This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft File: p5zxDDHy7btVfVVAlzyIB5szIA8.mft (raw, json) Hash identifier: 1hknv4SE+qeeQWbFGX6PGjSzZf7kecHgUSCDcmUhFgk= Subject key identifier: 2B:56:2C:31:3C:3E:C6:7C:B2:BE:FA:59:76:B3:D2:28:DF:F2:6C:53 Authority key identifier: A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F Certificate issuer: /CN=a79cf10c31f2edbb557d5540973c88079b33200f Certificate serial: 019B0F00B5E4ECCF60CCEAC6E305FF6CE723 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft Manifest number: 0D7B Signing time: Thu 11 Dec 2025 20:01:03 +0000 Manifest this update: Thu 11 Dec 2025 20:01:03 +0000 Manifest next update: Fri 12 Dec 2025 20:01:03 +0000 Files and hashes: 1: p5zxDDHy7btVfVVAlzyIB5szIA8.crl (hash: CKr0BIEcFd/gSU6pBXlPcCHFc7l0GZMJ6N6QewhF6m0=) 2: zJpHr_erZURy0iDQz1cu6aiMTKU.roa (hash: /PNFfBchr4xUi6f7D1PpkNqNULV5Ex2nOQGeMnKsHEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:b5:e4:ec:cf:60:cc:ea:c6:e3:05:ff:6c:e7:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79cf10c31f2edbb557d5540973c88079b33200f Validity Not Before: Dec 11 20:01:03 2025 GMT Not After : Dec 12 20:01:03 2025 GMT Subject: CN=2b562c313c3ec67cb2befa5976b3d228dff26c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4d:4c:5f:ce:18:05:8a:7d:cb:9e:bc:99:ad: 4d:4c:8b:33:3b:a9:cd:4a:64:47:0c:0d:95:ab:e2: 84:cb:7d:6e:10:d8:66:8c:96:65:91:9f:6c:e7:9e: 92:53:9b:85:62:22:33:2e:e5:a8:2b:31:8c:64:fc: e2:9a:1e:d2:ab:79:3a:0f:a4:24:82:48:2f:18:13: 64:60:46:8e:19:49:fd:f3:8b:70:b6:39:43:27:36: 53:77:26:9b:07:3e:16:4e:19:bb:70:58:c1:01:c5: c0:bb:b2:d0:37:a2:a5:6f:5a:c9:2f:4a:b7:57:82: d8:d6:c3:3b:4c:da:0c:85:8e:a9:77:54:da:8b:0f: e9:1f:74:6d:a9:71:16:4d:c4:2c:4a:eb:9e:6e:47: 47:06:4b:81:72:f3:66:a5:d0:ac:70:ad:74:04:b3: 22:2d:71:0a:e2:de:d6:d8:c5:92:1a:79:7b:84:0b: e1:db:72:e9:6d:20:48:87:c7:09:93:54:87:6a:50: 13:f7:f6:96:e6:7e:4d:36:64:53:d4:92:e4:9b:86: ce:6f:ad:60:25:80:2b:15:e4:a9:19:e5:00:61:5a: 4d:ef:9c:7f:e3:f7:3a:81:dd:53:6f:fb:4d:1d:b8: 24:16:9c:79:89:33:26:7e:55:dc:5b:a7:22:1f:e8: 78:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:56:2C:31:3C:3E:C6:7C:B2:BE:FA:59:76:B3:D2:28:DF:F2:6C:53 X509v3 Authority Key Identifier: keyid:A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f3:d4:d2:09:b0:89:0e:32:f4:fc:a8:59:14:5a:64:61:eb: d7:c7:0b:86:2e:dc:eb:68:ca:93:e8:7f:1e:f6:27:9c:79:0f: 