This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft File: t5IgqAXkN4VH5Duscxzob-ARRcc.mft (raw, json) Hash identifier: V15H28+LAnhM6PkcYIRkRUVHe9IRwTUwwB3ZEoa4tY4= Subject key identifier: 71:D1:A0:F1:65:A3:62:50:F0:A5:24:57:79:28:6B:7F:4F:32:1E:FB Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7 Certificate issuer: /CN=b79220a805e4378547e43bac731ce86fe01145c7 Certificate serial: 019B066CDB08F968C7C2736CB8018A81AA19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft Manifest number: 17A3 Signing time: Wed 10 Dec 2025 04:02:35 +0000 Manifest this update: Wed 10 Dec 2025 04:02:35 +0000 Manifest next update: Thu 11 Dec 2025 04:02:35 +0000 Files and hashes: 1: IC8tJ8mDvwNf2pEp4eGjxa5cIKw.roa (hash: Sm5UWfSV0BLTHi4hHlo1KPc2aztCMaI19t19PZRUZZc=) 2: JsHUF9nO0Ubmx66NjwjSoa2db5s.roa (hash: 5Bntxxf/DOq1AqaoIFJIGiKuLbRTvnWBZ2d4WFO6pPY=) 3: MbqoSUw94G_kpX-xAxVWXxjX0io.roa (hash: R1upzBkGFuu3S6c70j9aIqWiLLfM3rhDbfCwHwN7UrE=) 4: dxIfYzd-HHl4lIaAqTEGfA9c7sQ.roa (hash: 1wNUGeXyusk9X3ieKOx2o0ugjj6lBznwR37kiJNdRxw=) 5: qBWUDdq6JGEqcxPlF6Ytcy33dJA.roa (hash: 00VI12BlUP26JR+mPLQ+RfjLscfTifDKz5JZWGxyZBQ=) 6: rAdBLvyRbVu9ByeGD622HSDJlBU.roa (hash: CZZqdpQQG94RuUVqGtWwcTYbY/5K07OCSVEcHRuO4vA=) 7: t5IgqAXkN4VH5Duscxzob-ARRcc.crl (hash: P97kWUEd7K1Iz84MU6GiykG4gNfQ6MwSzOCWZ+2PZFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 04:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:6c:db:08:f9:68:c7:c2:73:6c:b8:01:8a:81:aa:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7 Validity Not Before: Dec 10 04:02:35 2025 GMT Not After : Dec 11 04:02:35 2025 GMT Subject: CN=71d1a0f165a36250f0a5245779286b7f4f321efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:44:e0:a0:5a:b2:25:e6:48:40:15:76:14:f0: b6:86:24:ca:bd:2e:d8:5c:4f:3d:34:ad:5d:b7:7e: 46:5a:6b:d2:2a:bb:5f:bf:67:8f:e7:74:16:d5:e3: af:05:84:03:7f:b6:9b:47:77:1f:4f:27:db:ca:77: 69:ec:f8:d3:bb:54:9d:6c:2c:bf:e7:27:8a:23:af: 51:cf:54:df:4b:5d:0d:1e:97:6e:c9:de:b9:a6:2f: 1a:45:5e:10:80:dc:e0:f8:da:a7:b4:04:77:b8:93: 54:53:d1:93:6c:74:e3:0a:3d:8d:3e:60:be:a2:c0: 1c:fc:36:41:12:eb:c4:5e:e3:d2:03:dc:5e:82:a8: 54:8f:2b:ef:fe:a6:12:93:c9:72:57:f9:d9:a2:4e: e5:e3:ce:49:33:0c:cf:74:2a:10:9e:4b:45:1d:3e: f7:9c:33:a8:ce:45:34:06:f3:29:aa:b2:2f:c8:ec: 9e:42:71:0f:a2:a1:03:f6:1e:7d:ad:15:c2:cb:32: cb:0a:49:5a:9a:08:bf:aa:19:05:7b:70:62:21:44: f6:29:44:0a:83:39:06:35:26:79:4b:d1:83:d6:eb: c2:e1:48:12:c9:b0:43:9b:bb:11:6b:a2:f4:2d:65: 72:25:27:2b:87:d7:b1:69:a5:a3:08:50:1b:3a:35: