This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft File: 5b86csrW9LPcMFtMvjEIcFHZg_Y.mft (raw, json) Hash identifier: +yW+Dwl+tJy19KZDKbkBnCfUpuo/OTsmLN642+i6nrY= Subject key identifier: 1E:CE:3B:74:C5:37:F5:A6:C2:F4:D7:94:48:C7:18:E8:56:10:DF:4B Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6 Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6 Certificate serial: 019B25BF584AA78F1E05116ED066ED9CEE7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft Manifest number: 107F Signing time: Tue 16 Dec 2025 06:00:55 +0000 Manifest this update: Tue 16 Dec 2025 06:00:55 +0000 Manifest next update: Wed 17 Dec 2025 06:00:55 +0000 Files and hashes: 1: 0RZPruEGTKhoR1hKNPIRExdYXzg.roa (hash: Ylgp4cjK+Zluy/09si0hlIXpapeYNCr3ajFNEzNms3k=) 2: 5b86csrW9LPcMFtMvjEIcFHZg_Y.crl (hash: PAuH1YdvHoaTdoBm8LTks1KmJiHuFGfcmSWX0fHNcH8=) 3: FZgBPNc92MthOGwVWSdqr1P0HSA.roa (hash: KZQtxJF/nJvZgDa2DTtteEZwkrQ1v1OtGNXAavMBEZw=) 4: VwQVaP5PIxPzgzQslxsV-wlq09Y.roa (hash: WHonlIhX4uSQGOOrCo26yMPlgaauP4nxJI/ozD4levU=) 5: XdxSdG11uJFuStkGGDZEuqDpedA.roa (hash: cY0Wtfs/4ERYCWgjaGMffb7og7Xm7Edv+oFQtm2dqsY=) 6: gjjNG2AUNgoUUT8zwJCb0qV39gA.roa (hash: gKOOsRGMh8IWKlduiqod4keZzvv275i5NBRO12AH9MA=) 7: xUGm3kpTiMAlzgkonjqufuYlmQk.roa (hash: 3q3AXsJge0KIrT2tTs/ggx0aF7QEDS7JWPpyt1gZZ38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:58:4a:a7:8f:1e:05:11:6e:d0:66:ed:9c:ee:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6 Validity Not Before: Dec 16 06:00:55 2025 GMT Not After : Dec 17 06:00:55 2025 GMT Subject: CN=1ece3b74c537f5a6c2f4d79448c718e85610df4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:16:82:1e:a3:72:56:64:17:22:72:95:d2:78: 82:ff:71:d4:c2:2a:7d:56:2b:31:5a:77:38:e6:f7: 36:c7:3b:64:58:5c:75:44:34:ea:7c:52:e4:e7:d2: 4e:28:bd:86:d1:4d:11:bc:06:e8:79:0f:9e:09:2f: ba:92:1b:67:4d:64:74:e7:26:9a:c4:bc:5d:40:a1: bb:56:b8:ff:0f:ec:0c:99:48:d4:3c:59:5f:77:d1: 2e:d8:73:4e:b8:86:8d:0f:db:f1:24:dd:96:64:e0: a7:37:b8:97:19:bf:ed:9b:e6:0e:10:1a:e1:1d:f7: 02:27:7e:b8:0a:28:ad:ce:dc:be:46:62:0c:c8:c5: e1:bd:c7:f9:c5:a9:79:67:78:82:c3:8d:71:92:6d: 07:5e:cb:55:e9:36:b9:ef:5b:9e:09:2d:64:f5:1a: dd:91:b7:fb:b7:2f:91:87:b3:f9:5b:19:77:19:3f: 3f:2a:79:d3:75:26:4c:18:92:d6:89:be:9a:d6:cc: 03:11:1a:31:14:59:68:ec:0c:0c:1e:a3:17:c5:52: 00:ae:dc:21:dc:90:63:5d:5b:57:68:a1:7a:eb:c5: e8:56:2b:ab:ff:08:e0:fb:50:d2:3b:e4:e5:0a:28: 87:c2:d1:3c:c4:6f:59:36:bf:21:8e:e5:8b:cd:d4: 54:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CE:3B:74:C5:37:F5:A6:C2:F4:D7:94:48:C7:18:E8:56:10:DF:4B X509v3 Authority Key Identifier: keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:c1:25:9e:ac:2a:74:7f:65:38:22:8e:fd:27:1c:33:3f:28: 7b:39:2d:5a:50:8d:2c:96:0f:77:15:c7:a2:33:9e:d5:ad:86: e3:18:be:7c:b6:41:51:68:f9:26:9b:b3:93:db:a3:a4:95:45: 77:5c:f7:78:e0:5e:42:6a:ed:84:3a:c6:1e:e2:18:5c:8d:63: 7e:68:34:fc:5f:6b:05:c7:f1:df:24:9b:29:8a:ad:ea:e0:1c: f6:1f:f6:65:d5:63:ab:89:47:fe:20:3e:67:63:fc:bb:9c:c7: 39:03:f2:b2:a0:80:a5:05:6d:1a:5a:ae:24:01:7a:97:9f:bf: d8:cc:7c:02:d9:a2:81:08:4b:5b:7a:c4:fb:f8:1c:84:8c:ff: ba:35:9f:8f:df:19:d3:24:74:b1:90:12:8c:a9:2c:86:62:78: 78:b0:79:1e:d9:94:7e:79:9e:e7:83:7f:b9:a4:50:3d:a2:7c: 40:97:bf:70:65:5b:3b:54:95:ff:bc:5f:fe:b5:61:3f:7e:db: bc:b1:5f:1c:ae:9d:64:64:44:56:79:60:73:a3:e8:03:da:0a: c0:a2:94:ac:43:35:73:cb:7b:03:4c:5e:1e:26:14:61:3b:1a: 10:43:84:a7:a0:0a:2e:36:2e:0d:93:19:1f:0e:18:90:c7:84: 3c:18:df:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv1hKp48eBRFu0GbtnO56MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YmYzYTcyY2FkNmY0YjNkYzMwNWI0Y2JlMzEwODcwNTFk OTgzZjYwHhcNMjUxMjE2MDYwMDU1WhcNMjUxMjE3MDYwMDU1WjAzMTEwLwYDVQQD EygxZWNlM2I3NGM1MzdmNWE2YzJmNGQ3OTQ0OGM3MThlODU2MTBkZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhaCHqNyVmQXInKV0niC/3HUwip9 VisxWnc45vc2xztkWFx1RDTqfFLk59JOKL2G0U0RvAboeQ+eCS+6khtnTWR05yaa xLxdQKG7Vrj/D+wMmUjUPFlfd9Eu2HNOuIaND9vxJN2WZOCnN7iXGb/tm+YOEBrh HfcCJ364Ciitzty+RmIMyMXhvcf5xal5Z3iCw41xkm0HXstV6Ta571ueCS1k9Rrd kbf7ty+Rh7P5Wxl3GT8/KnnTdSZMGJLWib6a1swDERoxFFlo7AwMHqMXxVIArtwh 3JBjXVtXaKF668XoViur/wjg+1DSO+TlCiiHwtE8xG9ZNr8hjuWLzdRU0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7OO3TFN/WmwvTXlEjHGOhWEN9LMB8GA1UdIwQY MBaAFOW/OnLK1vSz3DBbTL4xCHBR2YP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEt MDliZTlkYjExZjY2LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEtMDliZTlkYjExZjY2 LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdcElnqwq dH9lOCKO/SccMz8oezktWlCNLJYPdxXHojOe1a2G4xi+fLZBUWj5Jpuzk9ujpJVF d1z3eOBeQmrthDrGHuIYXI1jfmg0/F9rBcfx3ySbKYqt6uAc9h/2ZdVjq4lH/iA+ Z2P8u5zHOQPysqCApQVtGlquJAF6l5+/2Mx8AtmigQhLW3rE+/gchIz/ujWfj98Z 0yR0sZASjKkshmJ4eLB5HtmUfnme54N/uaRQPaJ8QJe/cGVbO1SV/7xf/rVhP37b vLFfHK6dZGREVnlgc6PoA9oKwKKUrEM1c8t7A0xeHiYUYTsaEEOEp6AKLjYuDZMZ Hw4YkMeEPBjflw== -----END CERTIFICATE-----Generated at Tue Dec 16 15:28:56 2025 by rpki-client