This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft File: B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft (raw, json) Hash identifier: +0OAOwvRRPLRu62JAWcL5zoMmIg5ENXydcNCQ5U0iO4= Subject key identifier: F1:8D:96:4B:05:44:5D:F1:68:61:17:59:54:0C:83:C6:E3:30:89:82 Authority key identifier: 07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38 Certificate issuer: /CN=079889d9de4f07014beb2c0a312cd73652a3fc38 Certificate serial: 019B5A51C4AA589DFE563C0C9AD3C533D182 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 11:01:06 +0000 Manifest this update: Fri 26 Dec 2025 11:01:06 +0000 Manifest next update: Sat 27 Dec 2025 11:01:06 +0000 Files and hashes: 1: B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl (hash: tVjmmWaEdsNAVa4Q/nL07l3OOgDCfsAaRLkZgieBDDI=) 2: NU7LpjX_c-YRDnvo18YVHXBujbY.roa (hash: odut5lYelTDd0ROdgEZa5uhbKyC1bMMR57mT+YqgUgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:c4:aa:58:9d:fe:56:3c:0c:9a:d3:c5:33:d1:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=079889d9de4f07014beb2c0a312cd73652a3fc38 Validity Not Before: Dec 26 11:01:06 2025 GMT Not After : Dec 27 11:01:06 2025 GMT Subject: CN=f18d964b05445df168611759540c83c6e3308982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:72:12:80:0b:e1:2c:23:3a:da:5e:97:8b:59: 07:2e:84:b7:5f:36:08:3f:27:7b:c6:67:9a:1e:40: 14:c0:c6:49:4d:b3:61:05:69:90:6a:86:90:00:c7: 2e:df:a1:88:bb:d5:da:f4:b9:fb:76:e2:6a:a1:a9: 2f:23:40:93:99:cb:30:d5:da:e2:76:03:43:d5:6d: 8d:c4:38:f5:d5:cf:e0:c6:8c:ec:5a:de:06:f8:52: 92:a8:eb:ca:04:7d:79:19:8a:e7:45:62:5d:99:92: 65:1f:7a:50:f0:45:9b:0f:16:03:c6:ed:bf:de:f8: 99:5e:94:4e:6b:02:94:74:70:04:35:17:c8:19:76: 23:6b:1a:19:37:0a:7f:39:1a:f4:12:b8:c1:58:f9: 29:35:e7:eb:73:3f:2d:95:ed:bb:28:84:7b:2d:24: 9c:a8:96:c6:de:15:bf:3f:45:7e:53:75:9d:e6:7a: 5c:eb:db:ab:0a:a4:d1:62:9f:0e:1e:9f:a9:e4:3f: e0:e4:62:a8:63:91:be:49:95:af:6a:e2:05:4a:2e: 7a:57:59:2e:e5:33:1d:fa:e1:b1:64:9c:1b:2c:0f: e8:2e:44:69:3f:59:0e:45:fc:88:18:56:92:6e:5f: af:cd:a2:57:91:65:b2:2f:5d:75:3c:a7:d4:78:a1: d0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8D:96:4B:05:44:5D:F1:68:61:17:59:54:0C:83:C6:E3:30:89:82 X509v3 Authority Key Identifier: keyid:07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:2e:dd:94:ed:ac:29:91:0a:53:c0:96:76:76:47:16:39:9b: 2a:bc:2e:53:c5:de:f5:36:ab:f6:71:cf:fd:e7:56:b1:2e:59: 