This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft File: dF5kPQIextIbR1rkYN3tz35rP2Y.mft (raw, json) Hash identifier: sYVWa8D90pFBIIqOOqKr39z1vmTq/L4DOoPmyx+jVKw= Subject key identifier: 5A:E1:96:B5:FB:2B:28:C5:49:80:F0:3B:BA:A8:A5:01:76:7B:A6:1F Authority key identifier: 74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66 Certificate issuer: /CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66 Certificate serial: 019AF0BF4D007435E7804B9589867031B5F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft Manifest number: 0732 Signing time: Fri 05 Dec 2025 23:01:00 +0000 Manifest this update: Fri 05 Dec 2025 23:01:00 +0000 Manifest next update: Sat 06 Dec 2025 23:01:00 +0000 Files and hashes: 1: 1hVW1hVDzUMh4lZ8GR7cUAl7v8M.roa (hash: /ppjOJyvYU9AU0zUdXonk4kTMm986gK2/zEUEbCwwMQ=) 2: dF5kPQIextIbR1rkYN3tz35rP2Y.crl (hash: pJsqSqKxb2tnxAT9+kNiZDoHFDW3OARne04lMI0SeFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:4d:00:74:35:e7:80:4b:95:89:86:70:31:b5:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66 Validity Not Before: Dec 5 23:01:00 2025 GMT Not After : Dec 6 23:01:00 2025 GMT Subject: CN=5ae196b5fb2b28c54980f03bbaa8a501767ba61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c3:cb:54:42:94:d1:12:a3:e2:bc:39:a0:2b: 8a:2b:db:59:5f:c3:dc:2e:a1:5e:e5:40:5a:2b:93: 59:bd:71:a8:c4:b4:d3:65:1f:b5:56:9d:95:80:4b: 28:e0:4f:a8:7e:44:39:8e:fa:df:6d:73:fc:7a:20: 23:b8:f6:44:14:20:35:e2:23:60:ae:2d:b6:7c:42: bd:25:e0:37:34:ed:b3:8c:18:b2:d3:c1:07:cc:09: c4:8d:aa:f0:05:e5:b3:d3:5c:dd:ce:95:54:2f:e9: 98:dd:2a:06:68:64:9d:38:17:80:c4:bb:54:53:40: 04:6c:bf:65:e6:29:66:26:f1:da:c0:d8:b5:3b:81: 84:bd:69:6e:f9:90:e9:f2:c2:b3:ef:3a:3c:6d:de: f4:da:a4:1f:05:30:17:67:af:be:29:a3:1e:71:1e: 7a:ab:4b:6c:a8:0a:5e:4f:69:5c:5c:f0:df:0e:14: aa:47:83:ac:ed:41:9f:1f:f2:b2:3a:76:85:af:4a: ab:94:ea:1b:5e:ba:8f:dd:ab:ab:2a:2a:49:dc:b1: 99:1b:f4:8e:93:b6:a7:a3:b9:35:cf:28:7a:49:a4: 9f:91:6f:45:d3:33:e5:81:ff:8b:5f:84:a2:0b:e2: 3c:03:b3:2e:63:74:cd:89:5d:27:a9:fe:2f:e9:b5: b8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E1:96:B5:FB:2B:28:C5:49:80:F0:3B:BA:A8:A5:01:76:7B:A6:1F X509v3 Authority Key Identifier: keyid:74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ba:b5:7a:bd:9e:aa:5c:5d:a2:28:6f:c5:5c:89:7a:c5:3f: 10:14:ae:e9:15:86:ab:3d:8f:6a:7c:dc:14:a0:82:bc:e4:41: 