This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft File: v5nSPIJymoBJ51ZXdahkvDqigu8.mft (raw, json) Hash identifier: zR75ye648eHfEBUY5esfQEUfwHftZ91hwwD3yuCKnok= Subject key identifier: EF:DF:3F:BC:A1:25:41:06:54:8D:66:A7:7A:7C:7F:84:06:5A:17:A4 Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF Certificate issuer: /CN=bf99d23c82729a8049e7565775a864bc3aa282ef Certificate serial: 019AFB4357CF690A6110B1EB5D668D48ABE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft Manifest number: 07FD Signing time: Mon 08 Dec 2025 00:01:25 +0000 Manifest this update: Mon 08 Dec 2025 00:01:25 +0000 Manifest next update: Tue 09 Dec 2025 00:01:25 +0000 Files and hashes: 1: v5nSPIJymoBJ51ZXdahkvDqigu8.crl (hash: AhwPgdYvNxJ7rKvXRSFJ6Qzg30pmHrr5F2aoqraGZRU=) 2: ybOueXNsSJri02mQKQibbKcroL4.roa (hash: rsUCG/CXGaoh8At3iU9kgYgz39f7x4KapImvavgysk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:43:57:cf:69:0a:61:10:b1:eb:5d:66:8d:48:ab:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef Validity Not Before: Dec 8 00:01:25 2025 GMT Not After : Dec 9 00:01:25 2025 GMT Subject: CN=efdf3fbca1254106548d66a77a7c7f84065a17a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:0d:55:28:7b:76:20:22:b8:02:47:0b:1d:ea: 23:2f:03:7e:d3:18:05:a2:0a:50:e8:30:56:f2:a5: 35:6d:e7:da:32:25:c1:0f:95:f2:55:2b:8c:42:18: b2:0d:73:2d:cf:01:ed:ee:27:93:84:00:c0:17:4b: 6b:7e:ce:96:0c:a8:01:9a:b6:af:b1:9b:0d:27:28: c9:e6:4f:cd:58:90:e2:74:92:2e:b8:17:59:f4:2d: 16:96:83:7d:c4:df:f8:5e:c1:4b:bb:2c:b1:b1:8e: f4:ba:60:17:bd:9c:7c:4c:f5:f0:27:1e:f1:1b:b9: 3c:6c:48:59:5f:3f:f0:a8:b4:ad:40:d7:9f:a2:4c: 8f:a8:76:b9:a7:07:20:f3:5f:8b:09:cd:e7:a8:8b: 80:aa:1b:a4:a9:0f:41:40:7f:90:15:b4:c0:ee:e2: 80:ef:f5:a3:ca:8d:75:0c:f1:ac:f1:e0:fe:bf:01: 06:6d:e4:aa:80:73:87:4d:c8:9d:de:fc:dd:7c:5b: e2:90:c5:18:d7:45:92:78:ce:98:82:72:b1:63:d2: 32:40:5c:e0:ce:d7:4f:f3:3e:4e:80:bd:61:18:ab: 78:b6:71:c7:71:d5:35:4a:f8:96:f4:72:71:68:5d: 7f:2d:a8:2c:74:2d:b6:fe:ef:b4:77:d5:41:0c:01: fd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DF:3F:BC:A1:25:41:06:54:8D:66:A7:7A:7C:7F:84:06:5A:17:A4 X509v3 Authority Key Identifier: keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:2e:3b:68:47:c5:55:ea:94:03:ad:8d:73:68:2a:6c:2c:79: a1:7c:a8:d0:e3:fe:5b:6a:ad:e0:3d:33:5d:8e:29:a3:ab:a3: 