This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft File: b5NgtvWDmq_c4hzW3nY72qJr-_A.mft (raw, json) Hash identifier: V2Zk8OMznGroZUNZmH16JDIKnXSqMgRJXB/98O5lUMI= Subject key identifier: 18:DF:28:7E:40:E3:A4:FD:2F:5C:93:DC:4E:5B:42:D7:D5:CF:71:68 Authority key identifier: 6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0 Certificate issuer: /CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0 Certificate serial: 019AF19AFB5A4547965C1AA8D429C8AB4A86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft Manifest number: 0B6F Signing time: Sat 06 Dec 2025 03:00:57 +0000 Manifest this update: Sat 06 Dec 2025 03:00:57 +0000 Manifest next update: Sun 07 Dec 2025 03:00:57 +0000 Files and hashes: 1: 3-lLWfL65uJnHZ2rztKfPXmI6kg.roa (hash: TNLFS3eE9Ow6yD/bR32mYv3A5v+ZXVoId2+UI7n/x9s=) 2: b5NgtvWDmq_c4hzW3nY72qJr-_A.crl (hash: mhjz6Lzu5WehEM6xiMobe9rI/V86d4DijF15zL+yTrk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:fb:5a:45:47:96:5c:1a:a8:d4:29:c8:ab:4a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0 Validity Not Before: Dec 6 03:00:57 2025 GMT Not After : Dec 7 03:00:57 2025 GMT Subject: CN=18df287e40e3a4fd2f5c93dc4e5b42d7d5cf7168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b3:11:28:27:19:50:19:08:a7:cf:53:8c:6d: 0f:d2:39:5d:2d:4a:db:d4:cd:01:3e:3c:9f:81:4b: fd:37:5b:c0:dc:35:ae:7b:b6:c1:b8:69:7d:2f:b2: 7b:26:f6:8c:78:2b:94:4b:d5:c0:99:95:de:1e:ae: 1f:61:46:d6:e3:45:40:20:1a:86:33:bb:70:48:78: bb:1f:b6:b7:af:c7:68:e4:83:79:ab:6e:82:eb:f1: 8a:08:48:84:24:fb:16:0d:b0:3b:74:0a:df:1d:d8: aa:31:21:1b:47:24:54:95:02:05:4c:34:d8:5d:58: 90:32:04:3c:78:01:e7:36:a9:28:91:21:0c:d9:ef: 1d:9c:01:a9:10:a3:d8:34:3c:69:32:f3:eb:d1:77: 0d:2c:3c:2d:42:10:55:43:26:df:e3:c5:4f:16:59: d0:66:07:9f:8f:e0:82:fd:3a:75:8d:cb:b2:33:f6: 0a:a3:f2:34:ea:fa:d3:c6:9d:81:44:56:91:01:0b: d4:cd:a7:b5:c8:0d:59:2a:33:dd:19:3b:e7:ee:23: 6e:09:2f:e9:c7:0e:a0:a2:67:bf:77:f9:f8:fc:ad: 0e:7c:6e:5e:06:40:e9:80:98:36:4f:3d:b1:0a:9d: 08:8b:af:65:1b:25:26:34:df:ac:3a:70:a7:fa:08: 60:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DF:28:7E:40:E3:A4:FD:2F:5C:93:DC:4E:5B:42:D7:D5:CF:71:68 X509v3 Authority Key Identifier: keyid:6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:64:f2:16:36:01:64:ad:50:2c:c9:d4:be:13:6a:99:a2:d4: c0:c9:40:41:d1:7d:07:fc:47:0f:53:de:65:22:e5:9a:65:26: 