This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft File: i5PlZ68ZipTh_PBf4P58khCVqEo.mft (raw, json) Hash identifier: SYCy1G45N2ZWvRtFpI/a7ZVbBgeRudDeHa1qzNMAXMk= Subject key identifier: 39:BC:EA:78:F2:9D:8F:04:39:B1:F8:30:C2:18:17:5E:50:A6:73:56 Authority key identifier: 8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A Certificate issuer: /CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a Certificate serial: 019B07B500F9D40C5145E23CFD00910D7A24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft Manifest number: 0C16 Signing time: Wed 10 Dec 2025 10:01:01 +0000 Manifest this update: Wed 10 Dec 2025 10:01:01 +0000 Manifest next update: Thu 11 Dec 2025 10:01:01 +0000 Files and hashes: 1: 6DAE46YGraEJYVV3HiGtZg9tT3U.roa (hash: 9Q8yRtyc9v/k/ONyDJo3tJ6f8FW5cGNXex+XpsJxg2Q=) 2: i5PlZ68ZipTh_PBf4P58khCVqEo.crl (hash: C0+RLq/irg1r+XBzulA9XeX6dEedWY6WfppOubdJfa8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:00:f9:d4:0c:51:45:e2:3c:fd:00:91:0d:7a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a Validity Not Before: Dec 10 10:01:01 2025 GMT Not After : Dec 11 10:01:01 2025 GMT Subject: CN=39bcea78f29d8f0439b1f830c218175e50a67356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bc:be:98:8b:39:52:34:bd:c8:83:b0:fe:3e: af:d0:67:85:fb:42:03:5f:63:65:ce:1d:32:94:67: bc:85:b6:b5:55:e8:6c:d8:29:f4:fe:fd:e5:6b:da: ac:c7:12:b3:29:4e:e7:ac:0f:4a:f5:7a:a9:48:ba: 4b:25:e3:7b:3a:a6:c5:f4:67:d2:00:c2:16:2d:fa: ef:7f:ee:cd:22:6b:52:c7:05:00:4e:96:cc:ed:b8: cd:f1:ef:a9:fb:83:7b:41:7d:12:f2:bf:8c:62:a7: d5:ad:48:0a:08:b2:28:ac:ef:47:e2:f0:9f:f6:c1: 45:be:eb:c4:55:d0:00:a5:bd:94:9e:d6:2b:66:38: ff:1a:d7:2e:75:ee:42:d2:34:e9:df:cc:e3:8f:e2: f3:a7:5d:55:c6:12:db:a6:7a:a8:25:e7:69:6a:0f: a8:7f:01:15:9c:f6:91:f3:eb:70:d1:55:00:93:e3: 67:0c:d3:be:70:4d:b5:84:cf:a3:7c:d9:50:3b:46: ef:1a:0f:24:32:1d:76:60:81:85:18:55:9a:d6:e5: cd:b6:48:50:4c:78:40:f0:25:9a:90:94:bb:f4:0c: 11:7d:65:8b:62:dc:15:29:82:bd:9d:39:47:c5:bc: 9c:6b:65:2f:9c:65:6a:e3:34:50:32:30:4a:38:d0: 72:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BC:EA:78:F2:9D:8F:04:39:B1:F8:30:C2:18:17:5E:50:A6:73:56 X509v3 Authority Key Identifier: keyid:8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:89:81:93:4d:c4:a8:7a:25:b6:cc:30:ee:be:f4:79:e9:97: 29:56:2b:fa:56:53:02:be:be:51:b0:1e:cc:2a:73:08:51:d1: 