This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft File: F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft (raw, json) Hash identifier: IFnaT2uaeobpOMRyUoyZ0n0DN5ZpwReuGg/xkeZ/+os= Subject key identifier: EF:8B:98:7C:CF:0F:46:46:2B:35:3C:FC:D2:02:15:EB:B1:2E:D3:28 Authority key identifier: 17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72 Certificate issuer: /CN=1792582aa0b18d6073592f121a6e563fec424672 Certificate serial: 019B1C854E2392549DA13B9836D794C1B0D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft Manifest number: 0816 Signing time: Sun 14 Dec 2025 11:00:56 +0000 Manifest this update: Sun 14 Dec 2025 11:00:56 +0000 Manifest next update: Mon 15 Dec 2025 11:00:56 +0000 Files and hashes: 1: F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl (hash: O9LvCRwekZi8HxLzyX+DhflnMhg9L8N/2B9PMc8P3T0=) 2: X1Hk6Afe1QrSetXg0Fl8YXsPzIQ.roa (hash: XOR8QJ4EQ0MnwLrp2DnXgyEFhnN9pPQ9poUD3LAPUHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:4e:23:92:54:9d:a1:3b:98:36:d7:94:c1:b0:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1792582aa0b18d6073592f121a6e563fec424672 Validity Not Before: Dec 14 11:00:56 2025 GMT Not After : Dec 15 11:00:56 2025 GMT Subject: CN=ef8b987ccf0f46462b353cfcd20215ebb12ed328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:84:7f:9f:4b:1c:fd:e5:f8:d6:4e:8e:7d:51: e3:91:b2:97:77:bb:da:7c:b3:a2:12:65:c0:e1:ea: b5:a4:a4:97:97:f6:c1:a4:f9:f0:a3:e2:41:0b:9a: 3f:90:08:7c:9f:d6:a6:26:97:c6:d1:ef:96:df:a0: d5:81:0d:d0:aa:f1:94:34:07:bf:d0:54:55:07:ed: 81:1d:1d:41:16:54:f1:28:23:1e:3c:6a:6d:70:b7: 42:63:ed:b9:54:34:7d:58:a8:a6:db:04:f4:cc:4e: dc:4c:cb:57:f5:07:a5:0f:26:37:c0:07:2f:4d:15: 44:e4:49:78:ce:07:2b:af:72:fc:6e:31:e6:86:c5: e6:17:30:5b:7d:0f:70:59:04:11:92:8f:f2:6f:33: ba:98:dd:f1:7d:d7:6a:d3:e5:f3:72:45:4a:86:13: 1b:9f:ea:d8:08:62:7a:cd:9b:ca:76:40:d9:43:16: 57:81:ff:0f:6c:07:58:4a:0a:28:83:fa:a9:c6:9c: f1:53:ff:51:51:ae:06:09:13:47:bd:49:1d:67:1f: 98:59:db:9c:66:ee:2f:24:68:bb:0f:f6:0f:4a:b4: f2:a6:b0:09:87:72:54:ab:c5:07:78:91:67:37:48: cf:76:f5:5c:e7:86:78:7a:86:c5:d9:1b:23:0d:ac: c8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8B:98:7C:CF:0F:46:46:2B:35:3C:FC:D2:02:15:EB:B1:2E:D3:28 X509v3 Authority Key Identifier: keyid:17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:c3:ce:09:5b:88:62:b7:2b:e3:df:ba:5d:23:af:57:12:e1: 