This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft File: s5HsSXtk1hEkn95Zel7ofpM31e4.mft (raw, json) Hash identifier: oZ+DfDnVf4waDsluKw81BDuvJd5NRYZDNhZ6F+/y+k4= Subject key identifier: FB:CC:A1:54:8E:02:B2:24:92:9B:0C:9B:17:AD:F6:3C:26:4C:9D:C7 Authority key identifier: B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE Certificate issuer: /CN=b391ec497b64d611249fde597a5ee87e9337d5ee Certificate serial: 019AF50B2678F5236A4B37DA24901150E494 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft Manifest number: 0705 Signing time: Sat 06 Dec 2025 19:02:19 +0000 Manifest this update: Sat 06 Dec 2025 19:02:19 +0000 Manifest next update: Sun 07 Dec 2025 19:02:19 +0000 Files and hashes: 1: 1SuRt4iJivWgTKWmk3XGm23S3is.roa (hash: QUGPW65YoJ5GDg5KCzuvySius0jxym8E1db1Hk83LWE=) 2: s5HsSXtk1hEkn95Zel7ofpM31e4.crl (hash: lbvx3newCOe+9lBLQRBQaYa4fhVk2BWo5LbcFPPvuMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:26:78:f5:23:6a:4b:37:da:24:90:11:50:e4:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b391ec497b64d611249fde597a5ee87e9337d5ee Validity Not Before: Dec 6 19:02:19 2025 GMT Not After : Dec 7 19:02:19 2025 GMT Subject: CN=fbcca1548e02b224929b0c9b17adf63c264c9dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e6:46:8a:cb:2a:85:de:79:6d:e3:08:f6:b5: 4a:4c:98:8d:c7:7a:2e:ce:9f:78:d1:d5:d3:3f:98: 18:86:f0:1e:bf:98:11:11:df:f6:90:1e:4e:59:e8: bc:e6:52:78:4c:88:35:a1:a1:ce:be:a9:5a:8d:0f: 74:6f:91:53:28:f9:24:95:3e:10:7c:af:e6:e0:11: be:60:28:10:63:36:e1:90:13:c2:ef:e9:3f:1e:39: 8d:01:36:67:ed:d7:06:02:22:22:8d:7d:07:e7:5e: d1:25:ea:d1:8c:bc:4f:d5:87:58:ca:c4:c6:af:bb: 28:a2:36:69:7d:d9:1f:e4:05:9a:fb:c0:a7:d0:ad: fa:fb:e5:d8:47:f2:3e:1a:fa:b5:1a:8e:cc:3e:88: dd:dd:09:b6:77:18:ff:0f:02:3c:6d:6d:0e:b6:d5: a5:4b:cb:ca:9b:8e:7d:31:81:2a:1b:6e:66:d2:67: 6b:41:e4:00:85:ee:de:bb:31:73:5d:81:55:5b:21: b3:1a:af:bc:10:b0:33:ed:99:63:65:a9:f3:32:b0: 71:ee:cc:75:bf:8c:55:f3:6b:b2:be:c2:13:95:74: 25:4b:30:09:e5:b6:1e:01:f4:99:95:6a:2c:75:8d: 9c:33:8a:3e:2d:db:f5:1a:f7:b5:c8:15:3d:4c:22: 63:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CC:A1:54:8E:02:B2:24:92:9B:0C:9B:17:AD:F6:3C:26:4C:9D:C7 X509v3 Authority Key Identifier: keyid:B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:7f:22:f6:66:5a:f4:ff:58:c8:84:fe:c2:32:43:aa:d3:c4: 68:16:07:7c:40:a7:bf:89:82:6b:83:15:67:b3:b0:67:c5:43: