This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft File: I5Vy3fyrYpHmQQzNToYO42AA5mg.mft (raw, json) Hash identifier: 7jcOXxlvEY0gzuUAxnMixRnmMJTQxmAnzG8bk4jzyu4= Subject key identifier: 5F:B0:DA:DC:A2:5B:14:15:A0:28:DA:48:3F:49:D3:32:56:C0:56:A6 Authority key identifier: 23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68 Certificate issuer: /CN=239572ddfcab6291e6410ccd4e860ee36000e668 Certificate serial: 019AF31C9D9E7FF88222EFB07DF5208E7DB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 10:02:10 +0000 Manifest this update: Sat 06 Dec 2025 10:02:10 +0000 Manifest next update: Sun 07 Dec 2025 10:02:10 +0000 Files and hashes: 1: I5Vy3fyrYpHmQQzNToYO42AA5mg.crl (hash: jeLM+xmi6SHMF94EV/R1mdIQRWz4fSSsxnn2VurUoUQ=) 2: cEnlNHZ35kSVNo2T27Ex45pap18.roa (hash: q/g4pWJ8XYH4irxAQK7i5w/oElgLduGOhld/VI56BOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:9d:9e:7f:f8:82:22:ef:b0:7d:f5:20:8e:7d:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=239572ddfcab6291e6410ccd4e860ee36000e668 Validity Not Before: Dec 6 10:02:10 2025 GMT Not After : Dec 7 10:02:10 2025 GMT Subject: CN=5fb0dadca25b1415a028da483f49d33256c056a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fa:96:c6:08:c7:25:bb:73:9f:bc:9f:98:26: 73:e4:62:5e:27:a0:d8:f1:54:c0:93:65:66:bd:11: 9f:8a:df:eb:49:00:13:db:f2:2a:51:d6:0e:f2:9e: 34:ad:2d:d4:b9:f2:23:d0:13:27:d2:14:7d:f6:d4: b3:ef:ad:d6:4f:e8:7e:ef:81:9c:60:31:af:a6:92: 1c:2d:9c:00:53:9f:a5:86:4c:8d:c4:45:e0:82:de: 70:67:33:57:cb:ca:f0:ac:46:63:eb:61:03:5c:b8: 00:b9:31:53:05:18:97:72:41:57:47:e1:56:f5:ec: 70:6f:a4:d5:d3:e5:32:be:2d:96:1a:1c:3c:05:bd: fc:17:d2:57:e7:93:64:d9:92:5f:cf:8f:8a:27:19: cf:b2:d7:30:42:85:ef:de:2b:00:5e:1f:5f:88:a8: 57:10:76:ce:ea:e0:bc:d4:b4:7a:3c:15:43:0c:18: 0d:b2:37:73:e2:6d:45:8b:04:b2:76:1a:ad:a9:48: 44:96:ac:8e:bf:72:62:59:e9:46:91:9e:9a:c3:60: 34:1e:1e:9a:b0:04:3f:74:f2:a4:dc:12:48:6d:ed: 7d:8e:77:03:cd:01:6a:66:2d:b2:72:8b:bd:a7:da: 22:47:3d:61:e7:27:3f:35:76:d6:01:8e:e7:40:6d: 92:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B0:DA:DC:A2:5B:14:15:A0:28:DA:48:3F:49:D3:32:56:C0:56:A6 X509v3 Authority Key Identifier: keyid:23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d5:44:37:c4:d6:da:e8:f7:90:38:e0:f1:fe:96:1d:d1:b7: 13:b8:3a:ac:23:43:a4:a3:0a:cf:04:a9:51:f9:a9:8d:e2:be: e1:bc:b8:21:ad:b3:25:cd:ac:2a:c4:5a:dd:3d:b5:f5:71:86: 9a:9c:52:8c:1e:c4:82:4b:09:d5:ff:ce:93:81:bb:73:1a:7b: 4f:59:85:cc:2a:25:1b:5a:c5:8a:a2:15:0e:ea:6d:88:f8:aa: 42:f5:6c:83:dc:2b:53:bc:a1:b1:42:1a:ba:2c:c5:37:f9:fd: 8c:fe:f5:be:0f:0c:14:4d:14:07:36:f5:18:77:b4:6b:12:a4: 8a:15:53:08:cb:b5:b1:2e:3e:b2:eb:2b:20:13:36:f6:97:07: e1:db:dd:13:33:2e:fb:ac:26:f9:fe:bd:84:77:c2:7e:84:69: b4:8d:54:ba:3a:ec:80:f4:fe:2a:77:5b:c3:a7:4b:34:2f:53: 49:21:e5:ab:d1:f0:60:19:ea:e7:27:43:96:77:99:36:cf:c2: 55:b1:70:a5:46:e7:69:93:9a:e6:18:39:60:fa:9a:a0:73:3d: eb:9a:f9:b9:6a:3e:ac:ca:4c:36:5b:50:fd:be:80:d9:28:ef: 7f:f7:df:3b:2b:74:30:b0:7b:ab:2f:d7:1f:f8:82:79:f6:22: 01:e5:34:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJ2ef/iCIu+wffUgjn2yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzOTU3MmRkZmNhYjYyOTFlNjQxMGNjZDRlODYwZWUzNjAw MGU2NjgwHhcNMjUxMjA2MTAwMjEwWhcNMjUxMjA3MTAwMjEwWjAzMTEwLwYDVQQD Eyg1ZmIwZGFkY2EyNWIxNDE1YTAyOGRhNDgzZjQ5ZDMzMjU2YzA1NmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPqWxgjHJbtzn7yfmCZz5GJeJ6DY 8VTAk2VmvRGfit/rSQAT2/IqUdYO8p40rS3UufIj0BMn0hR99tSz763WT+h+74Gc YDGvppIcLZwAU5+lhkyNxEXggt5wZzNXy8rwrEZj62EDXLgAuTFTBRiXckFXR+FW 9exwb6TV0+Uyvi2WGhw8Bb38F9JX55Nk2ZJfz4+KJxnPstcwQoXv3isAXh9fiKhX EHbO6uC81LR6PBVDDBgNsjdz4m1FiwSydhqtqUhElqyOv3JiWelGkZ6aw2A0Hh6a sAQ/dPKk3BJIbe19jncDzQFqZi2ycou9p9oiRz1h5yc/NXbWAY7nQG2SiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+w2tyiWxQVoCjaSD9J0zJWwFamMB8GA1UdIwQY MBaAFCOVct38q2KR5kEMzU6GDuNgAOZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTVWeTNmeXJZcEhtUVF6TlRvWU80MkFBNW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xZDdmMDgtZTc3Yy00MzM4LTlhMzkt OGUxOWMwZGI4NmMyLzEvSTVWeTNmeXJZcEhtUVF6TlRvWU80MkFBNW1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8xZDdmMDgtZTc3Yy00MzM4LTlhMzktOGUxOWMwZGI4NmMy LzEvSTVWeTNmeXJZcEhtUVF6TlRvWU80MkFBNW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdVEN8TW 2uj3kDjg8f6WHdG3E7g6rCNDpKMKzwSpUfmpjeK+4by4Ia2zJc2sKsRa3T219XGG mpxSjB7EgksJ1f/Ok4G7cxp7T1mFzColG1rFiqIVDuptiPiqQvVsg9wrU7yhsUIa uizFN/n9jP71vg8MFE0UBzb1GHe0axKkihVTCMu1sS4+susrIBM29pcH4dvdEzMu +6wm+f69hHfCfoRptI1UujrsgPT+Kndbw6dLNC9TSSHlq9HwYBnq5ydDlneZNs/C VbFwpUbnaZOa5hg5YPqaoHM965r5uWo+rMpMNltQ/b6A2Sjvf/ffOyt0MLB7qy/X H/iCefYiAeU05Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:59:03 2025 by rpki-client