This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft File: V5NTy0LgxPulyuJTpXaLwfJGW5k.mft (raw, json) Hash identifier: YczqqVR8SmuEITM0RA5DarUHSy5Q+wPbVeRESighFII= Subject key identifier: E2:B6:19:A7:EF:33:62:43:ED:F5:09:74:A9:71:0C:9D:DA:7D:4B:99 Authority key identifier: 57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99 Certificate issuer: /CN=579353cb42e0c4fba5cae253a5768bc1f2465b99 Certificate serial: 019AF50A4D5A5934092B1D894DC78586CC85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft Manifest number: 11E8 Signing time: Sat 06 Dec 2025 19:01:24 +0000 Manifest this update: Sat 06 Dec 2025 19:01:24 +0000 Manifest next update: Sun 07 Dec 2025 19:01:24 +0000 Files and hashes: 1: D3QeUsU8Q-1bY74EwK2MA0No9Ew.roa (hash: N97kcfMNA4uFpsheDLzM7+Nl7AAF28L1BPIs41yYMZY=) 2: Q07EucI5XyAYo9s-A9qqwpcEGlA.roa (hash: VFWYrVVM3MpoRzNbOjii1yFOv4OAEiNvOV4MAp0ri4Y=) 3: V5NTy0LgxPulyuJTpXaLwfJGW5k.crl (hash: /jGxYtOpIYtVO3zfq6kAdjJzhO5VVCOO5DcahdPfikU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:4d:5a:59:34:09:2b:1d:89:4d:c7:85:86:cc:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579353cb42e0c4fba5cae253a5768bc1f2465b99 Validity Not Before: Dec 6 19:01:24 2025 GMT Not After : Dec 7 19:01:24 2025 GMT Subject: CN=e2b619a7ef336243edf50974a9710c9dda7d4b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d0:0f:d2:b5:b6:db:7e:be:95:50:39:ea:6d: d2:f9:7a:b8:d8:d4:30:b9:c8:ed:8e:4c:6c:e2:68: 4b:bc:ae:e4:46:84:e2:7a:13:8e:d5:6f:af:43:89: f7:87:4d:f9:cb:86:c6:8e:2a:8a:03:8d:36:f4:63: d7:a3:69:98:76:fe:0c:86:f3:3e:a3:4a:f3:13:73: 4e:43:de:a4:74:64:a5:2c:bf:40:1a:72:f0:19:e2: 89:39:e0:56:a5:05:9f:86:06:9e:33:84:91:93:6a: 53:71:5d:19:56:25:20:a9:f5:fd:29:24:92:7f:50: 5e:32:73:8a:46:78:32:e0:a1:ab:94:e6:be:25:6b: 4c:f9:e3:04:44:10:94:fb:dc:6f:42:b9:68:de:dc: c6:55:61:8e:07:5e:33:1b:a1:00:2b:9a:41:48:92: e8:6a:f1:37:70:ed:91:13:05:8f:55:b9:01:74:33: 15:49:59:93:3d:80:1f:4c:eb:6e:71:77:d7:ca:fd: 97:c8:42:fc:ed:49:17:da:8f:f9:c4:9d:0f:10:68: ef:e3:95:8a:03:8f:f2:cd:94:12:02:3a:23:11:0d: 0e:06:e5:a3:d9:e6:e8:c2:c3:d6:81:91:e5:11:8e: 0b:ab:fd:70:c6:86:8f:a9:68:92:d5:26:5a:5f:cd: e1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B6:19:A7:EF:33:62:43:ED:F5:09:74:A9:71:0C:9D:DA:7D:4B:99 X509v3 Authority Key Identifier: keyid:57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:89:73:80:94:29:66:ab:1d:71:5c:7e:9c:1c:3d:79:1c:9d: d0:8c:65:81:e6:ff:57:a0:a3:ee:7e:13:e1:67:d3:77:ec:c3: 03:6d:cb:15:b8:5f:07:ef:f3:c0:fb:a7:71:ab:41:30:3b:52: ec:a7:bb:ca:70:f3:52:c6:e5:4b:de:d4:c0:47:c9:a5:c1:fe: 01:4c:e4:91:b5:59:ae:c1:59:93:ae:88:13:e2:fb:1a:06:fa: de:42:91:c7:a7:92:1c:40:43:86:55:af:49:28:48:83:ab:be: e4:bc:82:fc:59:02:83:e6:94:5f:3e:97:ad:ab:b1:ad:1b:ef: 4e:e2:02:c9:a1:ca:b0:34:dd:bc:6b:7c:83:b2:ed:25:ea:1b: 1f:d3:76:f2:26:d0:96:95:9c:18:4f:c7:6d:59:b9:b8:87:52: b7:d8:32:5d:aa:bf:74:c5:65:7e:d4:cd:92:80:5e:c3:a7:e7: 58:64:fb:79:4d:f4:a8:35:a9:bd:03:12:73:57:46:a8:0f:a9: b7:e7:8e:88:91:8a:8f:10:e6:ec:22:26:fc:cd:d4:b4:b8:3a: 72:28:65:fd:99:06:39:db:37:ac:30:0d:0a:01:89:1f:65:c3: 8e:e1:bf:04:e2:9a:d5:ce:6f:d5:b8:19:91:fc:1a:6d:60:5b: 12:77:01:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ck1aWTQJKx2JTceFhsyFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3OTM1M2NiNDJlMGM0ZmJhNWNhZTI1M2E1NzY4YmMxZjI0 NjViOTkwHhcNMjUxMjA2MTkwMTI0WhcNMjUxMjA3MTkwMTI0WjAzMTEwLwYDVQQD EyhlMmI2MTlhN2VmMzM2MjQzZWRmNTA5NzRhOTcxMGM5ZGRhN2Q0Yjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9AP0rW2236+lVA56m3S+Xq42NQw ucjtjkxs4mhLvK7kRoTiehOO1W+vQ4n3h035y4bGjiqKA4029GPXo2mYdv4MhvM+ o0rzE3NOQ96kdGSlLL9AGnLwGeKJOeBWpQWfhgaeM4SRk2pTcV0ZViUgqfX9KSSS f1BeMnOKRngy4KGrlOa+JWtM+eMERBCU+9xvQrlo3tzGVWGOB14zG6EAK5pBSJLo avE3cO2REwWPVbkBdDMVSVmTPYAfTOtucXfXyv2XyEL87UkX2o/5xJ0PEGjv45WK A4/yzZQSAjojEQ0OBuWj2ebowsPWgZHlEY4Lq/1wxoaPqWiS1SZaX83hIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOK2GafvM2JD7fUJdKlxDJ3afUuZMB8GA1UdIwQY MBaAFFeTU8tC4MT7pcriU6V2i8HyRluZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMmNjY2QtMDQzMy00MzMwLTk4MWMt YzY3MmQ2NzM2ODZmLzEvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8wMmNjY2QtMDQzMy00MzMwLTk4MWMtYzY3MmQ2NzM2ODZm LzEvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYlzgJQp ZqsdcVx+nBw9eRyd0Ixlgeb/V6Cj7n4T4WfTd+zDA23LFbhfB+/zwPuncatBMDtS 7Ke7ynDzUsblS97UwEfJpcH+AUzkkbVZrsFZk66IE+L7Ggb63kKRx6eSHEBDhlWv SShIg6u+5LyC/FkCg+aUXz6XrauxrRvvTuICyaHKsDTdvGt8g7LtJeobH9N28ibQ lpWcGE/HbVm5uIdSt9gyXaq/dMVlftTNkoBew6fnWGT7eU30qDWpvQMSc1dGqA+p t+eOiJGKjxDm7CIm/M3UtLg6cihl/ZkGOds3rDANCgGJH2XDjuG/BOKa1c5v1bgZ kfwabWBbEncBIQ== -----END CERTIFICATE-----Generated at Sun Dec 7 05:11:55 2025 by rpki-client