34:d7:84:2c:a5:10:d6:14:1d:5c:bb:47:a7:e1:b8:f6:95:5c: d8:2e:1c:b2:c3:58:66:70:85:21:f2:5e:0a:27:8f:17:bc:d0: 5d:a8:9d:76:1e:10:3e:a6:9a:a2:cd:8f:99:62:32:46:1a:4b: 4f:8a:1c:6d:49:a8:f9:e1:8d:aa:15:b2:2a:43:6c:7f:b9:45: ed:79:05:d2:a9:87:79:03:84:28:65:7b:71:0c:91:5f:82:90: 8a:3e:ef:c5:aa:23:e1:a3:7f:61:30:3b:f0:cd:c0:13:b5:39: 0d:d4:48:94:c2:29:6b:07:2b:d0:a7:57:2a:62:a2:e0:67:40: dc:e2:e6:01:31:86:1a:d5:c3:f0:a9:64:77:e8:57:50:e4:ef: b9:8e:72:ef:f7:9b:65:3a:da:3d:a4:cd:ac:94:30:53:ba:0f: da:02:95:5d:b5:f5:72:c6:09:e6:72:f7:9d:84:cb:b6:1d:dc: e6:f1:18:6a:2d:09:6c:11:56:69:12:bc:b3:bd:36:31:30:6e: c3:e3:4f:a5:ed:81:67:c0:98:af:10:ef:15:18:a4:f7:11:7b: da:1f:1f:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtQD51AxRReI8/QCRDXokMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOTNlNTY3YWYxOThhOTRlMWZjZjA1ZmUwZmU3YzkyMTA5 NWE4NGEwHhcNMjUxMjEwMTAwMTAxWhcNMjUxMjExMTAwMTAxWjAzMTEwLwYDVQQD EygzOWJjZWE3OGYyOWQ4ZjA0MzliMWY4MzBjMjE4MTc1ZTUwYTY3MzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqby+mIs5UjS9yIOw/j6v0GeF+0ID X2Nlzh0ylGe8hba1Vehs2Cn0/v3la9qsxxKzKU7nrA9K9XqpSLpLJeN7OqbF9GfS AMIWLfrvf+7NImtSxwUATpbM7bjN8e+p+4N7QX0S8r+MYqfVrUgKCLIorO9H4vCf 9sFFvuvEVdAApb2UntYrZjj/Gtcude5C0jTp38zjj+Lzp11VxhLbpnqoJedpag+o fwEVnPaR8+tw0VUAk+NnDNO+cE21hM+jfNlQO0bvGg8kMh12YIGFGFWa1uXNtkhQ THhA8CWakJS79AwRfWWLYtwVKYK9nTlHxbyca2UvnGVq4zRQMjBKONByAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDm86njynY8EObH4MMIYF15QpnNWMB8GA1UdIwQY MBaAFIuT5WevGYqU4fzwX+D+fJIQlahKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTVQbFo2OFppcFRoX1BCZjRQNThraENWcUVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jZjEzMGQtZWZkNC00ZGZiLWExYTMt YTJiZjBhMThjZGRjLzEvaTVQbFo2OFppcFRoX1BCZjRQNThraENWcUVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9jZjEzMGQtZWZkNC00ZGZiLWExYTMtYTJiZjBhMThjZGRj LzEvaTVQbFo2OFppcFRoX1BCZjRQNThraENWcUVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4mBk03E qHoltsww7r70eemXKVYr+lZTAr6+UbAezCpzCFHRNNeELKUQ1hQdXLtHp+G49pVc 2C4cssNYZnCFIfJeCiePF7zQXaiddh4QPqaaos2PmWIyRhpLT4ocbUmo+eGNqhWy KkNsf7lF7XkF0qmHeQOEKGV7cQyRX4KQij7vxaoj4aN/YTA78M3AE7U5DdRIlMIp awcr0KdXKmKi4GdA3OLmATGGGtXD8Klkd+hXUOTvuY5y7/ebZTraPaTNrJQwU7oP 2gKVXbX1csYJ5nL3nYTLth3c5vEYai0JbBFWaRK8s702MTBuw+NPpe2BZ8CYrxDv FRik9xF72h8f+Q== -----END CERTIFICATE-----Generated at Wed Dec 10 18:00:24 2025 by rpki-client