This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft File: p5860xQqLAL5krlqsLm2OQr3_gI.mft (raw, json) Hash identifier: IWYw/Wv0SCVz0SzDHdyDQjfTGpVaW9BXfGgLZSW9fC4= Subject key identifier: AE:D8:7C:71:38:49:1F:76:DB:76:7A:2A:57:2D:63:7A:E8:7E:94:C2 Authority key identifier: A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02 Certificate issuer: /CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02 Certificate serial: 019AF38967262B223E7F631FAAF49B799985 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft Manifest number: 07B6 Signing time: Sat 06 Dec 2025 12:00:59 +0000 Manifest this update: Sat 06 Dec 2025 12:00:59 +0000 Manifest next update: Sun 07 Dec 2025 12:00:59 +0000 Files and hashes: 1: G5Dr2RNwPGFwAwTeNB-9AS_pm0Q.roa (hash: 0MjYAJyBV4+bo72HSaSmqLthye1AQFWyhQOJxf+19uc=) 2: p5860xQqLAL5krlqsLm2OQr3_gI.crl (hash: Gs4RTWrhsAY8HHsslCX1hYRn0Dbt6wco0meoeM0fAlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:67:26:2b:22:3e:7f:63:1f:aa:f4:9b:79:99:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02 Validity Not Before: Dec 6 12:00:59 2025 GMT Not After : Dec 7 12:00:59 2025 GMT Subject: CN=aed87c7138491f76db767a2a572d637ae87e94c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:05:cf:aa:2b:98:c1:40:f1:f0:37:cd:d8:e8: cc:3f:a7:fa:ff:3a:53:74:c0:3f:c3:d7:94:06:58: 50:26:73:36:d4:8d:74:61:06:28:8c:c6:4e:e2:2b: 06:22:a9:7e:f6:f2:89:44:51:26:94:6e:bd:b8:a6: aa:a9:b6:ce:b5:db:a2:cf:ee:4e:01:9a:42:b7:4f: 63:c7:2a:a8:15:33:80:9e:ca:1d:47:1c:fa:02:ba: fc:0a:b8:27:d5:da:14:6c:98:54:9c:33:b8:2c:87: e0:fc:5a:e1:e7:46:d0:61:7b:59:2f:2b:b0:b9:17: 96:9a:6d:b9:b3:52:47:b7:d8:39:b9:b8:dc:d1:4f: 50:35:e9:e5:18:ce:9b:c4:af:a1:61:5c:5a:14:0e: 05:d2:08:6e:79:cb:04:37:72:8c:b3:df:e0:56:b6: c5:33:59:2c:02:e0:28:d6:d8:a0:91:d5:b2:92:f3: 38:9d:d2:2c:ab:f5:92:b1:1b:88:6d:07:1f:7a:4d: 69:a3:b6:0b:bd:86:cd:11:ca:ad:fa:a8:ca:5d:99: d5:cf:8e:23:b5:49:6a:ad:03:5e:3f:78:4c:15:39: a8:7d:8b:2c:ea:d0:e3:5d:ba:ed:c5:a9:9e:83:25: f9:a6:64:c4:5b:5b:a4:80:67:96:eb:3a:93:9a:f7: 31:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D8:7C:71:38:49:1F:76:DB:76:7A:2A:57:2D:63:7A:E8:7E:94:C2 X509v3 Authority Key Identifier: keyid:A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:04:d1:63:19:4b:e0:48:5e:dc:20:1b:ba:5d:a3:97:72:e8: b3:57:d3:93:a4:9c:68:4c:ed:37:21:0e:a7:e5:f9:fa:f2:de: 