This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft File: p5zxDDHy7btVfVVAlzyIB5szIA8.mft (raw, json) Hash identifier: RPONiEq+wwmrP/GzdM1bylL950JCFplKA8/OB42IBKo= Subject key identifier: 86:80:D4:01:27:4B:DA:2F:36:D5:50:6D:98:33:6B:EF:08:32:14:D9 Authority key identifier: A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F Certificate issuer: /CN=a79cf10c31f2edbb557d5540973c88079b33200f Certificate serial: 019B48F04E8934721A94B2503FE5302094BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft Manifest number: 0D99 Signing time: Tue 23 Dec 2025 02:01:06 +0000 Manifest this update: Tue 23 Dec 2025 02:01:06 +0000 Manifest next update: Wed 24 Dec 2025 02:01:06 +0000 Files and hashes: 1: p5zxDDHy7btVfVVAlzyIB5szIA8.crl (hash: Wk+t+Fdp9g8gSM9ZtOrCb47uuDk/wLEbBB2nwS2ahyo=) 2: zJpHr_erZURy0iDQz1cu6aiMTKU.roa (hash: /PNFfBchr4xUi6f7D1PpkNqNULV5Ex2nOQGeMnKsHEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 02:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:4e:89:34:72:1a:94:b2:50:3f:e5:30:20:94:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79cf10c31f2edbb557d5540973c88079b33200f Validity Not Before: Dec 23 02:01:06 2025 GMT Not After : Dec 24 02:01:06 2025 GMT Subject: CN=8680d401274bda2f36d5506d98336bef083214d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:64:59:a0:25:93:3a:50:10:2f:0e:73:94:ed: 38:87:33:a3:a0:26:b2:39:ba:20:0f:03:75:9f:98: a1:cd:c7:a7:a6:a2:ef:66:77:34:d3:26:5a:b7:4e: 42:76:38:77:89:69:6e:cc:7d:a2:d6:ba:6b:88:c1: da:9c:30:20:82:91:21:a3:e8:e6:3b:db:5f:9f:94: 8d:86:60:ca:5b:34:37:f9:81:d5:c8:11:f4:08:75: c3:5f:d3:fb:93:d7:14:aa:14:d1:51:cc:9c:01:d8: 5e:76:a0:10:62:0b:f6:d2:c3:af:d5:62:97:26:a0: 20:f6:f6:33:3a:d8:2c:58:6d:6b:e5:96:34:cf:d8: 89:50:c8:bd:f3:37:b5:4c:a2:07:01:23:3a:2f:60: de:ef:29:6d:5e:a4:f2:f4:74:11:1e:b1:d4:2a:e8: b4:76:a2:57:bc:cf:48:be:49:74:d7:67:e6:ac:f4: 2c:97:08:84:db:92:e0:f3:0f:e2:33:83:35:bf:c7: 55:eb:bd:0c:7a:d7:84:c6:d1:ab:14:1e:76:8e:28: 10:08:e4:93:8e:47:70:13:4f:01:5d:2c:61:47:b9: 4a:da:20:07:bf:e0:72:45:be:1b:92:f3:d0:7d:ba: 09:6a:95:18:93:77:bd:e3:c6:cb:90:3f:7e:d0:c6: 39:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:80:D4:01:27:4B:DA:2F:36:D5:50:6D:98:33:6B:EF:08:32:14:D9 X509v3 Authority Key Identifier: keyid:A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ef:ae:7c:f6:38:56:e7:08:35:ed:0f:e3:e6:29:fe:87:91: 