89:d9:18:ee:8f:3f:b8:71:1b:81:02:49:54:9e:87:a4:88:b4: c0:9e:16:99:5a:37:84:12:a8:f6:93:f5:f9:10:98:0a:9a:39: f9:89:da:4b:2f:78:6f:d2:36:03:a6:ec:9a:f3:b8:d0:d1:b2: 12:3e:f8:c8:c6:cb:73:e6:5c:95:7d:8d:c9:fa:18:93:0d:84: 10:77:a4:b9:ec:e5:eb:c0:ef:d6:bb:97:a3:0a:79:47:fe:8b: 91:d5:c5:be:f8:ec:17:90:f2:d7:64:f7:b9:07:8d:19:69:e5: 3c:b0:f7:f0:d4:ff:17:a1:40:8d:1d:bf:1f:09:0a:38:60:9c: 4c:8f:77:01:76:2b:f2:91:5d:f8:a7:dd:97:32:b4:70:bc:8c: 60:7b:49:6e:7b:17:12:de:21:33:4a:24:b4:c8:48:69:c9:e7: 98:b7:9b:5c:a3:87:a7:39:f9:85:f7:54:95:22:b8:1b:a6:0d: 10:6a:a0:20:08:5b:64:68:9c:35:17:21:fb:7b:3e:ac:fc:e6: 19:2b:d4:ed:47:df:05:7e:b0:cd:09:2c:b3:5b:51:10:74:da: 43:b2:44:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUcSqWJ3+VjwMmtPFM9GCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OTg4OWQ5ZGU0ZjA3MDE0YmViMmMwYTMxMmNkNzM2NTJh M2ZjMzgwHhcNMjUxMjI2MTEwMTA2WhcNMjUxMjI3MTEwMTA2WjAzMTEwLwYDVQQD EyhmMThkOTY0YjA1NDQ1ZGYxNjg2MTE3NTk1NDBjODNjNmUzMzA4OTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznISgAvhLCM62l6Xi1kHLoS3XzYI Pyd7xmeaHkAUwMZJTbNhBWmQaoaQAMcu36GIu9Xa9Ln7duJqoakvI0CTmcsw1dri dgND1W2NxDj11c/gxozsWt4G+FKSqOvKBH15GYrnRWJdmZJlH3pQ8EWbDxYDxu2/ 3viZXpROawKUdHAENRfIGXYjaxoZNwp/ORr0ErjBWPkpNefrcz8tle27KIR7LSSc qJbG3hW/P0V+U3Wd5npc69urCqTRYp8OHp+p5D/g5GKoY5G+SZWvauIFSi56V1ku 5TMd+uGxZJwbLA/oLkRpP1kORfyIGFaSbl+vzaJXkWWyL111PKfUeKHQZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGNlksFRF3xaGEXWVQMg8bjMImCMB8GA1UdIwQY MBaAFAeYidneTwcBS+ssCjEs1zZSo/w4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjVpSjJkNVBCd0ZMNnl3S01TelhObEtqX0RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9kZDM5NDAtZmZkNi00YjY5LTlmMDEt ZmQ4ZDI1YTI2M2QyLzEvQjVpSjJkNVBCd0ZMNnl3S01TelhObEtqX0RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9kZDM5NDAtZmZkNi00YjY5LTlmMDEtZmQ4ZDI1YTI2M2Qy LzEvQjVpSjJkNVBCd0ZMNnl3S01TelhObEtqX0RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADS7dlO2s KZEKU8CWdnZHFjmbKrwuU8Xe9Tar9nHP/edWsS5ZidkY7o8/uHEbgQJJVJ6HpIi0 wJ4WmVo3hBKo9pP1+RCYCpo5+YnaSy94b9I2A6bsmvO40NGyEj74yMbLc+ZclX2N yfoYkw2EEHekuezl68Dv1ruXowp5R/6LkdXFvvjsF5Dy12T3uQeNGWnlPLD38NT/ F6FAjR2/HwkKOGCcTI93AXYr8pFd+KfdlzK0cLyMYHtJbnsXEt4hM0oktMhIacnn mLebXKOHpzn5hfdUlSK4G6YNEGqgIAhbZGicNRch+3s+rPzmGSvU7UffBX6wzQks s1tREHTaQ7JElg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:49 2025 by rpki-client