This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft File: pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft (raw, json) Hash identifier: eH/O/HFLVEonUya3ayDiRjbVajdT+VAzkixQ8cCuy2w= Subject key identifier: 14:5C:ED:71:FA:4E:4F:C3:10:2A:AF:FA:28:17:84:2C:26:2B:DF:97 Authority key identifier: A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2 Certificate issuer: /CN=a566d8337776c98746bd231e69e185db2a9a5be2 Certificate serial: 019AF31BA23143BB2A91A958A1F748317F92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 10:01:05 +0000 Manifest this update: Sat 06 Dec 2025 10:01:05 +0000 Manifest next update: Sun 07 Dec 2025 10:01:05 +0000 Files and hashes: 1: 7SmeLFPOio4_Ky8cQI7MC0iIdXA.roa (hash: XAYT9N7Wxwu1sDqxP3875BlVYpctWhwDpAfUj0zPhpw=) 2: RruUWaulD3Ts5bLhPekvKUpKn6Q.roa (hash: MWhOe4vkp6Dp9lK3nL7VGv6jbmHEX1p3ZT+EvK2+o70=) 3: T1ExYbnMScXpW49W3TzA2j25m2g.roa (hash: y19xXSPvsH3iQpElfEG+Wwae1lHCoSGQlARfuGWM2P0=) 4: XUdNcNwhMqFtYsebg1gOrES8fg8.roa (hash: 1SCBRGG9BH3bL2AIx7nLNmgCfpwCw1UXMhqNEU4goqY=) 5: lQBaepPxUTQndrJtXUT4fAXM3dQ.roa (hash: GNjGYOD9FpKkiBDma5mL88iC58tqUffFR4KSPc0aU8Q=) 6: pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl (hash: OhFYdxWozkJ+eMuAp2Vp2Chn6d8vuTjrvCqGrgmUdMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:a2:31:43:bb:2a:91:a9:58:a1:f7:48:31:7f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a566d8337776c98746bd231e69e185db2a9a5be2 Validity Not Before: Dec 6 10:01:05 2025 GMT Not After : Dec 7 10:01:05 2025 GMT Subject: CN=145ced71fa4e4fc3102aaffa2817842c262bdf97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e2:bf:ea:e4:7d:56:73:97:87:75:93:d6:34: c9:e2:e4:8a:3d:71:c7:e4:78:44:2f:95:4c:0d:40: 1f:86:13:3d:ff:63:5a:7a:bc:aa:47:3e:81:2d:10: 19:23:bb:94:32:04:ef:aa:12:8a:ec:22:9d:21:af: 8a:f6:29:a7:cc:51:10:36:10:07:19:42:19:f8:70: ce:8a:db:da:3a:dc:fd:a6:89:ea:eb:df:c9:17:14: 87:7e:3b:6f:58:e9:75:63:fb:8a:24:a1:ac:9d:7c: fd:b7:71:12:02:e2:31:19:c6:cc:2b:34:d2:2a:bd: 71:d0:3e:d2:9f:74:5b:c6:87:38:6b:a0:3d:0f:4b: a6:32:82:72:db:7d:af:3c:6c:a0:7b:c8:e3:1d:3a: e9:24:cc:bf:bd:a0:7f:f0:e8:cc:2b:cb:3a:ae:2e: 44:21:98:52:16:e7:32:93:e6:b0:de:84:0d:5d:11: 56:02:84:a8:b5:fc:9a:e4:f6:65:23:07:a8:b8:17: 26:52:fe:a3:ee:eb:66:9d:55:40:f4:fd:2d:a3:4d: 4c:d8:37:7c:ed:3a:fe:71:54:87:e5:18:2b:6b:16: 1e:dd:38:7a:50:3e:51:6f:0c:c6:3e:8d:3e:64:0d: d0:bd:a3:04:02:eb:8f:9a:33:7f:89:8c:bf:2d:6a: ba:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5C:ED:71:FA:4E:4F:C3:10:2A:AF:FA:28:17:84:2C:26:2B:DF:97 X509v3 Authority