This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft File: 05SToXmX0x6NWqbMyaa9dX8VwDA.mft (raw, json) Hash identifier: ZADGtL/YVwY5sLN8gTEvgc9/FLQo8y8+r2xcShM06F8= Subject key identifier: F9:31:3C:79:01:AC:6D:D3:25:6E:3D:AA:DD:07:B0:E3:09:AC:97:CB Authority key identifier: D3:94:93:A1:79:97:D3:1E:8D:5A:A6:CC:C9:A6:BD:75:7F:15:C0:30 Certificate issuer: /CN=d39493a17997d31e8d5aa6ccc9a6bd757f15c030 Certificate serial: 019B06A25965B85BC84CAEED32DED6EDF40C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft Manifest number: 176E Signing time: Wed 10 Dec 2025 05:01:01 +0000 Manifest this update: Wed 10 Dec 2025 05:01:01 +0000 Manifest next update: Thu 11 Dec 2025 05:01:01 +0000 Files and hashes: 1: 05SToXmX0x6NWqbMyaa9dX8VwDA.crl (hash: vVrDiGC9S4/bHzWBmO/Ibg7xBtubGtuYzm3uwGVoy9c=) 2: q-MJPgpoCVNAGtgvIouNXgLENzk.roa (hash: BsC2KZYLnHn1uQcqBwkrRXQi/zA43li7q/QWJIEDjzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:a2:59:65:b8:5b:c8:4c:ae:ed:32:de:d6:ed:f4:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d39493a17997d31e8d5aa6ccc9a6bd757f15c030 Validity Not Before: Dec 10 05:01:01 2025 GMT Not After : Dec 11 05:01:01 2025 GMT Subject: CN=f9313c7901ac6dd3256e3daadd07b0e309ac97cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:00:a7:8c:e9:99:18:5b:7a:5d:00:8c:eb:cf: d7:54:cc:db:8f:50:50:81:ff:6a:0c:6a:98:00:a1: 49:6c:5d:e2:4b:46:03:5d:45:c0:80:02:e3:ed:2e: 4c:c7:e6:5f:96:d9:96:3e:6d:11:fa:1c:d3:ef:b3: ce:0d:1c:4b:32:a6:62:59:23:e9:0b:5a:39:46:22: bc:8d:5b:35:67:d5:24:89:5e:bc:58:14:15:bf:ab: 34:60:90:0f:f9:9d:bd:88:fd:99:fc:a4:30:cc:33: a6:09:75:06:88:b5:8c:5a:87:6c:68:a5:ee:1e:4c: 37:f1:07:35:0c:46:2a:03:da:6d:17:b3:74:56:4b: 8a:0d:69:56:80:e9:51:e2:db:24:ff:67:e8:1d:0e: 57:68:12:76:51:35:18:59:c4:d6:fc:b2:57:d5:0f: d0:95:0d:d6:9f:86:32:78:2c:79:9d:45:cd:8c:05: 4a:89:45:a1:4c:54:0f:4d:a7:7c:63:e2:0c:7c:a5: f5:a1:b8:72:66:d3:20:c3:b8:7f:a6:f9:33:0a:ca: 9e:64:d1:23:7f:50:97:76:5d:5f:42:50:8c:fe:b2: 85:0c:c2:0d:05:84:e2:f7:7e:80:e7:e7:62:f3:55: 10:74:d2:19:1f:d1:b4:50:92:e2:8a:bd:ff:74:8f: 23:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:31:3C:79:01:AC:6D:D3:25:6E:3D:AA:DD:07:B0:E3:09:AC:97:CB X509v3 Authority Key Identifier: keyid:D3:94:93:A1:79:97:D3:1E:8D:5A:A6:CC:C9:A6:BD:75:7F:15:C0:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:e0:04:54:83:ff:aa:f0:17:8f:71:e1:cd:5e:b4:1f:6a:79: be:0d:62:d8:f3:e2:bf:ab:6c:de:be:95:8a:9e:36:32:42:96: f6:44:63:65:40:8e:9b:17:66:19:f5:cf:38:e7:55:6b:ab:16: b9:07:98:f5:2a:12:8e:1f:33:e4:4b:4f:78:a2:2b:f4:a4:59: 33:13:d3:57:bb:f6:fd:7b:7d:44:0b:2c:ae:86:a9:36:f7:71: 61:bb:9c:67:a5:c1:5e:37:4b:7f:f5:6f:ca:18:51:a5:42:51: 53:f8:32:ad:c1:4a:f8:a8:3e:3d:7e:1c:26:da:9a:54:c8:ce: db:fd:51:24:0c:c2:54:40:8a:37:d7:ae:ac:08:2f:bf:81:3f: e6:96:58:fd:dd:22:85:75:bd:ad:c8:58:ad:26:66:dd:06:6c: 58:c4:44:3f:03:56:5d:dd:45:28:de:03:30:1e:94:56:c2:39: 98:d0:da:ca:e2:2c:5f:52:51:6a:8f:0d:56:19:63:f1:3f:89: 52:d9:c6:a1:7d:07:c1:15:80:3b:30:99:fd:4c:60:e1:e3:ac: 35:c5:fb:a1:3c:c8:f1:f8:dc:05:ad:a6:3d:42:0a:fd:6a:dc: ab:80:de:c5:3c:60:07:fd:f7:c0:bd:fc:ad:39:d4:77:b8:5b: 64:8f:b7:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGollluFvITK7tMt7W7fQMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzOTQ5M2ExNzk5N2QzMWU4ZDVhYTZjY2M5YTZiZDc1N2Yx NWMwMzAwHhcNMjUxMjEwMDUwMTAxWhcNMjUxMjExMDUwMTAxWjAzMTEwLwYDVQQD EyhmOTMxM2M3OTAxYWM2ZGQzMjU2ZTNkYWFkZDA3YjBlMzA5YWM5N2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQCnjOmZGFt6XQCM68/XVMzbj1BQ gf9qDGqYAKFJbF3iS0YDXUXAgALj7S5Mx+ZfltmWPm0R+hzT77PODRxLMqZiWSPp C1o5RiK8jVs1Z9UkiV68WBQVv6s0YJAP+Z29iP2Z/KQwzDOmCXUGiLWMWodsaKXu Hkw38Qc1DEYqA9ptF7N0VkuKDWlWgOlR4tsk/2foHQ5XaBJ2UTUYWcTW/LJX1Q/Q lQ3Wn4YyeCx5nUXNjAVKiUWhTFQPTad8Y+IMfKX1obhyZtMgw7h/pvkzCsqeZNEj f1CXdl1fQlCM/rKFDMINBYTi936A5+di81UQdNIZH9G0UJLiir3/dI8j8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkxPHkBrG3TJW49qt0HsOMJrJfLMB8GA1UdIwQY MBaAFNOUk6F5l9MejVqmzMmmvXV/FcAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDVTVG9YbVgweDZOV3FiTXlhYTlkWDhWd0RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lODA0ZTQtN2YzMC00MDQ5LTk0OGIt OTc5MjMyOTdjZGE3LzEvMDVTVG9YbVgweDZOV3FiTXlhYTlkWDhWd0RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lODA0ZTQtN2YzMC00MDQ5LTk0OGItOTc5MjMyOTdjZGE3 LzEvMDVTVG9YbVgweDZOV3FiTXlhYTlkWDhWd0RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaOAEVIP/ qvAXj3HhzV60H2p5vg1i2PPiv6ts3r6Vip42MkKW9kRjZUCOmxdmGfXPOOdVa6sW uQeY9SoSjh8z5EtPeKIr9KRZMxPTV7v2/Xt9RAssroapNvdxYbucZ6XBXjdLf/Vv yhhRpUJRU/gyrcFK+Kg+PX4cJtqaVMjO2/1RJAzCVECKN9eurAgvv4E/5pZY/d0i hXW9rchYrSZm3QZsWMREPwNWXd1FKN4DMB6UVsI5mNDayuIsX1JRao8NVhlj8T+J UtnGoX0HwRWAOzCZ/Uxg4eOsNcX7oTzI8fjcBa2mPUIK/Wrcq4DexTxgB/33wL38 rTnUd7hbZI+3Dw== -----END CERTIFICATE-----Generated at Wed Dec 10 11:16:36 2025 by rpki-client