This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft File: FivG9rrBQqA6uxp62RaQaD8DpNw.mft (raw, json) Hash identifier: Y1lTI9+wNFjcSjyLzL5U78N+grzeaYpyYFwJgqgYd40= Subject key identifier: E6:9D:7F:83:B3:3B:13:B3:97:AE:EE:27:F2:A6:8F:87:5F:3C:B4:4F Authority key identifier: 16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC Certificate issuer: /CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc Certificate serial: 019B59760349311E5D85959A212DCD4738F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft Manifest number: 11C7 Signing time: Fri 26 Dec 2025 07:01:04 +0000 Manifest this update: Fri 26 Dec 2025 07:01:04 +0000 Manifest next update: Sat 27 Dec 2025 07:01:04 +0000 Files and hashes: 1: FivG9rrBQqA6uxp62RaQaD8DpNw.crl (hash: JK2dPt71N22MkL2KosjtQeEtDR/KmhDFaRCo1OVdx+c=) 2: ZuMY1XotbixRHp-2hF8zeuwVNac.roa (hash: cWcV3AJ97upwcCtlMiiXPFQ1J792OYZqXfGtYafZgg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:03:49:31:1e:5d:85:95:9a:21:2d:cd:47:38:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc Validity Not Before: Dec 26 07:01:04 2025 GMT Not After : Dec 27 07:01:04 2025 GMT Subject: CN=e69d7f83b33b13b397aeee27f2a68f875f3cb44f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:df:82:31:3a:c2:7d:d0:47:5a:a7:27:fd:7f: 02:c4:0a:8d:dd:ee:de:36:0f:c7:b6:d1:82:e6:8e: 7f:f3:da:39:fa:91:e5:7d:c4:ab:5f:bd:47:08:fc: 75:0e:69:5e:ae:b9:30:f1:17:dc:75:95:b3:87:1d: 32:f9:82:b5:e3:4c:61:a0:48:0e:9d:6e:13:58:fe: 42:ef:5c:6c:10:20:ce:06:2b:21:0d:5e:a7:fd:d0: 3c:9e:17:f9:e9:3d:7b:e8:f0:70:3d:cb:53:da:87: 05:09:47:7a:9d:fd:24:c6:80:5c:27:f1:b4:85:69: d3:c4:d3:01:ba:a9:4a:3f:d9:e7:7f:46:bb:d4:5e: 6c:33:f6:bb:c7:97:82:c2:b5:9d:cd:84:bf:19:95: d5:51:b0:fd:81:10:03:11:3d:f9:d8:0f:c5:00:6a: ea:fc:30:c3:f1:18:ce:98:4a:a5:d1:e4:28:53:2e: a4:31:2c:64:03:b3:9d:15:de:d9:b3:5b:d4:3f:51: 77:a9:a7:6f:4a:2f:1d:42:a7:29:9f:b4:86:e3:4b: 60:ba:ab:f4:03:87:fc:29:aa:20:a7:cc:5b:4b:fa: ae:64:75:30:74:c1:a8:d2:e9:72:6c:0c:0c:70:26: a2:0f:b0:ab:c4:b4:7c:60:34:7a:26:b3:2a:f2:ff: b5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9D:7F:83:B3:3B:13:B3:97:AE:EE:27:F2:A6:8F:87:5F:3C:B4:4F X509v3 Authority Key Identifier: keyid:16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:ba:d9:04:b1:53:90:d1:1a:85:ab:35:c0:ed:a0:fa:de:7a: fb:77:71:cf:0d:74:6b:aa:d1:ef:c8:48:ba:27:dc:c1:fa:d8: 