This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft File: p5zxDDHy7btVfVVAlzyIB5szIA8.mft (raw, json) Hash identifier: JTk10yhWtzrwsvGdHVx/8kzw2l7cGkWpvLljBbZwTjw= Subject key identifier: AB:75:83:7D:C6:25:51:BE:93:1A:E3:70:16:0E:68:C8:19:68:3A:D4 Authority key identifier: A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F Certificate issuer: /CN=a79cf10c31f2edbb557d5540973c88079b33200f Certificate serial: 019AF2099CA72E8D2495E7CA58428911F416 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft Manifest number: 0D6C Signing time: Sat 06 Dec 2025 05:01:47 +0000 Manifest this update: Sat 06 Dec 2025 05:01:47 +0000 Manifest next update: Sun 07 Dec 2025 05:01:47 +0000 Files and hashes: 1: p5zxDDHy7btVfVVAlzyIB5szIA8.crl (hash: vjhkABzSG7G/hERKIUGmXeGe79n3aIPbjPPfFCv7YU8=) 2: zJpHr_erZURy0iDQz1cu6aiMTKU.roa (hash: /PNFfBchr4xUi6f7D1PpkNqNULV5Ex2nOQGeMnKsHEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9c:a7:2e:8d:24:95:e7:ca:58:42:89:11:f4:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79cf10c31f2edbb557d5540973c88079b33200f Validity Not Before: Dec 6 05:01:47 2025 GMT Not After : Dec 7 05:01:47 2025 GMT Subject: CN=ab75837dc62551be931ae370160e68c819683ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:85:9e:48:02:a4:05:52:c9:7b:41:b2:fe:01: c6:d9:12:5f:e4:f4:e3:b4:72:42:4d:5c:ad:63:7b: 67:df:70:11:0b:64:c1:eb:07:e5:f5:61:17:9f:bf: f0:b9:e0:44:5e:f6:df:07:e0:cd:7d:6b:41:b5:2e: fe:1c:65:5e:ab:1e:80:f9:54:27:cb:b7:2e:3d:cd: c9:61:78:b7:ae:82:1c:53:a8:64:25:ca:08:a6:54: 95:e4:82:fa:47:ca:a0:d7:cc:5a:0c:70:4a:f3:2a: 66:8c:d4:28:e9:71:da:90:a1:97:b8:e8:39:c7:b1: b2:b3:9d:05:3a:04:dc:e4:ba:1e:61:ec:ff:8f:86: 5c:3e:21:d8:88:56:2d:df:2a:23:ab:54:e8:cc:5f: 29:19:36:cf:ed:ac:a6:8d:8f:ab:67:08:dd:75:8a: cd:ca:c8:85:2f:28:fc:fe:16:6b:a3:88:76:53:7b: 92:e2:f9:27:12:c7:fe:7a:12:b6:23:b1:85:97:99: 06:ed:0a:a2:0e:07:16:18:c5:4a:27:0f:1d:a9:f9: b5:47:b1:8c:6b:56:b4:43:be:3f:93:58:1e:6d:bd: f7:de:5d:30:c6:4c:95:5e:b6:9d:f2:9c:b4:47:4b: b3:dc:8d:18:13:1e:a1:a5:fd:e5:a3:4e:cc:3a:f1: 25:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:75:83:7D:C6:25:51:BE:93:1A:E3:70:16:0E:68:C8:19:68:3A:D4 X509v3 Authority Key Identifier: keyid:A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:83:4d:cc:d9:19:b5:3c:3b:f8:1f:b1:d9:bc:92:c0:a5:7c: a4:de:30:75:16:3c:01:b2:47:fe:2c:e2:85:9d:ac:84:f5:ea: