This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft File: a5p0BaYIXJq6zwg9yQpJX80mjPg.mft (raw, json) Hash identifier: 5Bq0DogNFkEME/ABN5CnAgWcNtYhBWn8ENK9fv9uGz0= Subject key identifier: EC:99:7D:25:59:C7:76:72:D3:20:9D:14:F0:2B:70:A6:28:02:0D:A1 Authority key identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8 Certificate issuer: /CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8 Certificate serial: 019ABB5158DB9A6E38296549977994207FD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft Manifest number: 1742 Signing time: Tue 25 Nov 2025 14:01:01 +0000 Manifest this update: Tue 25 Nov 2025 14:01:01 +0000 Manifest next update: Wed 26 Nov 2025 14:01:01 +0000 Files and hashes: 1: 3VrPGjUQ3Y-l-f7OeEozbIvcsLg.roa (hash: bLeP0OV6qVbEnqwfvFZWrAEprQe0NgLJqVsqQYDqQEk=) 2: a5p0BaYIXJq6zwg9yQpJX80mjPg.crl (hash: 8qFP9j+P22s0Y/GTeBt58JNPNo93pG1MmYHUAD6Ohyk=) 3: hNx5M08bBB4LNOoJFKhlbkgWWJM.roa (hash: cqMnw1dZerM4/zZuXP5i5wijuCSzDOC7D7skn29vFmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 14:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:51:58:db:9a:6e:38:29:65:49:97:79:94:20:7f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8 Validity Not Before: Nov 25 14:01:01 2025 GMT Not After : Nov 26 14:01:01 2025 GMT Subject: CN=ec997d2559c77672d3209d14f02b70a628020da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:57:03:14:ab:48:02:40:b7:f0:ee:ae:cb:c8: f0:29:d3:1e:fb:71:6e:7e:39:42:54:64:0b:e7:b1: 2b:97:64:95:70:3f:5e:00:cc:02:9a:3f:2b:9d:72: 7f:25:22:f4:54:b0:28:2e:3f:98:e2:d7:52:0a:96: 4a:97:90:34:a6:f5:25:69:df:e3:1d:6c:c4:48:8a: 63:e3:f2:96:ba:df:10:9a:b2:cd:5f:ee:44:68:0f: 1f:bb:a0:72:dc:40:82:51:a2:76:24:13:cc:8e:d9: d9:f8:29:5c:28:25:fd:83:d5:57:09:b2:6a:a5:f4: 0d:cc:43:e4:90:15:83:97:b6:b4:8b:5e:75:22:d5: f7:43:57:23:88:7c:87:25:95:07:c1:3b:75:1f:b0: 3e:b3:eb:92:27:10:32:97:31:b8:91:4d:c2:33:d1: 87:ef:c8:75:2e:85:82:6b:14:62:49:4b:06:91:58: 81:91:09:79:17:2d:38:e2:f4:e0:7e:38:41:a8:d8: ff:97:0c:42:5a:0a:73:c5:97:59:99:88:f9:6a:12: 9d:5c:5c:c8:90:c5:88:16:93:dc:dc:3e:56:f8:d8: a8:88:62:a8:16:a5:b6:dd:2f:f6:36:fe:3b:eb:2d: a6:b1:69:1d:b2:c9:81:fb:0b:28:0c:55:cd:2f:24: 06:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:99:7D:25:59:C7:76:72:D3:20:9D:14:F0:2B:70:A6:28:02:0D:A1 X509v3 Authority Key Identifier: keyid:6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:d6:ca:0d:d3:02:63:93:9b:22:94:a2:09:d3:32:5a:92:6c: 