This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft File: V5NTy0LgxPulyuJTpXaLwfJGW5k.mft (raw, json) Hash identifier: iytDJS0dEihNO3M0jORQsSvYMHSSSG5aWJHr2f/94vY= Subject key identifier: C5:AF:80:A2:C3:B4:BC:15:09:A6:DE:EC:76:3A:77:24:99:3F:39:29 Authority key identifier: 57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99 Certificate issuer: /CN=579353cb42e0c4fba5cae253a5768bc1f2465b99 Certificate serial: 019B101421CF84867DA6C4F9EB7D4A3E57B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft Manifest number: 11F6 Signing time: Fri 12 Dec 2025 01:01:53 +0000 Manifest this update: Fri 12 Dec 2025 01:01:53 +0000 Manifest next update: Sat 13 Dec 2025 01:01:53 +0000 Files and hashes: 1: D3QeUsU8Q-1bY74EwK2MA0No9Ew.roa (hash: N97kcfMNA4uFpsheDLzM7+Nl7AAF28L1BPIs41yYMZY=) 2: Q07EucI5XyAYo9s-A9qqwpcEGlA.roa (hash: VFWYrVVM3MpoRzNbOjii1yFOv4OAEiNvOV4MAp0ri4Y=) 3: V5NTy0LgxPulyuJTpXaLwfJGW5k.crl (hash: zotDuiwWEVB7fQbik6PLnNn3aY9h+aAy3RpexO1i1WQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:21:cf:84:86:7d:a6:c4:f9:eb:7d:4a:3e:57:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579353cb42e0c4fba5cae253a5768bc1f2465b99 Validity Not Before: Dec 12 01:01:53 2025 GMT Not After : Dec 13 01:01:53 2025 GMT Subject: CN=c5af80a2c3b4bc1509a6deec763a7724993f3929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0f:6e:78:c1:26:f0:d7:fb:34:b6:86:90:20: 51:b3:f6:25:5f:6b:09:23:70:f8:a0:70:33:2c:7b: 35:0a:9c:c0:e6:12:71:a9:a9:3a:f7:1e:53:63:c1: 96:fa:81:e6:54:b3:3f:e8:be:74:83:e1:73:83:57: ae:f9:64:9b:52:c2:2c:c1:93:fb:45:6c:0f:3e:58: 22:a9:18:87:8f:e1:0f:a7:66:83:b3:fb:f0:b1:e7: 5a:7f:c3:bb:2c:dc:64:ed:90:af:cc:3f:1e:08:c3: c4:3c:2b:64:80:39:f5:92:bd:c2:60:27:f5:74:d4: da:20:51:2c:47:87:80:8f:fa:ae:6a:14:c2:07:a4: 81:5f:49:a6:0b:a4:a8:12:3f:1d:f2:82:b9:32:74: f6:82:80:c4:be:48:86:29:bd:77:88:f8:97:7e:75: 6e:3c:b4:5d:c4:80:09:ad:3f:43:b1:d7:e3:f9:74: 70:6c:2f:15:7a:a5:30:a2:16:8a:af:f1:76:df:1e: 40:b0:27:4c:91:82:44:53:1f:cf:ab:62:6d:2a:1e: fe:50:31:a0:de:64:a0:d1:71:66:eb:2f:72:7b:cd: d9:60:fc:28:ba:17:7f:46:8e:93:37:a2:44:2f:08: 05:c9:a3:2d:61:ee:6e:b2:05:99:ac:41:ba:e6:ac: 00:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AF:80:A2:C3:B4:BC:15:09:A6:DE:EC:76:3A:77:24:99:3F:39:29 X509v3 Authority Key Identifier: