This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft File: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json) Hash identifier: ncr+AzQeqX0in56MmkaMiJYlxFEBonaUK3Xudt0kTdc= Subject key identifier: 85:25:8E:1D:2A:03:1F:7D:03:3F:37:E3:60:7B:CC:AD:61:6A:CF:D3 Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9 Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9 Certificate serial: 019B1C8568549D4C273DDB5ECAE251D9D233 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft Manifest number: 1153 Signing time: Sun 14 Dec 2025 11:01:03 +0000 Manifest this update: Sun 14 Dec 2025 11:01:03 +0000 Manifest next update: Mon 15 Dec 2025 11:01:03 +0000 Files and hashes: 1: GhdbZGuzA1z36-UUonZ5zaCX38Q.roa (hash: gEgIQ1ixFSRgI4FI7VMbdhgtgY8jLC1wmNutDGTQS80=) 2: NItMcfmuUtS9SnSR4ZKm4r93TXs.roa (hash: F3sutapYp582NIFvW6vfwf2KF7d5dSaqH83k0FhwJoc=) 3: QCQJObKakvoo4ygnw5Fh20FS0Ts.roa (hash: pr5RHo/glhDEkjitYcq1TogKj+NW5j/LUqIM2EWPEaw=) 4: UVdJ6rkBr4eKgNxEkOLstufV6r8.roa (hash: +gXeK3tudL2I9QvUvgp4q5Jq/oJHp1PYKMtr+laCpNs=) 5: VtsYZXVJAZoFqneDgMrcdY1ZLqo.roa (hash: iydD1kql5GaDH+9KnMFCTe4zA6F46avj8WklVHWfoCY=) 6: YaM_6GNAfAUY1a7EBWWPiZdkY80.roa (hash: imYp4kHblD7OJu3xkBBiybF6gSfL+pAE8EuXrkCO7Ws=) 7: eulbDis-0B0z9GbHcqEo9NdV9rU.roa (hash: r5N8Yg0+954vST6YgvvV4VsOdx/dWOgqxmrlpu8jwtw=) 8: peZQPUG6EREQXk9fJ6XL9FgtEhs.roa (hash: dkv5IIQlSg33elfikzY5ije40KJ3f2E2+53gSCvVzhE=) 9: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: 531KHRPHtC5fl0OadgICftz1tdshfgzkv1md8CYLtzA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:68:54:9d:4c:27:3d:db:5e:ca:e2:51:d9:d2:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9 Validity Not Before: Dec 14 11:01:03 2025 GMT Not After : Dec 15 11:01:03 2025 GMT Subject: CN=85258e1d2a031f7d033f37e3607bccad616acfd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:79:fd:88:8a:ed:18:a0:a1:81:d3:57:d5:ab: 22:72:5a:dd:8c:a6:14:31:8a:7d:8c:cf:0c:fe:61: e1:c0:bc:09:c9:5d:1c:1a:4f:f6:62:2f:50:3b:fc: 7d:b6:ae:33:8f:e9:fb:09:7f:88:78:f8:45:fa:b7: ad:36:fd:a0:f8:5e:0d:48:33:85:e7:c2:1d:ac:cf: 2e:ab:5b:dd:f0:9f:d6:9d:da:71:a6:68:fd:a1:97: 68:19:94:d6:7f:cf:dc:34:ee:79:04:01:e2:af:c0: fc:80:b5:7c:71:f8:e4:cd:c2:76:4c:ed:e4:fc:3c: f7:82:ac:de:b3:33:fd:85:2b:67:af:45:da:1b:cd: 4e:15:d4:a6:50:d2:04:c9:d5:a2:df:5d:da:22:5f: 90:a3:84:0d:d0:40:8d:a2:ce:e0:cf:13:c4:5c:f7: 54:b1:2e:42:b6:ab:b6:80:3a:00:ea:6d:ab:37:a6: b6:c2:1a:67:01:79:af:4a:15:69:da:d0:9e:7a:fc: a4:29:b5:83:df:92:3d:4d:5d:22:a0:55:89:9e:b6: 38:c8:75:35:8e:25:ed:2d:a1:80:d2:ec:be:f5:bc: 9f:98:8c:5d:16:b4:e6:31:7b:d7:59:ce:d3:ab:f4: 52:a5:48:7a:33:ff:d0:a3:19:4f:9b:fa:1c:1a:ac: