This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft File: b5RYfBGZosPfQBl7GfNlDGF94UU.mft (raw, json) Hash identifier: Z46R/Hb1GNiy8P55PYGkFG+JLlT4d4Voug/zT9nBdIk= Subject key identifier: 2B:BB:48:1E:F7:16:5D:2B:A3:7C:A5:38:4A:F8:A7:E6:50:4F:52:E9 Authority key identifier: 6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45 Certificate issuer: /CN=6f94587c1199a2c3df40197b19f3650c617de145 Certificate serial: 019AF1D20FF9A789F07FB4A421ACF711A3FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft Manifest number: 0282 Signing time: Sat 06 Dec 2025 04:01:06 +0000 Manifest this update: Sat 06 Dec 2025 04:01:06 +0000 Manifest next update: Sun 07 Dec 2025 04:01:06 +0000 Files and hashes: 1: b5RYfBGZosPfQBl7GfNlDGF94UU.crl (hash: u5gnJTfMhccGZmCHZfYyiC7nSPRQcSLRgxfy3RlWolM=) 2: ePKBy3s7DCa8LCYPrDuLad8LQds.roa (hash: IOfYTJhGS5ceI6YMnArvR/xLdlNTNiNsJ5hdFLFW72Q=) 3: xTCv3RXSZS1iTavCUS9l9JR_D5E.roa (hash: A3hLBLSXg8J7g4DoDdWC6smLJPKHGcfSEfHqAmRLjjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:0f:f9:a7:89:f0:7f:b4:a4:21:ac:f7:11:a3:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f94587c1199a2c3df40197b19f3650c617de145 Validity Not Before: Dec 6 04:01:06 2025 GMT Not After : Dec 7 04:01:06 2025 GMT Subject: CN=2bbb481ef7165d2ba37ca5384af8a7e6504f52e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:52:77:cc:d1:f0:89:7d:f7:3b:36:9f:73:d9: 06:c1:93:dd:4a:e3:95:d4:e7:b9:69:a2:08:34:df: e9:03:ce:a0:58:28:bf:0b:db:7a:a5:c5:02:26:49: a0:12:03:13:f4:33:24:ea:95:69:56:40:25:56:2a: 3d:f7:4d:a8:ab:16:87:32:42:c6:ce:38:f0:e4:89: 2f:98:b6:b7:03:4f:64:e4:7b:9b:f5:19:e5:ac:91: 06:14:97:21:5e:a8:c0:30:df:29:be:f1:dd:a1:d1: 0d:86:3e:53:34:b9:31:04:ff:a7:af:a6:d0:04:d5: 11:0c:60:6d:34:90:b3:90:0c:6b:d7:e6:e5:c3:74: ac:89:2b:67:12:2b:10:b5:81:30:a9:ac:06:e9:8e: 98:30:93:84:18:6e:b5:a7:05:75:f5:72:de:ab:9e: 29:cf:37:1f:12:3b:f3:fa:69:96:6b:68:1e:18:3f: 27:34:fd:4a:08:da:f3:b7:40:96:de:d0:23:76:f5: f1:00:4e:13:8e:1e:67:58:04:12:8b:8e:53:c3:7f: 2a:10:46:1c:4b:e1:05:68:9d:87:e5:5d:f4:40:0a: f9:be:94:92:1d:83:b4:be:8a:15:db:1a:90:4f:91: a6:c5:aa:cd:22:d4:b7:e4:8a:89:2b:59:c0:45:c6: 29:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BB:48:1E:F7:16:5D:2B:A3:7C:A5:38:4A:F8:A7:E6:50:4F:52:E9 X509v3 Authority Key Identifier: keyid:6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e4:3b:11:66:fe:a5:f8:33:1c:c1:78:31:b4:60:b0:07:64: 