Key Identifier: keyid:A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f6:7e:a9:8b:76:92:3b:67:eb:9d:28:3c:19:59:b1:62:b1: f7:06:da:6b:5d:51:82:4a:24:6c:74:61:10:e3:d8:69:27:96: 66:25:d5:0a:05:1e:21:d8:57:a4:c8:25:b5:ac:9e:d2:3c:34: 9e:18:65:0a:a0:1b:83:b6:96:71:30:4e:64:22:75:c7:3a:80: 8e:b8:5f:05:2d:e9:66:e2:7c:4e:b1:d3:26:e4:f0:b2:05:c4: 66:8d:60:b3:2a:09:7a:8e:70:b4:20:df:c5:3b:ac:c4:39:2d: 14:78:12:e3:8c:8b:ef:e5:2a:7c:f4:84:ab:ab:10:9d:55:fe: 25:85:e2:fa:87:20:43:7b:66:37:95:f5:7e:5b:d5:80:e4:f8: 8d:de:01:4b:da:7d:7a:45:d6:03:f2:68:04:9c:78:a9:c7:a6: 24:8f:27:e7:39:a0:dc:0b:29:1b:3b:3d:0e:49:06:bd:60:ab: 2f:1f:1c:c6:cc:30:ef:80:a2:a3:9b:ff:b4:09:70:23:60:81: 3f:b7:eb:92:93:b7:1a:d4:19:8f:35:0d:4b:53:88:a4:a0:8e: 38:48:70:44:f6:78:ba:f6:c1:8b:50:72:88:e6:88:cd:ad:2f: 9b:44:19:78:03:b5:d4:a9:44:d3:15:44:20:d8:77:ef:d7:ac: 87:06:2e:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG6IxQ7sqkalYofdIMX+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NjZkODMzNzc3NmM5ODc0NmJkMjMxZTY5ZTE4NWRiMmE5 YTViZTIwHhcNMjUxMjA2MTAwMTA1WhcNMjUxMjA3MTAwMTA1WjAzMTEwLwYDVQQD EygxNDVjZWQ3MWZhNGU0ZmMzMTAyYWFmZmEyODE3ODQyYzI2MmJkZjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOK/6uR9VnOXh3WT1jTJ4uSKPXHH 5HhEL5VMDUAfhhM9/2NaeryqRz6BLRAZI7uUMgTvqhKK7CKdIa+K9imnzFEQNhAH GUIZ+HDOitvaOtz9ponq69/JFxSHfjtvWOl1Y/uKJKGsnXz9t3ESAuIxGcbMKzTS Kr1x0D7Sn3Rbxoc4a6A9D0umMoJy232vPGyge8jjHTrpJMy/vaB/8OjMK8s6ri5E IZhSFucyk+aw3oQNXRFWAoSotfya5PZlIweouBcmUv6j7utmnVVA9P0to01M2Dd8 7Tr+cVSH5RgraxYe3Th6UD5RbwzGPo0+ZA3QvaMEAuuPmjN/iYy/LWq6wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRc7XH6Tk/DECqv+igXhCwmK9+XMB8GA1UdIwQY MBaAFKVm2DN3dsmHRr0jHmnhhdsqmlviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFdiWU0zZDJ5WWRHdlNNZWFlR0YyeXFhVy1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMTY4YWMtMzQyYy00ZGQwLTkxYTgt MWI3NTg2N2U4ZGZmLzEvcFdiWU0zZDJ5WWRHdlNNZWFlR0YyeXFhVy1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wMTY4YWMtMzQyYy00ZGQwLTkxYTgtMWI3NTg2N2U4ZGZm LzEvcFdiWU0zZDJ5WWRHdlNNZWFlR0YyeXFhVy1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/Z+qYt2 kjtn650oPBlZsWKx9wbaa11RgkokbHRhEOPYaSeWZiXVCgUeIdhXpMgltaye0jw0 nhhlCqAbg7aWcTBOZCJ1xzqAjrhfBS3pZuJ8TrHTJuTwsgXEZo1gsyoJeo5wtCDf xTusxDktFHgS44yL7+UqfPSEq6sQnVX+JYXi+ocgQ3tmN5X1flvVgOT4jd4BS9p9 ekXWA/JoBJx4qcemJI8n5zmg3AspGzs9DkkGvWCrLx8cxsww74Cio5v/tAlwI2CB P7frkpO3GtQZjzUNS1OIpKCOOEhwRPZ4uvbBi1ByiOaIza0vm0QZeAO11KlE0xVE INh379eshwYujg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:20:05 2025 by rpki-client