This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft File: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft (raw, json) Hash identifier: m5FJzup38OugA3NgT9Nnxk7kIlj8UGgjiJ+QPpi6R3E= Subject key identifier: F5:99:DB:E2:07:D0:56:58:4D:C3:55:26:52:F7:84:39:5B:4B:22:77 Authority key identifier: AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82 Certificate issuer: /CN=af9b2cefe389a1ae49756edc2b3293e58830cb82 Certificate serial: 019AF19B52B8A33AA959A1BC8080853C7010 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft Manifest number: 043E Signing time: Sat 06 Dec 2025 03:01:19 +0000 Manifest this update: Sat 06 Dec 2025 03:01:19 +0000 Manifest next update: Sun 07 Dec 2025 03:01:19 +0000 Files and hashes: 1: HlRrYVzs80ZJA5_JZ3csPGXIkEY.roa (hash: 2WA22A/U8/r4tDX+UDoYIX+va554GCdeOFSCw5V25j8=) 2: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl (hash: pWykHm1kdZdkY/+pOUyrkBR9gsdCfiTAX4GTHwnxn6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:52:b8:a3:3a:a9:59:a1:bc:80:80:85:3c:70:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af9b2cefe389a1ae49756edc2b3293e58830cb82 Validity Not Before: Dec 6 03:01:19 2025 GMT Not After : Dec 7 03:01:19 2025 GMT Subject: CN=f599dbe207d056584dc3552652f784395b4b2277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:aa:e4:47:d5:6f:f6:ef:00:4d:67:37:ef:04: 76:ca:d0:74:7e:09:7d:dc:cc:fd:43:41:d3:4e:08: 81:02:57:b2:ce:d0:73:c9:f7:e9:f0:4a:54:de:16: 3b:5b:78:b4:52:db:51:f4:4b:28:43:71:cf:48:49: a2:18:1d:43:1f:68:34:e2:5b:6b:ef:66:d3:09:86: 6e:0d:50:86:be:89:1a:4d:d7:cd:e5:fe:e0:89:63: 5a:9b:fb:86:74:4a:b0:a9:ee:4c:8c:b1:c1:f2:d7: 97:2e:8a:16:26:ed:71:9c:e2:9a:13:ff:cd:2d:a1: 0f:1a:09:18:59:5c:71:ac:8f:c3:21:6c:63:9f:df: cd:2f:73:0f:19:06:c0:4c:2e:88:cf:06:65:26:88: f4:71:74:4a:70:e2:42:bc:e9:d2:77:08:df:f8:53: 4f:51:2b:51:86:91:f1:09:3e:03:d5:f7:10:e9:09: 83:97:b5:e1:eb:fd:8b:96:85:ac:5d:bf:7b:c3:9d: bf:a2:cb:b2:4c:ea:7e:1b:6b:99:62:db:d8:f3:e1: bc:a9:9f:c7:d8:be:99:66:3c:58:1c:e2:37:cd:9f: b6:33:ec:82:11:f8:aa:18:41:d7:28:81:e1:be:1d: 83:6a:c1:95:3d:31:0d:81:95:68:5b:dc:08:58:da: c0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:99:DB:E2:07:D0:56:58:4D:C3:55:26:52:F7:84:39:5B:4B:22:77 X509v3 Authority Key Identifier: keyid:AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:1d:2d:42:4a:a6:b5:f2:f6:a5:92:a3:86:29:3f:89:86:99: dc:f3:89:ab:51:f7:35:1e:ec:3b:2f:a5:24:a0:34:51:54:87: 52:8d:a1:00:15:a6:bf:d2:55:69:38:f4:e2:17:2e:44:de:17: 5b:d7:18:69:13:17:bb:20:12:ca:bb:d2:87:34:ec:2b:dc:c6: 1f:9c:16:75:63:c8:75:a3:27:71:d6:98:26:1a:90:98:20:01: 8d:fc:6c:ca:d0:e2:cd:35:d3:9b:06:50:ff:62:13:49:37:dd: 3f:3c:74:43:dc:2a:e5:ee:cb:6b:27:45:e0:2d:11:09:ba:11: 29:b4:b4:81:85:df:2b:09:8e:e9:66:4a:80:ab:09:d5:d0:ec: 08:02:b3:34:9b:26:89:52:87:1b:28:1b:15:f9:3e:b2:2d:eb: 6b:c5:70:25:0e:4d:8c:e3:bd:d3:fe:5f:2f:de:02:b5:4c:91: 79:a4:72:64:71:7a:33:ac:04:ba:c8:64:fe:3e:86:ef:45:a4: ba:48:fe:3d:2a:fa:a5:af:35:e6:f5:09:7b:e4:cf:6a:44:bb: 48:3b:81:35:6d:50:b1:93:83:a0:fe:47:88:95:f2:b2:80:04: 01:38:c6:a0:80:62:29:3d:06:e4:b7:fe:b1:69:ec:f8:f6:f1: 1e:c0:88:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1K4ozqpWaG8gICFPHAQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOWIyY2VmZTM4OWExYWU0OTc1NmVkYzJiMzI5M2U1ODgz MGNiODIwHhcNMjUxMjA2MDMwMTE5WhcNMjUxMjA3MDMwMTE5WjAzMTEwLwYDVQQD EyhmNTk5ZGJlMjA3ZDA1NjU4NGRjMzU1MjY1MmY3ODQzOTViNGIyMjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86rkR9Vv9u8ATWc37wR2ytB0fgl9 3Mz9Q0HTTgiBAleyztBzyffp8EpU3hY7W3i0UttR9EsoQ3HPSEmiGB1DH2g04ltr 72bTCYZuDVCGvokaTdfN5f7giWNam/uGdEqwqe5MjLHB8teXLooWJu1xnOKaE//N LaEPGgkYWVxxrI/DIWxjn9/NL3MPGQbATC6IzwZlJoj0cXRKcOJCvOnSdwjf+FNP UStRhpHxCT4D1fcQ6QmDl7Xh6/2LloWsXb97w52/osuyTOp+G2uZYtvY8+G8qZ/H 2L6ZZjxYHOI3zZ+2M+yCEfiqGEHXKIHhvh2DasGVPTENgZVoW9wIWNrAtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWZ2+IH0FZYTcNVJlL3hDlbSyJ3MB8GA1UdIwQY MBaAFK+bLO/jiaGuSXVu3Csyk+WIMMuCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjVzczctT0pvYTVKZFc3Y0t6S1Q1WWd3eTRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZjBiZmUtOTU1NC00YjdlLTk1ZGEt NDY5NjE5ZDRlY2RiLzEvcjVzczctT0pvYTVKZFc3Y0t6S1Q1WWd3eTRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9iZjBiZmUtOTU1NC00YjdlLTk1ZGEtNDY5NjE5ZDRlY2Ri LzEvcjVzczctT0pvYTVKZFc3Y0t6S1Q1WWd3eTRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbB0tQkqm tfL2pZKjhik/iYaZ3POJq1H3NR7sOy+lJKA0UVSHUo2hABWmv9JVaTj04hcuRN4X W9cYaRMXuyASyrvShzTsK9zGH5wWdWPIdaMncdaYJhqQmCABjfxsytDizTXTmwZQ /2ITSTfdPzx0Q9wq5e7LaydF4C0RCboRKbS0gYXfKwmO6WZKgKsJ1dDsCAKzNJsm iVKHGygbFfk+si3ra8VwJQ5NjOO90/5fL94CtUyReaRyZHF6M6wEushk/j6G70Wk ukj+PSr6pa815vUJe+TPakS7SDuBNW1QsZODoP5HiJXysoAEATjGoIBiKT0G5Lf+ sWns+PbxHsCI9A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:39 2025 by rpki-client