This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft File: v5joFwlZteYBj2ArOnSHstgCgQY.mft (raw, json) Hash identifier: TjnaeMFkkIvMpxhhivNPZypgNrUvmRJvJsob6EJXq10= Subject key identifier: 64:6C:E9:48:A8:89:07:43:56:59:91:39:95:B3:C9:1B:D3:08:1C:33 Authority key identifier: BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06 Certificate issuer: /CN=bf98e8170959b5e6018f602b3a7487b2d8028106 Certificate serial: 019B2D41E87EEDD4DDBA9A12B794653FE63C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 17:00:52 +0000 Manifest this update: Wed 17 Dec 2025 17:00:52 +0000 Manifest next update: Thu 18 Dec 2025 17:00:52 +0000 Files and hashes: 1: WxyFMVLPaoedm2KunMSjCPtRmII.roa (hash: Ungr4kPsfNHZcdD5CyaeCkdVZRH3x9Cj4Xb6OMIiqY0=) 2: ekd0T-pWjR2fdJhmt79rFrJVVFk.roa (hash: SlYmHx07GpRwdPchZU3v+4uB8eJO2LbmRdoWgdkR9QQ=) 3: v5joFwlZteYBj2ArOnSHstgCgQY.crl (hash: DZpxqb/Td46HtiefdPjN7wPJ4irj/PO6NjwJbejGzP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 17:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:41:e8:7e:ed:d4:dd:ba:9a:12:b7:94:65:3f:e6:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf98e8170959b5e6018f602b3a7487b2d8028106 Validity Not Before: Dec 17 17:00:52 2025 GMT Not After : Dec 18 17:00:52 2025 GMT Subject: CN=646ce948a88907435659913995b3c91bd3081c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d0:1c:24:11:4a:d9:49:99:7e:d8:1a:2c:4e: ca:d9:eb:40:be:cc:de:24:c4:b5:54:f4:5d:ca:69: 26:11:1b:a0:b7:e6:58:60:ce:a5:17:45:c5:e7:53: f0:1a:93:f8:2e:3d:e8:f8:06:a2:c7:57:62:dd:1c: 94:0b:3b:cb:e7:04:6e:ba:b8:af:47:0e:41:ed:8b: 78:9c:a1:b9:0a:37:e2:c1:80:5b:f1:9c:65:f6:84: 07:e7:be:e7:5d:0d:b3:77:20:0a:5f:16:d1:27:01: bb:57:28:a3:02:5b:a6:95:c2:f1:29:ea:ab:b9:78: 30:0f:22:9d:0d:cd:e0:66:57:58:f1:09:fb:69:e1: 29:2b:ac:78:3a:70:ff:3d:ee:08:da:99:73:d6:3d: b4:2d:0b:66:d5:ce:22:ed:5d:ca:61:88:a8:59:ff: 23:24:c1:17:70:40:df:f6:5f:52:06:87:6a:25:5c: 2a:00:88:ea:24:87:14:68:dd:35:10:e6:2d:2c:a5: 52:2e:ee:d4:bd:3b:89:da:39:27:e5:ee:01:65:6f: b4:b9:f0:a4:4d:1a:bc:09:35:7a:01:85:8e:3f:e8: 0d:b8:72:97:07:83:a3:76:86:88:d6:20:4b:13:2d: 8c:2f:bd:58:d7:03:38:ce:9d:cd:d3:4b:a4:05:40: 49:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6C:E9:48:A8:89:07:43:56:59:91:39:95:B3:C9:1B:D3:08:1C:33 X509v3 Authority Key Identifier: keyid:BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:7b:26:ac:d6:86:f4:50:b3:b7:7f:f3:1e:76:ec:c7:fd:90: da:22:75:a3:c2:02:1d:02:87:f6:f9:02:2b:c0:6d:ef:97:15: 93:91:e5:47:49:21:b8:bd:67:54:f1:fa:17:49:4f:f9:03:dd: 91:fb:31:77:8d:f2:69:74:7d:58:7d:e2:01:34:4c:5f:77:e1: 6e:25:60:e0:8b:8f:6d:b3:55:fa:a2:13:c7:70:c0:15:ce:b5: a6:f3:e3:b2:e7:58:20:7e:64:03:14:b4:0c:6f:a0:e5:e8:ab: 05:ff:34:87:62:c7:85:3f:8a:06:e8:48:36:67:5a:55:7b:42: 09:00:75:b7:2c:77:fa:70:77:5b:89:3e:5c:69:32:54:7c:24: a3:38:ec:97:af:79:38:c9:3d:62:ee:cd:71:f8:7e:97:16:49: 9d:02:64:ed:40:ae:f5:48:e0:56:48:f6:fc:7f:03:50:86:1f: 06:8c:ba:23:93:77:65:0c:65:5c:2e:87:95:e9:5f:6d:36:b8: 51:4b:55:a7:cd:e6:8b:01:b8:29:17:4a:34:20:88:df:d6:5d: f5:e5:21:a9:69:1c:cb:33:8a:77:e8:8a:67:74:ee:7f:57:45: af:ac:60:ea:be:9b:cc:f9:e8:42:bd:05:36:dc:a2:ec:f7:3f: 44:eb:a4:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstQeh+7dTdupoSt5RlP+Y8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmOThlODE3MDk1OWI1ZTYwMThmNjAyYjNhNzQ4N2IyZDgw MjgxMDYwHhcNMjUxMjE3MTcwMDUyWhcNMjUxMjE4MTcwMDUyWjAzMTEwLwYDVQQD Eyg2NDZjZTk0OGE4ODkwNzQzNTY1OTkxMzk5NWIzYzkxYmQzMDgxYzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotAcJBFK2UmZftgaLE7K2etAvsze JMS1VPRdymkmERugt+ZYYM6lF0XF51PwGpP4Lj3o+Aaix1di3RyUCzvL5wRuuriv Rw5B7Yt4nKG5CjfiwYBb8Zxl9oQH577nXQ2zdyAKXxbRJwG7VyijAlumlcLxKeqr uXgwDyKdDc3gZldY8Qn7aeEpK6x4OnD/Pe4I2plz1j20LQtm1c4i7V3KYYioWf8j JMEXcEDf9l9SBodqJVwqAIjqJIcUaN01EOYtLKVSLu7UvTuJ2jkn5e4BZW+0ufCk TRq8CTV6AYWOP+gNuHKXB4OjdoaI1iBLEy2ML71Y1wM4zp3N00ukBUBJEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRs6UioiQdDVlmROZWzyRvTCBwzMB8GA1UdIwQY MBaAFL+Y6BcJWbXmAY9gKzp0h7LYAoEGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjVqb0Z3bFp0ZVlCajJBck9uU0hzdGdDZ1FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yM2ZiMWEtYTc5MS00MDBjLWE0MWEt NDhjZWVkNWU0MzhlLzEvdjVqb0Z3bFp0ZVlCajJBck9uU0hzdGdDZ1FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8yM2ZiMWEtYTc5MS00MDBjLWE0MWEtNDhjZWVkNWU0Mzhl LzEvdjVqb0Z3bFp0ZVlCajJBck9uU0hzdGdDZ1FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnsmrNaG 9FCzt3/zHnbsx/2Q2iJ1o8ICHQKH9vkCK8Bt75cVk5HlR0khuL1nVPH6F0lP+QPd kfsxd43yaXR9WH3iATRMX3fhbiVg4IuPbbNV+qITx3DAFc61pvPjsudYIH5kAxS0 DG+g5eirBf80h2LHhT+KBuhINmdaVXtCCQB1tyx3+nB3W4k+XGkyVHwkozjsl695 OMk9Yu7Ncfh+lxZJnQJk7UCu9UjgVkj2/H8DUIYfBoy6I5N3ZQxlXC6HlelfbTa4 UUtVp83miwG4KRdKNCCI39Zd9eUhqWkcyzOKd+iKZ3Tuf1dFr6xg6r6bzPnoQr0F Ntyi7Pc/ROukpg== -----END CERTIFICATE-----Generated at Wed Dec 17 21:04:38 2025 by rpki-client