This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft File: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft (raw, json) Hash identifier: JhkAz4nznixUpgKHF4O9EkC16xXbDDnk8g/RUSGz3zM= Subject key identifier: 9A:CA:5A:C4:13:F0:D4:BE:65:33:C4:67:7D:0D:7B:60:26:63:6C:01 Authority key identifier: 17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A Certificate issuer: /CN=17972d43835cd6a66e54e5a5856ce57de282d43a Certificate serial: 019B10B7F5892BEDA6E011745D6E91BCC6FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft Manifest number: 0E6B Signing time: Fri 12 Dec 2025 04:00:49 +0000 Manifest this update: Fri 12 Dec 2025 04:00:49 +0000 Manifest next update: Sat 13 Dec 2025 04:00:49 +0000 Files and hashes: 1: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl (hash: 90cT8BM2V9wWzvpKwdkaUn3VRBI3N02gq/ldT0NLdFE=) 2: nD9K7BuoobBm0UoH5h6nnInzZ5M.roa (hash: n+EpS4FTLeyovvcIgss8uVwl4+ZqeSqmuV4HpNA3yWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b7:f5:89:2b:ed:a6:e0:11:74:5d:6e:91:bc:c6:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17972d43835cd6a66e54e5a5856ce57de282d43a Validity Not Before: Dec 12 04:00:49 2025 GMT Not After : Dec 13 04:00:49 2025 GMT Subject: CN=9aca5ac413f0d4be6533c4677d0d7b6026636c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:30:a4:ef:61:25:54:72:ec:a4:c0:d3:d3:f7: 62:9d:f5:18:24:80:55:bf:fa:62:b0:02:f7:ee:07: 20:56:b6:ef:d0:44:9f:86:48:2a:53:f7:30:d6:00: c2:21:20:1e:15:2d:c4:c7:34:bf:30:51:71:c6:86: 38:28:a1:ae:1d:ff:47:c3:3f:6d:18:69:1d:c7:b1: 0a:1b:08:79:f1:80:69:96:07:19:71:26:69:05:e7: 01:ec:35:2a:9b:99:57:57:ed:c6:48:65:a2:db:86: fa:b6:ac:0f:79:c7:ea:d8:0f:59:1d:47:e9:21:fc: 60:ca:9c:2a:19:73:11:55:5a:fa:ad:19:2c:95:a1: f5:fe:92:77:cc:71:09:3e:cc:2a:60:f2:91:af:c0: 02:35:af:25:4d:86:23:e1:f6:35:11:6a:47:0a:e1: 93:4f:05:4d:8d:96:a5:96:e7:0f:20:d3:32:3b:1c: a0:39:9e:67:4a:d4:a4:b7:69:26:08:fc:70:d6:f9: 3c:54:d8:b7:86:0d:cf:f1:fc:30:ee:f0:df:70:63: 15:d2:1f:d5:d0:4f:84:59:c2:48:cb:6c:b1:6e:17: b4:a4:eb:fd:7c:24:d0:42:95:07:f4:92:d4:9b:77: 88:89:f2:74:3b:52:e0:dd:b0:da:b9:a1:77:83:1b: 64:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CA:5A:C4:13:F0:D4:BE:65:33:C4:67:7D:0D:7B:60:26:63:6C:01 X509v3 Authority Key Identifier: keyid:17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:85:28:18:6f:8b:fc:e8:b1:c6:cc:07:64:17:ce:78:67:e3: 61:ee:12:34:ac:c6:ad:00:f0:9e:de:e6:83:de:9f:b5:f2:31: 3b:83:5c:54:89:c6:0c:23:2b:98:14:da:78:a0:a7:7b:ce:ab: a6:3f:55:57:98:31:53:1c:8c:66:c9:37:86:2a:52:be:56:ff: 87:5d:58:77:0b:d5:33:3b:52:dd:ff:a5:e6:2b:eb:c8:b4:ea: cd:3f:fe:12:57:73:56:c4:8d:e3:fe:e4:dc:e6:1d:55:03:5e: 35:b3:37:4f:7e:68:4b:72:13:ee:ee:0e:19:c7:dc:c6:26:fe: e2:78:94:ac:40:c1:d2:b9:45:83:62:ad:a5:2a:8b:56:78:ac: 73:74:15:a4:ca:b7:0e:25:78:b8:fb:fb:b9:fe:46:68:10:84: 0e:a7:98:76:98:38:19:8d:dd:0a:fa:33:c6:4f:7a:61:19:15: e5:a2:b2:ad:33:41:6a:16:8f:c0:6a:42:c4:28:cd:5b:f3:59: 33:af:ea:19:d5:47:97:54:46:1b:b8:85:22:d8:8f:ed:fc:f5: 53:8e:6d:55:7e:50:c6:3c:8f:49:88:f2:f3:98:71:1c:12:fd: c9:ef:ec:1e:71:1f:48:d5:6c:73:f7:47:73:74:0a:6f:02:b0: 7f:fd:bb:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQt/WJK+2m4BF0XW6RvMb9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTcyZDQzODM1Y2Q2YTY2ZTU0ZTVhNTg1NmNlNTdkZTI4 MmQ0M2EwHhcNMjUxMjEyMDQwMDQ5WhcNMjUxMjEzMDQwMDQ5WjAzMTEwLwYDVQQD Eyg5YWNhNWFjNDEzZjBkNGJlNjUzM2M0Njc3ZDBkN2I2MDI2NjM2YzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjCk72ElVHLspMDT0/dinfUYJIBV v/pisAL37gcgVrbv0ESfhkgqU/cw1gDCISAeFS3ExzS/MFFxxoY4KKGuHf9Hwz9t GGkdx7EKGwh58YBplgcZcSZpBecB7DUqm5lXV+3GSGWi24b6tqwPecfq2A9ZHUfp IfxgypwqGXMRVVr6rRkslaH1/pJ3zHEJPswqYPKRr8ACNa8lTYYj4fY1EWpHCuGT TwVNjZallucPINMyOxygOZ5nStSkt2kmCPxw1vk8VNi3hg3P8fww7vDfcGMV0h/V 0E+EWcJIy2yxbhe0pOv9fCTQQpUH9JLUm3eIifJ0O1Lg3bDauaF3gxtk7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrKWsQT8NS+ZTPEZ30Ne2AmY2wBMB8GA1UdIwQY MBaAFBeXLUODXNamblTlpYVs5X3igtQ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWIt OTA5NWVjYzg3ODc4LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWItOTA5NWVjYzg3ODc4 LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWoUoGG+L /OixxswHZBfOeGfjYe4SNKzGrQDwnt7mg96ftfIxO4NcVInGDCMrmBTaeKCne86r pj9VV5gxUxyMZsk3hipSvlb/h11YdwvVMztS3f+l5ivryLTqzT/+EldzVsSN4/7k 3OYdVQNeNbM3T35oS3IT7u4OGcfcxib+4niUrEDB0rlFg2KtpSqLVnisc3QVpMq3 DiV4uPv7uf5GaBCEDqeYdpg4GY3dCvozxk96YRkV5aKyrTNBahaPwGpCxCjNW/NZ M6/qGdVHl1RGG7iFItiP7fz1U45tVX5QxjyPSYjy85hxHBL9ye/sHnEfSNVsc/dH c3QKbwKwf/27eg== -----END CERTIFICATE-----Generated at Fri Dec 12 12:05:51 2025 by rpki-client