This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft File: v5nSPIJymoBJ51ZXdahkvDqigu8.mft (raw, json) Hash identifier: ow3LOTrFxBNBcz5XXWApJqCh3oJuCFV4Mym1MfySHRI= Subject key identifier: 12:F8:D9:DF:78:7F:68:B9:D9:06:46:F2:9E:B3:ED:E1:A9:75:5C:E6 Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF Certificate issuer: /CN=bf99d23c82729a8049e7565775a864bc3aa282ef Certificate serial: 019B3532E7D6E41B4121539DD0943A15451A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft Manifest number: 081B Signing time: Fri 19 Dec 2025 06:01:27 +0000 Manifest this update: Fri 19 Dec 2025 06:01:27 +0000 Manifest next update: Sat 20 Dec 2025 06:01:27 +0000 Files and hashes: 1: v5nSPIJymoBJ51ZXdahkvDqigu8.crl (hash: a7FwRL6/JSXBGXRZDtIptjy4IMUBIF05MvZx4sZLkzc=) 2: ybOueXNsSJri02mQKQibbKcroL4.roa (hash: rsUCG/CXGaoh8At3iU9kgYgz39f7x4KapImvavgysk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:e7:d6:e4:1b:41:21:53:9d:d0:94:3a:15:45:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef Validity Not Before: Dec 19 06:01:27 2025 GMT Not After : Dec 20 06:01:27 2025 GMT Subject: CN=12f8d9df787f68b9d90646f29eb3ede1a9755ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3a:bd:bd:2f:0c:47:1d:c9:a8:d3:a7:b3:06: 5a:fe:53:61:0d:61:ff:6e:77:98:92:b5:ae:95:fb: 7a:f6:bd:cf:2a:4a:c6:e7:ba:fc:90:8c:0d:da:92: 1e:86:91:30:79:a2:be:f8:dd:38:98:fb:98:5d:e3: d9:6f:40:33:79:6b:d3:27:53:11:c4:0e:33:da:25: 4b:dc:dd:e6:24:81:90:26:8c:70:70:ae:30:9d:b6: fa:66:58:f7:79:6b:99:9c:ad:e1:71:0d:e9:94:53: 3e:e6:d8:77:ea:91:2f:43:13:73:43:a4:71:7b:ff: b2:50:8c:4e:c1:13:21:0f:11:50:86:9a:17:66:8e: 2b:9b:66:95:73:be:f1:48:e4:83:26:7e:9c:7d:f7: 7d:ab:74:17:d8:51:f0:82:3b:52:9a:97:54:49:70: c2:58:60:4c:cb:37:6d:b6:b9:b9:b9:fe:06:1a:45: 66:db:ec:b2:d6:fb:54:fd:81:9f:b3:70:e7:86:35: 67:bb:15:6d:71:3e:64:01:eb:e8:8c:cb:88:6a:79: 4c:92:08:2b:e1:d9:40:d5:f7:64:56:cf:98:e0:0a: 3b:67:35:a8:af:ee:cb:f9:a8:b0:1b:39:6c:98:82: f0:76:ce:08:23:7e:03:c9:20:3e:fc:4f:04:c6:c1: 19:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F8:D9:DF:78:7F:68:B9:D9:06:46:F2:9E:B3:ED:E1:A9:75:5C:E6 X509v3 Authority Key Identifier: keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:db:c1:f4:6b:0b:91:e8:06:30:b0:5b:46:dd:95:8b:5a:31: bf:97:69:51:f1:e0:96:87:eb:3b:d7:ef:fa:eb:4e:9b:dd:3a: 