This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft File: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft (raw, json) Hash identifier: Zg3TN5vg2OMtNtyHNOU30pn+P3NVSnI7v1EDBnjBQ8c= Subject key identifier: FF:19:20:68:4C:60:D8:86:C8:98:F8:89:52:63:B0:5B:56:63:33:36 Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B Certificate issuer: /CN=8794395ac822dfe01165216c7781ffd61db28d5b Certificate serial: 019B1014ACB39EE7B424FBD5C1C26E6AF8D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft Manifest number: 05F5 Signing time: Fri 12 Dec 2025 01:02:28 +0000 Manifest this update: Fri 12 Dec 2025 01:02:28 +0000 Manifest next update: Sat 13 Dec 2025 01:02:28 +0000 Files and hashes: 1: SalDxwYnKzervGIcZp186xtzhug.roa (hash: EtmDhhah0eA3Tfn8nv8gHra13dzs3VvNRMhkqeNatXs=) 2: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl (hash: vGOeB63lMcGHYJwEvfIKQflb8Duw0fo9/vXSk71bMPw=) 3: vJ1U4ASLgA44UNL7Z4BBXNsC6QU.roa (hash: UmSdOz5rZ6J32yPtrp522X1fQ0TXmlUWN5/Uf0zeDr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:ac:b3:9e:e7:b4:24:fb:d5:c1:c2:6e:6a:f8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b Validity Not Before: Dec 12 01:02:28 2025 GMT Not After : Dec 13 01:02:28 2025 GMT Subject: CN=ff1920684c60d886c898f8895263b05b56633336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:43:70:a4:d4:7e:e4:ef:41:02:0d:88:0d:cc: 45:d4:a7:df:ff:e7:15:e6:ab:fe:9f:70:14:34:59: 69:f5:77:b2:a6:16:8a:c4:31:91:c0:c1:9c:ad:7e: 26:15:6a:d3:ae:6e:21:05:c6:99:a0:29:94:db:0c: 19:55:f8:ef:98:f2:f3:b3:f4:1f:e4:14:ba:a2:78: e9:ce:77:9a:e4:a8:ec:91:8a:99:40:af:24:0a:a0: 8d:61:ae:21:c1:20:4b:ed:69:ff:88:78:73:10:9c: 8b:75:21:cb:a6:c7:58:28:14:5f:e0:20:f3:06:46: cb:0f:97:d2:53:d2:34:83:37:48:2c:7b:15:ca:47: 89:90:c0:f1:d4:e1:4a:91:d6:09:b0:eb:1c:97:d7: 7a:96:ea:67:a7:0a:dd:c0:98:a5:5e:37:f0:2d:72: 98:e5:15:71:f6:62:2a:d1:b7:10:0d:fd:d1:f7:09: dc:54:e6:c6:8a:f4:57:dd:e9:bb:94:de:7d:8a:23: b7:5d:3a:1f:77:66:19:54:33:c8:e5:62:54:b1:12: 80:22:3d:f8:9c:86:af:26:4a:1f:60:bd:f1:e2:59: 36:de:a1:5d:a2:45:09:3b:02:be:5d:5a:ac:a6:14: 7c:7d:0e:a0:7e:66:eb:15:da:3b:2b:c3:c1:5d:e7: 7e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:19:20:68:4C:60:D8:86:C8:98:F8:89:52:63:B0:5B:56:63:33:36 X509v3 Authority Key Identifier: keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:5f:b0:68:a2:56:e9:0d:11:05:08:80:12:2e:27:47:39:be: e2:35:4a:63:49:8f:06:03:83:62:5f:58:39:0a:55:df:00:0f: 60:95:ea:55:b5:3d:02:2c:0b:01:54:70:47:6a:1b:be:51:fb: 24:e6:8d:75:15:1d:b1:9d:6a:65:6a:67:4c:f9:c1:e6:91:53: 59:9d:95:88:8c:74:a5:ef:87:5c:ae:17:c8:3a:4b:78:7d:3a: 1c:76:53:91:4d:d3:c3:8f:79:cc:ef:19:9a:0b:94:6d:8f:ff: ac:db:82:93:3b:bd:aa:5a:1d:69:0b:84:aa:0d:e4:02:d6:e3: fa:a9:95:d9:e4:cb:c5:e6:98:ba:44:19:9f:f0:4d:bb:1e:fa: 10:3f:82:11:84:48:2b:8b:5d:47:3e:5c:25:5f:9f:62:4d:99: ca:63:f2:e3:a2:bb:39:84:dd:2f:34:2a:fe:b1:a9:e6:5d:ed: 48:26:fe:f1:80:4a:f3:ec:39:f6:e9:09:9c:6f:a4:ce:6e:2a: d8:b9:dd:ea:26:21:84:6b:92:c8:62:b5:36:a4:f0:50:8c:0e: ae:e5:f1:7d:cd:7e:ad:0a:ed:72:7d:a6:7e:0c:fc:82:29:0c: c0:02:b7:99:2d:97:7b:21:eb:79:c6:b8:ff:97:bd:f5:29:e4: b0:7a:d5:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFKyznue0JPvVwcJuavjYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OTQzOTVhYzgyMmRmZTAxMTY1MjE2Yzc3ODFmZmQ2MWRi MjhkNWIwHhcNMjUxMjEyMDEwMjI4WhcNMjUxMjEzMDEwMjI4WjAzMTEwLwYDVQQD EyhmZjE5MjA2ODRjNjBkODg2Yzg5OGY4ODk1MjYzYjA1YjU2NjMzMzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjENwpNR+5O9BAg2IDcxF1Kff/+cV 5qv+n3AUNFlp9XeyphaKxDGRwMGcrX4mFWrTrm4hBcaZoCmU2wwZVfjvmPLzs/Qf 5BS6onjpznea5KjskYqZQK8kCqCNYa4hwSBL7Wn/iHhzEJyLdSHLpsdYKBRf4CDz BkbLD5fSU9I0gzdILHsVykeJkMDx1OFKkdYJsOscl9d6lupnpwrdwJilXjfwLXKY 5RVx9mIq0bcQDf3R9wncVObGivRX3em7lN59iiO3XTofd2YZVDPI5WJUsRKAIj34 nIavJkofYL3x4lk23qFdokUJOwK+XVqsphR8fQ6gfmbrFdo7K8PBXed+4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8ZIGhMYNiGyJj4iVJjsFtWYzM2MB8GA1UdIwQY MBaAFIeUOVrIIt/gEWUhbHeB/9Ydso1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDVRNVdzZ2kzLUFSWlNGc2Q0SF8xaDJ5alZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hMmEzYTQtYWI3NS00OWQ0LWE5NDEt MzUzZjk4MTJiMWRiLzEvaDVRNVdzZ2kzLUFSWlNGc2Q0SF8xaDJ5alZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hMmEzYTQtYWI3NS00OWQ0LWE5NDEtMzUzZjk4MTJiMWRi LzEvaDVRNVdzZ2kzLUFSWlNGc2Q0SF8xaDJ5alZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXF+waKJW 6Q0RBQiAEi4nRzm+4jVKY0mPBgODYl9YOQpV3wAPYJXqVbU9AiwLAVRwR2obvlH7 JOaNdRUdsZ1qZWpnTPnB5pFTWZ2ViIx0pe+HXK4XyDpLeH06HHZTkU3Tw495zO8Z mguUbY//rNuCkzu9qlodaQuEqg3kAtbj+qmV2eTLxeaYukQZn/BNux76ED+CEYRI K4tdRz5cJV+fYk2ZymPy46K7OYTdLzQq/rGp5l3tSCb+8YBK8+w59ukJnG+kzm4q 2Lnd6iYhhGuSyGK1NqTwUIwOruXxfc1+rQrtcn2mfgz8gikMwAK3mS2XeyHreca4 /5e99SnksHrVPQ== -----END CERTIFICATE-----Generated at Fri Dec 12 04:41:54 2025 by rpki-client