1e:2c:06:46:ba:cc:97:75:0a:ef:cd:17:f8:71:14:4c:25:de: a5:c2:af:06:a5:f1:61:c8:ab:bf:e5:95:47:fd:ca:e3:b1:26: 8d:38:05:99:ae:04:d6:0f:0d:bc:16:cc:43:33:6f:6f:20:45: e6:04:9e:dd:fa:be:c1:32:37:f8:c9:b1:18:e7:be:1a:db:5e: a7:29:b1:11:e0:87:f5:95:ad:aa:ea:56:a0:6b:89:62:86:65: 44:23:09:7f:7a:ec:eb:5d:cd:16:71:5d:2a:97:5d:df:a6:1a: c3:67:5a:62:05:da:9e:0c:46:d4:e9:74:7e:46:91:a9:e1:58: 87:5f:74:d8:f1:86:b7:53:8c:c9:d7:50:f1:e0:b4:04:57:7b: e8:e2:ec:a2:5b:8e:16:f1:4b:2e:f1:02:24:62:db:75:e5:9e: 53:ea:a4:f6:a1:e4:4a:9d:5e:47:fc:2a:b7:dd:40:3f:55:69: 32:23:0d:19:ac:a5:f9:18:03:39:35:53:81:ee:80:2e:bc:63: 81:fe:41:4d:af:64:ad:30:ee:cd:31:9b:5a:2a:65:0c:d0:47: ba:99:a4:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPALXk7M9gzOrG4wX/bOcjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OWNmMTBjMzFmMmVkYmI1NTdkNTU0MDk3M2M4ODA3OWIz MzIwMGYwHhcNMjUxMjExMjAwMTAzWhcNMjUxMjEyMjAwMTAzWjAzMTEwLwYDVQQD EygyYjU2MmMzMTNjM2VjNjdjYjJiZWZhNTk3NmIzZDIyOGRmZjI2YzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE1MX84YBYp9y568ma1NTIszO6nN SmRHDA2Vq+KEy31uENhmjJZlkZ9s556SU5uFYiIzLuWoKzGMZPzimh7Sq3k6D6Qk gkgvGBNkYEaOGUn984twtjlDJzZTdyabBz4WThm7cFjBAcXAu7LQN6Klb1rJL0q3 V4LY1sM7TNoMhY6pd1Taiw/pH3RtqXEWTcQsSuuebkdHBkuBcvNmpdCscK10BLMi LXEK4t7W2MWSGnl7hAvh23LpbSBIh8cJk1SHalAT9/aW5n5NNmRT1JLkm4bOb61g JYArFeSpGeUAYVpN75x/4/c6gd1Tb/tNHbgkFpx5iTMmflXcW6ciH+h4wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtWLDE8PsZ8sr76WXaz0ijf8mxTMB8GA1UdIwQY MBaAFKec8Qwx8u27VX1VQJc8iAebMyAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDV6eERESHk3YnRWZlZWQWx6eUlCNXN6SUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yNjliZTktOTNmZi00YzEyLTkxYmEt MWE5YjE1NTUxMzZhLzEvcDV6eERESHk3YnRWZlZWQWx6eUlCNXN6SUE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8yNjliZTktOTNmZi00YzEyLTkxYmEtMWE5YjE1NTUxMzZh LzEvcDV6eERESHk3YnRWZlZWQWx6eUlCNXN6SUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvPU0gmw iQ4y9PyoWRRaZGHr18cLhi7c62jKk+h/HvYnnHkPHiwGRrrMl3UK780X+HEUTCXe pcKvBqXxYcirv+WVR/3K47EmjTgFma4E1g8NvBbMQzNvbyBF5gSe3fq+wTI3+Mmx GOe+GttepymxEeCH9ZWtqupWoGuJYoZlRCMJf3rs613NFnFdKpdd36Yaw2daYgXa ngxG1Ol0fkaRqeFYh1902PGGt1OMyddQ8eC0BFd76OLsoluOFvFLLvECJGLbdeWe U+qk9qHkSp1eR/wqt91AP1VpMiMNGayl+RgDOTVTge6ALrxjgf5BTa9krTDuzTGb WiplDNBHupmk7w== -----END CERTIFICATE-----Generated at Fri Dec 12 04:03:55 2025 by rpki-client