46:c4:38:df:75:34:7e:f8:c4:36:11:8d:f2:c8:3e:e2:c5:6f: 38:a2:a4:1a:80:e3:3b:47:11:46:95:70:a8:27:6d:a6:76:1a: 35:18:f0:39:3b:8f:ce:e1:fe:6b:fd:5f:94:96:5c:01:80:4b: 92:63:a9:99:ed:e6:b3:58:61:76:40:11:1a:f1:1e:9d:89:fd: 77:c2:c6:00:60:08:1f:23:72:6d:93:5b:a6:a5:9e:03:f8:04: 70:ce:15:db:53:27:c8:43:41:1a:8a:20:92:ac:6d:d9:07:ae: ef:3c:8a:52:b6:3c:12:68:07:b9:ad:59:02:73:df:33:4f:0f: e0:82:22:5f:f5:92:52:b3:c8:e6:56:9e:13:63:40:f3:58:93: 07:fb:b7:32:9f:ee:a7:0a:e4:cb:ac:02:5d:08:fd:9f:12:aa: 6d:33:72:43:cd:87:d1:58:0f:d1:73:5f:44:61:90:78:ab:5e: c6:5d:bb:96:60:84:0e:89:3a:a7:39:6b:fd:42:df:58:12:a6: 84:ae:23:3e:48:72:6f:55:50:e7:2e:56:89:22:84:18:7e:d4: 50:7c:93:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWcmKyI+f2MfqvSbeZmFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OWYzYWQzMTQyYTJjMDJmOTkyYjk2YWIwYjliNjM5MGFm N2ZlMDIwHhcNMjUxMjA2MTIwMDU5WhcNMjUxMjA3MTIwMDU5WjAzMTEwLwYDVQQD EyhhZWQ4N2M3MTM4NDkxZjc2ZGI3NjdhMmE1NzJkNjM3YWU4N2U5NGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wXPqiuYwUDx8DfN2OjMP6f6/zpT dMA/w9eUBlhQJnM21I10YQYojMZO4isGIql+9vKJRFEmlG69uKaqqbbOtduiz+5O AZpCt09jxyqoFTOAnsodRxz6Arr8Crgn1doUbJhUnDO4LIfg/Frh50bQYXtZLyuw uReWmm25s1JHt9g5ubjc0U9QNenlGM6bxK+hYVxaFA4F0ghuecsEN3KMs9/gVrbF M1ksAuAo1tigkdWykvM4ndIsq/WSsRuIbQcfek1po7YLvYbNEcqt+qjKXZnVz44j tUlqrQNeP3hMFTmofYss6tDjXbrtxamegyX5pmTEW1ukgGeW6zqTmvcx3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7YfHE4SR9223Z6KlctY3rofpTCMB8GA1UdIwQY MBaAFKefOtMUKiwC+ZK5arC5tjkK9/4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDU4NjB4UXFMQUw1a3JscXNMbTJPUXIzX2dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82MzYzY2UtYzhhMC00OTYxLWFlODAt ZDVhNzg1NTE3YmJmLzEvcDU4NjB4UXFMQUw1a3JscXNMbTJPUXIzX2dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82MzYzY2UtYzhhMC00OTYxLWFlODAtZDVhNzg1NTE3YmJm LzEvcDU4NjB4UXFMQUw1a3JscXNMbTJPUXIzX2dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKgTRYxlL 4Ehe3CAbul2jl3Los1fTk6ScaEztNyEOp+X5+vLeRsQ433U0fvjENhGN8sg+4sVv OKKkGoDjO0cRRpVwqCdtpnYaNRjwOTuPzuH+a/1flJZcAYBLkmOpme3ms1hhdkAR GvEenYn9d8LGAGAIHyNybZNbpqWeA/gEcM4V21MnyENBGoogkqxt2Qeu7zyKUrY8 EmgHua1ZAnPfM08P4IIiX/WSUrPI5laeE2NA81iTB/u3Mp/upwrky6wCXQj9nxKq bTNyQ82H0VgP0XNfRGGQeKtexl27lmCEDok6pzlr/ULfWBKmhK4jPkhyb1VQ5y5W iSKEGH7UUHyTOw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:18 2025 by rpki-client