b1:13:c3:ad:ee:3a:31:db:d7:d5:a3:ce:f0:bc:0f:5f:ec:67: ee:75:71:cb:01:25:be:eb:9e:ed:7f:17:31:ef:f1:c5:a3:fb: d4:3e:9d:9e:93:6e:7a:20:15:97:24:63:57:99:19:65:2d:ee: a2:ff:ad:ef:00:36:4b:23:12:b4:f5:d0:3c:fd:e1:0e:13:0c: d7:c6:44:77:75:4a:f8:d5:ca:0a:2f:2c:59:19:3c:7f:15:ec: 8e:31:df:1c:d0:1b:65:e8:f2:6f:55:26:27:c5:0b:ea:2e:40: b0:a7:ff:ea:dc:66:0e:65:2f:31:c9:7e:62:29:39:f3:be:09: d1:19:05:d7:38:38:46:61:0b:91:dd:e5:31:35:3c:01:62:f5: b0:ce:5b:3e:31:ca:ff:f2:c8:62:fe:df:2a:4b:56:b4:13:93: 99:4e:41:02:0f:19:8b:c8:fb:27:fb:cb:ea:51:91:a6:39:be: 81:ad:4e:25:5d:34:9c:9c:40:81:2e:c0:43:d4:ce:67:4f:59: ac:2b:5a:04:6b:76:23:38:4e:f7:8f:5e:10:d8:43:1c:d3:93: 36:6a:c1:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZynLo0klefKWEKJEfQWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OWNmMTBjMzFmMmVkYmI1NTdkNTU0MDk3M2M4ODA3OWIz MzIwMGYwHhcNMjUxMjA2MDUwMTQ3WhcNMjUxMjA3MDUwMTQ3WjAzMTEwLwYDVQQD EyhhYjc1ODM3ZGM2MjU1MWJlOTMxYWUzNzAxNjBlNjhjODE5NjgzYWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IWeSAKkBVLJe0Gy/gHG2RJf5PTj tHJCTVytY3tn33ARC2TB6wfl9WEXn7/wueBEXvbfB+DNfWtBtS7+HGVeqx6A+VQn y7cuPc3JYXi3roIcU6hkJcoIplSV5IL6R8qg18xaDHBK8ypmjNQo6XHakKGXuOg5 x7Gys50FOgTc5LoeYez/j4ZcPiHYiFYt3yojq1TozF8pGTbP7aymjY+rZwjddYrN ysiFLyj8/hZro4h2U3uS4vknEsf+ehK2I7GFl5kG7QqiDgcWGMVKJw8dqfm1R7GM a1a0Q74/k1gebb333l0wxkyVXrad8py0R0uz3I0YEx6hpf3lo07MOvEl/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKt1g33GJVG+kxrjcBYOaMgZaDrUMB8GA1UdIwQY MBaAFKec8Qwx8u27VX1VQJc8iAebMyAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDV6eERESHk3YnRWZlZWQWx6eUlCNXN6SUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yNjliZTktOTNmZi00YzEyLTkxYmEt MWE5YjE1NTUxMzZhLzEvcDV6eERESHk3YnRWZlZWQWx6eUlCNXN6SUE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8yNjliZTktOTNmZi00YzEyLTkxYmEtMWE5YjE1NTUxMzZh LzEvcDV6eERESHk3YnRWZlZWQWx6eUlCNXN6SUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoNNzNkZ tTw7+B+x2bySwKV8pN4wdRY8AbJH/izihZ2shPXqsRPDre46MdvX1aPO8LwPX+xn 7nVxywElvuue7X8XMe/xxaP71D6dnpNueiAVlyRjV5kZZS3uov+t7wA2SyMStPXQ PP3hDhMM18ZEd3VK+NXKCi8sWRk8fxXsjjHfHNAbZejyb1UmJ8UL6i5AsKf/6txm DmUvMcl+Yik5874J0RkF1zg4RmELkd3lMTU8AWL1sM5bPjHK//LIYv7fKktWtBOT mU5BAg8Zi8j7J/vL6lGRpjm+ga1OJV00nJxAgS7AQ9TOZ09ZrCtaBGt2IzhO949e ENhDHNOTNmrB0w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:02 2025 by rpki-client