This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft File: r5NWA-UugxU3cW1FizYBkvmaNok.mft (raw, json) Hash identifier: tW2qIm9z1Di0u+K6oRQ5f2jCs+lz9PeAEODoffivpx8= Subject key identifier: 7A:64:35:DF:14:49:C2:20:BD:A3:AF:5F:66:84:C2:1B:1E:53:61:40 Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89 Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689 Certificate serial: 019AF12CD94CBC39A9867836F9C7F054C128 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft Manifest number: 0F59 Signing time: Sat 06 Dec 2025 01:00:39 +0000 Manifest this update: Sat 06 Dec 2025 01:00:39 +0000 Manifest next update: Sun 07 Dec 2025 01:00:39 +0000 Files and hashes: 1: C8GJTtN7fk4YCqjJY8mOHTrefmE.roa (hash: UKesPOi4+5CzCQnG0snfHD/ZU73osDFB9OchjV8wo3E=) 2: eQMDRNJuMlNlfPMiBSEoRMIZqkc.roa (hash: +YT5AumPRJxR5qeAOACvLYBXjcHMfp3cae2CLFa9pWo=) 3: pK186WjMEhCqpTApn72adWGJTc0.roa (hash: 2vPV6EcNoUKs6NmXfu/cqUoWqE3tnBkAH13PFqBjjPI=) 4: r5NWA-UugxU3cW1FizYBkvmaNok.crl (hash: hgatZgVW7IfwKJL1+ESyT6ubrfELFIbx8GCr2iEfLMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d9:4c:bc:39:a9:86:78:36:f9:c7:f0:54:c1:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af935603e52e831537716d458b360192f99a3689 Validity Not Before: Dec 6 01:00:39 2025 GMT Not After : Dec 7 01:00:39 2025 GMT Subject: CN=7a6435df1449c220bda3af5f6684c21b1e536140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:45:c8:88:19:23:af:bb:8c:bf:fa:06:a6:80: 5e:45:6e:f3:81:7b:9e:ea:95:d8:fc:51:45:eb:75: 63:38:1b:24:f0:60:34:5b:98:af:31:97:68:9f:67: 5b:d3:d9:b6:f7:b9:5a:ba:1c:42:de:b9:b5:fb:4d: 21:bb:fa:2d:b9:b3:bb:a5:70:f0:32:19:99:59:3c: d1:85:d2:8f:cc:e3:19:62:86:47:9c:37:c4:0e:82: 3a:a4:a8:81:2e:ab:96:15:c7:1e:e9:d4:21:5c:25: 97:65:a6:bb:d8:43:76:27:b9:8c:91:9e:8e:7a:66: 4c:7b:34:50:7f:13:99:6f:e8:27:64:91:97:40:79: cd:a7:c0:9f:c1:2a:0b:c6:17:71:3a:2a:93:d6:43: 75:a2:3e:ed:ff:af:3a:e3:f4:05:a6:f7:99:83:83: 93:05:c0:66:6c:53:90:83:d8:0c:0e:5f:3b:d9:97: b8:bb:90:fe:b5:bb:43:15:56:c6:06:1a:b8:3d:a7: 8c:9b:49:ae:d9:67:bf:dc:a4:7d:76:c7:d0:ea:22: 76:6c:2a:d6:ce:7d:19:46:73:7b:8e:d1:36:b2:b2: b5:c7:29:b7:3c:ab:4a:c9:5f:e4:3f:ee:6f:88:29: 44:5c:9e:5a:6a:8b:14:72:7d:28:ae:c1:c7:9c:96: b2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:64:35:DF:14:49:C2:20:BD:A3:AF:5F:66:84:C2:1B:1E:53:61:40 X509v3 Authority Key Identifier: keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:2c:bd:b6:cd:be:57:97:ae:2a:b0:d6:55:e5:5b:a5:b6:7c: 