aa:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D1:A0:F1:65:A3:62:50:F0:A5:24:57:79:28:6B:7F:4F:32:1E:FB X509v3 Authority Key Identifier: keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:23:50:d2:55:a5:a5:13:74:27:da:57:dd:18:d7:d3:a0:49: 16:21:af:9e:2e:72:1f:8c:08:f5:1d:bd:57:1d:3f:8b:a5:b6: f6:f1:bd:41:4a:48:cc:91:2e:68:ac:7f:30:6f:bf:cf:e4:a8: 28:b6:8b:ef:00:36:c9:99:73:d8:7c:2a:1b:df:64:05:c3:a6: 85:4f:1b:96:df:d7:73:6f:ea:86:42:88:0a:30:1a:18:3d:6b: 91:c9:42:51:33:ef:3c:5d:a2:f6:e1:ea:93:60:b1:88:40:cc: 05:1b:dc:c1:24:ed:62:9b:55:ed:7b:ca:c6:d6:0a:7b:5e:83: 60:29:9d:89:2f:7c:0f:9f:86:c6:fb:23:01:f5:1b:b0:79:2d: 10:0f:de:27:de:67:d6:56:84:5c:bf:19:55:23:43:70:4a:78: c1:c4:1c:ed:2e:19:26:a8:64:50:b6:4e:d1:e5:1e:c0:02:0d: ed:a7:3b:d1:35:9a:7a:26:a4:32:66:37:1d:c1:d4:69:fe:4d: 76:f2:f1:c2:f4:11:89:cb:b7:dd:40:8c:72:5c:eb:ec:1a:30: f1:59:72:01:1a:cc:c0:74:af:8e:b8:73:ab:47:69:e4:b3:c9: d8:ac:64:3e:ae:57:7b:90:79:8a:bd:91:ea:53:ce:d2:57:25: 0c:e6:f0:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGbNsI+WjHwnNsuAGKgaoZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OTIyMGE4MDVlNDM3ODU0N2U0M2JhYzczMWNlODZmZTAx MTQ1YzcwHhcNMjUxMjEwMDQwMjM1WhcNMjUxMjExMDQwMjM1WjAzMTEwLwYDVQQD Eyg3MWQxYTBmMTY1YTM2MjUwZjBhNTI0NTc3OTI4NmI3ZjRmMzIxZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkTgoFqyJeZIQBV2FPC2hiTKvS7Y XE89NK1dt35GWmvSKrtfv2eP53QW1eOvBYQDf7abR3cfTyfbyndp7PjTu1SdbCy/ 5yeKI69Rz1TfS10NHpduyd65pi8aRV4QgNzg+NqntAR3uJNUU9GTbHTjCj2NPmC+ osAc/DZBEuvEXuPSA9xegqhUjyvv/qYSk8lyV/nZok7l485JMwzPdCoQnktFHT73 nDOozkU0BvMpqrIvyOyeQnEPoqED9h59rRXCyzLLCklamgi/qhkFe3BiIUT2KUQK gzkGNSZ5S9GD1uvC4UgSybBDm7sRa6L0LWVyJScrh9exaaWjCFAbOjWqEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHRoPFlo2JQ8KUkV3koa39PMh77MB8GA1UdIwQY MBaAFLeSIKgF5DeFR+Q7rHMc6G/gEUXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDkt NDIzYWZjMmI2OGI4LzEvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDktNDIzYWZjMmI2OGI4 LzEvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANiNQ0lWl pRN0J9pX3RjX06BJFiGvni5yH4wI9R29Vx0/i6W29vG9QUpIzJEuaKx/MG+/z+So KLaL7wA2yZlz2HwqG99kBcOmhU8blt/Xc2/qhkKICjAaGD1rkclCUTPvPF2i9uHq k2CxiEDMBRvcwSTtYptV7XvKxtYKe16DYCmdiS98D5+GxvsjAfUbsHktEA/eJ95n 1laEXL8ZVSNDcEp4wcQc7S4ZJqhkULZO0eUewAIN7ac70TWaeiakMmY3HcHUaf5N dvLxwvQRicu33UCMclzr7Bow8VlyARrMwHSvjrhzq0dp5LPJ2KxkPq5Xe5B5ir2R 6lPO0lclDObw7Q== -----END CERTIFICATE-----Generated at Wed Dec 10 12:22:19 2025 by rpki-client