This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft File: rB5-vncjkuz4xhcsJvHGfuPGGIM.mft (raw, json) Hash identifier: zjF+524Z4BCA6BcH110+w+9N9EdaFqSojOqEWruQyTY= Subject key identifier: D9:95:75:9D:89:0C:C9:CE:43:63:45:26:80:3A:56:5E:BD:AD:9E:2B Authority key identifier: AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83 Certificate issuer: /CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883 Certificate serial: 019AF31B67185C6DC3D88DA6629E1746B02E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft Manifest number: 0B0A Signing time: Sat 06 Dec 2025 10:00:50 +0000 Manifest this update: Sat 06 Dec 2025 10:00:50 +0000 Manifest next update: Sun 07 Dec 2025 10:00:50 +0000 Files and hashes: 1: djea3wowsH9-GL3nIoFch0gf_Ow.roa (hash: t6fqkUvoXSupS3l5uRjJ3VosWSd+9PoyLIE+ML64T24=) 2: rB5-vncjkuz4xhcsJvHGfuPGGIM.crl (hash: HPBBeav+E/j+8s6GcQPlxB5WPEUFOEgFArVCVImgUNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:67:18:5c:6d:c3:d8:8d:a6:62:9e:17:46:b0:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883 Validity Not Before: Dec 6 10:00:50 2025 GMT Not After : Dec 7 10:00:50 2025 GMT Subject: CN=d995759d890cc9ce43634526803a565ebdad9e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d9:dd:54:2a:fc:fa:5a:af:ec:d4:3b:f9:5c: 9b:a4:84:6b:f3:39:66:2c:29:db:4e:dd:21:8d:f9: 80:b9:00:ec:09:f3:15:97:df:c0:8d:0a:a2:f6:c5: 07:92:9c:b1:76:97:6e:ff:df:27:8c:28:fc:5a:d6: fd:f9:cb:36:72:dc:c8:d6:da:7e:47:44:1d:b8:42: 05:05:dd:20:e6:80:5d:c7:51:5e:df:65:8f:af:93: a7:44:0f:ac:c8:b5:1f:30:3a:6b:fc:6b:c8:ff:05: ba:2d:18:5c:26:17:6d:f6:ba:8c:3e:96:6d:0f:74: b5:66:ec:bf:2f:16:8b:a8:b4:f3:58:0e:3d:ce:9b: 98:fd:5b:a1:3f:83:d0:fe:34:03:f2:39:bd:8b:89: 59:78:d0:eb:fe:74:74:44:85:c9:26:a4:d6:f1:d1: 2c:ac:b2:bb:ed:d7:e2:9b:34:6e:12:59:5a:f8:9b: 93:50:26:4b:e6:86:e7:b1:a0:e6:88:76:45:0e:a3: 09:b7:e1:37:3b:c4:42:6b:04:57:b3:cd:9e:c3:08: 13:82:3e:9e:5a:58:2a:1e:ee:e6:e2:8f:3e:19:41: f8:08:69:54:97:2a:b0:ba:7b:86:63:3f:05:a3:67: 30:48:25:73:54:ba:26:7a:7f:4a:59:c5:2c:ef:12: 06:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:95:75:9D:89:0C:C9:CE:43:63:45:26:80:3A:56:5E:BD:AD:9E:2B X509v3 Authority Key Identifier: keyid:AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:6a:37:70:11:41:94:81:2b:15:d3:04:75:b2:2e:63:e7:5b: f2:64:9d:e7:54:c2:c1:60:a4:9c:49:7a:32:8f:82:31:c3:90: 