This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft File: F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft (raw, json) Hash identifier: TE3r8JWDm1wlk/DTbUpdMWMn7t9abJVR4b9FJF56Wqg= Subject key identifier: 70:33:E2:63:27:43:70:D3:D6:7A:C0:6A:C4:A3:5B:E9:35:0D:03:4D Authority key identifier: 17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6 Certificate issuer: /CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6 Certificate serial: 019B3079C7BF606320A723EE4B322EF6EE71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft Manifest number: 11B7 Signing time: Thu 18 Dec 2025 08:00:45 +0000 Manifest this update: Thu 18 Dec 2025 08:00:45 +0000 Manifest next update: Fri 19 Dec 2025 08:00:45 +0000 Files and hashes: 1: F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl (hash: fqfumkuY9QQVYSlJdPDhvPUJyImJbEYa/LqGJxq6UCo=) 2: yE23Ocmf6UL-BZW4Ii8cb9cwJW8.roa (hash: B4pB1U7bD/UVzN0Npz90KrUX1VNbCaaMzhCxilCVAfk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 08:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:79:c7:bf:60:63:20:a7:23:ee:4b:32:2e:f6:ee:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6 Validity Not Before: Dec 18 08:00:45 2025 GMT Not After : Dec 19 08:00:45 2025 GMT Subject: CN=7033e263274370d3d67ac06ac4a35be9350d034d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d0:f3:31:e5:d1:2d:87:e7:d8:9c:15:fd:fb: 62:64:06:ed:7f:b9:a1:93:5c:42:a9:c9:31:47:85: 0c:7e:f8:5c:be:f0:fa:ec:39:0f:6b:fb:9b:31:2a: 1c:4f:ab:69:15:4b:86:35:a8:16:38:31:91:6a:b3: 88:9a:2c:c2:7e:b3:a0:01:89:5a:85:38:81:98:3a: 3a:50:ee:81:91:a2:28:5e:e3:e9:03:a7:4f:78:8f: 02:35:70:73:5f:3d:cd:53:37:00:17:1f:04:b5:54: 83:14:f7:50:71:6b:15:73:23:48:16:b1:58:25:7b: c7:a5:f8:2c:d1:f9:ef:cf:c0:f5:16:7b:69:8e:f8: 39:3b:df:f7:86:30:0a:50:10:e2:af:0e:a2:93:3e: a1:56:c9:a1:6b:97:82:14:59:84:da:d6:fa:a7:9c: a4:4f:b3:41:f3:f8:29:ee:57:c2:c4:57:67:ba:3b: 1e:8f:22:9b:00:36:0e:c8:5d:c7:e6:fc:19:e1:67: 29:49:73:81:80:f8:66:bb:02:1c:50:52:c7:6b:5a: 40:a9:64:92:d1:1f:6d:d8:9a:ea:ec:94:24:cc:ef: 2f:2f:1b:b8:9d:b2:06:38:dd:48:a3:b6:56:d6:26: ee:60:5e:cb:ec:a6:c1:6e:52:25:b4:f6:05:23:13: a4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:33:E2:63:27:43:70:D3:D6:7A:C0:6A:C4:A3:5B:E9:35:0D:03:4D X509v3 Authority Key Identifier: keyid:17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:7b:c2:d8:c6:7b:dd:91:76:90:46:b8:ee:68:19:f1:9a:00: 