2f:28:64:ec:8d:07:87:50:2c:97:63:26:e4:7d:bb:2d:da:5f: bf:3d:91:41:04:5d:6f:78:13:28:0f:b2:c2:02:0d:6a:ab:11: b3:48:4a:5c:b0:bf:b7:57:2c:d1:be:3e:d3:28:fb:96:2d:3e: 84:3b:58:ad:40:84:31:52:40:b6:ba:84:1b:60:b3:b0:71:ea: 34:f6:eb:f8:17:eb:11:b3:20:2e:55:e5:64:de:c3:3b:79:d7: 52:b3:bb:f4:a5:a9:d7:64:16:91:c8:21:60:c8:6f:e6:ed:84: 59:04:d1:7c:7c:f6:24:7c:da:f5:be:c0:c3:2d:2d:dd:ec:a4: ad:03:70:83:4e:d0:f3:df:46:a5:cf:48:6e:f4:01:ee:b3:20: ba:0c:41:ca:a5:56:9a:d0:58:14:48:e1:37:0b:0e:ac:56:da: 11:fd:df:87:08:41:b1:de:4c:e7:2d:94:11:2c:33:a8:f3:13: a0:bb:e4:36:54:e4:84:c6:e8:af:39:a6:0b:dc:7d:18:7f:54: bc:b2:e0:0e:30:10:cd:a3:50:25:1c:c5:a7:74:8f:29:8a:b2: b1:a3:3b:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7Q1fPaQphELHrXWaNSKviMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmOTlkMjNjODI3MjlhODA0OWU3NTY1Nzc1YTg2NGJjM2Fh MjgyZWYwHhcNMjUxMjA4MDAwMTI1WhcNMjUxMjA5MDAwMTI1WjAzMTEwLwYDVQQD EyhlZmRmM2ZiY2ExMjU0MTA2NTQ4ZDY2YTc3YTdjN2Y4NDA2NWExN2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7w1VKHt2ICK4AkcLHeojLwN+0xgF ogpQ6DBW8qU1befaMiXBD5XyVSuMQhiyDXMtzwHt7ieThADAF0trfs6WDKgBmrav sZsNJyjJ5k/NWJDidJIuuBdZ9C0WloN9xN/4XsFLuyyxsY70umAXvZx8TPXwJx7x G7k8bEhZXz/wqLStQNefokyPqHa5pwcg81+LCc3nqIuAqhukqQ9BQH+QFbTA7uKA 7/Wjyo11DPGs8eD+vwEGbeSqgHOHTcid3vzdfFvikMUY10WSeM6YgnKxY9IyQFzg ztdP8z5OgL1hGKt4tnHHcdU1SviW9HJxaF1/LagsdC22/u+0d9VBDAH9ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/fP7yhJUEGVI1mp3p8f4QGWhekMB8GA1UdIwQY MBaAFL+Z0jyCcpqASedWV3WoZLw6ooLvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjVuU1BJSnltb0JKNTFaWGRhaGt2RHFpZ3U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYWQ1M2EtZjExOC00YTg4LThjMmYt OTg3MDg2Y2NhYjg0LzEvdjVuU1BJSnltb0JKNTFaWGRhaGt2RHFpZ3U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYWQ1M2EtZjExOC00YTg4LThjMmYtOTg3MDg2Y2NhYjg0 LzEvdjVuU1BJSnltb0JKNTFaWGRhaGt2RHFpZ3U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwi47aEfF VeqUA62Nc2gqbCx5oXyo0OP+W2qt4D0zXY4po6ujLyhk7I0Hh1Asl2Mm5H27Ldpf vz2RQQRdb3gTKA+ywgINaqsRs0hKXLC/t1cs0b4+0yj7li0+hDtYrUCEMVJAtrqE G2CzsHHqNPbr+BfrEbMgLlXlZN7DO3nXUrO79KWp12QWkcghYMhv5u2EWQTRfHz2 JHza9b7Awy0t3eykrQNwg07Q899Gpc9IbvQB7rMgugxByqVWmtBYFEjhNwsOrFba Ef3fhwhBsd5M5y2UESwzqPMToLvkNlTkhMborzmmC9x9GH9UvLLgDjAQzaNQJRzF p3SPKYqysaM72Q== -----END CERTIFICATE-----Generated at Mon Dec 8 09:15:59 2025 by rpki-client