This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft File: 05aWp2gOlVKR_q-h77qfvP8viIs.mft (raw, json) Hash identifier: k3OFg5zNI8oh48y76rnBJSExfRhHFfgidXk7jaddenk= Subject key identifier: 13:27:39:BD:73:71:93:ED:86:7D:47:75:26:32:8A:AC:02:2A:4B:5A Authority key identifier: D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B Certificate issuer: /CN=d39696a7680e955291feafa1efba9fbcff2f888b Certificate serial: 019B1012DB9DBE46B6246FEBA491C72F2398 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft Manifest number: 1262 Signing time: Fri 12 Dec 2025 01:00:29 +0000 Manifest this update: Fri 12 Dec 2025 01:00:29 +0000 Manifest next update: Sat 13 Dec 2025 01:00:29 +0000 Files and hashes: 1: 05aWp2gOlVKR_q-h77qfvP8viIs.crl (hash: 1hghXtTyIJ0jgbYPpTegJdVrSXyVgo6I6QOr9eHi9VM=) 2: rB2INOwVRpDLnI62nHFRLMGjim8.roa (hash: 4e9dGvThW6tLmtEOnyeNLHSG2RRsUkaY7l6l90Sl8lc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:12:db:9d:be:46:b6:24:6f:eb:a4:91:c7:2f:23:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d39696a7680e955291feafa1efba9fbcff2f888b Validity Not Before: Dec 12 01:00:29 2025 GMT Not After : Dec 13 01:00:29 2025 GMT Subject: CN=132739bd737193ed867d477526328aac022a4b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:56:72:32:11:04:ab:af:93:39:db:df:27:5d: 7d:57:7d:1c:83:db:c9:b3:2d:c9:a6:63:3a:14:59: 7b:1b:8b:af:49:8d:f7:2c:3e:a4:df:d5:84:fd:c2: 01:4d:4a:be:b5:3f:f5:b3:22:a5:f5:7d:72:9e:d6: d7:7c:d5:65:40:b2:5a:de:ab:ac:d5:b2:11:17:31: 1b:06:97:a3:44:f5:a3:3b:24:c4:c2:15:f1:2f:de: d7:40:c5:35:b6:ce:53:95:d7:2e:12:8e:82:56:9e: b2:95:d3:f4:b3:4f:7a:b9:11:62:fb:3a:64:39:43: 52:75:c7:79:48:73:0d:6c:8f:2b:2a:45:21:f8:07: 07:14:be:16:af:f6:ac:93:f6:5d:4b:7d:82:26:1a: de:68:a9:20:00:4a:54:7e:f7:8c:c9:06:48:a5:32: f0:48:0e:89:b0:88:2c:d0:33:f1:cc:b5:e2:24:a6: 36:ec:70:5f:6d:c4:87:1f:9c:7a:a1:2e:4b:08:8b: 38:8b:44:32:99:d5:18:6e:2e:94:13:95:8a:8c:e5: ed:cc:45:62:97:00:14:40:2b:76:60:b1:e4:e4:73: 88:20:b6:ca:ea:c4:b8:db:35:1c:60:c2:36:15:62: 08:40:07:87:82:e6:23:5f:a1:a2:4f:87:78:07:07: 6b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:27:39:BD:73:71:93:ED:86:7D:47:75:26:32:8A:AC:02:2A:4B:5A X509v3 Authority Key Identifier: keyid:D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:28:13:c6:04:b4:73:8b:7f:23:2d:52:ba:e8:3d:a7:13:c2: 4c:80:ec:d7:01:79:09:14:bb:4f:09:81:b4:f9:ea:e0:e0:6d: 7d:90:78:a7:ad:7d:54:db:7c:ad:7d:6e:af:63:24:4d:5e:a1: e2:d2:d9:d8:aa:b4:3a:2c:d9:d6:4b:e9:ec:e1:16:4a:94:e7: 73:b2:d1:19:7a:38:5a:ff:02:6b:1b:b4:bd:ca:92:ec:f2:9d: ac:24:ca:66:c9:6f:f3:24:99:09:71:a8:50:ab:54:e8:fc:7a: 1e:12:64:5e:1c:98:e6:48:dd:1d:43:e3:72:cc:32:da:77:69: 50:f1:77:bd:34:9b:d8:8d:0a:ce:32:2b:1c:8f:56:91:42:58: de:ef:96:c5:9c:0b:f7:1a:20:b5:13:cd:48:4e:ce:44:cf:55: 25:b4:03:2b:c9:23:64:39:32:6d:34:49:19:3f:8d:4c:1c:3a: 62:09:ad:5b:80:ed:c5:5e:a8:76:29:95:48:e9:d9:8b:2c:cd: 9f:eb:96:7f:8a:c2:85:c7:e8:99:eb:0d:a1:c5:52:ce:db:6e: 5e:61:56:7a:3c:7b:d2:a2:c2:53:a6:a4:1c:15:97:c7:a4:1d: 1c:2b:e5:52:69:1e:67:15:b4:18:c6:f0:88:1a:b9:1f:6b:ca: 77:be:07:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQEtudvka2JG/rpJHHLyOYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzOTY5NmE3NjgwZTk1NTI5MWZlYWZhMWVmYmE5ZmJjZmYy Zjg4OGIwHhcNMjUxMjEyMDEwMDI5WhcNMjUxMjEzMDEwMDI5WjAzMTEwLwYDVQQD EygxMzI3MzliZDczNzE5M2VkODY3ZDQ3NzUyNjMyOGFhYzAyMmE0YjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVZyMhEEq6+TOdvfJ119V30cg9vJ sy3JpmM6FFl7G4uvSY33LD6k39WE/cIBTUq+tT/1syKl9X1yntbXfNVlQLJa3qus 1bIRFzEbBpejRPWjOyTEwhXxL97XQMU1ts5TldcuEo6CVp6yldP0s096uRFi+zpk OUNSdcd5SHMNbI8rKkUh+AcHFL4Wr/ask/ZdS32CJhreaKkgAEpUfveMyQZIpTLw SA6JsIgs0DPxzLXiJKY27HBfbcSHH5x6oS5LCIs4i0QymdUYbi6UE5WKjOXtzEVi lwAUQCt2YLHk5HOIILbK6sS42zUcYMI2FWIIQAeHguYjX6GiT4d4BwdrKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMnOb1zcZPthn1HdSYyiqwCKktaMB8GA1UdIwQY MBaAFNOWlqdoDpVSkf6voe+6n7z/L4iLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy82OGU4NTctZTJlOS00MmQ1LTg2NGUt Y2M3YWQxNmQxYjBjLzEvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy82OGU4NTctZTJlOS00MmQ1LTg2NGUtY2M3YWQxNmQxYjBj LzEvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATygTxgS0 c4t/Iy1Suug9pxPCTIDs1wF5CRS7TwmBtPnq4OBtfZB4p619VNt8rX1ur2MkTV6h 4tLZ2Kq0OizZ1kvp7OEWSpTnc7LRGXo4Wv8Caxu0vcqS7PKdrCTKZslv8ySZCXGo UKtU6Px6HhJkXhyY5kjdHUPjcswy2ndpUPF3vTSb2I0KzjIrHI9WkUJY3u+WxZwL 9xogtRPNSE7ORM9VJbQDK8kjZDkybTRJGT+NTBw6YgmtW4DtxV6odimVSOnZiyzN n+uWf4rChcfomesNocVSzttuXmFWejx70qLCU6akHBWXx6QdHCvlUmkeZxW0GMbw iBq5H2vKd74H4A== -----END CERTIFICATE-----Generated at Fri Dec 12 08:03:48 2025 by rpki-client