96:9e:96:a3:ef:63:4c:f5:d0:44:fc:5f:58:30:b7:e9:4a:ea: 0e:37:7c:36:92:5a:0f:4a:4a:72:5f:95:67:07:8c:df:5f:d7: 5e:68:af:e9:72:99:23:2e:00:4b:35:a2:8c:5e:95:04:63:8a: 3c:53:a5:84:4f:5d:f3:30:6e:30:41:fd:ab:e0:8b:60:a4:a4: 54:8f:fd:c2:8a:25:09:71:b7:2f:00:16:94:4c:7f:ab:d3:ff: d2:29:e0:ba:e4:3d:63:32:1b:d2:5b:b3:9f:69:ec:22:87:17: 5b:60:64:3b:cc:1e:1f:53:ea:7d:eb:b1:b1:8f:e5:2e:1d:b5: 67:14:f1:07:96:de:22:0e:87:42:d5:77:6b:96:df:70:be:f7: d2:b3:b6:09:e5:9d:c0:fd:a0:3d:fc:c9:d3:ec:a5:70:d4:09: 6b:3d:6a:b9:43:a2:6c:c8:46:d3:19:ab:87:be:2a:3c:38:c6: 8f:a3:64:14:c6:b3:a4:3c:fd:9e:e1:8b:ac:25:f6:dd:ff:66: eb:a3:76:14:3f:35:96:13:5f:81:d0:e6:17:f3:27:ea:25:b0: 2a:a9:a7:0c:d5:4a:c5:e2:a6:27:5a:2a:10:cf:0f:46:5e:3b: 53:6a:93:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0g/5p4nwf7SkIaz3EaP6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOTQ1ODdjMTE5OWEyYzNkZjQwMTk3YjE5ZjM2NTBjNjE3 ZGUxNDUwHhcNMjUxMjA2MDQwMTA2WhcNMjUxMjA3MDQwMTA2WjAzMTEwLwYDVQQD EygyYmJiNDgxZWY3MTY1ZDJiYTM3Y2E1Mzg0YWY4YTdlNjUwNGY1MmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VJ3zNHwiX33Ozafc9kGwZPdSuOV 1Oe5aaIINN/pA86gWCi/C9t6pcUCJkmgEgMT9DMk6pVpVkAlVio9902oqxaHMkLG zjjw5IkvmLa3A09k5Hub9RnlrJEGFJchXqjAMN8pvvHdodENhj5TNLkxBP+nr6bQ BNURDGBtNJCzkAxr1+blw3SsiStnEisQtYEwqawG6Y6YMJOEGG61pwV19XLeq54p zzcfEjvz+mmWa2geGD8nNP1KCNrzt0CW3tAjdvXxAE4Tjh5nWAQSi45Tw38qEEYc S+EFaJ2H5V30QAr5vpSSHYO0vooV2xqQT5GmxarNItS35IqJK1nARcYpDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCu7SB73Fl0ro3ylOEr4p+ZQT1LpMB8GA1UdIwQY MBaAFG+UWHwRmaLD30AZexnzZQxhfeFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjVSWWZCR1pvc1BmUUJsN0dmTmxER0Y5NFVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wYzE0ZGItODYyMC00OTk2LWFmYWUt YjljZjQwMDk0NjQwLzEvYjVSWWZCR1pvc1BmUUJsN0dmTmxER0Y5NFVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8wYzE0ZGItODYyMC00OTk2LWFmYWUtYjljZjQwMDk0NjQw LzEvYjVSWWZCR1pvc1BmUUJsN0dmTmxER0Y5NFVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOQ7EWb+ pfgzHMF4MbRgsAdklp6Wo+9jTPXQRPxfWDC36UrqDjd8NpJaD0pKcl+VZweM31/X Xmiv6XKZIy4ASzWijF6VBGOKPFOlhE9d8zBuMEH9q+CLYKSkVI/9woolCXG3LwAW lEx/q9P/0inguuQ9YzIb0luzn2nsIocXW2BkO8weH1PqfeuxsY/lLh21ZxTxB5be Ig6HQtV3a5bfcL730rO2CeWdwP2gPfzJ0+ylcNQJaz1quUOibMhG0xmrh74qPDjG j6NkFMazpDz9nuGLrCX23f9m66N2FD81lhNfgdDmF/Mn6iWwKqmnDNVKxeKmJ1oq EM8PRl47U2qTQg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:19 2025 by rpki-client