This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft File: peC5TwtOTIRu-c8nzciBEIdrHPM.mft (raw, json) Hash identifier: dtkuAIoL2hUfE0DnjB3NPaDHPfuHFgOO24HZsuRyyNE= Subject key identifier: 79:EE:E4:52:45:41:62:8E:7A:8D:1A:97:D5:1A:B8:62:01:E0:59:3E Authority key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3 Certificate issuer: /CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3 Certificate serial: 019B3268A2E02F035CFAF81F869728ED52CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 17:01:16 +0000 Manifest this update: Thu 18 Dec 2025 17:01:16 +0000 Manifest next update: Fri 19 Dec 2025 17:01:16 +0000 Files and hashes: 1: h7eLMCHte9yG-YlFcanGWeY98cc.roa (hash: XK6lpwQoOO2MYAb/MpQPPdSt14GbrWEwi/jo8t+GYvc=) 2: peC5TwtOTIRu-c8nzciBEIdrHPM.crl (hash: xNdCzijPOLSjjJXIqTKkwbe/7zC0alJ4flUpSAxAVvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:a2:e0:2f:03:5c:fa:f8:1f:86:97:28:ed:52:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3 Validity Not Before: Dec 18 17:01:16 2025 GMT Not After : Dec 19 17:01:16 2025 GMT Subject: CN=79eee4524541628e7a8d1a97d51ab86201e0593e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e5:ef:fc:e2:7e:62:25:8c:3e:dc:03:c4:0c: 4c:69:51:3f:73:60:bb:c4:83:f5:0a:2e:e4:8a:b7: 9e:24:4b:1f:e9:bf:79:e4:6a:ee:a6:54:b5:3f:20: c8:b7:c5:f2:2f:cb:b3:47:43:65:a4:f2:90:a7:4c: f2:3b:ea:95:d1:b1:6e:78:93:41:1c:94:b7:c4:73: ea:45:b5:a7:0e:98:4b:25:e0:8b:5c:ba:3a:27:84: 7b:ab:73:32:06:48:16:53:fe:ab:21:39:be:16:fd: f3:de:81:7f:33:40:39:10:61:d5:11:c7:7d:ae:83: 23:48:fd:e9:fe:5f:e2:5c:6e:82:7f:f0:5e:b4:3c: 78:8a:e3:40:f5:18:69:00:c9:24:82:1d:b2:10:0d: d9:df:82:de:91:c0:04:61:53:3c:ac:31:0d:37:2a: 24:1f:fd:2b:59:1d:60:5a:14:f5:bb:d9:01:80:70: c4:d2:d2:1d:6b:86:24:45:0d:bc:36:cd:55:16:46: bf:9c:e4:99:91:df:10:5b:6b:fc:ba:f3:63:8f:03: 5b:79:44:25:07:d9:09:e8:5c:71:63:c8:b4:00:23: d7:59:df:12:bc:28:c9:dc:0c:38:60:68:c8:20:49: 83:1a:4d:00:17:f4:8f:a7:42:cf:c0:f7:4e:44:72: f7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EE:E4:52:45:41:62:8E:7A:8D:1A:97:D5:1A:B8:62:01:E0:59:3E X509v3 Authority Key Identifier: keyid:A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:22:18:29:d1:89:7c:c8:a1:c9:ae:23:ef:76:82:29:c0:fe: fe:72:10:69:f0:67:91:a6:6d:eb:36:43:78:18:6d:d4:1a:a8: 87:2e:f2:4b:e9:b0:6e:9b:4e:41:13:38:56:ec:2d:83:b8:34: 