2c:d1:6e:c2:af:d4:ed:4a:73:9b:8d:f5:12:be:8a:fe:03:75: f3:a0:be:f9:03:e2:a9:8d:77:72:a5:fb:7f:df:3d:7d:3b:3b: f6:54:da:0f:f8:34:86:56:8a:cd:ac:43:80:23:af:af:30:e8: a4:f2:25:9e:9d:93:f4:e3:1e:1b:83:46:a1:51:08:8c:03:d5: 05:74:f9:50:3a:b8:04:ac:2e:aa:5a:f7:da:42:a6:a0:35:ee: 82:3c:73:fa:a2:ca:fc:f6:af:e9:d6:56:c1:ac:07:75:c6:a8: 93:04:37:71:02:2f:a4:f8:13:22:4f:78:10:69:1c:47:2b:c4: d4:1d:22:67:fa:2a:fe:2a:41:6f:58:2e:53:df:a0:70:58:17: ea:cc:e5:03:33:2f:f4:7d:80:cf:1b:03:ed:08:c8:ce:2d:21: 41:1f:a9:bb:66:79:49:85:62:a9:51:82:ea:32:4f:94:7e:6b: cd:94:dd:d0:69:d9:2e:bb:74:bb:2c:ff:c4:dd:6f:3f:32:de: 3a:a5:a6:5a:4e:92:07:63:09:21:83:e4:50:79:71:e5:43:7f: ad:d6:18:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv00AdDXngEuViYZwMbX3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NWU2NDNkMDIxZWM2ZDIxYjQ3NWFlNDYwZGRlZGNmN2U2 YjNmNjYwHhcNMjUxMjA1MjMwMTAwWhcNMjUxMjA2MjMwMTAwWjAzMTEwLwYDVQQD Eyg1YWUxOTZiNWZiMmIyOGM1NDk4MGYwM2JiYWE4YTUwMTc2N2JhNjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMPLVEKU0RKj4rw5oCuKK9tZX8Pc LqFe5UBaK5NZvXGoxLTTZR+1Vp2VgEso4E+ofkQ5jvrfbXP8eiAjuPZEFCA14iNg ri22fEK9JeA3NO2zjBiy08EHzAnEjarwBeWz01zdzpVUL+mY3SoGaGSdOBeAxLtU U0AEbL9l5ilmJvHawNi1O4GEvWlu+ZDp8sKz7zo8bd702qQfBTAXZ6++KaMecR56 q0tsqApeT2lcXPDfDhSqR4Os7UGfH/KyOnaFr0qrlOobXrqP3aurKipJ3LGZG/SO k7ano7k1zyh6SaSfkW9F0zPlgf+LX4SiC+I8A7MuY3TNiV0nqf4v6bW4yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrhlrX7KyjFSYDwO7qopQF2e6YfMB8GA1UdIwQY MBaAFHReZD0CHsbSG0da5GDd7c9+az9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEY1a1BRSWV4dEliUjFya1lOM3R6MzVyUDJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi80ZGE1ZDUtMzE1Mi00ZjU0LWEwYTkt YTk1YWVmOWM5MWQ5LzEvZEY1a1BRSWV4dEliUjFya1lOM3R6MzVyUDJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi80ZGE1ZDUtMzE1Mi00ZjU0LWEwYTktYTk1YWVmOWM5MWQ5 LzEvZEY1a1BRSWV4dEliUjFya1lOM3R6MzVyUDJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbq1er2e qlxdoihvxVyJesU/EBSu6RWGqz2PanzcFKCCvORBLNFuwq/U7Upzm431Er6K/gN1 86C++QPiqY13cqX7f989fTs79lTaD/g0hlaKzaxDgCOvrzDopPIlnp2T9OMeG4NG oVEIjAPVBXT5UDq4BKwuqlr32kKmoDXugjxz+qLK/Pav6dZWwawHdcaokwQ3cQIv pPgTIk94EGkcRyvE1B0iZ/oq/ipBb1guU9+gcFgX6szlAzMv9H2AzxsD7QjIzi0h QR+pu2Z5SYViqVGC6jJPlH5rzZTd0GnZLrt0uyz/xN1vPzLeOqWmWk6SB2MJIYPk UHlx5UN/rdYYgg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:21 2025 by rpki-client