This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft File: s5HsSXtk1hEkn95Zel7ofpM31e4.mft (raw, json) Hash identifier: EYRgK8nx4HP4Lua7Y9Q1O+JFNbAPkC1FF15wGUMhEic= Subject key identifier: 30:DB:57:3A:51:5C:97:97:13:D2:34:AE:F4:DA:A3:37:26:07:BC:01 Authority key identifier: B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE Certificate issuer: /CN=b391ec497b64d611249fde597a5ee87e9337d5ee Certificate serial: 019B3C7FCF781CE9849BCC2F8E6AD7D6AFBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft Manifest number: 072A Signing time: Sat 20 Dec 2025 16:02:47 +0000 Manifest this update: Sat 20 Dec 2025 16:02:47 +0000 Manifest next update: Sun 21 Dec 2025 16:02:47 +0000 Files and hashes: 1: 1SuRt4iJivWgTKWmk3XGm23S3is.roa (hash: QUGPW65YoJ5GDg5KCzuvySius0jxym8E1db1Hk83LWE=) 2: s5HsSXtk1hEkn95Zel7ofpM31e4.crl (hash: oXgL3N8Fr8+OFSdcdD5a5Mxpm1Lb7JqRKDRws/Yan6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:cf:78:1c:e9:84:9b:cc:2f:8e:6a:d7:d6:af:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b391ec497b64d611249fde597a5ee87e9337d5ee Validity Not Before: Dec 20 16:02:47 2025 GMT Not After : Dec 21 16:02:47 2025 GMT Subject: CN=30db573a515c979713d234aef4daa3372607bc01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d5:cf:35:1c:65:76:24:e1:af:1a:08:92:63: 88:0a:52:e3:38:3a:28:24:8b:93:a8:b3:b8:02:5b: 3d:d1:fe:da:99:f5:c2:66:f1:c9:7c:1a:1f:15:84: ec:93:a3:1c:8d:e8:c5:cd:16:fa:b0:67:8f:e8:29: 35:49:06:40:20:91:e3:a2:c8:3b:8e:11:fe:35:31: 6b:3e:83:1d:88:1c:bc:8b:7c:29:fe:d3:82:b7:6d: ad:b7:c3:aa:e3:39:de:84:b9:f7:78:ab:a5:22:fe: e5:0e:d8:e6:84:56:fb:b8:b5:a1:56:ef:70:9f:38: a6:9a:70:9a:cd:3c:33:80:2c:ae:48:38:3e:4e:59: 09:29:33:03:ac:a6:b4:8e:37:72:84:8d:8c:aa:15: 3a:9f:cc:5d:ed:b9:f0:4d:28:b6:2f:30:44:04:a1: 16:93:e9:e0:76:57:4c:b5:1c:76:89:c9:a0:76:00: 15:df:8a:6b:cc:97:b7:65:6c:9e:79:25:0d:17:a1: 9a:a7:32:e2:5b:85:38:00:8f:b8:da:74:4e:2c:31: 6e:d4:8f:2f:15:8f:94:86:98:79:13:4c:f2:b7:e1: d7:d0:57:75:9c:ca:a0:28:b5:28:cb:55:e8:6d:cc: 5c:cc:1f:05:2d:fe:fc:29:8b:b3:fb:98:8c:f7:b9: ef:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DB:57:3A:51:5C:97:97:13:D2:34:AE:F4:DA:A3:37:26:07:BC:01 X509v3 Authority Key Identifier: keyid:B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:3d:7d:22:bb:42:f2:04:40:9d:58:d0:ff:9c:16:81:ea:e5: 12:f5:51:4d:0a:88:10:4e:d9:73:e8:a8:8b:6c:ea:34:18:db: 