7c:c2:60:90:36:63:40:d4:e5:4b:cf:4e:17:d2:51:80:c4:ad: 13:6c:ec:b6:de:75:44:d9:ba:88:2c:99:5c:86:36:05:61:71: 9f:f5:48:a4:5b:0e:9d:71:0f:22:95:3e:3a:d3:d2:84:e0:32: 1e:ab:a8:94:93:66:bd:88:33:67:fa:77:d1:25:e9:96:46:76: ba:60:90:81:23:c5:0e:ce:63:d5:62:6a:96:bd:6e:29:d9:a9: 22:b2:5a:81:17:67:30:9f:d9:41:29:4c:08:d6:d3:be:ad:5f: c5:9a:00:1a:e8:1f:ea:5f:d1:3a:6c:fa:62:3d:7c:c0:c0:ca: 57:fd:1c:f6:c5:99:d6:62:5e:8e:3e:b9:e7:28:f4:6f:39:23: 96:85:ad:4c:30:5f:18:e3:4b:2c:e0:4f:82:a5:f0:32:30:e5: ba:89:65:3d:26:21:b2:19:1f:5b:5d:ad:f3:72:16:92:c1:05: bd:bb:f9:36:e7:9a:bb:b3:41:67:4b:19:f1:1c:28:25:b9:3f: 3a:4c:d5:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaKLgLwNc+vgfhpco7VLNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZTBiOTRmMGI0ZTRjODQ2ZWY5Y2YyN2NkYzg4MTEwODc2 YjFjZjMwHhcNMjUxMjE4MTcwMTE2WhcNMjUxMjE5MTcwMTE2WjAzMTEwLwYDVQQD Eyg3OWVlZTQ1MjQ1NDE2MjhlN2E4ZDFhOTdkNTFhYjg2MjAxZTA1OTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+Xv/OJ+YiWMPtwDxAxMaVE/c2C7 xIP1Ci7kireeJEsf6b955GruplS1PyDIt8XyL8uzR0NlpPKQp0zyO+qV0bFueJNB HJS3xHPqRbWnDphLJeCLXLo6J4R7q3MyBkgWU/6rITm+Fv3z3oF/M0A5EGHVEcd9 roMjSP3p/l/iXG6Cf/BetDx4iuNA9RhpAMkkgh2yEA3Z34LekcAEYVM8rDENNyok H/0rWR1gWhT1u9kBgHDE0tIda4YkRQ28Ns1VFka/nOSZkd8QW2v8uvNjjwNbeUQl B9kJ6FxxY8i0ACPXWd8SvCjJ3Aw4YGjIIEmDGk0AF/SPp0LPwPdORHL32QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnu5FJFQWKOeo0al9UauGIB4Fk+MB8GA1UdIwQY MBaAFKXguU8LTkyEbvnPJ83IgRCHaxzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGVDNVR3dE9USVJ1LWM4bnpjaUJFSWRySFBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zODc3MjAtNTc4NC00ZTAzLTgxM2Mt MTNiMjkwNzUwZmI5LzEvcGVDNVR3dE9USVJ1LWM4bnpjaUJFSWRySFBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zODc3MjAtNTc4NC00ZTAzLTgxM2MtMTNiMjkwNzUwZmI5 LzEvcGVDNVR3dE9USVJ1LWM4bnpjaUJFSWRySFBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEyIYKdGJ fMihya4j73aCKcD+/nIQafBnkaZt6zZDeBht1Bqohy7yS+mwbptOQRM4Vuwtg7g0 fMJgkDZjQNTlS89OF9JRgMStE2zstt51RNm6iCyZXIY2BWFxn/VIpFsOnXEPIpU+ OtPShOAyHquolJNmvYgzZ/p30SXplkZ2umCQgSPFDs5j1WJqlr1uKdmpIrJagRdn MJ/ZQSlMCNbTvq1fxZoAGugf6l/ROmz6Yj18wMDKV/0c9sWZ1mJejj655yj0bzkj loWtTDBfGONLLOBPgqXwMjDluollPSYhshkfW12t83IWksEFvbv5Nueau7NBZ0sZ 8RwoJbk/OkzV2A== -----END CERTIFICATE-----Generated at Thu Dec 18 22:12:12 2025 by rpki-client