79:53:7e:7e:85:5f:7f:3a:26:f9:60:e5:c4:ad:e1:ec:fa:2a: 40:4a:a5:ea:99:a4:a5:5e:4b:aa:2f:9e:70:f8:c5:df:95:a8: 2c:89:ea:e8:fe:f9:24:03:45:93:e7:69:5c:2c:74:1e:ca:72: b6:c7:7e:58:72:59:49:33:bd:bb:bf:12:eb:89:9e:81:70:64: 90:41:47:e8:10:8e:c4:0e:8a:bd:cf:f1:5a:58:83:48:77:5d: 81:99:31:c9:33:78:b7:6d:9b:8e:de:57:e6:d5:32:1f:da:82: b3:6c:91:fe:45:24:ab:bc:12:24:cf:42:f9:d5:d1:be:7b:ac: 10:60:04:76:96:d9:c5:a5:a9:c8:ef:da:68:6c:40:bc:89:ef: fd:29:10:9c:4f:d0:65:c0:67:dc:31:72:35:ae:ef:3b:44:a9: 90:f3:d7:17:b1:c3:af:db:ee:43:b6:dc:50:fe:ff:dc:cd:5b: aa:fd:ff:04:b2:4a:34:14:b1:85:d2:7e:92:d7:1f:fc:a0:cc: ce:50:d6:5d:54:ea:c9:6e:93:89:0f:47:1d:3b:36:2c:05:39: d6:6d:a5:c6:c5:43:ab:ec:24:2c:f2:5d:e1:ca:7d:c0:0d:58: 74:30:91:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswece/YGMgpyPuSzIu9u5xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTIzOWY5OTEzZGZjN2Q3YWFhYTk1ZmY0YzliNjFiZjQy YjcyZDYwHhcNMjUxMjE4MDgwMDQ1WhcNMjUxMjE5MDgwMDQ1WjAzMTEwLwYDVQQD Eyg3MDMzZTI2MzI3NDM3MGQzZDY3YWMwNmFjNGEzNWJlOTM1MGQwMzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdDzMeXRLYfn2JwV/ftiZAbtf7mh k1xCqckxR4UMfvhcvvD67DkPa/ubMSocT6tpFUuGNagWODGRarOImizCfrOgAYla hTiBmDo6UO6BkaIoXuPpA6dPeI8CNXBzXz3NUzcAFx8EtVSDFPdQcWsVcyNIFrFY JXvHpfgs0fnvz8D1Fntpjvg5O9/3hjAKUBDirw6ikz6hVsmha5eCFFmE2tb6p5yk T7NB8/gp7lfCxFdnujsejyKbADYOyF3H5vwZ4WcpSXOBgPhmuwIcUFLHa1pAqWSS 0R9t2Jrq7JQkzO8vLxu4nbIGON1Io7ZW1ibuYF7L7KbBblIltPYFIxOkxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAz4mMnQ3DT1nrAasSjW+k1DQNNMB8GA1UdIwQY MBaAFBeSOfmRPfx9eqqpX/TJthv0K3LWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVJNS1aRTlfSDE2cXFsZjlNbTJHX1FyY3RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kMzE0OWMtZjRkYy00ODM3LThiODYt YzYxMjMwNWNmMDg5LzEvRjVJNS1aRTlfSDE2cXFsZjlNbTJHX1FyY3RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9kMzE0OWMtZjRkYy00ODM3LThiODYtYzYxMjMwNWNmMDg5 LzEvRjVJNS1aRTlfSDE2cXFsZjlNbTJHX1FyY3RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHvC2MZ7 3ZF2kEa47mgZ8ZoAeVN+foVffzom+WDlxK3h7PoqQEql6pmkpV5Lqi+ecPjF35Wo LInq6P75JANFk+dpXCx0Hspytsd+WHJZSTO9u78S64megXBkkEFH6BCOxA6Kvc/x WliDSHddgZkxyTN4t22bjt5X5tUyH9qCs2yR/kUkq7wSJM9C+dXRvnusEGAEdpbZ xaWpyO/aaGxAvInv/SkQnE/QZcBn3DFyNa7vO0SpkPPXF7HDr9vuQ7bcUP7/3M1b qv3/BLJKNBSxhdJ+ktcf/KDMzlDWXVTqyW6TiQ9HHTs2LAU51m2lxsVDq+wkLPJd 4cp9wA1YdDCRBg== -----END CERTIFICATE-----Generated at Thu Dec 18 15:31:59 2025 by rpki-client