fb:de:b4:73:8a:d2:9d:b8:40:ff:0f:eb:f2:b1:17:ee:ed:f1: ed:71:d4:c6:75:a0:8f:9e:7c:db:ab:25:45:c0:47:b7:23:35: 79:49:fe:d3:28:78:bc:b4:5a:19:65:65:fb:61:2c:da:4e:c1: 52:f9:fa:a8:41:0a:b5:a7:b5:99:de:21:b9:3a:1d:da:ad:49: 18:25:c4:c0:3c:94:6e:f8:9a:a7:17:1f:dd:91:c4:bc:77:19: 4e:1d:25:4d:13:41:30:19:24:aa:6a:1e:a5:b8:09:90:68:70: a3:36:f4:cc:fc:9d:6f:9e:27:48:3d:03:8b:e3:07:bc:53:72: 8a:29:98:37:f2:a5:00:2c:64:3d:2b:16:04:85:b5:6b:64:01: a4:83:b9:5a:0e:f1:f0:ae:f2:06:01:f9:8d:f4:f3:0b:91:34: e8:4c:21:11:55:23:82:ec:ec:9d:1b:af:2a:17:8a:42:4a:07: e6:71:60:10:3a:a6:e0:23:f7:84:07:38:df:f8:e3:ae:ae:db: b4:dd:73:c2:86:76:18:dc:cb:5f:1f:5f:d7:17:92:40:e4:e8: c3:a6:9d:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CyZ49SNqSzfaJJARUOSUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOTFlYzQ5N2I2NGQ2MTEyNDlmZGU1OTdhNWVlODdlOTMz N2Q1ZWUwHhcNMjUxMjA2MTkwMjE5WhcNMjUxMjA3MTkwMjE5WjAzMTEwLwYDVQQD EyhmYmNjYTE1NDhlMDJiMjI0OTI5YjBjOWIxN2FkZjYzYzI2NGM5ZGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuZGissqhd55beMI9rVKTJiNx3ou zp940dXTP5gYhvAev5gREd/2kB5OWei85lJ4TIg1oaHOvqlajQ90b5FTKPkklT4Q fK/m4BG+YCgQYzbhkBPC7+k/HjmNATZn7dcGAiIijX0H517RJerRjLxP1YdYysTG r7soojZpfdkf5AWa+8Cn0K36++XYR/I+Gvq1Go7MPojd3Qm2dxj/DwI8bW0OttWl S8vKm459MYEqG25m0mdrQeQAhe7euzFzXYFVWyGzGq+8ELAz7ZljZanzMrBx7sx1 v4xV82uyvsITlXQlSzAJ5bYeAfSZlWosdY2cM4o+Ldv1Gve1yBU9TCJjPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvMoVSOArIkkpsMmxet9jwmTJ3HMB8GA1UdIwQY MBaAFLOR7El7ZNYRJJ/eWXpe6H6TN9XuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczVIc1NYdGsxaEVrbjk1WmVsN29mcE0zMWU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi82ZGMxMjEtMGE2Zi00NWFkLThhZjkt ZTFhNDI5MzUyMGJlLzEvczVIc1NYdGsxaEVrbjk1WmVsN29mcE0zMWU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi82ZGMxMjEtMGE2Zi00NWFkLThhZjktZTFhNDI5MzUyMGJl LzEvczVIc1NYdGsxaEVrbjk1WmVsN29mcE0zMWU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcH8i9mZa 9P9YyIT+wjJDqtPEaBYHfECnv4mCa4MVZ7OwZ8VD+960c4rSnbhA/w/r8rEX7u3x 7XHUxnWgj55826slRcBHtyM1eUn+0yh4vLRaGWVl+2Es2k7BUvn6qEEKtae1md4h uTod2q1JGCXEwDyUbviapxcf3ZHEvHcZTh0lTRNBMBkkqmoepbgJkGhwozb0zPyd b54nSD0Di+MHvFNyiimYN/KlACxkPSsWBIW1a2QBpIO5Wg7x8K7yBgH5jfTzC5E0 6EwhEVUjguzsnRuvKheKQkoH5nFgEDqm4CP3hAc43/jjrq7btN1zwoZ2GNzLXx9f 1xeSQOTow6adng== -----END CERTIFICATE-----Generated at Sun Dec 7 01:30:20 2025 by rpki-client