This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft File: V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft (raw, json) Hash identifier: QVmlNXO4bkrYGtM8VqOeSAo0wutf++irdPUDWg6YkpQ= Subject key identifier: 02:91:7B:4E:DD:CF:D0:E5:20:E6:48:9B:A1:2D:9C:58:3A:4C:97:19 Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC Certificate issuer: /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc Certificate serial: 019AF24005C2F4698A48AF9414F907DE0CEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft Manifest number: 15AA Signing time: Sat 06 Dec 2025 06:01:13 +0000 Manifest this update: Sat 06 Dec 2025 06:01:13 +0000 Manifest next update: Sun 07 Dec 2025 06:01:13 +0000 Files and hashes: 1: TvA9yelIeCEsBOpJLkUsBtajKVo.roa (hash: LU0UMBgUcT/XT2r0CrVUUIqkTToEzuecRy7vAdwTq9c=) 2: V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl (hash: rft6FGjbMsKkvGZyrTu/vumZm7HlM3GT2UNra4QY7S8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:05:c2:f4:69:8a:48:af:94:14:f9:07:de:0c:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc Validity Not Before: Dec 6 06:01:13 2025 GMT Not After : Dec 7 06:01:13 2025 GMT Subject: CN=02917b4eddcfd0e520e6489ba12d9c583a4c9719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:07:d0:a9:a0:15:68:7d:12:b0:d5:81:30:1f: 97:db:1e:14:27:bd:b4:3f:d2:cb:dd:0a:a9:cf:36: e4:58:5f:82:33:be:5f:74:c6:75:a8:55:d3:7e:d4: 46:c2:bd:da:c7:60:13:35:f1:c4:1c:6a:68:08:c0: b9:92:61:d8:83:cf:1f:82:26:3a:40:fe:67:bd:93: 1c:4d:63:1c:03:34:11:df:42:6e:a9:86:c1:d9:3c: 2a:cb:77:3a:cd:ca:e1:f9:13:ce:16:41:cb:06:d1: 9e:6d:05:98:73:9d:2c:e8:0e:df:cc:c3:fa:5e:fa: 1e:07:71:45:a7:a0:fe:a8:14:14:33:7a:30:16:64: a2:a1:9d:5e:d3:2d:e8:77:27:b3:cc:c0:65:7c:78: 2c:81:86:0f:60:2c:72:11:c8:d9:2b:42:37:17:f8: d0:73:1a:13:58:f9:cc:a3:e3:18:0d:0b:5e:bb:80: c6:32:d0:e0:b3:cd:29:54:c4:b4:df:40:a3:e1:e5: b1:c6:66:c7:d2:e3:1f:46:9a:27:61:3e:fd:cd:a1: 68:87:c0:b9:2c:ae:eb:a6:95:48:96:40:3f:e3:19: 8a:90:91:1b:15:ec:5a:d8:53:e4:32:ac:ab:b3:e5: 58:2a:54:62:ed:d9:78:4b:9d:ee:1a:e1:53:06:ae: 03:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:91:7B:4E:DD:CF:D0:E5:20:E6:48:9B:A1:2D:9C:58:3A:4C:97:19 X509v3 Authority Key Identifier: keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b0:24:ce:9d:50:f1:20:db:9c:97:2b:18:bc:ee:b5:80:a3: c3:b1:5b:89:24:b4:3c:45:9a:c1:88:d4:0c:55:93:a1:5f:dc: 23:d8:2c:6c:a8:41:ec:fd:7b:48:30:d5:e0:8c:54:eb:fb:2e: 84:10:06:e8:fe:6a:e9:1c:ff:6d:99:d6:5c:85:15:db:41:51: 2a:c5:bf:38:e3:fe:f7:ed:29:9a:60:50:44:84:56:c8:5f:0b: 87:26:61:75:2f:47:09:6e:85:4a:2f:81:7c:b9:a7:c0:a7:1e: 29:45:51:c2:d0:7d:d9:02:06:6b:81:ec:74:24:92:dd:f4:67: 77:89:65:8b:ff:84:88:65:55:25:11:4e:d4:67:47:ed:70:51: 96:26:10:74:18:69:a9:54:a1:73:fa:c8:88:58:a9:40:f2:eb: 50:c8:e9:72:d7:38:85:24:37:ec:97:e1:8d:81:22:08:a5:9e: d8:3c:d1:6f:b4:fe:c7:b1:8f:eb:1c:2a:d5:8e:c1:7a:dd:04: 1e:a6:7d:55:10:6f:c0:f6:89:87:fd:52:99:15:a4:6b:32:f9: 52:ce:14:9c:95:27:18:d3:9f:91:a3:1a:a0:cd:db:d2:ba:57: 3a:b4:d7:08:50:07:f4:97:81:44:61:0d:5d:73:3b:8d:3d:6f: 10:d4:06:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAXC9GmKSK+UFPkH3gzuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3OTliMzI3ZGQ2Y2RhMWFkMzdiYzFjMjI0YTQ1NGIwMmRl YTJhZmMwHhcNMjUxMjA2MDYwMTEzWhcNMjUxMjA3MDYwMTEzWjAzMTEwLwYDVQQD EygwMjkxN2I0ZWRkY2ZkMGU1MjBlNjQ4OWJhMTJkOWM1ODNhNGM5NzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwfQqaAVaH0SsNWBMB+X2x4UJ720 P9LL3QqpzzbkWF+CM75fdMZ1qFXTftRGwr3ax2ATNfHEHGpoCMC5kmHYg88fgiY6 QP5nvZMcTWMcAzQR30JuqYbB2Twqy3c6zcrh+RPOFkHLBtGebQWYc50s6A7fzMP6 XvoeB3FFp6D+qBQUM3owFmSioZ1e0y3odyezzMBlfHgsgYYPYCxyEcjZK0I3F/jQ cxoTWPnMo+MYDQteu4DGMtDgs80pVMS030Cj4eWxxmbH0uMfRponYT79zaFoh8C5 LK7rppVIlkA/4xmKkJEbFexa2FPkMqyrs+VYKlRi7dl4S53uGuFTBq4DZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKRe07dz9DlIOZIm6EtnFg6TJcZMB8GA1UdIwQY MBaAFFeZsyfdbNoa03vBwiSkVLAt6ir8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjVteko5MXMyaHJUZThIQ0pLUlVzQzNxS3Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84YzJhZTktMGE3Ny00OWViLWFkM2Et ZWExNTBlNzYzOGNlLzEvVjVteko5MXMyaHJUZThIQ0pLUlVzQzNxS3Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84YzJhZTktMGE3Ny00OWViLWFkM2EtZWExNTBlNzYzOGNl LzEvVjVteko5MXMyaHJUZThIQ0pLUlVzQzNxS3Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILAkzp1Q 8SDbnJcrGLzutYCjw7FbiSS0PEWawYjUDFWToV/cI9gsbKhB7P17SDDV4IxU6/su hBAG6P5q6Rz/bZnWXIUV20FRKsW/OOP+9+0pmmBQRIRWyF8LhyZhdS9HCW6FSi+B fLmnwKceKUVRwtB92QIGa4HsdCSS3fRnd4lli/+EiGVVJRFO1GdH7XBRliYQdBhp qVShc/rIiFipQPLrUMjpctc4hSQ37JfhjYEiCKWe2DzRb7T+x7GP6xwq1Y7Bet0E HqZ9VRBvwPaJh/1SmRWkazL5Us4UnJUnGNOfkaMaoM3b0rpXOrTXCFAH9JeBRGEN XXM7jT1vENQGAA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:03 2025 by rpki-client