This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft File: B5602MZfOntFTKKl5fZAlOnYi9M.mft (raw, json) Hash identifier: XYvMx06OnYxvojGpY/QtyX9Igr9g+iXW7iT6vo/7q98= Subject key identifier: D8:00:57:7A:F1:F2:C1:2D:8B:9B:09:31:EE:E5:FF:89:CC:DE:5D:27 Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3 Certificate issuer: /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3 Certificate serial: 019B5BD1FA1EBC7045862202F69825EE3760 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft Manifest number: 179B Signing time: Fri 26 Dec 2025 18:00:46 +0000 Manifest this update: Fri 26 Dec 2025 18:00:46 +0000 Manifest next update: Sat 27 Dec 2025 18:00:46 +0000 Files and hashes: 1: AY8RhKUHj2NodWuR-dwkYpgBEvk.roa (hash: 8sR3EhQJ4OZ7BluQZL72WnRYRz2pw1cIu2X1WaLS0DE=) 2: B5602MZfOntFTKKl5fZAlOnYi9M.crl (hash: CP191DmEzPRMiBLTY4U36prCyGD9KiCt4GynHz6K/o4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d1:fa:1e:bc:70:45:86:22:02:f6:98:25:ee:37:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3 Validity Not Before: Dec 26 18:00:46 2025 GMT Not After : Dec 27 18:00:46 2025 GMT Subject: CN=d800577af1f2c12d8b9b0931eee5ff89ccde5d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7d:57:47:50:ba:c4:2e:f8:18:c9:34:b9:31: 91:6b:ec:89:1e:1b:06:35:ab:01:bf:cc:35:33:87: 43:0d:19:7a:15:f4:7d:4b:dd:d8:e1:51:1a:33:6a: d1:3e:af:3d:1f:b2:d5:43:36:9b:f1:a4:40:44:cd: 73:49:49:04:62:84:fd:1e:5f:10:fe:48:b2:0c:3f: 9e:d4:17:84:ee:a9:93:e8:d1:66:60:0f:fc:99:53: 53:96:db:bd:4b:39:6a:41:39:cf:a8:81:74:b1:3d: 69:d5:2d:12:5b:27:f3:f8:64:25:63:b2:50:b3:9c: 22:b2:b7:ec:71:19:a6:69:fe:3a:ee:58:41:f9:50: f0:30:ec:72:1c:b7:c7:0b:6d:12:66:ce:1a:6f:33: 69:f2:10:5e:1f:de:c9:06:41:36:71:f4:9d:0f:77: 16:23:b4:a3:aa:e0:60:d9:4e:42:ce:8f:85:2b:ae: 37:de:d7:15:64:a8:79:a5:9f:26:79:72:41:57:cc: 38:77:2b:d7:64:ef:6a:2e:51:55:8c:a0:dd:7f:e1: 69:79:fb:1c:92:03:18:9c:4d:da:6d:57:04:74:d0: a9:48:5a:30:26:11:9f:4b:2f:da:d4:06:1b:07:c2: af:0c:8f:4f:14:85:89:e8:d3:6b:9c:5b:fe:22:d4: 09:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:00:57:7A:F1:F2:C1:2D:8B:9B:09:31:EE:E5:FF:89:CC:DE:5D:27 X509v3 Authority Key Identifier: keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e3:fd:93:02:83:b1:46:07:44:62:aa:7f:54:4f:2f:f2:74: 95:48:0a:15:ef:4a:3f:22:a5:91:1c:79:2d:7b:b5:54:09:fe: 