This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft File: b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft (raw, json) Hash identifier: m2VgBkFkGbPlSp61huzwR0WdAkOVRRE+YCOXXOb2vis= Subject key identifier: 71:9D:14:05:CA:96:18:AB:1D:E2:22:81:8B:CD:19:29:0A:1B:51:F6 Authority key identifier: 6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77 Certificate issuer: /CN=6f930698733bad33c081719c7b68bd19723a5a77 Certificate serial: 019B47020A365A47F5BAE4748B6489805CAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft Manifest number: 0A70 Signing time: Mon 22 Dec 2025 17:01:14 +0000 Manifest this update: Mon 22 Dec 2025 17:01:14 +0000 Manifest next update: Tue 23 Dec 2025 17:01:14 +0000 Files and hashes: 1: b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl (hash: euyMhCfoS767hkdX3c4a+RlEuujuICOsVpBlqynTmCE=) 2: eC2MphkCG1tQ_l_Eef-rvB7MGJg.roa (hash: oipT2bxgVMIIjaLCh5p0XGkacdhDbfRQ9fsmYqX5jVM=) 3: qgdTTthzOjRLa7QV75nMnKkp5w4.roa (hash: F0+rz8Lam1NmL6Yk8x5fjqey+/+WuThLB5gD8xHNDd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 17:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:02:0a:36:5a:47:f5:ba:e4:74:8b:64:89:80:5c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f930698733bad33c081719c7b68bd19723a5a77 Validity Not Before: Dec 22 17:01:14 2025 GMT Not After : Dec 23 17:01:14 2025 GMT Subject: CN=719d1405ca9618ab1de222818bcd19290a1b51f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:07:ef:0d:5c:de:6f:ff:49:60:49:e2:e0:d3: 61:0e:83:5f:27:a2:15:4b:a3:fb:e6:4d:f3:46:12: f7:2c:05:b3:6b:71:52:46:e8:3b:91:c0:67:8c:e7: 4d:75:7b:67:e5:38:4f:ff:74:f8:2e:f0:c5:6a:ff: 45:62:ef:fc:b2:a6:38:ca:80:a0:34:e5:ef:49:8f: f8:a1:0b:fa:1c:10:e1:6f:97:60:79:71:b0:65:c9: 35:69:dc:a9:af:db:6e:2e:bc:22:28:f0:03:c5:c6: 84:25:25:1e:45:2d:ac:29:f5:21:7b:fc:0c:67:ca: 70:eb:28:5a:63:81:2a:65:5b:5b:55:47:b9:e5:3e: c7:3f:31:56:50:44:3d:dd:23:16:89:c7:18:db:7b: 7f:d0:e4:78:c6:e3:e6:8d:f0:43:f3:d0:8c:4d:59: f1:1f:12:f5:da:dc:ce:27:27:32:5d:9b:cf:40:52: 2a:7a:57:3a:3c:04:ac:18:e3:89:4c:cd:4e:ec:a4: 44:32:71:13:b9:96:3c:94:ad:43:e8:27:c0:ab:b3: c1:34:07:d3:9b:62:62:93:38:f3:c1:6d:61:5f:22: f1:43:77:07:f6:ef:e6:0f:11:ce:6c:f1:87:e7:1b: fd:02:db:1e:e8:aa:47:07:be:4f:48:37:f3:2a:33: 14:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9D:14:05:CA:96:18:AB:1D:E2:22:81:8B:CD:19:29:0A:1B:51:F6 X509v3 Authority