This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft File: F5meIRkUpo24Pq8_f9OExT50dFU.mft (raw, json) Hash identifier: AUCvphyT5ciAqN/B7PKjc8ZnefYH/Vz4kBXUvpy41f0= Subject key identifier: 56:C2:08:F4:A0:97:61:73:FA:51:D1:AA:DC:85:AF:AD:FB:A2:49:9A Authority key identifier: 17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55 Certificate issuer: /CN=17999e211914a68db83eaf3f7fd384c53e747455 Certificate serial: 019AF208B4298F2B012A28C05BBA33B3020E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft Manifest number: 15AA Signing time: Sat 06 Dec 2025 05:00:47 +0000 Manifest this update: Sat 06 Dec 2025 05:00:47 +0000 Manifest next update: Sun 07 Dec 2025 05:00:47 +0000 Files and hashes: 1: F5meIRkUpo24Pq8_f9OExT50dFU.crl (hash: jMg2CDMr5hMh2x7pWlqEtx9nXHADsPEDsHXa0kQcmH0=) 2: jdjC0ww4NA_4Jmou2NIqk7PauVQ.roa (hash: DpdKiPWViVyeUlQa6RYjsV7wbTabm/grnxVTUMHIZOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.crl rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b4:29:8f:2b:01:2a:28:c0:5b:ba:33:b3:02:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17999e211914a68db83eaf3f7fd384c53e747455 Validity Not Before: Dec 6 05:00:47 2025 GMT Not After : Dec 7 05:00:47 2025 GMT Subject: CN=56c208f4a0976173fa51d1aadc85afadfba2499a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b1:f6:38:35:ed:dd:c2:9b:4f:bd:01:cb:a8: d2:b5:09:7f:a3:09:20:0c:8d:af:66:75:55:1b:25: 5e:7f:70:ee:12:86:61:89:2d:5b:ff:f6:41:4d:23: 1b:d9:ef:3f:6b:7a:72:94:a8:f1:4a:42:09:86:f1: 83:55:88:15:2c:42:5d:c9:74:58:09:03:c2:ef:a8: 17:91:86:be:d9:cd:c3:3d:de:c7:75:fe:da:ad:b6: fb:43:a8:dc:5d:8e:e6:a6:3f:67:85:81:d1:54:b7: 57:dc:cf:2c:1d:fc:4a:62:3b:34:2c:67:0a:ce:7e: a5:31:9c:78:77:d9:d1:78:dd:fe:91:85:dc:1b:f2: 25:d5:7d:f8:18:f0:01:c3:ae:68:da:28:0e:4a:58: 1e:38:2f:9f:c1:bb:a9:cb:47:31:1a:77:b7:d8:75: 3a:25:60:6f:16:86:91:ac:82:cc:86:f9:70:68:14: 8c:99:58:1b:69:ae:a9:96:e1:2a:25:9f:19:5b:69: d4:3e:2a:fd:f5:1c:3b:fc:ec:36:2e:78:11:4f:e9: 92:8c:b6:53:d8:22:d7:2e:52:d6:d2:95:5e:2e:93: b2:44:95:e8:df:6a:4f:2d:91:62:5a:93:75:96:db: 18:e7:cc:1f:f2:7e:b7:2c:37:80:4b:40:ba:72:4f: 34:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C2:08:F4:A0:97:61:73:FA:51:D1:AA:DC:85:AF:AD:FB:A2:49:9A X509v3 Authority Key Identifier: keyid:17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:db:fe:fc:3c:ce:66:3f:02:27:c7:58:b2:3b:3c:67:d9:19: 