This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft File: r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft (raw, json) Hash identifier: sTD14jcbLFwDHVbjRYRGxipov+MaiCrt2ay8iwchhEo= Subject key identifier: 15:D4:D0:A2:36:9D:46:A3:3A:5C:BF:D1:6E:06:E6:3E:95:B5:D4:C2 Authority key identifier: AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2 Certificate issuer: /CN=af93102511e660263f8ef6e4c1f9ab32393839b2 Certificate serial: 019B59E3650FE0D3607B27A216F99F1CE4CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft Manifest number: 0C03 Signing time: Fri 26 Dec 2025 09:00:33 +0000 Manifest this update: Fri 26 Dec 2025 09:00:33 +0000 Manifest next update: Sat 27 Dec 2025 09:00:33 +0000 Files and hashes: 1: QyIQhrwBc_E0RzmwfCK0p-xEPL8.roa (hash: KU05TYN4aOywUPeCIgZViB5uKUpefnNLinujip3r7Ws=) 2: r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl (hash: nkM7uVZWrtB1zY6Uqqy/KuvSpcWsV3PxnV5YD8FTRsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:65:0f:e0:d3:60:7b:27:a2:16:f9:9f:1c:e4:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af93102511e660263f8ef6e4c1f9ab32393839b2 Validity Not Before: Dec 26 09:00:33 2025 GMT Not After : Dec 27 09:00:33 2025 GMT Subject: CN=15d4d0a2369d46a33a5cbfd16e06e63e95b5d4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:14:c1:b8:96:81:91:3b:47:6f:d6:50:26:ad: fb:cc:9e:57:bf:60:ac:41:02:d0:b4:27:05:da:07: f0:d1:e6:f2:78:f1:ba:41:70:7d:42:12:2e:a2:16: 12:3b:3d:9a:8e:9f:1c:5a:62:2a:37:fa:ee:c4:48: 8a:f4:6c:22:63:59:ac:ca:65:d6:08:5b:39:ed:36: b9:3c:85:32:0a:16:a0:0d:db:90:35:03:2e:48:8b: 5a:3d:b1:8e:8b:a4:9d:ae:ad:29:ac:6a:63:5b:f3: a1:a2:25:53:35:94:e1:76:74:3c:14:da:99:f9:dc: f2:7d:07:f9:fa:5d:d8:77:03:4a:7b:6d:4a:94:ce: 0d:28:6e:c1:66:1f:80:d2:13:ce:9c:2b:db:e8:c7: 66:c4:96:d1:68:1d:fe:85:41:7e:90:ef:0f:6e:19: ce:30:ce:fd:7e:83:a4:bd:7e:f4:4d:63:c8:15:82: 01:3d:11:4c:6c:0e:55:6a:a7:e4:fc:84:a4:4e:cd: 84:20:d8:44:11:8b:88:5c:dd:b3:fe:8e:31:98:e4: 96:0b:0f:71:d5:b3:ed:9e:ac:e2:8c:c8:1d:a4:1a: 14:ba:3c:61:ad:94:d9:55:5d:75:53:61:fb:f2:2d: 5f:42:bc:c0:67:16:b0:e6:1d:0e:ec:37:94:c3:d5: 3a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D4:D0:A2:36:9D:46:A3:3A:5C:BF:D1:6E:06:E6:3E:95:B5:D4:C2 X509v3 Authority Key Identifier: keyid:AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:15:92:19:98:d6:7e:a9:20:4f:77:24:98:82:4b:f3:d3:82: f7:e0:58:d8:90:60:99:d4:59:74:c8:ca:8f:39:c0:a4:b4:9a: 89:9f:59:c6:91:11:a9:06:ea:25:fe:dc:68:f2:ee:08:87:e1: 86:cb:ee:e4:c7:14:0b:bf:46:b0:d1:2d:e0:b6:43:57:bd:e8: a8:a6:56:4a:2e:a2:84:c1:43:ae:17:6e:3a:59:fc:5b:7f:2b: 99:6a:24:00:82:27:0b:26:30:5f:5c:c2:d8:ef:d0:bb:05:d8: 86:f0:cd:4d:89:38:f5:56:86:f6:c3:f5:cc:1c:5f:8f:82:66: 27:2d:07:09:77:7f:a8:b6:fd:2b:a7:7d:97:9b:b8:5c:33:90: ea:d7:43:e7:90:08:94:23:17:68:22:d7:f3:3b:f2:9a:59:eb: f8:45:e0:39:8a:25:b6:52:cb:c1:1e:c4:58:be:77:ca:22:b6: fb:61:d7:f3:fd:15:f5:9b:de:93:bd:36:e2:32:13:59:63:d8: ae:39:63:cb:82:55:ff:df:55:91:c2:7f:15:ec:06:16:8e:8b: 0d:5e:6b:8c:bd:57:29:21:48:98:b6:ae:e2:1a:d3:2d:24:d9: db:04:95:94:ed:67:b8:04:32:1a:0b:35:07:9b:45:b9:82:78: da:cf:f5:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ42UP4NNgeyeiFvmfHOTPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOTMxMDI1MTFlNjYwMjYzZjhlZjZlNGMxZjlhYjMyMzkz ODM5YjIwHhcNMjUxMjI2MDkwMDMzWhcNMjUxMjI3MDkwMDMzWjAzMTEwLwYDVQQD EygxNWQ0ZDBhMjM2OWQ0NmEzM2E1Y2JmZDE2ZTA2ZTYzZTk1YjVkNGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxTBuJaBkTtHb9ZQJq37zJ5Xv2Cs QQLQtCcF2gfw0ebyePG6QXB9QhIuohYSOz2ajp8cWmIqN/ruxEiK9GwiY1msymXW CFs57Ta5PIUyChagDduQNQMuSItaPbGOi6Sdrq0prGpjW/OhoiVTNZThdnQ8FNqZ +dzyfQf5+l3YdwNKe21KlM4NKG7BZh+A0hPOnCvb6MdmxJbRaB3+hUF+kO8PbhnO MM79foOkvX70TWPIFYIBPRFMbA5Vaqfk/ISkTs2EINhEEYuIXN2z/o4xmOSWCw9x 1bPtnqzijMgdpBoUujxhrZTZVV11U2H78i1fQrzAZxaw5h0O7DeUw9U6lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXU0KI2nUajOly/0W4G5j6VtdTCMB8GA1UdIwQY MBaAFK+TECUR5mAmP4725MH5qzI5ODmyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjVNUUpSSG1ZQ1lfanZia3dmbXJNams0T2JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kMTZlOTYtMDMxMy00YzliLTljMDkt YTk1ZmUzMTAyNjQ1LzEvcjVNUUpSSG1ZQ1lfanZia3dmbXJNams0T2JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9kMTZlOTYtMDMxMy00YzliLTljMDktYTk1ZmUzMTAyNjQ1 LzEvcjVNUUpSSG1ZQ1lfanZia3dmbXJNams0T2JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhWSGZjW fqkgT3ckmIJL89OC9+BY2JBgmdRZdMjKjznApLSaiZ9ZxpERqQbqJf7caPLuCIfh hsvu5McUC79GsNEt4LZDV73oqKZWSi6ihMFDrhduOln8W38rmWokAIInCyYwX1zC 2O/QuwXYhvDNTYk49VaG9sP1zBxfj4JmJy0HCXd/qLb9K6d9l5u4XDOQ6tdD55AI lCMXaCLX8zvymlnr+EXgOYoltlLLwR7EWL53yiK2+2HX8/0V9Zvek7024jITWWPY rjljy4JV/99VkcJ/FewGFo6LDV5rjL1XKSFImLau4hrTLSTZ2wSVlO1nuAQyGgs1 B5tFuYJ42s/19w== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:33 2025 by rpki-client