41:0b:c1:be:00:74:50:c4:a2:9d:3c:34:7a:51:72:28:84:78: 60:8c:b3:32:d5:9c:af:cf:4e:bc:2a:c8:a6:6d:92:58:89:cc: f0:4e:68:cf:d4:9a:d7:77:d9:75:e2:90:bb:b3:de:bd:f5:ba: 6b:fa:b6:d2:03:46:5b:b5:73:4a:6f:80:7f:ba:0f:a9:3b:34: 95:4a:8e:77:8d:1b:49:3c:d0:f7:17:5f:24:ab:4e:ee:c9:35: 29:8d:0b:49:ea:2c:25:87:33:a4:a5:44:30:68:60:f1:17:4e: d8:16:43:92:ed:07:d7:51:b3:d4:33:23:b8:23:57:7e:85:d7: aa:a0:2c:ae:c1:8d:4a:01:3a:25:f1:52:3d:f8:39:fc:56:2c: b4:96:c2:c9:82:47:f3:16:45:0c:9d:b9:94:43:af:6f:8f:39: 15:67:04:56:9a:30:ca:f1:49:13:d1:6e:a2:92:db:2c:14:fa: 19:27:63:05:cc:dd:c8:0c:df:8c:cb:1b:45:48:dc:9e:e0:05: c2:24:54:67:be:fc:f9:1c:9a:52:c3:37:4f:ca:1e:14:90:34: 7b:5c:22:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvtaRUeWXBqo1CnIq0qGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOTM2MGI2ZjU4MzlhYWZkY2UyMWNkNmRlNzYzYmRhYTI2 YmZiZjAwHhcNMjUxMjA2MDMwMDU3WhcNMjUxMjA3MDMwMDU3WjAzMTEwLwYDVQQD EygxOGRmMjg3ZTQwZTNhNGZkMmY1YzkzZGM0ZTViNDJkN2Q1Y2Y3MTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7MRKCcZUBkIp89TjG0P0jldLUrb 1M0BPjyfgUv9N1vA3DWue7bBuGl9L7J7JvaMeCuUS9XAmZXeHq4fYUbW40VAIBqG M7twSHi7H7a3r8do5IN5q26C6/GKCEiEJPsWDbA7dArfHdiqMSEbRyRUlQIFTDTY XViQMgQ8eAHnNqkokSEM2e8dnAGpEKPYNDxpMvPr0XcNLDwtQhBVQybf48VPFlnQ Zgefj+CC/Tp1jcuyM/YKo/I06vrTxp2BRFaRAQvUzae1yA1ZKjPdGTvn7iNuCS/p xw6gome/d/n4/K0OfG5eBkDpgJg2Tz2xCp0Ii69lGyUmNN+sOnCn+ghgOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjfKH5A46T9L1yT3E5bQtfVz3FoMB8GA1UdIwQY MBaAFG+TYLb1g5qv3OIc1t52O9qia/vwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjVOZ3R2V0RtcV9jNGh6VzNuWTcycUpyLV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lMDU2MTQtMjgyNC00Mjk4LWJlMGMt ZTNhN2ZmMTFjNjMxLzEvYjVOZ3R2V0RtcV9jNGh6VzNuWTcycUpyLV9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9lMDU2MTQtMjgyNC00Mjk4LWJlMGMtZTNhN2ZmMTFjNjMx LzEvYjVOZ3R2V0RtcV9jNGh6VzNuWTcycUpyLV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmTyFjYB ZK1QLMnUvhNqmaLUwMlAQdF9B/xHD1PeZSLlmmUmQQvBvgB0UMSinTw0elFyKIR4 YIyzMtWcr89OvCrIpm2SWInM8E5oz9Sa13fZdeKQu7PevfW6a/q20gNGW7VzSm+A f7oPqTs0lUqOd40bSTzQ9xdfJKtO7sk1KY0LSeosJYczpKVEMGhg8RdO2BZDku0H 11Gz1DMjuCNXfoXXqqAsrsGNSgE6JfFSPfg5/FYstJbCyYJH8xZFDJ25lEOvb485 FWcEVpowyvFJE9FuopLbLBT6GSdjBczdyAzfjMsbRUjcnuAFwiRUZ778+RyaUsM3 T8oeFJA0e1wi+A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:14 2025 by rpki-client