0e:50:f7:0c:6d:da:1d:66:19:59:66:a1:16:bd:8a:4d:48:8e: be:44:01:6c:24:4a:ef:20:a8:c2:ba:3d:ab:2e:a7:37:5d:7a: cf:a7:78:27:58:05:5c:f2:c5:b4:89:61:05:9e:5d:97:51:c5: 4a:e7:08:eb:65:fa:9f:1c:fb:14:71:ef:f9:47:29:eb:01:e0: 53:ff:54:d1:df:64:89:be:5c:86:d1:b0:5b:d0:ba:8b:0b:fc: 52:bc:8f:d6:05:95:ec:94:f9:c4:75:9e:e1:c5:0b:61:32:89: 07:cf:b2:12:fc:9a:23:ba:5d:07:98:b4:4b:14:39:e2:27:13: fc:5b:eb:45:2f:23:70:2a:1d:db:57:31:1e:1e:3c:44:c0:f7: 6b:9d:bf:5b:06:e4:65:7c:31:67:c1:4f:02:9f:57:35:03:65: 5d:d7:e1:4c:da:09:bb:4e:39:e9:f7:5b:04:50:c5:50:97:b6: b1:6b:72:33:e5:5e:5a:0b:39:32:9c:da:91:dd:c0:3a:fe:4e: 9f:77:d8:45:0d:fc:2f:a4:0d:2d:38:ee:27:58:6a:4a:8b:5d: 49:7e:2a:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2cYXG3D2I2mYp4XRrAuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMWU3ZWJlNzcyMzkyZWNmOGM2MTcyYzI2ZjFjNjdlZTNj NjE4ODMwHhcNMjUxMjA2MTAwMDUwWhcNMjUxMjA3MTAwMDUwWjAzMTEwLwYDVQQD EyhkOTk1NzU5ZDg5MGNjOWNlNDM2MzQ1MjY4MDNhNTY1ZWJkYWQ5ZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptndVCr8+lqv7NQ7+VybpIRr8zlm LCnbTt0hjfmAuQDsCfMVl9/AjQqi9sUHkpyxdpdu/98njCj8Wtb9+cs2ctzI1tp+ R0QduEIFBd0g5oBdx1Fe32WPr5OnRA+syLUfMDpr/GvI/wW6LRhcJhdt9rqMPpZt D3S1Zuy/LxaLqLTzWA49zpuY/VuhP4PQ/jQD8jm9i4lZeNDr/nR0RIXJJqTW8dEs rLK77dfimzRuElla+JuTUCZL5obnsaDmiHZFDqMJt+E3O8RCawRXs82ewwgTgj6e WlgqHu7m4o8+GUH4CGlUlyqwunuGYz8Fo2cwSCVzVLomen9KWcUs7xIGMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmVdZ2JDMnOQ2NFJoA6Vl69rZ4rMB8GA1UdIwQY MBaAFKwefr53I5Ls+MYXLCbxxn7jxhiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckI1LXZuY2prdXo0eGhjc0p2SEdmdVBHR0lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi82M2JjNmMtM2Y3NC00Zjc3LWI2OWEt YTIxODZmODY4NTE5LzEvckI1LXZuY2prdXo0eGhjc0p2SEdmdVBHR0lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi82M2JjNmMtM2Y3NC00Zjc3LWI2OWEtYTIxODZmODY4NTE5 LzEvckI1LXZuY2prdXo0eGhjc0p2SEdmdVBHR0lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWo3cBFB lIErFdMEdbIuY+db8mSd51TCwWCknEl6Mo+CMcOQDlD3DG3aHWYZWWahFr2KTUiO vkQBbCRK7yCowro9qy6nN116z6d4J1gFXPLFtIlhBZ5dl1HFSucI62X6nxz7FHHv +Ucp6wHgU/9U0d9kib5chtGwW9C6iwv8UryP1gWV7JT5xHWe4cULYTKJB8+yEvya I7pdB5i0SxQ54icT/FvrRS8jcCod21cxHh48RMD3a52/WwbkZXwxZ8FPAp9XNQNl XdfhTNoJu0456fdbBFDFUJe2sWtyM+VeWgs5Mpzakd3AOv5On3fYRQ38L6QNLTju J1hqSotdSX4qqA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:46:47 2025 by rpki-client