This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft File: t5OlR78L4t7tfIT-kC4zZld6IxQ.mft (raw, json) Hash identifier: su/oDXJrNI34sTequviCLEL2kTBUJb8ToICct/JnUVU= Subject key identifier: A0:94:44:6F:9D:F3:1B:90:AB:05:6C:4B:78:47:78:BC:55:E4:1F:82 Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14 Certificate issuer: /CN=b793a547bf0be2deed7c84fe902e3366577a2314 Certificate serial: 019AF1D1CE6AB62BA066658BD324EF980077 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft Manifest number: 0FE5 Signing time: Sat 06 Dec 2025 04:00:49 +0000 Manifest this update: Sat 06 Dec 2025 04:00:49 +0000 Manifest next update: Sun 07 Dec 2025 04:00:49 +0000 Files and hashes: 1: Fu8V7L-KmE4RQ0KgwQ-l9VyTFvE.roa (hash: G5JYSxAwHyem4a69edN/KGJ90OxsVksEMhgNs6pZaOw=) 2: fuJdLqdlLbSFzR5wICuESp5-Mhc.roa (hash: cagQfCDycKKd/UTpNij0HKDwbg7i0kvIBBf3pZu1p7Q=) 3: t5OlR78L4t7tfIT-kC4zZld6IxQ.crl (hash: mHh9FhgyKZLi4nxOXKiUBivWlr9IKih/m1yzkhLUbRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ce:6a:b6:2b:a0:66:65:8b:d3:24:ef:98:00:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314 Validity Not Before: Dec 6 04:00:49 2025 GMT Not After : Dec 7 04:00:49 2025 GMT Subject: CN=a094446f9df31b90ab056c4b784778bc55e41f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:04:8a:bc:b3:7a:25:35:7a:9e:44:29:e9:0f: c1:71:2d:93:a7:44:af:cf:38:c4:c6:f7:32:b5:7f: 09:93:ef:c0:dc:db:40:75:12:1f:b1:2c:c1:0d:be: 68:ba:0b:72:87:52:c8:f5:79:ed:cf:4c:58:92:92: 06:84:95:1f:16:37:7e:b5:2d:65:7e:d2:63:dc:06: fe:c1:87:50:a4:66:dc:ec:23:56:78:87:12:0c:4a: 7f:db:ca:f4:1c:1b:04:cb:00:cd:cd:35:b7:f9:51: 21:b4:f6:4e:07:dc:44:47:80:b2:2b:de:99:cd:f1: a4:5f:0d:66:33:1c:ab:33:ef:b2:e9:26:97:76:6e: d6:e2:63:12:77:11:8b:00:da:49:3b:e8:f3:7f:d0: 8a:9f:73:a2:63:fa:22:eb:d0:2b:c8:2c:eb:4c:3b: 4d:36:3e:55:17:f2:a9:40:4c:33:6c:35:6c:d0:f7: 00:fc:18:c4:8a:26:e0:ea:43:76:6e:5d:fd:64:f8: 4a:b2:c9:47:dc:01:3a:37:80:5d:6c:14:03:2a:17: 57:31:85:38:fb:d5:55:09:59:4c:9a:a0:46:2b:bb: f9:7a:3b:6b:bd:ed:9b:ee:f4:f7:0f:a5:14:70:e9: 01:23:96:2f:3e:a2:45:f0:65:ea:98:0b:e1:6a:dc: ff:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:94:44:6F:9D:F3:1B:90:AB:05:6C:4B:78:47:78:BC:55:E4:1F:82 X509v3 Authority Key Identifier: keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:95:90:77:c1:80:b6:3d:ac:c4:86:43:67:17:71:35:05:8e: 8d:87:3d:56:65:7a:78:98:ef:00:28:77:92:1c:56:c0:39:88: 