8e:8f:10:3d:c4:96:08:b7:dc:f2:ae:49:d8:dd:1e:08:c0:56: 8e:f1:50:7a:a2:99:5c:9d:38:b6:98:cb:19:70:f2:e6:b6:a3: 56:39:f1:06:50:a1:95:f2:68:ef:23:39:7e:8a:b7:5b:19:3d: a7:65:86:b1:06:9a:b4:fa:e7:f2:6f:38:c5:7e:88:41:38:3e: 12:04:f6:98:42:d5:a9:0a:f4:bc:6b:cb:e4:22:15:04:61:05: f7:b6:e2:00:9b:86:5e:5b:16:64:56:35:94:61:ef:84:dc:29: 5d:3e:91:e0:d1:9a:cd:6f:50:48:40:47:e2:ec:9b:84:f3:db: 41:6b:62:e4:9b:61:1b:e7:41:b2:31:c2:b8:0f:42:c7:17:8e: 1c:64:89:13:bc:c8:d2:55:9c:2b:7e:f6:27:79:24:fd:73:f5: 56:58:0d:12:d8:52:66:ea:a3:1b:2b:44:15:7a:78:9b:de:5d: 88:9c:2b:9e:54:40:16:13:51:4a:b1:03:a5:0b:60:f3:23:a0: b4:5f:1a:8e:fd:62:f8:07:a7:c0:75:60:46:a9:94:71:44:16: 8a:ae:c9:71:42:a7:d7:9b:8e:7f:cf:e4:5d:b3:f8:8b:e3:0c: db:42:c3:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq7UVjbmm44KWVJl3mUIH/YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiOWE3NDA1YTYwODVjOWFiYWNmMDgzZGM5MGE0OTVmY2Qy NjhjZjgwHhcNMjUxMTI1MTQwMTAxWhcNMjUxMTI2MTQwMTAxWjAzMTEwLwYDVQQD EyhlYzk5N2QyNTU5Yzc3NjcyZDMyMDlkMTRmMDJiNzBhNjI4MDIwZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VcDFKtIAkC38O6uy8jwKdMe+3Fu fjlCVGQL57Erl2SVcD9eAMwCmj8rnXJ/JSL0VLAoLj+Y4tdSCpZKl5A0pvUlad/j HWzESIpj4/KWut8QmrLNX+5EaA8fu6By3ECCUaJ2JBPMjtnZ+ClcKCX9g9VXCbJq pfQNzEPkkBWDl7a0i151ItX3Q1cjiHyHJZUHwTt1H7A+s+uSJxAylzG4kU3CM9GH 78h1LoWCaxRiSUsGkViBkQl5Fy044vTgfjhBqNj/lwxCWgpzxZdZmYj5ahKdXFzI kMWIFpPc3D5W+NioiGKoFqW23S/2Nv476y2msWkdssmB+wsoDFXNLyQGdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyZfSVZx3Zy0yCdFPArcKYoAg2hMB8GA1UdIwQY MBaAFGuadAWmCFyaus8IPckKSV/NJoz4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTVwMEJhWUlYSnE2endnOXlRcEpYODBtalBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC82NDU3ZDktYjRkYi00YjJkLTkxOWMt MmUxZWU5NDcxZWVjLzEvYTVwMEJhWUlYSnE2endnOXlRcEpYODBtalBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC82NDU3ZDktYjRkYi00YjJkLTkxOWMtMmUxZWU5NDcxZWVj LzEvYTVwMEJhWUlYSnE2endnOXlRcEpYODBtalBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9bKDdMC Y5ObIpSiCdMyWpJsjo8QPcSWCLfc8q5J2N0eCMBWjvFQeqKZXJ04tpjLGXDy5raj VjnxBlChlfJo7yM5foq3Wxk9p2WGsQaatPrn8m84xX6IQTg+EgT2mELVqQr0vGvL 5CIVBGEF97biAJuGXlsWZFY1lGHvhNwpXT6R4NGazW9QSEBH4uybhPPbQWti5Jth G+dBsjHCuA9CxxeOHGSJE7zI0lWcK372J3kk/XP1VlgNEthSZuqjGytEFXp4m95d iJwrnlRAFhNRSrEDpQtg8yOgtF8ajv1i+AenwHVgRqmUcUQWiq7JcUKn15uOf8/k XbP4i+MM20LDew== -----END CERTIFICATE-----Generated at Tue Nov 25 15:59:59 2025 by rpki-client