This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft File: v5r7gj8fivhy55Pye2St74zU3Bs.mft (raw, json) Hash identifier: 0A5J/6IrjdD1k3bqUKbYlcoJhDzF9CgEaQukLlPYOaM= Subject key identifier: C6:6B:EC:A1:38:11:CE:BA:DF:C6:99:B0:CF:A2:54:ED:EB:A1:2F:D8 Authority key identifier: BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B Certificate issuer: /CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b Certificate serial: 019B2C2F4FB0ECF5954B46C6FD4C61DDFF31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft Manifest number: 053C Signing time: Wed 17 Dec 2025 12:00:56 +0000 Manifest this update: Wed 17 Dec 2025 12:00:56 +0000 Manifest next update: Thu 18 Dec 2025 12:00:56 +0000 Files and hashes: 1: v5r7gj8fivhy55Pye2St74zU3Bs.crl (hash: ytXbqGPa6mcUdsJcP9q0sFwqAh8JbRn4HBE4ou0bV0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:4f:b0:ec:f5:95:4b:46:c6:fd:4c:61:dd:ff:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b Validity Not Before: Dec 17 12:00:56 2025 GMT Not After : Dec 18 12:00:56 2025 GMT Subject: CN=c66beca13811cebadfc699b0cfa254edeba12fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f5:4b:25:27:52:63:5a:1d:27:28:16:fd:07: 0d:14:68:ca:d1:8a:f8:6a:65:6d:88:76:48:f8:ca: f2:d2:91:8f:66:4a:38:42:4c:4c:be:3f:b2:3f:1f: 21:9f:09:d0:eb:13:82:42:00:d3:33:41:5f:03:4c: f1:75:03:0f:4c:10:d5:47:de:e8:cf:86:a9:ea:3c: 63:44:b7:c0:4a:51:5e:c9:3a:5f:c3:d9:a8:be:d8: 90:9c:51:cc:ec:71:de:4a:60:d5:3f:07:36:16:80: e2:ea:09:a7:82:07:1f:07:a0:c5:5c:1f:8e:b1:a1: ba:0c:03:02:ca:56:11:4c:92:3f:7b:15:3a:71:99: 87:88:e6:f9:5d:d4:4c:43:3a:20:c9:f1:1a:f4:36: ba:b5:bd:17:f7:ed:08:4b:1c:b5:5d:82:d5:47:53: 4c:e0:20:c6:f0:ec:7a:f6:aa:5e:80:ab:1c:18:36: a0:8f:d3:57:25:7c:ba:d1:78:2d:0f:5d:3a:2a:8c: 4d:0c:c9:01:54:d7:ba:05:35:e8:d8:d0:6e:69:ef: 45:28:ed:4e:77:ac:fb:7d:4c:3e:4b:af:0b:4d:c7: 90:d1:3c:4a:c7:60:e4:53:9e:8b:0c:36:4e:bc:4c: 62:a9:2e:41:b6:b2:c5:b0:7d:4d:7d:e1:7e:f9:51: f4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6B:EC:A1:38:11:CE:BA:DF:C6:99:B0:CF:A2:54:ED:EB:A1:2F:D8 X509v3 Authority Key Identifier: keyid:BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:54:8e:75:dd:52:27:f7:1e:21:e9:bd:75:26:59:e5:48:11: 99:7b:ec:a8:72:2e:73:30:7b:9d:07:ab:f9:e7:52:61:91:7a: 33:25:f2:41:86:3a:b8:3e:fc:2b:07:ef:8f:93:e2:a9:86:f6: e7:e5:66:cf:60:f5:37:30:0d:e5:6a:91:3e:80:8d:c7:3f:a0: fe:15:27:5e:2c:00:57:c6:18:61:07:92:b0:3b:b5:89:5c:8a: 4d:70:b8:e4:2a:5d:f7:d2:27:73:cb:a8:cf:f0:f0:cd:6e:b8: 20:97:c7:b8:b2:2f:77:7c:69:d9:29:69:80:6e:fd:4e:7f:8c: ae:1b:88:ab:48:da:23:36:d1:2a:81:4d:75:7d:2b:63:f8:13: 1d:3a:88:94:11:8f:d0:bc:8e:3d:58:89:69:06:00:c3:4a:f9: 07:e9:60:78:43:a7:f6:55:46:db:07:be:c7:b7:68:b2:3f:e7: 9f:98:e5:c0:c7:7a:c1:ed:e8:0a:65:31:e5:7b:6b:7f:7c:e5: af:9c:99:7c:bc:ff:49:c0:4b:23:ec:b2:d1:7d:ee:6a:0f:5d: 3b:2a:ac:e7:ff:db:3e:ff:26:af:49:66:7f:97:6c:d6:46:99: fa:db:90:dc:eb:10:66:8b:79:94:52:ad:5b:a8:32:4c:b4:37: 42:5f:23:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL0+w7PWVS0bG/Uxh3f8xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmOWFmYjgyM2YxZjhhZjg3MmU3OTNmMjdiNjRhZGVmOGNk NGRjMWIwHhcNMjUxMjE3MTIwMDU2WhcNMjUxMjE4MTIwMDU2WjAzMTEwLwYDVQQD EyhjNjZiZWNhMTM4MTFjZWJhZGZjNjk5YjBjZmEyNTRlZGViYTEyZmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfVLJSdSY1odJygW/QcNFGjK0Yr4 amVtiHZI+Mry0pGPZko4QkxMvj+yPx8hnwnQ6xOCQgDTM0FfA0zxdQMPTBDVR97o z4ap6jxjRLfASlFeyTpfw9movtiQnFHM7HHeSmDVPwc2FoDi6gmnggcfB6DFXB+O saG6DAMCylYRTJI/exU6cZmHiOb5XdRMQzogyfEa9Da6tb0X9+0ISxy1XYLVR1NM 4CDG8Ox69qpegKscGDagj9NXJXy60XgtD106KoxNDMkBVNe6BTXo2NBuae9FKO1O d6z7fUw+S68LTceQ0TxKx2DkU56LDDZOvExiqS5BtrLFsH1NfeF++VH06QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZr7KE4Ec6638aZsM+iVO3roS/YMB8GA1UdIwQY MBaAFL+a+4I/H4r4cueT8ntkre+M1NwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjVyN2dqOGZpdmh5NTVQeWUyU3Q3NHpVM0JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kYzMyOTQtYmQ0Zi00ZmVmLWI5Zjct MzY2Mjc4NWJhYWFkLzEvdjVyN2dqOGZpdmh5NTVQeWUyU3Q3NHpVM0JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9kYzMyOTQtYmQ0Zi00ZmVmLWI5ZjctMzY2Mjc4NWJhYWFk LzEvdjVyN2dqOGZpdmh5NTVQeWUyU3Q3NHpVM0JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVSOdd1S J/ceIem9dSZZ5UgRmXvsqHIuczB7nQer+edSYZF6MyXyQYY6uD78Kwfvj5PiqYb2 5+Vmz2D1NzAN5WqRPoCNxz+g/hUnXiwAV8YYYQeSsDu1iVyKTXC45Cpd99Inc8uo z/DwzW64IJfHuLIvd3xp2SlpgG79Tn+MrhuIq0jaIzbRKoFNdX0rY/gTHTqIlBGP 0LyOPViJaQYAw0r5B+lgeEOn9lVG2we+x7dosj/nn5jlwMd6we3oCmUx5Xtrf3zl r5yZfLz/ScBLI+yy0X3uag9dOyqs5//bPv8mr0lmf5ds1kaZ+tuQ3OsQZot5lFKt W6gyTLQ3Ql8j7A== -----END CERTIFICATE-----Generated at Wed Dec 17 19:12:51 2025 by rpki-client