7b:24:15:42:22:b9:32:8b:d6:e8:c6:bb:a4:be:2b:ea:74:76: 4a:c2:75:09:15:5c:44:70:f5:88:f9:58:75:18:a2:34:1e:e4: f0:37:53:4a:d5:c5:63:bd:71:8b:f6:ca:bf:03:03:2a:3a:d1: 2a:33:dc:cb:0a:25:27:40:80:cb:ef:06:29:75:8e:05:54:ba: 47:e7:7a:22:a7:27:f9:c3:88:97:d3:7a:2c:2c:e0:ea:96:10: d9:83:15:5b:f0:c0:12:f7:8e:5e:e2:16:58:ff:12:22:65:0f: ee:a5:e8:cd:01:8c:4a:71:2d:de:1b:34:c9:29:6d:7a:74:45: 30:87:28:d4:db:bd:61:c2:5b:fd:e7:22:56:5e:0d:e0:47:ec: 63:29:97:44:8d:38:4f:0f:bd:fc:13:7b:f7:40:96:cc:e0:01: b2:09:e3:0e:3c:24:51:fb:8f:6a:8e:c9:14:71:fc:6d:fd:28: ba:cb:16:92:f8:45:3c:8b:e5:4f:ac:c1:8a:0d:ef:4d:3c:ad: 3d:50:ae:af:b3:80:2f:84:be:66:2b:fa:4f:56:54:db:cd:3b: c8:a5:72:cb:07:ad:2d:af:dd:b9:89:34:3f:b8:28:08:44:5b: bf:18:24:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschU4jklSdoTuYNteUwbDVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTI1ODJhYTBiMThkNjA3MzU5MmYxMjFhNmU1NjNmZWM0 MjQ2NzIwHhcNMjUxMjE0MTEwMDU2WhcNMjUxMjE1MTEwMDU2WjAzMTEwLwYDVQQD EyhlZjhiOTg3Y2NmMGY0NjQ2MmIzNTNjZmNkMjAyMTVlYmIxMmVkMzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYR/n0sc/eX41k6OfVHjkbKXd7va fLOiEmXA4eq1pKSXl/bBpPnwo+JBC5o/kAh8n9amJpfG0e+W36DVgQ3QqvGUNAe/ 0FRVB+2BHR1BFlTxKCMePGptcLdCY+25VDR9WKim2wT0zE7cTMtX9QelDyY3wAcv TRVE5El4zgcrr3L8bjHmhsXmFzBbfQ9wWQQRko/ybzO6mN3xfddq0+XzckVKhhMb n+rYCGJ6zZvKdkDZQxZXgf8PbAdYSgoog/qpxpzxU/9RUa4GCRNHvUkdZx+YWduc Zu4vJGi7D/YPSrTyprAJh3JUq8UHeJFnN0jPdvVc54Z4eobF2RsjDazIbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+LmHzPD0ZGKzU8/NICFeuxLtMoMB8GA1UdIwQY MBaAFBeSWCqgsY1gc1kvEhpuVj/sQkZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVKWUtxQ3hqV0J6V1M4U0dtNVdQLXhDUm5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yZDM2MDctYmU1OC00YTA1LTlkNjgt ZTg0ZjNiNDkyN2FkLzEvRjVKWUtxQ3hqV0J6V1M4U0dtNVdQLXhDUm5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8yZDM2MDctYmU1OC00YTA1LTlkNjgtZTg0ZjNiNDkyN2Fk LzEvRjVKWUtxQ3hqV0J6V1M4U0dtNVdQLXhDUm5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArsPOCVuI Yrcr49+6XSOvVxLheyQVQiK5MovW6Ma7pL4r6nR2SsJ1CRVcRHD1iPlYdRiiNB7k 8DdTStXFY71xi/bKvwMDKjrRKjPcywolJ0CAy+8GKXWOBVS6R+d6Iqcn+cOIl9N6 LCzg6pYQ2YMVW/DAEveOXuIWWP8SImUP7qXozQGMSnEt3hs0ySltenRFMIco1Nu9 YcJb/eciVl4N4EfsYymXRI04Tw+9/BN790CWzOABsgnjDjwkUfuPao7JFHH8bf0o ussWkvhFPIvlT6zBig3vTTytPVCur7OAL4S+Ziv6T1ZU2807yKVyywetLa/duYk0 P7goCERbvxgkhA== -----END CERTIFICATE-----Generated at Sun Dec 14 16:28:38 2025 by rpki-client