This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft File: i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json) Hash identifier: e1tzatWesvyfzbj3wzE3xmNJGa1ltP5fADrA9y4ugxc= Subject key identifier: BC:89:E5:51:49:35:DC:F7:8C:32:34:76:19:B9:DC:9B:5D:C1:30:D1 Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac Certificate serial: 019B33E8F860F52FCB132BB13254D50497EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft Manifest number: 05B2 Signing time: Fri 19 Dec 2025 00:01:04 +0000 Manifest this update: Fri 19 Dec 2025 00:01:04 +0000 Manifest next update: Sat 20 Dec 2025 00:01:04 +0000 Files and hashes: 1: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: 0OB8b+JNfoJ50myFZ6yl7u8coO2OoFeOUSRk/SB+GqM=) 2: tCW9fwISpjkcZibIaKBsjXs7N7A.roa (hash: NwxiC6aogmrL5itM5Y4be2nBp9O9LLOH8w2QrDP5u38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:f8:60:f5:2f:cb:13:2b:b1:32:54:d5:04:97:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac Validity Not Before: Dec 19 00:01:04 2025 GMT Not After : Dec 20 00:01:04 2025 GMT Subject: CN=bc89e5514935dcf78c32347619b9dc9b5dc130d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:82:98:a8:59:b5:62:f0:9d:9f:9c:65:3f:00: 4a:e2:a6:16:e5:63:a9:9a:84:5c:2c:9a:a5:fd:81: 15:b8:53:ec:c2:10:a3:26:95:f8:c4:e4:e2:bd:3d: 96:60:73:28:c1:03:37:b3:f8:14:a6:ea:5f:bf:e2: a5:5b:d6:f2:e7:5a:d1:53:44:a7:80:71:2d:75:4d: 8f:b1:eb:a3:6f:3c:34:1a:2e:12:3d:a9:eb:4f:a4: 58:4c:a5:e4:b6:fb:e6:3f:3e:05:a7:dd:8a:65:2b: 17:0f:6d:a0:77:60:d2:72:92:b1:b3:72:ee:84:27: 2b:b0:28:4e:3b:41:ad:61:dc:8a:22:40:d5:57:c7: af:ef:de:37:2a:5b:84:5e:9e:77:06:79:e0:8d:59: 42:ef:e5:2e:ad:cb:be:f3:55:93:fb:83:79:0c:ef: e6:00:0c:57:d4:72:3b:de:0e:a8:41:67:f0:fe:90: a6:fa:d4:2a:91:7d:ab:2d:d7:a0:40:51:ba:44:2b: c3:53:1c:4e:33:6a:d3:ec:84:b3:b8:03:75:d4:28: 5e:d4:1e:41:5b:0e:24:1f:12:25:b3:e8:4d:17:73: a6:a0:5e:ad:5e:38:46:33:55:3f:9a:3c:55:60:fb: ee:d6:d4:f1:be:88:ce:c9:76:68:5e:f8:df:41:46: 29:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:89:E5:51:49:35:DC:F7:8C:32:34:76:19:B9:DC:9B:5D:C1:30:D1 X509v3 Authority Key Identifier: keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:2f:3e:e9:2f:b7:97:7e:d5:1f:1f:26:af:c0:8d:f6:40:46: ea:bc:e4:64:2c:d7:37:4d:bb:f1:25:83:2f:17:8d:08:cc:94: 8f:21:34:58:a0:78:d9:ab:e7:cb:f9:ab:79:a0:65:97:9e:84: 84:4f:f5:a0:87:65:a8:3b:6e:fd:c2:46:34:cb:dd:a6:e6:4e: f6:cf:5e:ce:74:9d:4b:e6:c7:32:26:94:29:e5:bf:dc:79:bc: 9d:7a:c8:52:d7:07:87:ff:54:52:6b:eb:cd:27:65:ef:15:f5: e8:13:4f:5f:f1:32:f0:53:4d:8a:77:1e:e9:13:48:e3:71:68: 23:3b:7b:c8:26:4c:7f:b6:df:17:b4:b2:61:24:ca:6c:28:a9: 1c:e8:9b:2f:75:fe:e5:63:57:3d:09:7e:06:97:64:77:40:7e: 48:30:e4:26:78:ed:a3:58:02:18:31:1d:1e:76:e1:2f:45:cb: b2:5b:83:15:b1:fa:e4:18:40:cc:9d:e7:66:f3:cb:09:85:12: bf:c4:b3:14:ca:f5:4c:a6:31:db:7f:99:1c:8a:3f:c2:e0:93: ab:c8:99:05:92:1c:d8:1a:1c:f0:b2:9a:e7:25:2d:7d:e5:fb: 0a:4d:f5:66:06:68:cb:40:9b:80:5e:8f:1c:11:5a:3f:64:62: 3d:01:34:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6Phg9S/LEyuxMlTVBJfuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOWNjNTdjYTg0NzIzYWVjMjg0MTE0NWY2ZjdkMzAxYmRm MzViYWMwHhcNMjUxMjE5MDAwMTA0WhcNMjUxMjIwMDAwMTA0WjAzMTEwLwYDVQQD EyhiYzg5ZTU1MTQ5MzVkY2Y3OGMzMjM0NzYxOWI5ZGM5YjVkYzEzMGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4KYqFm1YvCdn5xlPwBK4qYW5WOp moRcLJql/YEVuFPswhCjJpX4xOTivT2WYHMowQM3s/gUpupfv+KlW9by51rRU0Sn gHEtdU2Pseujbzw0Gi4SPanrT6RYTKXktvvmPz4Fp92KZSsXD22gd2DScpKxs3Lu hCcrsChOO0GtYdyKIkDVV8ev7943KluEXp53BnngjVlC7+Uurcu+81WT+4N5DO/m AAxX1HI73g6oQWfw/pCm+tQqkX2rLdegQFG6RCvDUxxOM2rT7ISzuAN11Che1B5B Ww4kHxIls+hNF3OmoF6tXjhGM1U/mjxVYPvu1tTxvojOyXZoXvjfQUYp9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyJ5VFJNdz3jDI0dhm53JtdwTDRMB8GA1UdIwQY MBaAFIucxXyoRyOuwoQRRfb30wG981usMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTV6RmZLaEhJNjdDaEJGRjl2ZlRBYjN6VzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zOGU2ZjctNGUzNS00YzJkLTk5Nzct MDk3Y2I4ZGYyYTI0LzEvaTV6RmZLaEhJNjdDaEJGRjl2ZlRBYjN6VzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zOGU2ZjctNGUzNS00YzJkLTk5NzctMDk3Y2I4ZGYyYTI0 LzEvaTV6RmZLaEhJNjdDaEJGRjl2ZlRBYjN6VzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAty8+6S+3 l37VHx8mr8CN9kBG6rzkZCzXN0278SWDLxeNCMyUjyE0WKB42avny/mreaBll56E hE/1oIdlqDtu/cJGNMvdpuZO9s9eznSdS+bHMiaUKeW/3Hm8nXrIUtcHh/9UUmvr zSdl7xX16BNPX/Ey8FNNince6RNI43FoIzt7yCZMf7bfF7SyYSTKbCipHOibL3X+ 5WNXPQl+Bpdkd0B+SDDkJnjto1gCGDEdHnbhL0XLsluDFbH65BhAzJ3nZvPLCYUS v8SzFMr1TKYx23+ZHIo/wuCTq8iZBZIc2Boc8LKa5yUtfeX7Ck31ZgZoy0CbgF6P HBFaP2RiPQE0qA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:09:49 2025 by rpki-client