This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft File: r5VJF2-WbToiFBAHkJfIfw4dILE.mft (raw, json) Hash identifier: jvfzoz3HfXv0UYQEcOQAPcFgpaepIwW7etjrUKmwJCc= Subject key identifier: BC:A9:89:70:7A:0E:3A:26:F5:69:A0:21:0F:F0:92:54:5A:81:C5:C6 Authority key identifier: AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1 Certificate issuer: /CN=af9549176f966d3a221410079097c87f0e1d20b1 Certificate serial: 019AF19AABFFB3D338729D1AC407FD05134B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft Manifest number: 0EC3 Signing time: Sat 06 Dec 2025 03:00:36 +0000 Manifest this update: Sat 06 Dec 2025 03:00:36 +0000 Manifest next update: Sun 07 Dec 2025 03:00:36 +0000 Files and hashes: 1: 1n_N6auYiXQ1pyBQYj7m3QI_dSs.roa (hash: LsHjMOF74kduMAehGu3uEfQUdY1PYN7E293m6Bfa2Jo=) 2: r5VJF2-WbToiFBAHkJfIfw4dILE.crl (hash: yzIZlaL2Wwj5vZs+h2EausLzf5E3ADdkMErS6VVHuJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ab:ff:b3:d3:38:72:9d:1a:c4:07:fd:05:13:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af9549176f966d3a221410079097c87f0e1d20b1 Validity Not Before: Dec 6 03:00:36 2025 GMT Not After : Dec 7 03:00:36 2025 GMT Subject: CN=bca989707a0e3a26f569a0210ff092545a81c5c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7d:a6:f6:05:f4:18:74:d9:ce:79:c8:e2:4f: d0:ee:6c:e1:22:1e:32:30:fc:78:c3:84:f7:a7:f6: 89:92:f1:17:ff:ca:a4:07:4e:3d:0d:8f:a8:e6:73: 57:0a:66:7d:a4:bc:23:0c:e6:89:db:93:b1:ff:7a: 8b:13:1f:fc:31:44:f2:fc:0d:8e:6a:b7:e2:64:da: 64:7a:f7:11:72:8a:47:3c:f6:e9:0f:ef:6e:82:8f: d6:89:ab:dc:fd:06:5a:8e:8b:3b:b3:60:bb:1d:79: ff:d7:b2:0c:56:9b:e8:03:cc:33:9e:19:57:a7:5d: 7e:4c:b3:71:88:f6:56:c4:72:59:4d:85:07:5b:c1: 73:9e:7f:40:7b:3e:5e:a1:41:82:4d:2f:35:a7:eb: c5:a9:61:02:82:d2:36:47:e7:80:f7:97:fc:f8:c6: 59:ea:d6:1c:e1:81:57:35:9f:cb:5c:2b:ff:8e:92: 3c:29:72:3d:48:17:d8:5a:89:b2:e1:59:19:f0:a7: 57:60:de:3b:b4:5e:57:da:21:81:33:59:f5:1a:57: 6d:8c:88:fa:d1:6f:cf:1e:31:3d:70:90:a9:f3:44: 86:5c:b5:ca:97:c3:f5:b2:a4:dc:47:66:bd:dc:1b: 03:b9:63:d3:ee:fe:27:20:c0:69:f8:54:7d:02:f5: 93:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A9:89:70:7A:0E:3A:26:F5:69:A0:21:0F:F0:92:54:5A:81:C5:C6 X509v3 Authority Key Identifier: keyid:AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:82:55:53:e9:1d:f7:45:c8:91:de:e0:0c:13:09:6e:65:7d: 64:ac:7c:00:ac:5d:31:12:46:5a:21:ed:9e:c4:0b:b7:80:87: ec:03:c8:61:f3:34:3c:9a:49:b0:a7:e8:04:97:14:7b:05:a7: f7:4f:e9:58:0f:e4:fe:87:77:5d:cf:02:18:c9:5f:5f:d2:88: f6:ab:e6:d6:67:3a:6c:fa:e2:64:45:1b:7c:98:80:cc:fd:83: 7c:d2:a4:11:83:27:3a:22:3a:88:ed:1f:93:26:8e:02:75:95: bd:2c:f3:b9:6f:f6:1c:0a:1d:ad:15:af:2a:1f:d7:24:64:76: 18:22:62:5a:a2:ac:ac:3a:d1:af:ab:4c:18:94:0f:18:96:04: c8:95:f2:ce:da:97:f1:41:d5:8d:fe:53:47:84:a1:d3:b5:a6: 80:1c:44:76:37:42:aa:38:69:14:71:5a:24:01:d9:db:c7:58: 73:6c:5a:94:e5:d7:4e:89:f3:fe:66:d8:7e:6d:81:c4:bf:08: 89:c6:e6:b2:44:55:13:18:17:2a:70:f0:af:de:be:a6:8d:45: 13:d6:fd:8e:eb:6f:e9:7f:c4:61:d1:49:29:8d:2a:1d:95:7c: 2c:b7:db:85:79:66:7e:e8:9e:d3:7a:91:a4:a3:3e:93:15:6f: 08:c1:a1:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqv/s9M4cp0axAf9BRNLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOTU0OTE3NmY5NjZkM2EyMjE0MTAwNzkwOTdjODdmMGUx ZDIwYjEwHhcNMjUxMjA2MDMwMDM2WhcNMjUxMjA3MDMwMDM2WjAzMTEwLwYDVQQD EyhiY2E5ODk3MDdhMGUzYTI2ZjU2OWEwMjEwZmYwOTI1NDVhODFjNWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n2m9gX0GHTZznnI4k/Q7mzhIh4y MPx4w4T3p/aJkvEX/8qkB049DY+o5nNXCmZ9pLwjDOaJ25Ox/3qLEx/8MUTy/A2O arfiZNpkevcRcopHPPbpD+9ugo/Wiavc/QZajos7s2C7HXn/17IMVpvoA8wznhlX p11+TLNxiPZWxHJZTYUHW8Fznn9Aez5eoUGCTS81p+vFqWECgtI2R+eA95f8+MZZ 6tYc4YFXNZ/LXCv/jpI8KXI9SBfYWomy4VkZ8KdXYN47tF5X2iGBM1n1GldtjIj6 0W/PHjE9cJCp80SGXLXKl8P1sqTcR2a93BsDuWPT7v4nIMBp+FR9AvWTVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLypiXB6Djom9WmgIQ/wklRagcXGMB8GA1UdIwQY MBaAFK+VSRdvlm06IhQQB5CXyH8OHSCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjVWSkYyLVdiVG9pRkJBSGtKZklmdzRkSUxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84NTkxNzAtYTk3NC00YWUzLWEwMjAt M2VhNTlkOTZhNzkwLzEvcjVWSkYyLVdiVG9pRkJBSGtKZklmdzRkSUxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS84NTkxNzAtYTk3NC00YWUzLWEwMjAtM2VhNTlkOTZhNzkw LzEvcjVWSkYyLVdiVG9pRkJBSGtKZklmdzRkSUxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn4JVU+kd 90XIkd7gDBMJbmV9ZKx8AKxdMRJGWiHtnsQLt4CH7APIYfM0PJpJsKfoBJcUewWn 90/pWA/k/od3Xc8CGMlfX9KI9qvm1mc6bPriZEUbfJiAzP2DfNKkEYMnOiI6iO0f kyaOAnWVvSzzuW/2HAodrRWvKh/XJGR2GCJiWqKsrDrRr6tMGJQPGJYEyJXyztqX 8UHVjf5TR4Sh07WmgBxEdjdCqjhpFHFaJAHZ28dYc2xalOXXTonz/mbYfm2BxL8I icbmskRVExgXKnDwr96+po1FE9b9jutv6X/EYdFJKY0qHZV8LLfbhXlmfuie03qR pKM+kxVvCMGhdA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:41 2025 by rpki-client