5f:97:eb:11:d8:39:68:16:4b:f3:d2:5a:c3:b1:96:7d:f8:4d: 60:5a:48:85:1b:e5:e3:8a:bc:64:3d:54:34:2f:37:22:de:02: 12:44:e2:23:38:12:d5:a8:9a:7b:00:1e:a1:28:9b:f5:a1:68: 9d:97:a5:44:51:4b:46:70:f9:d4:cf:a9:06:fb:3d:27:fd:a1: 97:4f:47:5a:c9:13:f8:92:d6:bf:ca:d7:20:40:e2:7e:34:6b: a6:ec:4b:3a:9a:15:71:0a:95:33:e6:5f:50:95:ee:f9:04:c9: ea:11:72:56:cc:67:a4:77:3f:c8:ba:c4:6f:e2:18:93:07:d6: 09:fd:d2:66:df:8b:e4:16:28:06:53:e7:e2:1b:c5:3d:1d:e2: e1:a8:15:31:85:54:d3:a6:2e:40:d4:0c:68:58:92:73:70:a2: 91:1e:ab:9b:64:6a:c4:6b:c5:50:95:cb:ea:8d:c8:87:7e:4a: 8a:5c:d9:16:72:e5:7e:ba:fe:b8:6c:0e:af:4d:b7:ea:89:06: f1:13:18:b1:51:ad:17:ac:ae:ee:6b:37:cd:f4:b6:5d:48:56: ee:f9:3d:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MufW5BtBIVOd0JQ6FUUaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmOTlkMjNjODI3MjlhODA0OWU3NTY1Nzc1YTg2NGJjM2Fh MjgyZWYwHhcNMjUxMjE5MDYwMTI3WhcNMjUxMjIwMDYwMTI3WjAzMTEwLwYDVQQD EygxMmY4ZDlkZjc4N2Y2OGI5ZDkwNjQ2ZjI5ZWIzZWRlMWE5NzU1Y2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDq9vS8MRx3JqNOnswZa/lNhDWH/ bneYkrWulft69r3PKkrG57r8kIwN2pIehpEweaK++N04mPuYXePZb0AzeWvTJ1MR xA4z2iVL3N3mJIGQJoxwcK4wnbb6Zlj3eWuZnK3hcQ3plFM+5th36pEvQxNzQ6Rx e/+yUIxOwRMhDxFQhpoXZo4rm2aVc77xSOSDJn6cffd9q3QX2FHwgjtSmpdUSXDC WGBMyzdttrm5uf4GGkVm2+yy1vtU/YGfs3DnhjVnuxVtcT5kAevojMuIanlMkggr 4dlA1fdkVs+Y4Ao7ZzWor+7L+aiwGzlsmILwds4II34DySA+/E8ExsEZKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBL42d94f2i52QZG8p6z7eGpdVzmMB8GA1UdIwQY MBaAFL+Z0jyCcpqASedWV3WoZLw6ooLvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjVuU1BJSnltb0JKNTFaWGRhaGt2RHFpZ3U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYWQ1M2EtZjExOC00YTg4LThjMmYt OTg3MDg2Y2NhYjg0LzEvdjVuU1BJSnltb0JKNTFaWGRhaGt2RHFpZ3U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYWQ1M2EtZjExOC00YTg4LThjMmYtOTg3MDg2Y2NhYjg0 LzEvdjVuU1BJSnltb0JKNTFaWGRhaGt2RHFpZ3U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNvB9GsL kegGMLBbRt2Vi1oxv5dpUfHglofrO9fv+utOm906X5frEdg5aBZL89Jaw7GWffhN YFpIhRvl44q8ZD1UNC83It4CEkTiIzgS1aiaewAeoSib9aFonZelRFFLRnD51M+p Bvs9J/2hl09HWskT+JLWv8rXIEDifjRrpuxLOpoVcQqVM+ZfUJXu+QTJ6hFyVsxn pHc/yLrEb+IYkwfWCf3SZt+L5BYoBlPn4hvFPR3i4agVMYVU06YuQNQMaFiSc3Ci kR6rm2RqxGvFUJXL6o3Ih35KilzZFnLlfrr+uGwOr0236okG8RMYsVGtF6yu7ms3 zfS2XUhW7vk9yA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:38:00 2025 by rpki-client