31:b8:88:c9:e0:93:eb:61:25:b6:5e:d9:c5:6d:d8:90:5f:f1: be:b3:ca:19:3a:34:53:d3:66:d0:14:d1:ef:bd:69:5f:76:0d: 27:ad:49:e0:56:e5:dd:00:be:1d:7e:32:2d:ba:e4:94:e5:80: 62:fe:74:e7:9e:4b:3f:ff:57:60:14:0b:17:4e:2e:45:fb:54: 99:38:05:f4:ea:5c:ed:cb:ab:5e:d0:cd:33:e1:90:cb:53:06: bc:3f:2f:dd:ca:38:a6:99:c7:af:a8:c8:a0:24:db:05:fb:de: 73:04:4d:55:75:dd:c5:a1:d2:40:df:e4:7d:91:0f:dd:7f:7b: fa:a4:b9:a9:cd:5b:c0:43:47:62:c2:43:ba:f3:7e:8d:aa:64: 4b:50:61:06:63:ac:72:8a:28:ce:52:78:9b:28:c8:60:d4:e9: c6:4b:76:c7:5a:82:5f:e3:06:37:23:ec:b0:35:af:ef:ae:c4: 40:ae:18:c4:af:fe:4d:7b:8c:da:6a:b5:07:f4:17:7b:dd:e5: b0:ce:09:ba:07:2f:5d:ce:de:04:1a:eb:bf:d6:09:b6:a7:d0: a6:13:47:48:1c:59:ef:b7:1b:b5:ef:83:6c:01:97:fb:73:94: 28:e0:09:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8E6JNHIalLJQP+UwIJS/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OWNmMTBjMzFmMmVkYmI1NTdkNTU0MDk3M2M4ODA3OWIz MzIwMGYwHhcNMjUxMjIzMDIwMTA2WhcNMjUxMjI0MDIwMTA2WjAzMTEwLwYDVQQD Eyg4NjgwZDQwMTI3NGJkYTJmMzZkNTUwNmQ5ODMzNmJlZjA4MzIxNGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumRZoCWTOlAQLw5zlO04hzOjoCay ObogDwN1n5ihzcenpqLvZnc00yZat05Cdjh3iWluzH2i1rpriMHanDAggpEho+jm O9tfn5SNhmDKWzQ3+YHVyBH0CHXDX9P7k9cUqhTRUcycAdhedqAQYgv20sOv1WKX JqAg9vYzOtgsWG1r5ZY0z9iJUMi98ze1TKIHASM6L2De7yltXqTy9HQRHrHUKui0 dqJXvM9Ivkl012fmrPQslwiE25Lg8w/iM4M1v8dV670MeteExtGrFB52jigQCOST jkdwE08BXSxhR7lK2iAHv+ByRb4bkvPQfboJapUYk3e948bLkD9+0MY5UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaA1AEnS9ovNtVQbZgza+8IMhTZMB8GA1UdIwQY MBaAFKec8Qwx8u27VX1VQJc8iAebMyAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDV6eERESHk3YnRWZlZWQWx6eUlCNXN6SUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yNjliZTktOTNmZi00YzEyLTkxYmEt MWE5YjE1NTUxMzZhLzEvcDV6eERESHk3YnRWZlZWQWx6eUlCNXN6SUE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8yNjliZTktOTNmZi00YzEyLTkxYmEtMWE5YjE1NTUxMzZh LzEvcDV6eERESHk3YnRWZlZWQWx6eUlCNXN6SUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABe+ufPY4 VucINe0P4+Yp/oeRMbiIyeCT62Eltl7ZxW3YkF/xvrPKGTo0U9Nm0BTR771pX3YN J61J4Fbl3QC+HX4yLbrklOWAYv50555LP/9XYBQLF04uRftUmTgF9Opc7curXtDN M+GQy1MGvD8v3co4ppnHr6jIoCTbBfvecwRNVXXdxaHSQN/kfZEP3X97+qS5qc1b wENHYsJDuvN+japkS1BhBmOscooozlJ4myjIYNTpxkt2x1qCX+MGNyPssDWv767E QK4YxK/+TXuM2mq1B/QXe93lsM4JugcvXc7eBBrrv9YJtqfQphNHSBxZ77cbte+D bAGX+3OUKOAJVQ== -----END CERTIFICATE-----Generated at Tue Dec 23 10:59:49 2025 by rpki-client