5d:95:4a:51:f9:62:ef:02:b3:d0:b5:28:4d:26:bf:d7:17:1b: 23:67:c7:59:8c:0b:3e:ec:a4:69:eb:cc:bc:ef:09:b3:71:2b: a6:10:e8:ed:32:69:73:1d:26:24:e2:04:5d:3d:44:1f:af:ff: 3f:6f:82:ef:87:56:b2:82:ee:20:b7:f4:bc:d0:7b:b7:69:ec: 93:93:42:1f:ad:fb:27:37:53:1a:be:ec:7f:20:a8:09:0f:4a: c5:cb:51:74:7f:6c:e1:17:0e:9e:d8:0f:f1:9b:24:cb:6b:6d: 37:55:63:44:24:67:25:8f:12:42:e8:6d:a0:df:9a:c8:d8:cc: ac:aa:c7:a1:a4:f6:19:24:4a:f8:65:e7:6d:b6:98:e4:ce:a3: 0d:6d:ee:1c:c4:dd:e0:b0:a7:ed:36:d9:eb:fd:0a:5c:10:99: 1e:60:e7:8b:f2:10:c8:be:d4:05:e3:82:03:c8:27:3b:22:9a: af:d3:a8:f4:07:95:90:4c:73:4d:01:28:67:1a:1c:ec:e8:e5: ad:c7:ff:51:ec:27:81:71:f5:5f:a4:aa:e8:37:ed:3f:cd:0a: e0:16:45:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0c5qtiugZmWL0yTvmAB3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OTNhNTQ3YmYwYmUyZGVlZDdjODRmZTkwMmUzMzY2NTc3 YTIzMTQwHhcNMjUxMjA2MDQwMDQ5WhcNMjUxMjA3MDQwMDQ5WjAzMTEwLwYDVQQD EyhhMDk0NDQ2ZjlkZjMxYjkwYWIwNTZjNGI3ODQ3NzhiYzU1ZTQxZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQSKvLN6JTV6nkQp6Q/BcS2Tp0Sv zzjExvcytX8Jk+/A3NtAdRIfsSzBDb5ougtyh1LI9Xntz0xYkpIGhJUfFjd+tS1l ftJj3Ab+wYdQpGbc7CNWeIcSDEp/28r0HBsEywDNzTW3+VEhtPZOB9xER4CyK96Z zfGkXw1mMxyrM++y6SaXdm7W4mMSdxGLANpJO+jzf9CKn3OiY/oi69AryCzrTDtN Nj5VF/KpQEwzbDVs0PcA/BjEiibg6kN2bl39ZPhKsslH3AE6N4BdbBQDKhdXMYU4 +9VVCVlMmqBGK7v5ejtrve2b7vT3D6UUcOkBI5YvPqJF8GXqmAvhatz/wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCURG+d8xuQqwVsS3hHeLxV5B+CMB8GA1UdIwQY MBaAFLeTpUe/C+Le7XyE/pAuM2ZXeiMUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDVPbFI3OEw0dDd0ZklULWtDNHpabGQ2SXhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xNGY0MjktMDNiNC00NDIzLWJiNGMt ZjBjMzMyNTZmYjIyLzEvdDVPbFI3OEw0dDd0ZklULWtDNHpabGQ2SXhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8xNGY0MjktMDNiNC00NDIzLWJiNGMtZjBjMzMyNTZmYjIy LzEvdDVPbFI3OEw0dDd0ZklULWtDNHpabGQ2SXhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJWQd8GA tj2sxIZDZxdxNQWOjYc9VmV6eJjvACh3khxWwDmIXZVKUfli7wKz0LUoTSa/1xcb I2fHWYwLPuykaevMvO8Js3ErphDo7TJpcx0mJOIEXT1EH6//P2+C74dWsoLuILf0 vNB7t2nsk5NCH637JzdTGr7sfyCoCQ9KxctRdH9s4RcOntgP8Zsky2ttN1VjRCRn JY8SQuhtoN+ayNjMrKrHoaT2GSRK+GXnbbaY5M6jDW3uHMTd4LCn7TbZ6/0KXBCZ HmDni/IQyL7UBeOCA8gnOyKar9Oo9AeVkExzTQEoZxoc7Ojlrcf/UewngXH1X6Sq 6DftP80K4BZFQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:11 2025 by rpki-client