This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft File: rB5-vncjkuz4xhcsJvHGfuPGGIM.mft (raw, json) Hash identifier: 1G9ac1fSczrNhnxgT/+G7dgq5jak5ZLN7r4ZXctd9NQ= Subject key identifier: 99:67:13:C6:E3:36:BD:86:DE:65:45:FB:66:03:A3:72:84:F1:82:C1 Authority key identifier: AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83 Certificate issuer: /CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883 Certificate serial: 019B273FD443B5A0A5B87C573010C1E5FF9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft Manifest number: 0B25 Signing time: Tue 16 Dec 2025 13:00:53 +0000 Manifest this update: Tue 16 Dec 2025 13:00:53 +0000 Manifest next update: Wed 17 Dec 2025 13:00:53 +0000 Files and hashes: 1: djea3wowsH9-GL3nIoFch0gf_Ow.roa (hash: t6fqkUvoXSupS3l5uRjJ3VosWSd+9PoyLIE+ML64T24=) 2: rB5-vncjkuz4xhcsJvHGfuPGGIM.crl (hash: qoitUIW0RK44ZkNK1FFGL43FbVnTfyudzY1uzdc3SeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:3f:d4:43:b5:a0:a5:b8:7c:57:30:10:c1:e5:ff:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883 Validity Not Before: Dec 16 13:00:53 2025 GMT Not After : Dec 17 13:00:53 2025 GMT Subject: CN=996713c6e336bd86de6545fb6603a37284f182c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:eb:3d:ee:27:81:c6:a7:21:0c:40:a5:23:5a: e5:22:3c:3b:e0:fb:5d:24:3e:07:10:fe:12:92:81: 7a:b4:64:02:65:56:6c:c8:d7:b2:68:3b:71:ad:c5: ba:e6:5f:75:1c:f4:20:a9:eb:b5:bd:0d:0d:91:af: 04:33:37:88:b1:7b:1c:85:60:2b:97:13:11:79:48: a0:71:d8:9e:3f:24:b1:8f:ab:ac:78:bf:95:e6:f6: 08:4f:ff:86:21:cc:34:be:06:39:ee:29:ff:9a:55: 16:09:9f:8c:90:cc:d7:60:2c:00:a7:07:c0:3a:d8: 99:3f:7a:d8:59:6b:de:67:3f:cf:5e:8c:33:32:77: 35:7d:6b:80:cb:98:d7:94:f2:71:3d:62:10:d0:cd: 62:1e:0c:37:8d:36:2e:58:d8:07:93:3f:16:ec:2b: 5d:80:c2:0c:ab:02:c6:84:80:1c:f2:c1:33:3e:3e: 25:4c:32:2d:9c:41:2c:d7:68:a5:99:fd:c1:b8:83: 57:8b:9a:4a:03:98:c2:54:17:ad:fb:19:f7:99:30: d1:82:be:64:08:dd:b7:ba:28:3e:52:a8:c1:a3:7a: 0f:86:6b:56:de:55:69:5e:a4:60:65:9d:b9:ab:db: 6a:e9:f8:d3:ab:e7:e9:aa:bb:fc:d7:54:67:92:c3: 34:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:67:13:C6:E3:36:BD:86:DE:65:45:FB:66:03:A3:72:84:F1:82:C1 X509v3 Authority Key Identifier: keyid:AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:33:23:b1:c9:a3:2f:5d:b4:10:3d:42:70:87:b0:03:58:e1: 39:0c:83:03:66:b4:b5:6a:48:73:08:56:60:83:03:a7:b5:9b: d2:94:1d:fb:92:3b:96:2d:63:ff:5a:15:fd:1e:45:f2:d7:e8: a3:f3:02:0c:b9:1b:ed:4f:71:8c:e2:16:12:77:2c:ae:46:ba: 38:d8:ad:68:37:25:55:ec:cb:ae:e9:2e:65:48:87:34:d2:5c: 65:ae:cc:43:5b:bc:ba:4c:0e:3b:f7:31:7d:14:70:7a:d4:2a: 0e:3b:39:0a:25:da:e6:30:c3:43:ee:ef:3c:84:46:fe:91:58: 8e:7f:0e:b4:0f:bb:d9:e0:0a:29:13:3f:ef:bc:93:49:95:1d: 79:3a:20:5d:88:0f:6a:97:79:9b:e1:c1:26:ba:03:b0:75:5d: 7f:f5:ae:67:53:a7:27:af:28:5b:09:4b:a3:04:31:d3:51:9d: 91:4a:b8:bb:8d:64:ee:47:56:2e:40:df:e8:64:6f:39:be:68: 36:56:5f:a8:d5:a9:e3:9e:56:16:8c:74:bb:14:90:ef:6c:96: aa:0f:e3:03:eb:c6:07:a2:52:66:c3:ff:aa:f6:2f:a0:3a:60: 30:6a:df:eb:4d:d7:02:61:93:32:f0:14:4f:d9:26:21:6f:e2: b3:10:74:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnP9RDtaCluHxXMBDB5f+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMWU3ZWJlNzcyMzkyZWNmOGM2MTcyYzI2ZjFjNjdlZTNj NjE4ODMwHhcNMjUxMjE2MTMwMDUzWhcNMjUxMjE3MTMwMDUzWjAzMTEwLwYDVQQD Eyg5OTY3MTNjNmUzMzZiZDg2ZGU2NTQ1ZmI2NjAzYTM3Mjg0ZjE4MmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0us97ieBxqchDEClI1rlIjw74Ptd JD4HEP4SkoF6tGQCZVZsyNeyaDtxrcW65l91HPQgqeu1vQ0Nka8EMzeIsXschWAr lxMReUigcdiePySxj6useL+V5vYIT/+GIcw0vgY57in/mlUWCZ+MkMzXYCwApwfA OtiZP3rYWWveZz/PXowzMnc1fWuAy5jXlPJxPWIQ0M1iHgw3jTYuWNgHkz8W7Ctd gMIMqwLGhIAc8sEzPj4lTDItnEEs12ilmf3BuINXi5pKA5jCVBet+xn3mTDRgr5k CN23uig+UqjBo3oPhmtW3lVpXqRgZZ25q9tq6fjTq+fpqrv811RnksM0DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlnE8bjNr2G3mVF+2YDo3KE8YLBMB8GA1UdIwQY MBaAFKwefr53I5Ls+MYXLCbxxn7jxhiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckI1LXZuY2prdXo0eGhjc0p2SEdmdVBHR0lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi82M2JjNmMtM2Y3NC00Zjc3LWI2OWEt YTIxODZmODY4NTE5LzEvckI1LXZuY2prdXo0eGhjc0p2SEdmdVBHR0lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi82M2JjNmMtM2Y3NC00Zjc3LWI2OWEtYTIxODZmODY4NTE5 LzEvckI1LXZuY2prdXo0eGhjc0p2SEdmdVBHR0lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDMjscmj L120ED1CcIewA1jhOQyDA2a0tWpIcwhWYIMDp7Wb0pQd+5I7li1j/1oV/R5F8tfo o/MCDLkb7U9xjOIWEncsrka6ONitaDclVezLrukuZUiHNNJcZa7MQ1u8ukwOO/cx fRRwetQqDjs5CiXa5jDDQ+7vPIRG/pFYjn8OtA+72eAKKRM/77yTSZUdeTogXYgP apd5m+HBJroDsHVdf/WuZ1OnJ68oWwlLowQx01GdkUq4u41k7kdWLkDf6GRvOb5o NlZfqNWp455WFox0uxSQ72yWqg/jA+vGB6JSZsP/qvYvoDpgMGrf603XAmGTMvAU T9kmIW/isxB0qg== -----END CERTIFICATE-----Generated at Tue Dec 16 19:33:46 2025 by rpki-client