This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft File: i5sBY-7p55KqoWt9UQXTRyEfMSM.mft (raw, json) Hash identifier: OqUwZJHY32p+hi3q8ZjjLyo6l9kd2iWor7pev0kLim8= Subject key identifier: 51:14:D4:DB:CE:F7:4D:16:23:C5:1E:81:6B:F3:94:19:B9:70:D4:C3 Authority key identifier: 8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23 Certificate issuer: /CN=8b9b0163eee9e792aaa16b7d5105d347211f3123 Certificate serial: 019AF389379DC45FB79A3D89643CF5CEF36C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft Manifest number: 0FAF Signing time: Sat 06 Dec 2025 12:00:47 +0000 Manifest this update: Sat 06 Dec 2025 12:00:47 +0000 Manifest next update: Sun 07 Dec 2025 12:00:47 +0000 Files and hashes: 1: 0SrGSoxm46KHk5s_SkJdGCE1HAE.roa (hash: JwOVM2pq6uVpoEw0ksou2dKNGwx9rwOtGk9iEkBHbFc=) 2: Fj752bkxuJMKiLz6DxiNHNPGnCc.roa (hash: igeXZDlVZiFGBhSeEn8vHaUr4m/y63zRGTprEOmyBsQ=) 3: i5sBY-7p55KqoWt9UQXTRyEfMSM.crl (hash: yh3xFPQQLypmImW+dlb9fhhZKrw8ZJxSrWOSazMVwGY=) 4: t9CNJf3eXwpeMjr9B2y5JwU1fgQ.roa (hash: 1VYdgaCmthgCjQEP8F7ZlA1j3DUuIWlR2jF27HX+0/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:37:9d:c4:5f:b7:9a:3d:89:64:3c:f5:ce:f3:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9b0163eee9e792aaa16b7d5105d347211f3123 Validity Not Before: Dec 6 12:00:47 2025 GMT Not After : Dec 7 12:00:47 2025 GMT Subject: CN=5114d4dbcef74d1623c51e816bf39419b970d4c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:90:fc:01:46:26:49:29:38:28:e4:30:4e:bb: a7:91:91:74:1c:67:9c:87:5f:1c:4b:fa:09:52:41: 7b:45:ed:d7:71:41:a0:a6:d9:14:8b:a7:37:96:31: e5:75:08:0e:f1:8c:e1:4f:17:43:6c:57:4b:62:18: 15:70:32:f5:c4:cb:ad:8b:49:43:c4:66:aa:4b:ef: 73:78:d5:59:81:28:47:1c:2f:7f:3e:35:d3:2f:f6: 75:77:ac:d6:e2:3b:29:d2:4b:b8:cf:73:94:6f:4c: bb:78:a2:34:c6:1f:f1:61:ed:78:74:22:a5:82:52: c8:26:eb:57:b6:15:b0:08:8e:64:62:86:3f:d3:9c: ea:63:88:a7:ce:b9:50:55:cf:75:2c:54:49:d9:0d: 6a:d5:03:ce:46:b9:ed:f3:6e:c4:14:88:fe:df:23: 7f:54:bb:5c:b6:de:55:37:c4:5b:0d:47:0f:c8:e3: 25:45:8e:a3:fd:9e:85:8c:fd:0f:14:83:fd:d1:01: 38:c0:fe:3c:2a:48:18:de:bf:bc:6f:d2:f1:6b:01: 49:fd:b3:09:f9:ca:25:aa:89:d1:72:f7:80:b2:58: 6f:ef:eb:c9:93:ff:32:92:5e:9d:a0:eb:fe:8e:a1: d1:b1:72:5b:7e:ff:62:28:30:03:99:d1:41:7f:da: c1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:14:D4:DB:CE:F7:4D:16:23:C5:1E:81:6B:F3:94:19:B9:70:D4:C3 X509v3 Authority Key Identifier: keyid:8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:6d:df:81:06:26:80:fa:0f:6a:08:45:2f:89:3e:b9:dd:d7: 