1c:77:6a:73:91:dd:c9:15:10:29:b6:c1:ea:ef:ff:f3:72:62: 0c:f6:cc:ce:cf:6e:5a:e9:8c:35:c2:ef:0c:2e:54:c1:65:66: 21:52:a0:2d:f2:a3:99:a6:57:1f:0c:2d:e1:ff:4c:e2:ec:d8: d2:7a:81:86:49:e3:a4:5d:04:1c:1d:dd:fe:16:eb:d8:bd:36: bf:41:29:30:24:5e:38:36:14:e9:74:36:a7:bb:53:24:1a:5a: 19:92:d6:26:bb:58:73:76:9f:7e:8e:cb:b2:bd:da:83:1c:b5: df:91:e0:1b:44:45:0c:f1:9b:ab:32:23:57:7d:18:61:f8:ba: 52:6a:98:23:f3:b5:0f:ec:04:10:25:06:1f:7c:db:7d:31:91: f0:3c:c5:92:f6:ed:4c:44:1d:c2:03:bb:ac:d4:70:44:9f:c9: a7:74:88:22:09:a5:e6:e3:16:ab:c5:4a:c7:34:70:eb:19:40: 9a:26:6e:9b:52:4f:80:7f:52:15:c8:f8:24:45:d9:34:da:0d: 1c:a3:bd:ad:88:26:c3:a0:35:64:78:5d:1c:05:5c:0c:41:e9: b4:d4:14:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f894HOmEm8wvjmrX1q+8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOTFlYzQ5N2I2NGQ2MTEyNDlmZGU1OTdhNWVlODdlOTMz N2Q1ZWUwHhcNMjUxMjIwMTYwMjQ3WhcNMjUxMjIxMTYwMjQ3WjAzMTEwLwYDVQQD EygzMGRiNTczYTUxNWM5Nzk3MTNkMjM0YWVmNGRhYTMzNzI2MDdiYzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttXPNRxldiThrxoIkmOIClLjODoo JIuTqLO4Als90f7amfXCZvHJfBofFYTsk6McjejFzRb6sGeP6Ck1SQZAIJHjosg7 jhH+NTFrPoMdiBy8i3wp/tOCt22tt8Oq4znehLn3eKulIv7lDtjmhFb7uLWhVu9w nzimmnCazTwzgCyuSDg+TlkJKTMDrKa0jjdyhI2MqhU6n8xd7bnwTSi2LzBEBKEW k+ngdldMtRx2icmgdgAV34przJe3ZWyeeSUNF6GapzLiW4U4AI+42nROLDFu1I8v FY+Uhph5E0zyt+HX0Fd1nMqgKLUoy1XobcxczB8FLf78KYuz+5iM97nvwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDbVzpRXJeXE9I0rvTaozcmB7wBMB8GA1UdIwQY MBaAFLOR7El7ZNYRJJ/eWXpe6H6TN9XuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczVIc1NYdGsxaEVrbjk1WmVsN29mcE0zMWU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi82ZGMxMjEtMGE2Zi00NWFkLThhZjkt ZTFhNDI5MzUyMGJlLzEvczVIc1NYdGsxaEVrbjk1WmVsN29mcE0zMWU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi82ZGMxMjEtMGE2Zi00NWFkLThhZjktZTFhNDI5MzUyMGJl LzEvczVIc1NYdGsxaEVrbjk1WmVsN29mcE0zMWU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiz19IrtC 8gRAnVjQ/5wWgerlEvVRTQqIEE7Zc+ioi2zqNBjbHHdqc5HdyRUQKbbB6u//83Ji DPbMzs9uWumMNcLvDC5UwWVmIVKgLfKjmaZXHwwt4f9M4uzY0nqBhknjpF0EHB3d /hbr2L02v0EpMCReODYU6XQ2p7tTJBpaGZLWJrtYc3affo7Lsr3agxy135HgG0RF DPGbqzIjV30YYfi6UmqYI/O1D+wEECUGH3zbfTGR8DzFkvbtTEQdwgO7rNRwRJ/J p3SIIgml5uMWq8VKxzRw6xlAmiZum1JPgH9SFcj4JEXZNNoNHKO9rYgmw6A1ZHhd HAVcDEHptNQUlQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:23:39 2025 by rpki-client