9:e4:55:da:97:1c:c1:51:3a:29:2c:55: 31:ab:3f:88:16:69:16:fc:9c:1e:8c:97:a7:00:7c:8e:39:bc: 82:b0:d1:0e:54:ac:9d:a2:38:37:14:5d:b8:c0:ee:56:09:58: 08:b7:73:3b:a4:2c:17:9b:58:0f:a1:c4:ec:3e:97:7c:3a:b7: df:ce:7f:95:9d:34:77:a4:35:dc:a2:65:cb:f8:e9:49:b4:5b: 0a:7c:bd:43:86:a1:15:4a:0e:c7:3a:78:83:99:93:d1:ff:f5: f0:bd:ef:9f:7f:c6:05:8d:eb:b5:ad:4f:77:e3:f4:40:15:58: bf:e4:59:a4:cc:62:6c:44:dc:40:9b:be:b3:62:1f:c4:8d:af: 10:4e:8a:b0:aa:20:86:c1:1e:eb:86:f2:64:10:f9:42:d9:05: f3:cd:e6:ef:d7:6b:c9:32:5c:7c:5b:b2:d3:a9:7e:1a:ba:5e: 7b:29:b5:5f:78:ee:fa:8f:45:9e:dd:56:9a:8e:c1:6b:c1:b8: 4e:83:e0:20:c5:98:f3:4d:12:3d:d9:1f:be:46:39:75:ab:80: 16:e5:9e:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAcazWnNUmEwlO+Zro+yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MzM0YWQ5YjNmYzUyMTAzMGJlOTlhNTE1NzIxMWI2NjMy MTZjOTQwHhcNMjUxMjA2MDIwMDU1WhcNMjUxMjA3MDIwMDU1WjAzMTEwLwYDVQQD EyhiN2U1MzAwM2M3MDM5M2M5MjQ1M2ZjNzNkNDJhM2VmNDMwNTMxYmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+EBqwL71jqzy6pKd7/nEWCAO+oZ M8aVGW5OW1THupFg7sTCq1w17wMynRXKCEjjjeNQfypeqpJ3DvfFf0BBm8h19wOd O94eAkxdo7Q1cfE6WkkmaMrKephUYZRdcYG+63NVyy+0fWwRBJbdokm1lhQORKS0 bEGpTb7/tzlOKimzN7D6hLpbsEpS4OvOsXFjGLknQzjY6yBvEQapo0hytQ/lUwqJ JCs8RS0MteZpxqNFKguoXrI1oen0bB8AeOp1Tzd1d/x8WVpdpeaQI8DMfUZjW8uT z4HuBe89qvYOxOjFwRZLcWvcllDNN6rNReAw7bbo5/0cqr8i2CyO5gPUhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLflMAPHA5PJJFP8c9QqPvQwUxvyMB8GA1UdIwQY MBaAFOczStmz/FIQML6ZpRVyEbZjIWyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXpOSzJiUDhVaEF3dnBtbEZYSVJ0bU1oYkpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iMDRiMmUtNzNlNi00ODg3LThkZjEt MzcyMmRmMDczNjAzLzEvNXpOSzJiUDhVaEF3dnBtbEZYSVJ0bU1oYkpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iMDRiMmUtNzNlNi00ODg3LThkZjEtMzcyMmRmMDczNjAz LzEvNXpOSzJiUDhVaEF3dnBtbEZYSVJ0bU1oYkpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJiHa1Ut KZGOIwYs/jrHBsaYxF04c+Cb3MLyU1dIr/OkBkuhqfNsAmmMueRV2pccwVE6KSxV Mas/iBZpFvycHoyXpwB8jjm8grDRDlSsnaI4NxRduMDuVglYCLdzO6QsF5tYD6HE 7D6XfDq3385/lZ00d6Q13KJly/jpSbRbCny9Q4ahFUoOxzp4g5mT0f/18L3vn3/G BY3rta1Pd+P0QBVYv+RZpMxibETcQJu+s2IfxI2vEE6KsKoghsEe64byZBD5QtkF 883m79dryTJcfFuy06l+Grpeeym1X3ju+o9Fnt1Wmo7Ba8G4ToPgIMWY800SPdkf vkY5dauAFuWeWg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:17 2025 by rpki-client