Key Identifier: keyid:6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:6f:fe:5a:d3:ab:4f:a5:aa:10:23:45:04:0f:db:c4:0e:59: cc:5d:64:6f:4d:31:a1:9f:1b:7d:a7:48:18:a0:4f:06:ea:a9: 90:da:0b:f1:02:a1:7b:1e:25:03:b9:72:1e:ad:e4:4b:4f:5c: 15:d8:df:8c:9a:b6:d2:76:a5:b6:c6:9e:47:af:ca:8e:47:de: 58:97:38:c4:6a:49:98:f8:13:ee:63:8e:0b:a3:5a:f8:55:52: 51:19:4e:8a:96:cc:05:84:a3:89:c8:8c:a8:45:5b:37:73:d9: da:7c:23:76:80:42:9d:88:fe:c4:10:ec:b6:2e:97:1a:cb:44: 19:a1:99:95:b6:2e:4d:2f:30:5f:63:e5:32:3b:14:fc:64:8b: e1:99:f3:ac:fe:a7:15:0f:4c:6d:e9:4a:55:b4:8b:12:d1:bd: c5:23:96:6f:33:64:ac:34:f8:a4:a0:13:31:8c:b0:9b:eb:fa: f5:a7:88:86:56:9b:ff:c2:73:8c:fc:8d:d4:52:f8:a0:4d:c0: d0:b5:ec:c2:ea:b4:bf:3c:cf:64:e8:f6:bb:79:f8:35:d8:0c: 23:06:83:fa:fc:3f:df:91:d8:2c:7f:f7:12:4a:f9:ba:54:95: d1:12:9c:72:11:50:2a:0c:60:d0:42:2f:bf:a2:1f:e9:87:68: 69:93:4d:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAgo2Wkf1uuR0i2SJgFyvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOTMwNjk4NzMzYmFkMzNjMDgxNzE5YzdiNjhiZDE5NzIz YTVhNzcwHhcNMjUxMjIyMTcwMTE0WhcNMjUxMjIzMTcwMTE0WjAzMTEwLwYDVQQD Eyg3MTlkMTQwNWNhOTYxOGFiMWRlMjIyODE4YmNkMTkyOTBhMWI1MWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQfvDVzeb/9JYEni4NNhDoNfJ6IV S6P75k3zRhL3LAWza3FSRug7kcBnjOdNdXtn5ThP/3T4LvDFav9FYu/8sqY4yoCg NOXvSY/4oQv6HBDhb5dgeXGwZck1adypr9tuLrwiKPADxcaEJSUeRS2sKfUhe/wM Z8pw6yhaY4EqZVtbVUe55T7HPzFWUEQ93SMWiccY23t/0OR4xuPmjfBD89CMTVnx HxL12tzOJycyXZvPQFIqelc6PASsGOOJTM1O7KREMnETuZY8lK1D6CfAq7PBNAfT m2JikzjzwW1hXyLxQ3cH9u/mDxHObPGH5xv9Atse6KpHB75PSDfzKjMUUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGdFAXKlhirHeIigYvNGSkKG1H2MB8GA1UdIwQY MBaAFG+TBphzO60zwIFxnHtovRlyOlp3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS81ZTYxZjctODM2My00YWNjLWI4YTQt ZmUxMDNmZDM4NTdjLzEvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS81ZTYxZjctODM2My00YWNjLWI4YTQtZmUxMDNmZDM4NTdj LzEvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiW/+WtOr T6WqECNFBA/bxA5ZzF1kb00xoZ8bfadIGKBPBuqpkNoL8QKhex4lA7lyHq3kS09c FdjfjJq20naltsaeR6/KjkfeWJc4xGpJmPgT7mOOC6Na+FVSURlOipbMBYSjiciM qEVbN3PZ2nwjdoBCnYj+xBDsti6XGstEGaGZlbYuTS8wX2PlMjsU/GSL4ZnzrP6n FQ9MbelKVbSLEtG9xSOWbzNkrDT4pKATMYywm+v69aeIhlab/8JzjPyN1FL4oE3A 0LXswuq0vzzPZOj2u3n4NdgMIwaD+vw/35HYLH/3Ekr5ulSV0RKcchFQKgxg0EIv v6If6YdoaZNNqA== -----END CERTIFICATE-----Generated at Tue Dec 23 01:56:26 2025 by rpki-client