This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft File: _5JbpaQQRnlkY0z_SvrXelbaRyI.mft (raw, json) Hash identifier: ugoh8S4qbkJGTJSHwBfTjyE/AN7bbVweC2lyCOrnbS0= Subject key identifier: 14:4B:79:1B:61:B8:3B:9D:F0:C3:54:C4:82:8D:E3:95:2B:4A:67:A1 Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22 Certificate issuer: /CN=ff925ba5a410467964634cff4afad77a56da4722 Certificate serial: 019AF2AD705FD807E2B2D25373912CFCAED7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft Manifest number: 05F2 Signing time: Sat 06 Dec 2025 08:00:43 +0000 Manifest this update: Sat 06 Dec 2025 08:00:43 +0000 Manifest next update: Sun 07 Dec 2025 08:00:43 +0000 Files and hashes: 1: YCBMVw8lhfTbZWn4cTYVsc3blBQ.roa (hash: DAw8H6oh39jnMGAPAS2Ix82bT3BCrrolFFfmIIaPBT0=) 2: _5JbpaQQRnlkY0z_SvrXelbaRyI.crl (hash: 6AUwPNWpIThGi8gdetV22CYvoAxe7Z96atoHbAKCYpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:70:5f:d8:07:e2:b2:d2:53:73:91:2c:fc:ae:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722 Validity Not Before: Dec 6 08:00:43 2025 GMT Not After : Dec 7 08:00:43 2025 GMT Subject: CN=144b791b61b83b9df0c354c4828de3952b4a67a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:31:56:b6:e9:ad:85:2a:e6:02:f5:6f:0b:d5: cc:14:ec:2f:e4:0c:06:ea:75:77:0c:62:c5:87:2b: 98:8c:ed:24:ec:28:c1:46:f0:ca:0c:a9:5f:8b:78: 38:59:8c:f9:51:bf:f3:b3:27:71:1a:76:a5:c0:4e: 25:85:96:39:83:be:e0:99:b7:93:36:87:48:40:f7: 01:09:c3:92:c3:46:63:b6:7c:a4:28:c5:de:8a:27: 58:a1:20:57:f0:7d:25:fb:d3:07:a5:14:05:26:72: 1f:49:2d:64:d5:c7:eb:50:e9:73:8f:2d:23:2a:3a: 3c:0a:9c:d1:81:c5:ba:41:35:0c:ca:9a:54:73:1d: 54:14:1f:01:22:5b:b0:d2:82:53:53:a6:55:87:36: f1:bd:f6:00:2b:53:e6:e0:34:7d:36:a9:fa:e3:a3: 29:20:ab:dd:8f:15:2e:53:d9:9b:69:7a:44:a6:5b: bf:57:18:e6:f8:d8:f0:18:cc:93:fd:1c:3f:a6:86: 3a:9b:4e:de:5b:39:bf:83:df:28:86:93:97:bd:bd: 39:16:74:ed:65:66:93:fb:b6:03:63:77:12:b8:03: ec:48:75:6c:d2:b4:bf:4d:fa:2a:1c:2b:e2:66:b3: 5a:42:0d:84:62:ca:9e:0a:d9:b7:9f:15:ce:1c:73: 58:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4B:79:1B:61:B8:3B:9D:F0:C3:54:C4:82:8D:E3:95:2B:4A:67:A1 X509v3 Authority Key Identifier: keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:aa:90:88:ea:52:07:57:56:52:89:01:9d:f9:45:98:74:cb: d7:4a:87:eb:0f:44:37:69:df:b5:1f:f5:ba:36:03:0b:a9:6a: 