This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft File: B5602MZfOntFTKKl5fZAlOnYi9M.mft (raw, json) Hash identifier: 8GphtQBlSGHdDGbP0YL1E9QalZ5cffJvOVvDioQrhLw= Subject key identifier: 69:BA:E5:24:6A:09:1D:14:73:F3:6A:F5:1A:28:08:B4:1E:DD:20:D1 Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3 Certificate issuer: /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3 Certificate serial: 019AF19B6435EEA3D61B6E0C341E661B14AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 03:01:24 +0000 Manifest this update: Sat 06 Dec 2025 03:01:24 +0000 Manifest next update: Sun 07 Dec 2025 03:01:24 +0000 Files and hashes: 1: AY8RhKUHj2NodWuR-dwkYpgBEvk.roa (hash: 8sR3EhQJ4OZ7BluQZL72WnRYRz2pw1cIu2X1WaLS0DE=) 2: B5602MZfOntFTKKl5fZAlOnYi9M.crl (hash: q8LvBG81HFz9asXgkAviOewsHczQppnNpvK60OqHSn4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:64:35:ee:a3:d6:1b:6e:0c:34:1e:66:1b:14:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3 Validity Not Before: Dec 6 03:01:24 2025 GMT Not After : Dec 7 03:01:24 2025 GMT Subject: CN=69bae5246a091d1473f36af51a2808b41edd20d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ea:ab:3b:c7:78:f7:58:f2:a5:e0:cb:e6:cd: e1:fe:e8:74:af:59:ba:94:4a:03:70:48:77:cc:8b: 46:c1:c2:36:cb:1b:6a:b4:74:60:a6:a9:05:03:b6: 64:14:f9:01:9f:af:17:32:49:aa:b6:62:99:3f:eb: de:11:33:d2:70:3e:a7:e4:03:77:a2:0d:04:57:b2: 81:e4:9c:62:06:d3:d2:64:05:58:40:0e:42:f7:9b: 39:e0:eb:f8:0b:f2:c3:cb:b6:ba:64:27:54:c0:47: 37:a0:dd:e6:e0:7c:57:d8:9f:62:fe:f3:dd:f1:02: 73:71:20:b4:18:8d:91:90:0e:20:bd:10:25:6d:a7: 2e:63:69:32:4b:e9:db:51:36:af:72:c5:ee:6b:98: 0d:af:3a:e6:ae:b9:d2:01:06:0f:02:fa:95:28:26: 02:ff:24:ba:9b:1e:1e:ab:86:0a:89:18:9e:6a:f5: a8:7f:12:1f:f6:73:df:6d:5c:05:d0:cf:db:0f:9b: f5:13:50:c6:9d:ed:e1:ec:1f:0e:82:07:35:ba:81: 4a:99:28:6c:31:bb:e4:ca:d9:9f:e0:99:61:07:e7: cd:0b:dd:ce:d0:14:aa:fe:55:72:2a:d3:42:d8:f9: 3f:66:85:3d:b0:c4:e8:a4:a0:86:8d:bf:21:3f:0d: 45:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BA:E5:24:6A:09:1D:14:73:F3:6A:F5:1A:28:08:B4:1E:DD:20:D1 X509v3 Authority Key Identifier: keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:b7:d3:7e:2d:9b:ad:06:07:b3:b9:41:1f:d4:f4:84:e3:94: 00:36:31:71:f7:22:18:bd:c1:a2:b6:fc:0e:0d:c5:67:c4:cc: 28:43:aa:e6:16:02:9a:0e:64:33:31:69:06:87:a1:c3:c0:6c: d2:0d:14:28:76:37:8d:cb:9b:a2:e1:13:b3:cb:df:c8:6b:cb: d6:e2:78:b0:7f:25:be:27:25:cc:8e:cd:28:f3:a9:90:29:ee: 2e:36:7c:4d:9b:e8:94:cd:77:aa:ea:19:14:da:ca:f3:70:2c: bb:46:28:f0:52:92:04:5b:83:6f:78:24:1c:87:0f:f5:01:10: ed:6b:95:47:96:dc:6a:08:36:5a:39:9d:55:fb:f1:38:3a:89: c9:3e:19:af:8c:16:26:ee:0e:17:f8:10:1a:7b:3f:aa:cd:a6: 2d:c0:ce:43:9d:65:ee:d7:d4:89:48:e8:29:1e:1d:1f:31:11: 01:65:55:b8:60:85:e9:4f:bd:1e:30:df:d7:b5:63:43:25:b6: 2e:ea:46:fe:e3:cc:d0:70:f5:3d:ea:c9:17:32:a8:01:e3:99: 12:21:ee:92:63:66:bc:67:61:bc:84:d8:fc:f8:2f:87:23:a7: d1:bf:03:b8:7d:7d:fe:66:38:a6:5b:cd:fd:87:7e:2a:af:2e: de:03:3e:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2Q17qPWG24MNB5mGxSvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OWViNGQ4YzY1ZjNhN2I0NTRjYTJhNWU1ZjY0MDk0ZTlk ODhiZDMwHhcNMjUxMjA2MDMwMTI0WhcNMjUxMjA3MDMwMTI0WjAzMTEwLwYDVQQD Eyg2OWJhZTUyNDZhMDkxZDE0NzNmMzZhZjUxYTI4MDhiNDFlZGQyMGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueqrO8d491jypeDL5s3h/uh0r1m6 lEoDcEh3zItGwcI2yxtqtHRgpqkFA7ZkFPkBn68XMkmqtmKZP+veETPScD6n5AN3 og0EV7KB5JxiBtPSZAVYQA5C95s54Ov4C/LDy7a6ZCdUwEc3oN3m4HxX2J9i/vPd 8QJzcSC0GI2RkA4gvRAlbacuY2kyS+nbUTavcsXua5gNrzrmrrnSAQYPAvqVKCYC /yS6mx4eq4YKiRieavWofxIf9nPfbVwF0M/bD5v1E1DGne3h7B8Oggc1uoFKmShs Mbvkytmf4JlhB+fNC93O0BSq/lVyKtNC2Pk/ZoU9sMTopKCGjb8hPw1FvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGm65SRqCR0Uc/Nq9RooCLQe3SDRMB8GA1UdIwQY MBaAFAeetNjGXzp7RUyipeX2QJTp2IvTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjU2MDJNWmZPbnRGVEtLbDVmWkFsT25ZaTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yZmMwMDctMzYxZC00ZjQ3LWFhZjct NDg0ZDg0M2U2ZGUzLzEvQjU2MDJNWmZPbnRGVEtLbDVmWkFsT25ZaTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yZmMwMDctMzYxZC00ZjQ3LWFhZjctNDg0ZDg0M2U2ZGUz LzEvQjU2MDJNWmZPbnRGVEtLbDVmWkFsT25ZaTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7fTfi2b rQYHs7lBH9T0hOOUADYxcfciGL3Borb8Dg3FZ8TMKEOq5hYCmg5kMzFpBoehw8Bs 0g0UKHY3jcubouETs8vfyGvL1uJ4sH8lviclzI7NKPOpkCnuLjZ8TZvolM13quoZ FNrK83Asu0Yo8FKSBFuDb3gkHIcP9QEQ7WuVR5bcagg2WjmdVfvxODqJyT4Zr4wW Ju4OF/gQGns/qs2mLcDOQ51l7tfUiUjoKR4dHzERAWVVuGCF6U+9HjDf17VjQyW2 LupG/uPM0HD1PerJFzKoAeOZEiHukmNmvGdhvITY/PgvhyOn0b8DuH19/mY4plvN /Yd+Kq8u3gM+fA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:28 2025 by rpki-client