This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft File: V5NTy0LgxPulyuJTpXaLwfJGW5k.mft (raw, json) Hash identifier: CNRrOY7ZQF0gDG+YWwcMA/4sibU4/AQyGZzOr8CMkg4= Subject key identifier: 05:77:0F:3C:A6:5A:12:23:51:26:E9:6B:9C:96:5F:C7:EA:50:C8:8E Authority key identifier: 57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99 Certificate issuer: /CN=579353cb42e0c4fba5cae253a5768bc1f2465b99 Certificate serial: 019B2174F7962AA08736B72B08A6DE76C853 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft Manifest number: 11FF Signing time: Mon 15 Dec 2025 10:01:12 +0000 Manifest this update: Mon 15 Dec 2025 10:01:12 +0000 Manifest next update: Tue 16 Dec 2025 10:01:12 +0000 Files and hashes: 1: D3QeUsU8Q-1bY74EwK2MA0No9Ew.roa (hash: N97kcfMNA4uFpsheDLzM7+Nl7AAF28L1BPIs41yYMZY=) 2: Q07EucI5XyAYo9s-A9qqwpcEGlA.roa (hash: VFWYrVVM3MpoRzNbOjii1yFOv4OAEiNvOV4MAp0ri4Y=) 3: V5NTy0LgxPulyuJTpXaLwfJGW5k.crl (hash: BO+obLG56MRiJ88C75htQOECHGLTsQ2RTLqXofto0g8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:f7:96:2a:a0:87:36:b7:2b:08:a6:de:76:c8:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579353cb42e0c4fba5cae253a5768bc1f2465b99 Validity Not Before: Dec 15 10:01:12 2025 GMT Not After : Dec 16 10:01:12 2025 GMT Subject: CN=05770f3ca65a12235126e96b9c965fc7ea50c88e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:30:53:ef:e8:63:b1:77:53:48:4d:eb:0d:5c: fc:d4:31:fe:bd:bc:c2:fd:bd:1c:3a:c2:3c:cd:58: a0:34:b5:98:47:b6:84:52:05:a1:70:38:d8:b2:18: 44:6c:56:67:01:d3:2f:7f:79:e9:8f:df:b3:2b:79: a1:5f:af:3b:8b:f9:3c:82:0f:62:b1:df:1d:28:6b: 16:c8:7a:c2:c5:5c:41:31:3a:a9:2b:d4:03:b7:20: 2b:6e:c7:29:1e:94:3d:c9:65:ca:43:98:eb:4f:89: 6a:c8:e8:4c:82:37:a2:2c:ef:26:e4:b1:2c:1f:39: 53:d5:c9:38:b2:fd:ed:09:22:d5:4d:48:db:00:97: 10:79:23:fd:b3:7c:c2:32:bc:9e:dd:ca:f3:7e:56: ae:b4:0c:21:59:00:cb:42:25:03:44:c5:31:a8:f3: b5:c5:0a:bb:f6:c1:3b:94:a1:50:28:f3:c9:cc:35: 60:70:2d:02:aa:44:b3:6e:28:ae:b3:6f:ca:3c:c1: 00:47:91:4a:65:d2:0f:70:ad:b0:20:e3:1a:f8:fa: 55:85:a1:6b:de:af:54:97:fe:00:32:63:1e:b1:5f: 88:e7:bd:2f:89:7b:3b:b7:90:d3:6f:a2:5f:8d:00: 20:ef:f4:51:07:bd:d5:2b:cc:3d:05:25:e3:c8:cb: e7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:77:0F:3C:A6:5A:12:23:51:26:E9:6B:9C:96:5F:C7:EA:50:C8:8E X509v3 Authority Key Identifier: keyid:57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:b5:52:23:79:9c:29:15:64:de:ad:cf:c7:97:55:40:9e:4d: b1:7a:70:60:42:d2:69:20:57:0d:5e:c4:f9:6d:bc:2b:27:71: 5e:dd:fa:32:b8:02:b7:45:05:29:52:dd:5e:1d:83:91:92:7d: 8e:7d:68:95:da:1d:62:26:71:28:16:d4:26:67:6e:ad:bd:38: 1a:c6:91:90:32:d2:36:de:62:f3:df:87:1d:d4:f1:12:27:bd: f8:4f:01:d5:80:71:d4:64:db:1f:8c:20:07:c5:30:0e:c3:3c: 1f:fc:72:8b:89:f6:8a:83:94:e4:eb:a9:93:25:ea:4d:88:0c: e3:43:a7:3a:7f:33:2e:6b:e1:cb:ad:a2:4e:04:18:ac:aa:95: 5a:c5:53:5c:73:c3:fe:a0:c8:db:f0:65:4c:76:e0:6f:1b:c5: 12:df:6a:d1:e3:ed:c4:a9:5d:3c:27:99:da:6a:5e:91:53:1b: c3:da:5c:ed:3a:6e:00:eb:42:57:45:14:fa:34:35:e4:58:28: 90:af:c6:93:fd:0a:c9:30:d8:41:87:1a:4c:68:42:ab:d6:fa: 5e:1f:da:5b:57:6b:8e:83:83:8d:93:52:21:85:c5:d9:49:78: 2e:1e:16:63:6c:fc:42:7e:57:e0:17:4c:4a:1c:a2:7a:a6:ad: d2:8c:b3:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdPeWKqCHNrcrCKbedshTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3OTM1M2NiNDJlMGM0ZmJhNWNhZTI1M2E1NzY4YmMxZjI0 NjViOTkwHhcNMjUxMjE1MTAwMTEyWhcNMjUxMjE2MTAwMTEyWjAzMTEwLwYDVQQD EygwNTc3MGYzY2E2NWExMjIzNTEyNmU5NmI5Yzk2NWZjN2VhNTBjODhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDBT7+hjsXdTSE3rDVz81DH+vbzC /b0cOsI8zVigNLWYR7aEUgWhcDjYshhEbFZnAdMvf3npj9+zK3mhX687i/k8gg9i sd8dKGsWyHrCxVxBMTqpK9QDtyArbscpHpQ9yWXKQ5jrT4lqyOhMgjeiLO8m5LEs HzlT1ck4sv3tCSLVTUjbAJcQeSP9s3zCMrye3crzflautAwhWQDLQiUDRMUxqPO1 xQq79sE7lKFQKPPJzDVgcC0CqkSzbiius2/KPMEAR5FKZdIPcK2wIOMa+PpVhaFr 3q9Ul/4AMmMesV+I570viXs7t5DTb6JfjQAg7/RRB73VK8w9BSXjyMvnyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAV3DzymWhIjUSbpa5yWX8fqUMiOMB8GA1UdIwQY MBaAFFeTU8tC4MT7pcriU6V2i8HyRluZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMmNjY2QtMDQzMy00MzMwLTk4MWMt YzY3MmQ2NzM2ODZmLzEvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8wMmNjY2QtMDQzMy00MzMwLTk4MWMtYzY3MmQ2NzM2ODZm LzEvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7VSI3mc KRVk3q3Px5dVQJ5NsXpwYELSaSBXDV7E+W28KydxXt36MrgCt0UFKVLdXh2DkZJ9 jn1oldodYiZxKBbUJmdurb04GsaRkDLSNt5i89+HHdTxEie9+E8B1YBx1GTbH4wg B8UwDsM8H/xyi4n2ioOU5OupkyXqTYgM40OnOn8zLmvhy62iTgQYrKqVWsVTXHPD /qDI2/BlTHbgbxvFEt9q0ePtxKldPCeZ2mpekVMbw9pc7TpuAOtCV0UU+jQ15Fgo kK/Gk/0KyTDYQYcaTGhCq9b6Xh/aW1drjoODjZNSIYXF2Ul4Lh4WY2z8Qn5X4BdM Shyieqat0oyzWA== -----END CERTIFICATE-----Generated at Mon Dec 15 16:50:37 2025 by rpki-client