This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft File: i5PlZ68ZipTh_PBf4P58khCVqEo.mft (raw, json) Hash identifier: VJ89Lq2zOPwD0Pe67XgUmq96h82rwML+p6ImtaZkfb4= Subject key identifier: C5:D6:2C:AD:FA:D9:29:7C:D8:09:16:BA:08:09:5D:9E:40:A3:B3:6F Authority key identifier: 8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A Certificate issuer: /CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a Certificate serial: 019B1EE15DB2BF21D89C327E59E68E00FE49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft Manifest number: 0C22 Signing time: Sun 14 Dec 2025 22:00:44 +0000 Manifest this update: Sun 14 Dec 2025 22:00:44 +0000 Manifest next update: Mon 15 Dec 2025 22:00:44 +0000 Files and hashes: 1: 6DAE46YGraEJYVV3HiGtZg9tT3U.roa (hash: 9Q8yRtyc9v/k/ONyDJo3tJ6f8FW5cGNXex+XpsJxg2Q=) 2: i5PlZ68ZipTh_PBf4P58khCVqEo.crl (hash: Kt9Zn1cs6X0TQCqNb8SzgEoGsb7YP8614fDR+11s1kk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 22:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:e1:5d:b2:bf:21:d8:9c:32:7e:59:e6:8e:00:fe:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a Validity Not Before: Dec 14 22:00:44 2025 GMT Not After : Dec 15 22:00:44 2025 GMT Subject: CN=c5d62cadfad9297cd80916ba08095d9e40a3b36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:49:3a:5d:24:39:fe:35:54:31:df:69:79:41: b7:a8:f0:db:1e:67:f1:01:4e:db:71:b7:0c:a3:30: e3:02:df:96:69:64:b3:c7:64:33:6a:ae:3d:23:68: 8c:ad:70:fc:82:7b:79:77:6a:0f:25:0b:d3:f5:a9: 4e:a4:2e:a3:25:f8:22:ee:5d:c4:9f:8f:9d:ab:06: 7d:fa:d6:8a:b3:58:c5:f8:33:d9:a9:6e:6e:55:0e: 8c:f2:99:9d:1d:39:5b:ab:6c:30:d9:88:7d:da:79: da:36:85:c9:4c:47:30:3a:3b:98:fe:ae:5e:96:19: 22:76:9d:e6:66:58:38:47:fb:e2:32:51:8d:0b:fc: fd:87:e9:74:86:6b:e2:04:14:6e:5c:07:ff:08:e3: 79:2e:ed:16:0c:ce:ba:0c:92:47:be:d4:b5:69:cd: 1b:53:f9:6a:3c:6c:c9:ed:c9:21:df:46:9a:99:45: 81:4c:51:70:6f:16:4f:63:6d:91:9e:e9:ef:1c:53: 99:e8:6b:8f:e7:92:d1:20:4c:a2:28:58:ae:37:b8: 68:99:75:ea:a5:b0:21:b1:73:78:5b:1e:99:62:76: 8a:80:c4:38:2a:7d:86:1f:c2:c2:98:d3:5f:e3:44: 8d:67:ea:ce:29:f8:74:75:dc:7c:db:f1:07:1c:45: 2b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D6:2C:AD:FA:D9:29:7C:D8:09:16:BA:08:09:5D:9E:40:A3:B3:6F X509v3 Authority Key Identifier: keyid:8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:7b:bd:b1:28:93:90:b3:3a:73:a6:94:c7:cb:7a:89:e2:60: 69:8a:80:35:6f:bb:b6:87:0f:f1:f7:81:18:32:2d:6e:0b:33: 