This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft File: r5VJF2-WbToiFBAHkJfIfw4dILE.mft (raw, json) Hash identifier: cuWXhKwP2fgFqRlF5uF6as7JEjPX5HdInJfqrvhUL9A= Subject key identifier: 75:0C:F4:C2:DE:33:D3:79:D8:B8:A4:2F:8E:08:7C:B9:D4:AB:D2:98 Authority key identifier: AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1 Certificate issuer: /CN=af9549176f966d3a221410079097c87f0e1d20b1 Certificate serial: 019B2B8A33CF99F4097AFFD718EE8245EC06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft Manifest number: 0EE1 Signing time: Wed 17 Dec 2025 09:00:36 +0000 Manifest this update: Wed 17 Dec 2025 09:00:36 +0000 Manifest next update: Thu 18 Dec 2025 09:00:36 +0000 Files and hashes: 1: 1n_N6auYiXQ1pyBQYj7m3QI_dSs.roa (hash: LsHjMOF74kduMAehGu3uEfQUdY1PYN7E293m6Bfa2Jo=) 2: r5VJF2-WbToiFBAHkJfIfw4dILE.crl (hash: JXHZFALat5OT1JxfZpIzYDZc/NX/rFjvKUic5iqFBAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:33:cf:99:f4:09:7a:ff:d7:18:ee:82:45:ec:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af9549176f966d3a221410079097c87f0e1d20b1 Validity Not Before: Dec 17 09:00:36 2025 GMT Not After : Dec 18 09:00:36 2025 GMT Subject: CN=750cf4c2de33d379d8b8a42f8e087cb9d4abd298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:26:ca:1a:17:f2:75:37:51:ca:67:c3:9a:d1: 31:c4:67:64:47:95:ed:cf:88:6a:77:60:23:52:db: 94:5a:09:1c:9e:88:2c:ec:46:b4:7a:87:3f:44:91: 75:3f:c7:32:b4:dd:0f:e8:52:28:12:e4:71:84:7e: a0:80:64:ef:4e:03:78:c6:e9:f8:4a:98:4a:7c:e9: 90:a0:5a:26:f7:e4:8b:73:fc:6d:e6:95:a6:7c:45: b3:d8:f1:70:a2:44:c2:dc:42:3e:c4:52:fa:ec:8a: 61:f4:d6:49:2b:0a:40:36:cd:5d:72:f5:69:f4:fa: 67:87:b1:d5:89:f3:c7:56:f9:7f:08:85:ce:ff:4f: 89:09:ca:df:cf:8b:18:15:07:97:45:12:0b:46:03: d6:4e:ef:92:1b:2d:70:0a:eb:56:a6:07:ff:96:65: 8e:91:d3:2b:b0:77:a2:ae:de:0f:8c:d3:3f:02:d8: 65:16:9f:42:1c:c2:06:16:78:d9:31:97:24:ba:84: 20:73:38:e3:04:05:6a:dd:b7:27:e7:9f:62:cc:4e: 50:26:9c:29:6d:6a:60:e7:d7:9a:af:55:a2:d9:a7: b8:9b:2c:f8:93:5a:41:c5:d1:68:30:db:3d:7d:24: f9:92:52:6f:8d:51:0c:c3:69:2f:05:fb:73:46:05: 84:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0C:F4:C2:DE:33:D3:79:D8:B8:A4:2F:8E:08:7C:B9:D4:AB:D2:98 X509v3 Authority Key Identifier: keyid:AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:e1:50:ed:ad:8c:9a:c1:b5:77:ab:ae:99:a1:79:6c:5e:51: dc:0e:17:be:15:7b:2c:1e:2a:00:da:bd:03:1b:d0:cc:c1:d3: 