This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft File: u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft (raw, json) Hash identifier: 8fsenXxnCzEyGAYK/jvWLIgK5HBTkDdGq17zJ1XE4rs= Subject key identifier: F4:37:EA:38:91:DE:37:01:68:D0:B2:41:AD:36:F2:88:CD:DD:6C:F9 Authority key identifier: BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2 Certificate issuer: /CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2 Certificate serial: 019AF42E2E82F5E1413088319CDCB8E3191C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft Manifest number: 053D Signing time: Sat 06 Dec 2025 15:00:58 +0000 Manifest this update: Sat 06 Dec 2025 15:00:58 +0000 Manifest next update: Sun 07 Dec 2025 15:00:58 +0000 Files and hashes: 1: 1-d2k_vU-BkEDRcLdH-TIekg9VxQ.roa (hash: BNmjLGfRynwPkim2jPmJ7ZmYJ2M4K6NMjQ6A9ZIWsHE=) 2: u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl (hash: MkVf441q5Nw6GKM8OPkU4A8cps/pOrT0eYPP9ylO0CE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:2e:82:f5:e1:41:30:88:31:9c:dc:b8:e3:19:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2 Validity Not Before: Dec 6 15:00:58 2025 GMT Not After : Dec 7 15:00:58 2025 GMT Subject: CN=f437ea3891de370168d0b241ad36f288cddd6cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:53:93:dd:7b:0f:d2:f1:e2:1a:3d:89:05:91: 8a:18:25:1c:57:63:7b:1b:dc:97:97:16:09:f3:9d: 5e:60:9b:c1:7c:17:5e:9c:5f:80:53:1b:bd:5b:18: f7:d0:57:22:a8:21:17:0a:d6:63:1e:6d:3b:76:7d: 13:90:e6:63:0b:0f:2c:03:4d:c9:ca:9e:fa:54:a7: 35:f4:0e:50:1a:91:bd:d7:54:06:d7:aa:d6:31:9d: 31:9b:e8:64:d4:fa:09:24:6a:45:58:7f:00:8f:f4: 0b:74:06:2a:7f:d0:76:6d:9e:a6:fe:ca:8a:ab:15: 47:02:7a:84:b8:82:9f:ca:77:77:4d:59:7b:dd:3f: 13:49:97:22:52:47:44:68:4a:c1:d9:ff:37:fb:ed: f0:9e:40:35:9e:87:75:a1:01:55:a4:24:50:7b:af: eb:a9:45:c1:14:1d:69:da:b6:c3:e4:d8:ff:80:43: e1:de:1c:f0:7b:76:29:bb:ca:12:14:3d:2f:7c:77: 33:a2:57:7a:81:16:e7:0b:57:57:cf:fe:17:e3:92: 4d:6e:19:b7:1e:82:7f:5b:94:cb:9e:d0:37:fa:4c: cc:f3:9b:d9:44:e8:4b:2c:fd:18:30:b1:2c:ed:00: c8:a1:05:fc:0d:e5:95:33:3f:88:41:a2:20:a4:31: 44:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:37:EA:38:91:DE:37:01:68:D0:B2:41:AD:36:F2:88:CD:DD:6C:F9 X509v3 Authority Key Identifier: keyid:BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d0:61:0c:8e:e7:55:c1:f7:c5:d9:bf:cd:cc:46:1c:96:2c: a3:fd:3f:03:9a:31:28:04:96:b0:96:02:05:7f:95:0e:a6:3b: 65:b0:3e:2f:6f:60:d6:75:20:cb:1c:16:f9:fb:7a:be:30:17: 55:b3:f1:ff:e4:4b:90:e2:c7:fc:4f:df:04:d8:93:87:ad:39: b7:de:12:4e:18:b6:8c:a9:40:3b:33:a4:e3:b8:d3:cc:9d:7a: 56:3f:3a:2d:b8:86:0b:d8:23:e0:af:ad:34:0e:23:16:22:e5: 3d:7f:8a:cd:a2:51:a3:82:01:81:76:4e:86:40:57:f4:8c:a2: 85:6f:da:95:8b:33:11:11:9e:de:46:b5:28:5e:56:c6:d7:19: 9f:3a:25:ef:33:2a:7e:9f:ca:48:00:a1:48:f6:7f:6b:f6:3e: 74:cf:31:69:e9:c3:ca:71:d5:57:47:2a:da:e6:d8:6b:08:ef: 34:af:7f:41:98:1a:6d:26:a1:f9:99:9e:24:c6:68:ce:6b:7e: ad:2b:01:b1:0f:25:85:15:ee:bc:d9:63:1e:dc:8c:6f:ad:87: 70:8e:eb:01:21:9b:8d:35:d7:a3:43:cf:a0:7e:7c:31:ac:dd: 01:fe:c5:1c:5f:f2:7b:a2:77:59:29:8b:de:39:89:c6:e4:47: a7:b6:9d:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Li6C9eFBMIgxnNy44xkcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOTM2OTMzZGMzYWEwM2IzZGFhMDZlNWIzODczZjM1YmRh YjU1ZDIwHhcNMjUxMjA2MTUwMDU4WhcNMjUxMjA3MTUwMDU4WjAzMTEwLwYDVQQD EyhmNDM3ZWEzODkxZGUzNzAxNjhkMGIyNDFhZDM2ZjI4OGNkZGQ2Y2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlOT3XsP0vHiGj2JBZGKGCUcV2N7 G9yXlxYJ851eYJvBfBdenF+AUxu9Wxj30FciqCEXCtZjHm07dn0TkOZjCw8sA03J yp76VKc19A5QGpG911QG16rWMZ0xm+hk1PoJJGpFWH8Aj/QLdAYqf9B2bZ6m/sqK qxVHAnqEuIKfynd3TVl73T8TSZciUkdEaErB2f83++3wnkA1nod1oQFVpCRQe6/r qUXBFB1p2rbD5Nj/gEPh3hzwe3Ypu8oSFD0vfHczold6gRbnC1dXz/4X45JNbhm3 HoJ/W5TLntA3+kzM85vZROhLLP0YMLEs7QDIoQX8DeWVMz+IQaIgpDFEpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQ36jiR3jcBaNCyQa028ojN3Wz5MB8GA1UdIwQY MBaAFLuTaTPcOqA7PaoG5bOHPzW9q1XSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTVOcE05dzZvRHM5cWdibHM0Y19OYjJyVmRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wY2E1OWItMzJkMS00NmEyLWJlNDgt MGMzM2UxMjY0ZDdmLzEvdTVOcE05dzZvRHM5cWdibHM0Y19OYjJyVmRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8wY2E1OWItMzJkMS00NmEyLWJlNDgtMGMzM2UxMjY0ZDdm LzEvdTVOcE05dzZvRHM5cWdibHM0Y19OYjJyVmRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNBhDI7n VcH3xdm/zcxGHJYso/0/A5oxKASWsJYCBX+VDqY7ZbA+L29g1nUgyxwW+ft6vjAX VbPx/+RLkOLH/E/fBNiTh605t94SThi2jKlAOzOk47jTzJ16Vj86LbiGC9gj4K+t NA4jFiLlPX+KzaJRo4IBgXZOhkBX9IyihW/alYszERGe3ka1KF5WxtcZnzol7zMq fp/KSAChSPZ/a/Y+dM8xaenDynHVV0cq2ubYawjvNK9/QZgabSah+ZmeJMZozmt+ rSsBsQ8lhRXuvNljHtyMb62HcI7rASGbjTXXo0PPoH58MazdAf7FHF/ye6J3WSmL 3jmJxuRHp7adbA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:22:10 2025 by rpki-client