96:89:b7:ef:b0:a0:ce:04:2b:08:59:9d:ed:db:da:84:2c:63: d0:2d:5a:f6:8b:01:9e:2f:6e:72:5e:34:de:fe:bd:89:dc:1e: 81:81:e6:38:7b:db:1e:7e:10:03:aa:15:9b:03:e8:bc:b3:2f: a5:15:86:cf:30:ab:c6:b7:fc:9d:46:2e:6f:91:2c:f8:ef:21: 95:cb:b9:7f:b2:0c:b1:6c:be:91:45:30:6d:6a:96:33:3d:0d: fc:a6:06:19:0b:05:26:d0:96:04:aa:f1:07:73:f2:70:0d:b0: 4e:fc:bd:0d:a0:36:85:b6:46:66:f5:d3:38:83:a1:7e:85:5c: ae:c6:7b:72:2a:1e:09:66:26:c6:90:a9:71:58:ef:4c:1d:97: f5:7d:c7:92:57:b6:ed:6c:19:a6:8e:54:af:b6:2c:b5:7e:b8: 87:34:25:58:e4:b5:70:63:05:44:5c:fd:d7:7f:9a:c2:29:e5: 69:d1:6d:3a:54:41:ec:2f:c3:2f:ca:86:f9:42:20:b8:e7:85: d5:bd:cc:0d:d3:d3:f5:aa:50:4b:ea:3c:52:e1:ab:32:b0:70: 3b:02:07:41:6d:58:00:59:ed:a7:d8:ff:51:30:cc:8e:76:9d: 88:cc:42:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLQpjysBKijAW7ozswIOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTk5ZTIxMTkxNGE2OGRiODNlYWYzZjdmZDM4NGM1M2U3 NDc0NTUwHhcNMjUxMjA2MDUwMDQ3WhcNMjUxMjA3MDUwMDQ3WjAzMTEwLwYDVQQD Eyg1NmMyMDhmNGEwOTc2MTczZmE1MWQxYWFkYzg1YWZhZGZiYTI0OTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLH2ODXt3cKbT70By6jStQl/owkg DI2vZnVVGyVef3DuEoZhiS1b//ZBTSMb2e8/a3pylKjxSkIJhvGDVYgVLEJdyXRY CQPC76gXkYa+2c3DPd7Hdf7arbb7Q6jcXY7mpj9nhYHRVLdX3M8sHfxKYjs0LGcK zn6lMZx4d9nReN3+kYXcG/Il1X34GPABw65o2igOSlgeOC+fwbupy0cxGne32HU6 JWBvFoaRrILMhvlwaBSMmVgbaa6pluEqJZ8ZW2nUPir99Rw7/Ow2LngRT+mSjLZT 2CLXLlLW0pVeLpOyRJXo32pPLZFiWpN1ltsY58wf8n63LDeAS0C6ck807QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbCCPSgl2Fz+lHRqtyFr637okmaMB8GA1UdIwQY MBaAFBeZniEZFKaNuD6vP3/ThMU+dHRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVtZUlSa1VwbzI0UHE4X2Y5T0V4VDUwZEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lYTExN2EtNDEyYS00OWUyLTg5MGYt NGJiNDNiYTNjZGUzLzEvRjVtZUlSa1VwbzI0UHE4X2Y5T0V4VDUwZEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9lYTExN2EtNDEyYS00OWUyLTg5MGYtNGJiNDNiYTNjZGUz LzEvRjVtZUlSa1VwbzI0UHE4X2Y5T0V4VDUwZEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9v+/DzO Zj8CJ8dYsjs8Z9kZlom377CgzgQrCFmd7dvahCxj0C1a9osBni9ucl403v69idwe gYHmOHvbHn4QA6oVmwPovLMvpRWGzzCrxrf8nUYub5Es+O8hlcu5f7IMsWy+kUUw bWqWMz0N/KYGGQsFJtCWBKrxB3PycA2wTvy9DaA2hbZGZvXTOIOhfoVcrsZ7cioe CWYmxpCpcVjvTB2X9X3Hkle27WwZpo5Ur7YstX64hzQlWOS1cGMFRFz913+awinl adFtOlRB7C/DL8qG+UIguOeF1b3MDdPT9apQS+o8UuGrMrBwOwIHQW1YAFntp9j/ UTDMjnadiMxC9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:18 2025 by rpki-client