45:8d:c7:08:5a:78:d2:83:63:be:32:8e:c4:4c:15:e1:68:0d: 93:62:dc:54:35:00:1f:ea:a5:ae:1f:6f:bf:3d:6b:93:64:86: 31:38:88:e8:6e:23:f5:e7:2e:24:5d:f8:8b:f7:58:ab:0b:4c: e9:ef:be:fa:0c:35:44:ce:86:e7:7e:75:98:87:39:b8:07:c3: 3f:8d:e8:52:c4:16:69:0f:08:a2:3c:75:05:db:e3:bd:c9:43: 73:db:1b:d2:72:d0:3b:e1:be:7f:aa:97:87:32:6e:cb:80:92: 6b:e2:53:9f:52:cd:2d:a4:7c:a3:1f:71:18:a0:da:5c:ae:f8: 2e:73:b3:7c:58:b0:91:33:f2:30:58:19:ec:bd:fc:e5:7b:07: 6c:60:de:f5:04:82:3d:85:4e:04:ce:62:14:b9:82:32:55:0e: fe:06:6a:81:e8:09:27:dc:12:b7:8e:39:10:80:88:a3:3a:db: ba:90:bd:2c:c7:75:3e:a0:ef:aa:9d:11:0b:ee:de:30:70:10: b6:9b:ff:83:26:cb:c9:67:d7:65:3f:54:e4:a3:b7:6d:54:73: 01:6f:a8:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdgNJMR5dhZWaIS3NRzj1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MmJjNmY2YmFjMTQyYTAzYWJiMWE3YWQ5MTY5MDY4M2Yw M2E0ZGMwHhcNMjUxMjI2MDcwMTA0WhcNMjUxMjI3MDcwMTA0WjAzMTEwLwYDVQQD EyhlNjlkN2Y4M2IzM2IxM2IzOTdhZWVlMjdmMmE2OGY4NzVmM2NiNDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd+CMTrCfdBHWqcn/X8CxAqN3e7e Ng/HttGC5o5/89o5+pHlfcSrX71HCPx1Dmlerrkw8RfcdZWzhx0y+YK140xhoEgO nW4TWP5C71xsECDOBishDV6n/dA8nhf56T176PBwPctT2ocFCUd6nf0kxoBcJ/G0 hWnTxNMBuqlKP9nnf0a71F5sM/a7x5eCwrWdzYS/GZXVUbD9gRADET352A/FAGrq /DDD8RjOmEql0eQoUy6kMSxkA7OdFd7Zs1vUP1F3qadvSi8dQqcpn7SG40tguqv0 A4f8Kaogp8xbS/quZHUwdMGo0ulybAwMcCaiD7CrxLR8YDR6JrMq8v+1CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOadf4OzOxOzl67uJ/Kmj4dfPLRPMB8GA1UdIwQY MBaAFBYrxva6wUKgOrsaetkWkGg/A6TcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRml2RzlyckJRcUE2dXhwNjJSYVFhRDhEcE53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yMDU4MWYtYmQ1ZS00ZWExLTgyMTct MGJlN2FhZThhMGQxLzEvRml2RzlyckJRcUE2dXhwNjJSYVFhRDhEcE53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yMDU4MWYtYmQ1ZS00ZWExLTgyMTctMGJlN2FhZThhMGQx LzEvRml2RzlyckJRcUE2dXhwNjJSYVFhRDhEcE53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7rZBLFT kNEahas1wO2g+t56+3dxzw10a6rR78hIuifcwfrYRY3HCFp40oNjvjKOxEwV4WgN k2LcVDUAH+qlrh9vvz1rk2SGMTiI6G4j9ecuJF34i/dYqwtM6e+++gw1RM6G5351 mIc5uAfDP43oUsQWaQ8Iojx1BdvjvclDc9sb0nLQO+G+f6qXhzJuy4CSa+JTn1LN LaR8ox9xGKDaXK74LnOzfFiwkTPyMFgZ7L385XsHbGDe9QSCPYVOBM5iFLmCMlUO /gZqgegJJ9wSt445EICIozrbupC9LMd1PqDvqp0RC+7eMHAQtpv/gybLyWfXZT9U 5KO3bVRzAW+o6w== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:58 2025 by rpki-client