6a:c9:0c:3f:1e:9c:ac:95:1f:3e:29:ca:5f:74:ab:15:ec:08: c7:eb:79:12:46:e2:30:6e:6a:96:1c:64:6f:60:c5:bc:86:2e: a5:07:82:e2:45:8c:7f:f6:22:be:14:39:e5:f5:ba:3f:10:4d: 68:73:bc:e3:d2:76:f3:e9:75:d6:7a:48:e5:e0:cf:06:47:31: 3b:82:5a:90:f7:ed:99:94:4e:6c:69:2a:12:ef:86:91:b1:c3: 48:28:40:16:60:5b:5a:60:de:05:4b:ce:e6:9c:db:2f:11:a5: ce:0b:3e:cc:cd:8a:f6:f1:d0:47:e3:79:4e:e5:c3:45:e2:e3: 33:f7:33:35:55:f1:02:fe:2f:9e:bc:08:02:02:80:01:c0:30: 35:d0:08:92:d3:38:fc:22:d6:00:9d:0f:95:0d:fa:d2:11:f0: 72:b9:78:89:b7:10:77:14:2c:bc:f8:29:99:39:f8:b5:bf:fb: e1:97:dd:c0:84:eb:91:57:ee:fc:58:32:8c:89:03:44:91:eb: 29:05:b1:85:6e:40:43:a1:8a:43:8a:56:c3:0a:fa:bf:0d:f9: c5:18:a7:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0foevHBFhiIC9pgl7jdgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OWViNGQ4YzY1ZjNhN2I0NTRjYTJhNWU1ZjY0MDk0ZTlk ODhiZDMwHhcNMjUxMjI2MTgwMDQ2WhcNMjUxMjI3MTgwMDQ2WjAzMTEwLwYDVQQD EyhkODAwNTc3YWYxZjJjMTJkOGI5YjA5MzFlZWU1ZmY4OWNjZGU1ZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn1XR1C6xC74GMk0uTGRa+yJHhsG NasBv8w1M4dDDRl6FfR9S93Y4VEaM2rRPq89H7LVQzab8aRARM1zSUkEYoT9Hl8Q /kiyDD+e1BeE7qmT6NFmYA/8mVNTltu9SzlqQTnPqIF0sT1p1S0SWyfz+GQlY7JQ s5wisrfscRmmaf467lhB+VDwMOxyHLfHC20SZs4abzNp8hBeH97JBkE2cfSdD3cW I7SjquBg2U5Czo+FK6433tcVZKh5pZ8meXJBV8w4dyvXZO9qLlFVjKDdf+Fpefsc kgMYnE3abVcEdNCpSFowJhGfSy/a1AYbB8KvDI9PFIWJ6NNrnFv+ItQJmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgAV3rx8sEti5sJMe7l/4nM3l0nMB8GA1UdIwQY MBaAFAeetNjGXzp7RUyipeX2QJTp2IvTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjU2MDJNWmZPbnRGVEtLbDVmWkFsT25ZaTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yZmMwMDctMzYxZC00ZjQ3LWFhZjct NDg0ZDg0M2U2ZGUzLzEvQjU2MDJNWmZPbnRGVEtLbDVmWkFsT25ZaTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yZmMwMDctMzYxZC00ZjQ3LWFhZjctNDg0ZDg0M2U2ZGUz LzEvQjU2MDJNWmZPbnRGVEtLbDVmWkFsT25ZaTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAheP9kwKD sUYHRGKqf1RPL/J0lUgKFe9KPyKlkRx5LXu1VAn+askMPx6crJUfPinKX3SrFewI x+t5EkbiMG5qlhxkb2DFvIYupQeC4kWMf/YivhQ55fW6PxBNaHO849J28+l11npI 5eDPBkcxO4JakPftmZRObGkqEu+GkbHDSChAFmBbWmDeBUvO5pzbLxGlzgs+zM2K 9vHQR+N5TuXDReLjM/czNVXxAv4vnrwIAgKAAcAwNdAIktM4/CLWAJ0PlQ360hHw crl4ibcQdxQsvPgpmTn4tb/74ZfdwITrkVfu/FgyjIkDRJHrKQWxhW5AQ6GKQ4pW wwr6vw35xRinog== -----END CERTIFICATE-----Generated at Fri Dec 26 21:21:06 2025 by rpki-client