This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft File: f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft (raw, json) Hash identifier: AQAjLbxk6i+aEim50Hqz0szcUe/rfJkQSawjqSPFIOM= Subject key identifier: 2C:A2:C6:45:0B:A5:BF:9A:6F:90:82:65:65:D9:2C:E0:00:97:37:C4 Authority key identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2 Certificate issuer: /CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2 Certificate serial: 019B0F0074A55FEB59A63CEB493D677FAA8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft Manifest number: 1703 Signing time: Thu 11 Dec 2025 20:00:46 +0000 Manifest this update: Thu 11 Dec 2025 20:00:46 +0000 Manifest next update: Fri 12 Dec 2025 20:00:46 +0000 Files and hashes: 1: OtzZOisV1bM6sc-GLNPwmdom2N8.roa (hash: hJNg1q2HXpx1PLv5SMEFG6V3PCbaVExvvGGJiMCfNyI=) 2: f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl (hash: CJPmHS2CsBzQRxcBumDVuSHacpwvL89nxHWBC1CExT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:74:a5:5f:eb:59:a6:3c:eb:49:3d:67:7f:aa:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2 Validity Not Before: Dec 11 20:00:46 2025 GMT Not After : Dec 12 20:00:46 2025 GMT Subject: CN=2ca2c6450ba5bf9a6f90826565d92ce0009737c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:56:5b:08:96:1a:52:22:66:df:3f:04:7f:98: f0:0b:b2:7c:40:25:3f:6a:62:15:7b:df:36:a6:b3: 1b:44:a0:20:6b:5c:9e:26:fb:42:f6:7d:53:67:d1: 02:69:e9:a6:8a:14:e3:72:20:e2:17:3b:3d:fe:0d: 97:53:8c:69:ae:59:40:fa:fb:e9:8d:b7:92:c4:d7: 6e:09:8f:df:21:bb:8c:fc:70:24:18:c0:55:f0:29: 5b:b5:86:b1:85:12:d0:9c:c4:02:35:3d:cb:03:49: e8:3e:63:06:23:98:db:04:a5:9d:d9:af:72:71:ae: ee:bd:50:f7:dd:77:97:99:bc:22:e9:f5:47:c6:23: c7:18:67:5d:18:50:68:fe:32:50:ec:0c:e0:fe:a3: 7a:7b:8b:d7:c2:44:95:22:9a:1b:a2:e4:9c:3e:b5: 37:0d:dc:ec:a2:17:fd:3f:d7:00:cf:ab:fe:9f:ff: a8:ee:9c:2e:d7:12:4f:57:a4:c8:ac:69:07:63:73: d2:8b:fe:2f:58:6b:ab:f7:53:d3:56:6f:af:c5:5b: 75:94:1f:f8:ee:09:a2:34:c0:32:72:99:33:3d:17: aa:96:ad:3c:82:34:4a:0f:29:22:2c:5b:f1:1d:fd: d8:c1:ac:40:c9:f1:6b:d6:9d:30:ad:b4:ed:a4:93: 43:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A2:C6:45:0B:A5:BF:9A:6F:90:82:65:65:D9:2C:E0:00:97:37:C4 X509v3 Authority Key Identifier: keyid:7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:48:b0:e9:fb:1b:93:14:2c:c0:20:bf:48:d0:05:cd:c8:eb: 05:88:9a:46:09:ac:81:25:e5:6a:7b:84:bf:1d:00:22:a6:3b: 1d:a5:55:e8:07:6f:00:05:35:2b:62:0c:f5:86:20:01:d0:49: 52:d9:19:b0:4d:d0:e9:b9:47:d1:8f:10:d4:31:05:6d:a0:24: 50:12:54:4b:69:8a:7a:8f:b0:ef:21:ee:bb:f2:aa:0d:21:6b: 9b:7d:07:47:ba:91:96:24:f6:3d:db:be:81:b8:2c:88:17:9e: 2f:e8:8c:a5:ae:1c:9a:b7:6f:b8:d4:27:49:7d:c3:60:58:cd: dd:49:bc:a7:bb:b7:1d:67:af:07:00:56:a2:b5:9b:f7:ea:a2: a0:9d:64:59:70:d2:a6:2d:be:a2:c5:3a:91:42:59:53:24:c1: b3:8a:2c:6d:52:d1:d4:d7:5b:d4:e5:db:87:32:e6:ef:bc:a7: cd:e1:fd:7d:db:e2:47:bd:f7:a9:0f:8f:b0:43:3f:68:a3:3f: f9:30:e8:11:8e:e7:55:26:f3:88:2d:5c:28:2e:1c:a8:e9:8d: 30:10:93:bc:7e:49:27:60:23:8f:b8:40:e0:e1:d4:5c:26:98: b4:50:75:8f:93:c2:9f:8a:f1:dc:2e:b6:a8:f0:35:db:a3:0e: ce:ec:1a:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAHSlX+tZpjzrST1nf6qPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmOTJkZjc2MTBmMDQ4ZjQzYmY0NGMzMzZkNDFjNmMxMTU3 ZWYwZTIwHhcNMjUxMjExMjAwMDQ2WhcNMjUxMjEyMjAwMDQ2WjAzMTEwLwYDVQQD EygyY2EyYzY0NTBiYTViZjlhNmY5MDgyNjU2NWQ5MmNlMDAwOTczN2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlZbCJYaUiJm3z8Ef5jwC7J8QCU/ amIVe982prMbRKAga1yeJvtC9n1TZ9ECaemmihTjciDiFzs9/g2XU4xprllA+vvp jbeSxNduCY/fIbuM/HAkGMBV8ClbtYaxhRLQnMQCNT3LA0noPmMGI5jbBKWd2a9y ca7uvVD33XeXmbwi6fVHxiPHGGddGFBo/jJQ7Azg/qN6e4vXwkSVIpobouScPrU3 Ddzsohf9P9cAz6v+n/+o7pwu1xJPV6TIrGkHY3PSi/4vWGur91PTVm+vxVt1lB/4 7gmiNMAycpkzPReqlq08gjRKDykiLFvxHf3YwaxAyfFr1p0wrbTtpJND+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyixkULpb+ab5CCZWXZLOAAlzfEMB8GA1UdIwQY MBaAFH+S33YQ8Ej0O/RMM21BxsEVfvDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OGJlMTgtMmYzNS00YzZhLWFhNmEt N2Y3MmY0NGI4OTgyLzEvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81OGJlMTgtMmYzNS00YzZhLWFhNmEtN2Y3MmY0NGI4OTgy LzEvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUiw6fsb kxQswCC/SNAFzcjrBYiaRgmsgSXlanuEvx0AIqY7HaVV6AdvAAU1K2IM9YYgAdBJ UtkZsE3Q6blH0Y8Q1DEFbaAkUBJUS2mKeo+w7yHuu/KqDSFrm30HR7qRliT2Pdu+ gbgsiBeeL+iMpa4cmrdvuNQnSX3DYFjN3Um8p7u3HWevBwBWorWb9+qioJ1kWXDS pi2+osU6kUJZUyTBs4osbVLR1Ndb1OXbhzLm77ynzeH9fdviR733qQ+PsEM/aKM/ +TDoEY7nVSbziC1cKC4cqOmNMBCTvH5JJ2Ajj7hA4OHUXCaYtFB1j5PCn4rx3C62 qPA126MOzuwaFg== -----END CERTIFICATE-----Generated at Fri Dec 12 03:41:17 2025 by rpki-client