3a:39:18:b2:f2:9d:34:5e:ad:bd:4e:3b:c8:b9:52:db:e2:13: 33:77:37:97:93:7c:b0:76:a4:a2:74:87:84:3f:fe:51:9a:9e: aa:06:58:fd:8a:d2:ab:88:93:11:d9:72:eb:b8:1a:91:0b:0c: 8e:68:2f:41:aa:c3:06:29:27:9e:cd:d7:73:85:47:63:99:45: 79:28:80:f0:14:e5:18:af:10:37:1a:c4:5e:ee:03:b7:c3:7c: fe:cc:6c:16:f5:2a:ba:c3:4b:43:a4:e4:db:21:b7:c3:f2:0f: 20:4c:c2:dc:dd:77:01:59:9f:4c:9c:a4:c1:01:1d:26:ec:8d: 29:4e:7c:e4:ac:94:b6:aa:c0:0f:3c:8b:48:d0:ce:7b:c9:ad: 49:cc:09:3b:e1:87:d3:d4:d2:21:1c:c8:fa:0f:88:7c:cc:cc: 3d:09:e8:e8:98:2a:ea:c7:2e:40:79:6b:53:6c:97:fd:0f:d2: cc:99:b9:70:4c:33:91:f2:d8:b6:50:77:09:64:12:20:01:54: 41:90:5d:aa:71:8d:76:6f:a8:2f:5b:6e:16:88:39:c7:d6:b0: bc:d8:5c:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrijPPmfQJev/XGO6CRewGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOTU0OTE3NmY5NjZkM2EyMjE0MTAwNzkwOTdjODdmMGUx ZDIwYjEwHhcNMjUxMjE3MDkwMDM2WhcNMjUxMjE4MDkwMDM2WjAzMTEwLwYDVQQD Eyg3NTBjZjRjMmRlMzNkMzc5ZDhiOGE0MmY4ZTA4N2NiOWQ0YWJkMjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSbKGhfydTdRymfDmtExxGdkR5Xt z4hqd2AjUtuUWgkcnogs7Ea0eoc/RJF1P8cytN0P6FIoEuRxhH6ggGTvTgN4xun4 SphKfOmQoFom9+SLc/xt5pWmfEWz2PFwokTC3EI+xFL67Iph9NZJKwpANs1dcvVp 9Ppnh7HVifPHVvl/CIXO/0+JCcrfz4sYFQeXRRILRgPWTu+SGy1wCutWpgf/lmWO kdMrsHeirt4PjNM/AthlFp9CHMIGFnjZMZckuoQgczjjBAVq3bcn559izE5QJpwp bWpg59ear1Wi2ae4myz4k1pBxdFoMNs9fST5klJvjVEMw2kvBftzRgWEHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUM9MLeM9N52LikL44IfLnUq9KYMB8GA1UdIwQY MBaAFK+VSRdvlm06IhQQB5CXyH8OHSCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjVWSkYyLVdiVG9pRkJBSGtKZklmdzRkSUxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84NTkxNzAtYTk3NC00YWUzLWEwMjAt M2VhNTlkOTZhNzkwLzEvcjVWSkYyLVdiVG9pRkJBSGtKZklmdzRkSUxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS84NTkxNzAtYTk3NC00YWUzLWEwMjAtM2VhNTlkOTZhNzkw LzEvcjVWSkYyLVdiVG9pRkJBSGtKZklmdzRkSUxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+FQ7a2M msG1d6uumaF5bF5R3A4XvhV7LB4qANq9AxvQzMHTOjkYsvKdNF6tvU47yLlS2+IT M3c3l5N8sHakonSHhD/+UZqeqgZY/YrSq4iTEdly67gakQsMjmgvQarDBiknns3X c4VHY5lFeSiA8BTlGK8QNxrEXu4Dt8N8/sxsFvUqusNLQ6Tk2yG3w/IPIEzC3N13 AVmfTJykwQEdJuyNKU585KyUtqrADzyLSNDOe8mtScwJO+GH09TSIRzI+g+IfMzM PQno6Jgq6scuQHlrU2yX/Q/SzJm5cEwzkfLYtlB3CWQSIAFUQZBdqnGNdm+oL1tu Fog5x9awvNhcrA== -----END CERTIFICATE-----Generated at Wed Dec 17 16:37:44 2025 by rpki-client