9c:bd:32:76:06:49:ea:09:47:35:10:d9:93:09:5e:a9:a6:be: c1:7c:36:ac:4c:d7:ea:09:74:ed:b5:51:8d:fd:3d:8c:08:f6: 1e:a4:7a:c9:56:9f:02:0f:3a:70:94:35:94:31:62:0a:fe:c3: 19:9e:67:e3:1b:2f:c1:97:84:b1:96:9d:f2:de:e3:cf:11:8d: 9d:87:9b:56:10:24:e0:75:25:4a:2c:d9:b7:25:19:09:cb:38: 72:5b:1a:33:36:c0:ce:c6:76:7d:cd:a8:2e:37:fb:61:69:7d: 71:d2:63:cd:b8:75:36:f7:06:63:74:e8:5d:93:fe:c6:05:ad: cc:5e:d7:e1:4e:9a:43:2c:e4:26:c6:d4:bc:e8:00:c7:88:41: ad:57:fd:4e:21:2b:1c:69:21:2a:13:7e:6e:e7:50:b8:d8:b8: 44:09:cf:20:ab:af:64:d1:c2:44:9a:68:a0:55:85:63:ec:2b: 53:20:f7:7e:9c:d5:d4:1b:50:25:52:c1:36:3e:4c:58:d3:d7: 91:ef:70:1f:3d:f0:f1:68:2e:3c:9d:4e:48:48:fe:1d:1c:d0: 05:05:b3:13:1e:79:e9:23:55:a4:97:14:f3:49:ee:ea:8b:ba: 51:fb:1a:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziTedxF+3mj2JZDz1zvNsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOWIwMTYzZWVlOWU3OTJhYWExNmI3ZDUxMDVkMzQ3MjEx ZjMxMjMwHhcNMjUxMjA2MTIwMDQ3WhcNMjUxMjA3MTIwMDQ3WjAzMTEwLwYDVQQD Eyg1MTE0ZDRkYmNlZjc0ZDE2MjNjNTFlODE2YmYzOTQxOWI5NzBkNGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JD8AUYmSSk4KOQwTrunkZF0HGec h18cS/oJUkF7Re3XcUGgptkUi6c3ljHldQgO8YzhTxdDbFdLYhgVcDL1xMuti0lD xGaqS+9zeNVZgShHHC9/PjXTL/Z1d6zW4jsp0ku4z3OUb0y7eKI0xh/xYe14dCKl glLIJutXthWwCI5kYoY/05zqY4inzrlQVc91LFRJ2Q1q1QPORrnt827EFIj+3yN/ VLtctt5VN8RbDUcPyOMlRY6j/Z6FjP0PFIP90QE4wP48KkgY3r+8b9LxawFJ/bMJ +colqonRcveAslhv7+vJk/8ykl6doOv+jqHRsXJbfv9iKDADmdFBf9rBBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEU1NvO900WI8UegWvzlBm5cNTDMB8GA1UdIwQY MBaAFIubAWPu6eeSqqFrfVEF00chHzEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTVzQlktN3A1NUtxb1d0OVVRWFRSeUVmTVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yYjgwMGUtNjk1My00MDA5LWIxOTUt NDFiMjY2MDdiZjM2LzEvaTVzQlktN3A1NUtxb1d0OVVRWFRSeUVmTVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yYjgwMGUtNjk1My00MDA5LWIxOTUtNDFiMjY2MDdiZjM2 LzEvaTVzQlktN3A1NUtxb1d0OVVRWFRSeUVmTVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP23fgQYm gPoPaghFL4k+ud3XnL0ydgZJ6glHNRDZkwleqaa+wXw2rEzX6gl07bVRjf09jAj2 HqR6yVafAg86cJQ1lDFiCv7DGZ5n4xsvwZeEsZad8t7jzxGNnYebVhAk4HUlSizZ tyUZCcs4clsaMzbAzsZ2fc2oLjf7YWl9cdJjzbh1NvcGY3ToXZP+xgWtzF7X4U6a QyzkJsbUvOgAx4hBrVf9TiErHGkhKhN+budQuNi4RAnPIKuvZNHCRJpooFWFY+wr UyD3fpzV1BtQJVLBNj5MWNPXke9wHz3w8WguPJ1OSEj+HRzQBQWzEx556SNVpJcU 80nu6ou6UfsaZw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:09:28 2025 by rpki-client