This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft File: _5JbpaQQRnlkY0z_SvrXelbaRyI.mft (raw, json) Hash identifier: H/LmSxCXNI/VX5bQ4zcN9Dtraqt3nPnihUsK0v7ZhqU= Subject key identifier: A1:18:56:28:23:B9:A1:59:ED:0B:BD:18:96:8A:8A:4C:CF:06:7C:62 Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22 Certificate issuer: /CN=ff925ba5a410467964634cff4afad77a56da4722 Certificate serial: 019B0DB6EB053731A8705F167395ACBAC5D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft Manifest number: 0600 Signing time: Thu 11 Dec 2025 14:00:50 +0000 Manifest this update: Thu 11 Dec 2025 14:00:50 +0000 Manifest next update: Fri 12 Dec 2025 14:00:50 +0000 Files and hashes: 1: YCBMVw8lhfTbZWn4cTYVsc3blBQ.roa (hash: DAw8H6oh39jnMGAPAS2Ix82bT3BCrrolFFfmIIaPBT0=) 2: _5JbpaQQRnlkY0z_SvrXelbaRyI.crl (hash: F2+nVXaOoJi8jNFyvl71QxFeO9fSeNcqVE+vkKBKuDY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:eb:05:37:31:a8:70:5f:16:73:95:ac:ba:c5:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722 Validity Not Before: Dec 11 14:00:50 2025 GMT Not After : Dec 12 14:00:50 2025 GMT Subject: CN=a118562823b9a159ed0bbd18968a8a4ccf067c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ed:87:92:16:ff:52:42:8a:a6:2f:37:14:69: 51:e4:7f:33:0e:2a:3d:2c:97:dc:ef:25:bc:95:cf: 70:26:c1:45:ad:f0:dc:eb:3a:6a:73:3c:ae:8e:36: c6:6a:39:a8:a5:0a:88:c1:53:57:cb:83:fc:05:c3: 62:20:43:b8:b6:4b:ec:7e:4b:74:f3:de:a2:87:f6: 82:26:a0:99:eb:5d:bf:58:d1:41:28:ca:c5:e3:e0: e1:30:c7:b8:83:10:e7:8d:b5:c6:46:72:7e:e9:fc: 9a:83:81:6a:4a:12:b2:8b:2d:3b:fa:23:44:fd:29: 62:1e:cd:5a:0a:0a:b6:af:40:2e:85:dd:2e:42:c6: 2c:3d:e4:93:a3:f2:bc:ac:68:7e:bd:1d:f3:1d:f7: f3:7f:65:cf:8f:d2:4a:c9:94:fb:1d:1b:9f:0b:ea: d5:ce:38:9f:84:0f:b4:5a:d9:19:31:8e:b6:d0:69: 89:17:4d:d9:9c:46:ad:2b:1e:d6:98:10:70:33:81: 89:78:94:af:83:c4:cc:30:e4:76:46:0c:56:cb:27: 3e:4c:32:19:55:aa:00:42:a7:81:98:d7:96:4e:72: bd:4b:b3:fc:4a:a2:0a:92:01:e1:42:d2:3e:3d:7d: 28:40:f2:7c:72:86:9b:cb:4a:0f:9a:1a:63:22:36: 4d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:18:56:28:23:B9:A1:59:ED:0B:BD:18:96:8A:8A:4C:CF:06:7C:62 X509v3 Authority Key Identifier: keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:85:55:b5:3a:f8:f6:aa:10:79:dd:b7:8d:f7:50:c6:91:42: 2b:6a:9a:ea:66:b3:aa:9a:e8:11:b6:11:4e:e6:e6:ee:bd:77: cb:95:52:4d:33:f2:f9:cd:32:0f:b4:86:28:f3:3d:56:0e:3c: de:1a:0a:d9:b7:76:b4:96:8b:07:6a:ae:e8:14:27:a3:df:bc: 32:ae:d8:44:7a:4a:e7:39:38:f3:91:42:34:50:c8:fb:4e:9a: a3:f4:6a:2e:8c:03:4c:ce:8e:4a:c0:66:2b:e3:65:43:5a:0f: 58:30:71:4d:f5:ba:e2:53:c5:aa:5a:90:df:82:80:56:68:ae: ea:96:91:be:d1:ef:b0:e7:aa:3c:c0:6b:a7:25:1a:5d:46:da: da:ce:64:8f:97:9a:31:eb:98:cd:21:a1:13:ae:0f:f9:e3:37: 15:28:3d:8a:34:ea:11:5c:63:b8:d6:6b:61:43:37:1c:1c:82: fa:6d:7c:46:2f:5a:29:25:1a:6f:8d:9c:34:ff:84:a3:cf:34: 52:0b:b8:a9:e1:01:03:53:55:1d:1a:65:be:7c:b7:f4:4c:f8: d7:fc:1a:55:14:b1:58:95:b3:db:56:38:07:1a:63:0f:ba:5e: a4:9b:63:51:7e:86:0b:ed:33:50:60:a1:a5:7b:89:af:4b:0b: f1:61:b5:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtusFNzGocF8Wc5WsusXXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOTI1YmE1YTQxMDQ2Nzk2NDYzNGNmZjRhZmFkNzdhNTZk YTQ3MjIwHhcNMjUxMjExMTQwMDUwWhcNMjUxMjEyMTQwMDUwWjAzMTEwLwYDVQQD EyhhMTE4NTYyODIzYjlhMTU5ZWQwYmJkMTg5NjhhOGE0Y2NmMDY3YzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+2Hkhb/UkKKpi83FGlR5H8zDio9 LJfc7yW8lc9wJsFFrfDc6zpqczyujjbGajmopQqIwVNXy4P8BcNiIEO4tkvsfkt0 896ih/aCJqCZ612/WNFBKMrF4+DhMMe4gxDnjbXGRnJ+6fyag4FqShKyiy07+iNE /SliHs1aCgq2r0Auhd0uQsYsPeSTo/K8rGh+vR3zHffzf2XPj9JKyZT7HRufC+rV zjifhA+0WtkZMY620GmJF03ZnEatKx7WmBBwM4GJeJSvg8TMMOR2RgxWyyc+TDIZ VaoAQqeBmNeWTnK9S7P8SqIKkgHhQtI+PX0oQPJ8coaby0oPmhpjIjZN5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEYVigjuaFZ7Qu9GJaKikzPBnxiMB8GA1UdIwQY MBaAFP+SW6WkEEZ5ZGNM/0r613pW2kciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzVKYnBhUVFSbmxrWTB6X1N2clhlbGJhUnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jNjhlNWYtOGVmYS00M2ZmLTg5MGYt MjcyOTYwYmM0MzIyLzEvXzVKYnBhUVFSbmxrWTB6X1N2clhlbGJhUnlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jNjhlNWYtOGVmYS00M2ZmLTg5MGYtMjcyOTYwYmM0MzIy LzEvXzVKYnBhUVFSbmxrWTB6X1N2clhlbGJhUnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4VVtTr4 9qoQed23jfdQxpFCK2qa6mazqproEbYRTubm7r13y5VSTTPy+c0yD7SGKPM9Vg48 3hoK2bd2tJaLB2qu6BQno9+8Mq7YRHpK5zk485FCNFDI+06ao/RqLowDTM6OSsBm K+NlQ1oPWDBxTfW64lPFqlqQ34KAVmiu6paRvtHvsOeqPMBrpyUaXUba2s5kj5ea MeuYzSGhE64P+eM3FSg9ijTqEVxjuNZrYUM3HByC+m18Ri9aKSUab42cNP+Eo880 Ugu4qeEBA1NVHRplvny39Ez41/waVRSxWJWz21Y4BxpjD7pepJtjUX6GC+0zUGCh pXuJr0sL8WG14A== -----END CERTIFICATE-----Generated at Fri Dec 12 00:20:44 2025 by rpki-client