keyid:57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:04:58:16:ee:36:89:58:a1:4e:df:10:82:1f:b2:31:1e:d4: da:e5:dc:66:7e:53:4e:cf:29:1f:34:a2:0a:7b:a3:d4:c6:d5: 1f:7f:a1:52:84:e7:20:01:35:09:df:91:36:f3:e3:a7:35:e4: 8e:29:42:75:f5:dc:cd:96:91:59:da:35:f6:e7:39:fe:96:96: 41:71:e6:d6:6b:15:4f:27:80:16:a4:60:0f:d3:53:dd:68:12: e3:5e:dd:a2:04:01:94:9e:49:e2:82:b1:e1:67:ba:32:d3:45: 58:8c:e5:4a:41:83:bb:a0:7c:5e:7b:d1:58:cf:20:0b:e4:2d: 30:c2:71:c7:fe:2c:1e:63:cb:fa:9d:ff:18:3f:d7:2b:e4:ea: 67:c7:43:10:f6:1f:4c:04:30:e2:47:0f:e5:d3:e0:36:ac:4d: 9f:d0:2d:92:71:9f:41:e8:33:56:5a:2b:2a:5e:a6:8f:bc:4e: 53:be:46:d0:0c:25:0f:e3:6d:5a:72:02:44:98:41:45:bf:4d: a3:fa:c9:4a:8a:57:c9:a7:80:82:7c:07:cb:c9:61:e9:01:1e: f3:f6:7f:c2:40:e9:c7:e0:6e:92:c2:d0:99:a2:b1:96:ac:00: 3e:29:58:51:c2:ae:d3:55:87:df:be:7a:b0:cd:0c:f0:5c:80: cd:9d:99:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFCHPhIZ9psT5631KPle5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3OTM1M2NiNDJlMGM0ZmJhNWNhZTI1M2E1NzY4YmMxZjI0 NjViOTkwHhcNMjUxMjEyMDEwMTUzWhcNMjUxMjEzMDEwMTUzWjAzMTEwLwYDVQQD EyhjNWFmODBhMmMzYjRiYzE1MDlhNmRlZWM3NjNhNzcyNDk5M2YzOTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA9ueMEm8Nf7NLaGkCBRs/YlX2sJ I3D4oHAzLHs1CpzA5hJxqak69x5TY8GW+oHmVLM/6L50g+Fzg1eu+WSbUsIswZP7 RWwPPlgiqRiHj+EPp2aDs/vwsedaf8O7LNxk7ZCvzD8eCMPEPCtkgDn1kr3CYCf1 dNTaIFEsR4eAj/quahTCB6SBX0mmC6SoEj8d8oK5MnT2goDEvkiGKb13iPiXfnVu PLRdxIAJrT9Dsdfj+XRwbC8VeqUwohaKr/F23x5AsCdMkYJEUx/Pq2JtKh7+UDGg 3mSg0XFm6y9ye83ZYPwouhd/Ro6TN6JELwgFyaMtYe5usgWZrEG65qwA+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWvgKLDtLwVCabe7HY6dySZPzkpMB8GA1UdIwQY MBaAFFeTU8tC4MT7pcriU6V2i8HyRluZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMmNjY2QtMDQzMy00MzMwLTk4MWMt YzY3MmQ2NzM2ODZmLzEvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8wMmNjY2QtMDQzMy00MzMwLTk4MWMtYzY3MmQ2NzM2ODZm LzEvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwRYFu42 iVihTt8Qgh+yMR7U2uXcZn5TTs8pHzSiCnuj1MbVH3+hUoTnIAE1Cd+RNvPjpzXk jilCdfXczZaRWdo19uc5/paWQXHm1msVTyeAFqRgD9NT3WgS417dogQBlJ5J4oKx 4We6MtNFWIzlSkGDu6B8XnvRWM8gC+QtMMJxx/4sHmPL+p3/GD/XK+TqZ8dDEPYf TAQw4kcP5dPgNqxNn9AtknGfQegzVlorKl6mj7xOU75G0AwlD+NtWnICRJhBRb9N o/rJSopXyaeAgnwHy8lh6QEe8/Z/wkDpx+BuksLQmaKxlqwAPilYUcKu01WH3756 sM0M8FyAzZ2Zyw== -----END CERTIFICATE-----Generated at Fri Dec 12 09:24:27 2025 by rpki-client