3d:8c:a3:28:27:d4:19:99:09:a6:eb:c5:e7:08:eb:08:a9:6a: 38:a8:43:a4:31:64:6f:53:b7:a5:89:52:2a:57:59:9a:31:ea: 48:66:66:18:38:53:15:6f:21:f4:59:71:7a:7b:8b:51:89:5f: 25:df:d1:18:e9:de:48:f2:3b:35:6a:57:9d:e9:a3:a0:e1:f9: 29:a2:eb:28:91:32:be:d1:77:96:1b:5b:cf:3b:88:03:69:b9: ea:bd:e1:aa:b2:d8:f3:fd:89:87:57:f5:29:f4:c3:5a:18:1a: eb:73:1f:c6:00:f6:8d:9b:af:8e:5e:f3:63:27:93:2d:62:3b: d0:a9:d1:d1:a0:86:70:c4:d5:7c:9a:5f:5c:4b:d8:87:c1:cd: 0f:34:2e:3e:22:07:2f:77:bc:ba:73:75:76:65:20:8e:f3:65: b7:48:ec:5e:45:6a:71:48:e7:97:fc:cf:8b:c4:8b:db:4e:c3: d8:ec:ae:9f:54:32:2c:ba:b8:4e:a3:d5:8a:d7:ec:09:3b:bc: 9f:6a:85:f8:7a:ab:37:fe:22:98:c0:cb:83:ce:e5:08:52:23: cb:3f:20:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZse4V2yvyHYnDJ+WeaOAP5JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOTNlNTY3YWYxOThhOTRlMWZjZjA1ZmUwZmU3YzkyMTA5 NWE4NGEwHhcNMjUxMjE0MjIwMDQ0WhcNMjUxMjE1MjIwMDQ0WjAzMTEwLwYDVQQD EyhjNWQ2MmNhZGZhZDkyOTdjZDgwOTE2YmEwODA5NWQ5ZTQwYTNiMzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkk6XSQ5/jVUMd9peUG3qPDbHmfx AU7bcbcMozDjAt+WaWSzx2Qzaq49I2iMrXD8gnt5d2oPJQvT9alOpC6jJfgi7l3E n4+dqwZ9+taKs1jF+DPZqW5uVQ6M8pmdHTlbq2ww2Yh92nnaNoXJTEcwOjuY/q5e lhkidp3mZlg4R/viMlGNC/z9h+l0hmviBBRuXAf/CON5Lu0WDM66DJJHvtS1ac0b U/lqPGzJ7ckh30aamUWBTFFwbxZPY22RnunvHFOZ6GuP55LRIEyiKFiuN7homXXq pbAhsXN4Wx6ZYnaKgMQ4Kn2GH8LCmNNf40SNZ+rOKfh0ddx82/EHHEUrpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXWLK362Sl82AkWuggJXZ5Ao7NvMB8GA1UdIwQY MBaAFIuT5WevGYqU4fzwX+D+fJIQlahKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTVQbFo2OFppcFRoX1BCZjRQNThraENWcUVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jZjEzMGQtZWZkNC00ZGZiLWExYTMt YTJiZjBhMThjZGRjLzEvaTVQbFo2OFppcFRoX1BCZjRQNThraENWcUVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9jZjEzMGQtZWZkNC00ZGZiLWExYTMtYTJiZjBhMThjZGRj LzEvaTVQbFo2OFppcFRoX1BCZjRQNThraENWcUVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHu9sSiT kLM6c6aUx8t6ieJgaYqANW+7tocP8feBGDItbgszPYyjKCfUGZkJpuvF5wjrCKlq OKhDpDFkb1O3pYlSKldZmjHqSGZmGDhTFW8h9FlxenuLUYlfJd/RGOneSPI7NWpX nemjoOH5KaLrKJEyvtF3lhtbzzuIA2m56r3hqrLY8/2Jh1f1KfTDWhga63MfxgD2 jZuvjl7zYyeTLWI70KnR0aCGcMTVfJpfXEvYh8HNDzQuPiIHL3e8unN1dmUgjvNl t0jsXkVqcUjnl/zPi8SL207D2Oyun1QyLLq4TqPVitfsCTu8n2qF+HqrN/4imMDL g87lCFIjyz8gow== -----END CERTIFICATE-----Generated at Mon Dec 15 04:52:17 2025 by rpki-client