23:37:c7:22:7c:c6:fc:7b:c2:b8:56:7f:31:e6:dc:c4:6b:c1: d1:7d:80:32:0f:f4:ef:39:85:7a:b3:48:d7:47:67:f7:38:09: d7:e2:03:7a:ea:51:26:8e:89:d8:8c:42:9e:4c:d9:3e:d6:b7: 50:c4:a5:da:ab:7a:4b:61:78:96:d7:3b:92:19:b5:6e:3f:51: 77:40:9b:6c:40:18:5d:d5:ce:2b:95:3e:ef:06:da:6a:76:c4: 68:91:7b:e7:79:65:6f:cf:b3:d2:37:81:06:97:18:b6:7e:1e: 3c:db:bc:97:84:73:6c:ac:54:45:5b:10:5e:49:42:b0:be:ee: e4:c9:1a:0b:b0:51:11:0c:b7:5a:45:fc:12:be:89:fe:b4:2d: 80:f6:1d:e2:56:a0:04:17:36:e5:bc:16:35:bc:bb:66:43:f3: 0b:c1:f9:65:43:f6:47:84:7a:ca:b7:0d:96:88:5f:9f:11:a3: 64:af:fe:18:07:20:85:c8:2e:34:50:ce:9f:72:fb:bf:8f:e0: a6:14:23:d7:61:22:57:2d:a2:97:79:3f:fa:ac:ad:82:1f:ba: 39:d7:a5:15:b9:9d:7a:5d:63:42:0a:06:52:ab:5d:36:f4:ef: f2:aa:7f:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNlMvDmphng2+cfwVMEoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOTM1NjAzZTUyZTgzMTUzNzcxNmQ0NThiMzYwMTkyZjk5 YTM2ODkwHhcNMjUxMjA2MDEwMDM5WhcNMjUxMjA3MDEwMDM5WjAzMTEwLwYDVQQD Eyg3YTY0MzVkZjE0NDljMjIwYmRhM2FmNWY2Njg0YzIxYjFlNTM2MTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkXIiBkjr7uMv/oGpoBeRW7zgXue 6pXY/FFF63VjOBsk8GA0W5ivMZdon2db09m297lauhxC3rm1+00hu/otubO7pXDw MhmZWTzRhdKPzOMZYoZHnDfEDoI6pKiBLquWFcce6dQhXCWXZaa72EN2J7mMkZ6O emZMezRQfxOZb+gnZJGXQHnNp8CfwSoLxhdxOiqT1kN1oj7t/6864/QFpveZg4OT BcBmbFOQg9gMDl872Ze4u5D+tbtDFVbGBhq4PaeMm0mu2We/3KR9dsfQ6iJ2bCrW zn0ZRnN7jtE2srK1xym3PKtKyV/kP+5viClEXJ5aaosUcn0orsHHnJayRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpkNd8UScIgvaOvX2aEwhseU2FAMB8GA1UdIwQY MBaAFK+TVgPlLoMVN3FtRYs2AZL5mjaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjVOV0EtVXVneFUzY1cxRml6WUJrdm1hTm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zMDAxYWQtZGU5MC00MzYwLTgxMWYt MGEwZDA1ZWQwYzZiLzEvcjVOV0EtVXVneFUzY1cxRml6WUJrdm1hTm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8zMDAxYWQtZGU5MC00MzYwLTgxMWYtMGEwZDA1ZWQwYzZi LzEvcjVOV0EtVXVneFUzY1cxRml6WUJrdm1hTm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSy9ts2+ V5euKrDWVeVbpbZ8IzfHInzG/HvCuFZ/MebcxGvB0X2AMg/07zmFerNI10dn9zgJ 1+IDeupRJo6J2IxCnkzZPta3UMSl2qt6S2F4ltc7khm1bj9Rd0CbbEAYXdXOK5U+ 7wbaanbEaJF753llb8+z0jeBBpcYtn4ePNu8l4RzbKxURVsQXklCsL7u5MkaC7BR EQy3WkX8Er6J/rQtgPYd4lagBBc25bwWNby7ZkPzC8H5ZUP2R4R6yrcNlohfnxGj ZK/+GAcghcguNFDOn3L7v4/gphQj12EiVy2il3k/+qytgh+6OdelFbmdel1jQgoG UqtdNvTv8qp/Bw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:24 2025 by rpki-client