27:2a:18:0f:e8:6a:b0:00:fc:04:5d:a3:75:b9:bf:fe:f3:37: 4b:b4:0b:4e:22:e1:db:b5:6a:76:d9:80:0f:a9:ff:20:4f:b7: 96:2c:72:a5:1d:bb:a9:fa:a7:35:b8:5e:fc:7e:65:68:69:3b: ea:0f:12:58:70:41:39:69:db:23:f7:09:9b:56:ea:5d:3e:d0: be:0e:ee:a3:89:2c:bd:24:82:cb:18:d6:05:b3:04:0c:bb:5a: a1:2d:57:f4:a2:d6:f5:f0:c6:32:5a:9d:3a:e0:71:30:d1:f5: df:52:ef:1d:88:1f:ac:4d:0c:df:ae:fe:5e:f2:bf:3a:33:ad: 0c:52:e2:86:4b:83:73:66:7d:d4:2a:c8:f9:13:72:17:a6:0e: 31:2f:35:05:6e:62:04:ae:f8:7f:ec:8b:70:b9:2a:44:c6:4c: 0d:11:e1:ad:f7:03:9d:1f:93:f0:04:2e:54:75:b7:0a:2d:f6: 44:ca:4b:d3:6a:2b:ec:04:2f:57:b9:a3:f9:4f:be:dd:5a:1b: 41:bc:45:86:cf:98:c7:23:08:d7:12:d2:11:36:c4:92:1b:a2: 03:aa:83:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXBf2AfistJTc5Es/K7XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOTI1YmE1YTQxMDQ2Nzk2NDYzNGNmZjRhZmFkNzdhNTZk YTQ3MjIwHhcNMjUxMjA2MDgwMDQzWhcNMjUxMjA3MDgwMDQzWjAzMTEwLwYDVQQD EygxNDRiNzkxYjYxYjgzYjlkZjBjMzU0YzQ4MjhkZTM5NTJiNGE2N2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDFWtumthSrmAvVvC9XMFOwv5AwG 6nV3DGLFhyuYjO0k7CjBRvDKDKlfi3g4WYz5Ub/zsydxGnalwE4lhZY5g77gmbeT NodIQPcBCcOSw0ZjtnykKMXeiidYoSBX8H0l+9MHpRQFJnIfSS1k1cfrUOlzjy0j Kjo8CpzRgcW6QTUMyppUcx1UFB8BIluw0oJTU6ZVhzbxvfYAK1Pm4DR9Nqn646Mp IKvdjxUuU9mbaXpEplu/Vxjm+NjwGMyT/Rw/poY6m07eWzm/g98ohpOXvb05FnTt ZWaT+7YDY3cSuAPsSHVs0rS/TfoqHCviZrNaQg2EYsqeCtm3nxXOHHNYKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRLeRthuDud8MNUxIKN45UrSmehMB8GA1UdIwQY MBaAFP+SW6WkEEZ5ZGNM/0r613pW2kciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzVKYnBhUVFSbmxrWTB6X1N2clhlbGJhUnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jNjhlNWYtOGVmYS00M2ZmLTg5MGYt MjcyOTYwYmM0MzIyLzEvXzVKYnBhUVFSbmxrWTB6X1N2clhlbGJhUnlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jNjhlNWYtOGVmYS00M2ZmLTg5MGYtMjcyOTYwYmM0MzIy LzEvXzVKYnBhUVFSbmxrWTB6X1N2clhlbGJhUnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6qQiOpS B1dWUokBnflFmHTL10qH6w9EN2nftR/1ujYDC6lqJyoYD+hqsAD8BF2jdbm//vM3 S7QLTiLh27VqdtmAD6n/IE+3lixypR27qfqnNbhe/H5laGk76g8SWHBBOWnbI/cJ m1bqXT7Qvg7uo4ksvSSCyxjWBbMEDLtaoS1X9KLW9fDGMlqdOuBxMNH131LvHYgf rE0M367+XvK/OjOtDFLihkuDc2Z91CrI+RNyF6YOMS81BW5iBK74f+yLcLkqRMZM DRHhrfcDnR+T8AQuVHW3Ci32RMpL02or7AQvV7mj+U++3VobQbxFhs+YxyMI1xLS ETbEkhuiA6qDLw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:13:13 2025 by rpki-client