f1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:25:8E:1D:2A:03:1F:7D:03:3F:37:E3:60:7B:CC:AD:61:6A:CF:D3 X509v3 Authority Key Identifier: keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:39:a6:36:74:7e:1f:83:db:3e:92:d1:f2:eb:46:bc:42:29: 90:a6:eb:70:e9:21:26:fe:fa:60:34:81:6f:c6:d6:8c:96:61: 77:bf:b6:30:17:07:a7:11:80:53:11:d5:74:04:7a:47:76:85: 05:63:fb:22:61:de:e4:55:7d:a9:ee:27:86:f0:d7:f0:9a:a3: 45:22:34:43:8e:fa:2e:f7:ee:2e:c1:a5:dc:db:4b:ad:32:fa: 18:b6:bb:fb:bc:f7:d7:ce:0c:0f:83:b8:46:d1:37:36:d7:60: a8:59:d1:ea:20:3c:83:b8:d5:ec:78:9b:7e:16:44:9f:28:8d: 08:47:f7:fd:c8:91:47:78:ae:91:42:60:35:85:ba:e1:32:03: 19:25:58:19:ce:f3:1f:2b:78:0d:bb:cc:93:03:0b:7a:0d:6b: ce:f7:27:21:07:40:15:49:9c:f1:11:68:5c:a2:51:7f:23:15: e7:58:94:c2:31:ea:ce:88:dd:33:4f:08:9b:c9:6b:54:5b:59: 40:eb:86:33:16:7c:ed:88:43:69:22:f4:6a:27:5a:07:77:0f: 38:3b:2b:7c:d4:48:59:cd:a3:60:40:02:ae:fe:9d:08:ab:59: 2e:cb:e8:c5:55:3d:5f:98:aa:e9:67:8d:cb:5e:2f:00:13:c1: 80:9f:2a:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschWhUnUwnPdteyuJR2dIzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOTNkZjg3N2JmMmYwY2YwMWE5NzE4OTczZWFlZWU4N2Iw Njk3ZDkwHhcNMjUxMjE0MTEwMTAzWhcNMjUxMjE1MTEwMTAzWjAzMTEwLwYDVQQD Eyg4NTI1OGUxZDJhMDMxZjdkMDMzZjM3ZTM2MDdiY2NhZDYxNmFjZmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXn9iIrtGKChgdNX1asiclrdjKYU MYp9jM8M/mHhwLwJyV0cGk/2Yi9QO/x9tq4zj+n7CX+IePhF+retNv2g+F4NSDOF 58IdrM8uq1vd8J/Wndpxpmj9oZdoGZTWf8/cNO55BAHir8D8gLV8cfjkzcJ2TO3k /Dz3gqzeszP9hStnr0XaG81OFdSmUNIEydWi313aIl+Qo4QN0ECNos7gzxPEXPdU sS5Ctqu2gDoA6m2rN6a2whpnAXmvShVp2tCeevykKbWD35I9TV0ioFWJnrY4yHU1 jiXtLaGA0uy+9byfmIxdFrTmMXvXWc7Tq/RSpUh6M//QoxlPm/ocGqzxuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUljh0qAx99Az8342B7zK1has/TMB8GA1UdIwQY MBaAFLOT34d78vDPAalxiXPq7uh7BpfZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczVQZmgzdnk4TThCcVhHSmMtcnU2SHNHbDlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85Mzc1ZTMtMzc3ZS00YjcwLWJhMzYt Mzk2YmM3MjBlMmI0LzEvczVQZmgzdnk4TThCcVhHSmMtcnU2SHNHbDlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85Mzc1ZTMtMzc3ZS00YjcwLWJhMzYtMzk2YmM3MjBlMmI0 LzEvczVQZmgzdnk4TThCcVhHSmMtcnU2SHNHbDlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArzmmNnR+ H4PbPpLR8utGvEIpkKbrcOkhJv76YDSBb8bWjJZhd7+2MBcHpxGAUxHVdAR6R3aF BWP7ImHe5FV9qe4nhvDX8JqjRSI0Q476LvfuLsGl3NtLrTL6GLa7+7z3184MD4O4 RtE3NtdgqFnR6iA8g7jV7HibfhZEnyiNCEf3/ciRR3iukUJgNYW64TIDGSVYGc7z Hyt4DbvMkwMLeg1rzvcnIQdAFUmc8RFoXKJRfyMV51iUwjHqzojdM08Im8lrVFtZ QOuGMxZ87YhDaSL0aidaB3cPODsrfNRIWc2jYEACrv6dCKtZLsvoxVU9X5iq6WeN y14vABPBgJ8qkA== -----END CERTIFICATE-----Generated at Sun Dec 14 15:46:32 2025 by rpki-client