This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft File: r5VJF2-WbToiFBAHkJfIfw4dILE.mft (raw, json) Hash identifier: VV1qm6RXROWBaEFD+nfH0SQD369OS+TN9+7k/cCf6PQ= Subject key identifier: 33:13:51:5F:D4:FD:EC:FB:2E:94:90:93:7B:73:A0:B2:AF:80:DF:2E Authority key identifier: AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1 Certificate issuer: /CN=af9549176f966d3a221410079097c87f0e1d20b1 Certificate serial: 019B1A28D3F24828E83D1E9A50B1D0909099 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft Manifest number: 0ED8 Signing time: Sun 14 Dec 2025 00:00:41 +0000 Manifest this update: Sun 14 Dec 2025 00:00:41 +0000 Manifest next update: Mon 15 Dec 2025 00:00:41 +0000 Files and hashes: 1: 1n_N6auYiXQ1pyBQYj7m3QI_dSs.roa (hash: LsHjMOF74kduMAehGu3uEfQUdY1PYN7E293m6Bfa2Jo=) 2: r5VJF2-WbToiFBAHkJfIfw4dILE.crl (hash: jlmT2x7FOB0Nevg2BPSwF6sDZt5HXi7S70DeGx9chFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:28:d3:f2:48:28:e8:3d:1e:9a:50:b1:d0:90:90:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af9549176f966d3a221410079097c87f0e1d20b1 Validity Not Before: Dec 14 00:00:41 2025 GMT Not After : Dec 15 00:00:41 2025 GMT Subject: CN=3313515fd4fdecfb2e9490937b73a0b2af80df2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:77:ed:d4:77:4e:2c:bc:b5:7b:a6:85:0b:d9: ee:6a:3a:f8:2f:8b:af:1a:75:6e:90:b4:21:3d:5b: b0:85:e1:2f:f8:33:e9:5f:95:52:37:76:75:58:07: bd:ac:48:22:9b:b0:a5:aa:28:81:bc:db:71:7c:f8: f5:7d:bd:0c:0c:82:18:b3:c0:5e:10:83:3c:de:f8: 5d:01:2e:0f:a0:34:de:7c:c0:2c:2b:87:66:4b:fc: ec:bd:5e:8f:bd:c5:3d:4c:2d:c0:d4:25:5a:ca:c4: 73:cd:c4:7e:2a:0d:33:ff:d0:d2:a8:2d:03:8b:e8: 38:28:c6:06:9c:10:93:08:19:22:85:bb:f5:4f:de: 3d:0c:a2:72:8d:fb:19:d5:ae:ee:31:f0:14:14:5f: 2a:7c:8d:3e:9f:17:87:73:f3:84:2e:ab:64:1d:3f: 0a:27:86:3c:30:e4:7c:55:b6:03:9f:4a:d0:41:03: 48:f7:be:07:1c:00:8d:dd:39:9f:bd:f8:13:3e:35: 87:94:d3:1c:65:ba:2e:32:59:b8:17:00:c5:f6:7c: 1f:f7:70:23:52:be:3e:77:bb:4e:e9:8d:86:1c:bd: b4:4c:a8:ee:05:42:45:71:61:1b:fe:cb:67:ac:19: 16:ba:08:7e:db:48:c4:53:01:ca:ff:29:a5:06:08: 41:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:13:51:5F:D4:FD:EC:FB:2E:94:90:93:7B:73:A0:B2:AF:80:DF:2E X509v3 Authority Key Identifier: keyid:AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:7b:ac:df:a1:b1:cb:2e:94:05:6a:5a:de:06:f5:57:ba:15: b4:90:a2:1a:a6:54:75:f2:a0:f4:74:cc:50:a6:3b:24:3e:bb: 35:b2:1c:c1:88:55:ec:ee:d1:78:b1:da:fd:45:64:e1:29:34: 82:63:a0:65:36:a4:f3:8f:73:26:e2:d3:6b:04:1c:df:76:66: 5a:06:c7:3f:15:5f:b3:05:d6:40:b4:fb:3b:a7:90:0f:c3:70: d9:97:da:ea:43:ea:4e:90:20:16:ce:0b:b2:bc:88:ed:72:7e: 5c:d3:e0:10:35:b6:6f:78:c6:f1:03:ce:e9:f2:00:84:b3:85: fb:87:5b:5d:8b:bd:9c:69:7c:38:49:4a:93:34:44:f3:75:fd: b2:6d:74:b1:2a:27:b1:c3:a1:47:6d:e7:30:7c:fa:06:ea:b8: 4a:e0:e6:aa:bc:58:fb:e7:45:28:29:ba:21:ec:6d:8a:9e:0a: dd:bb:4d:6b:6b:cd:61:1b:ae:c2:41:23:ed:76:37:b8:8b:d7: 6f:19:34:29:5e:0a:ec:38:4e:04:33:6c:8a:c1:6a:a7:6c:ef: 50:cf:41:6f:76:04:ef:e2:cc:8a:89:f3:09:ff:11:e3:e0:86: 3b:77:af:33:41:b8:c2:63:79:bc:54:1b:2e:dd:c7:ff:42:25: d5:df:2d:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKNPySCjoPR6aULHQkJCZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOTU0OTE3NmY5NjZkM2EyMjE0MTAwNzkwOTdjODdmMGUx ZDIwYjEwHhcNMjUxMjE0MDAwMDQxWhcNMjUxMjE1MDAwMDQxWjAzMTEwLwYDVQQD EygzMzEzNTE1ZmQ0ZmRlY2ZiMmU5NDkwOTM3YjczYTBiMmFmODBkZjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnft1HdOLLy1e6aFC9nuajr4L4uv GnVukLQhPVuwheEv+DPpX5VSN3Z1WAe9rEgim7ClqiiBvNtxfPj1fb0MDIIYs8Be EIM83vhdAS4PoDTefMAsK4dmS/zsvV6PvcU9TC3A1CVaysRzzcR+Kg0z/9DSqC0D i+g4KMYGnBCTCBkihbv1T949DKJyjfsZ1a7uMfAUFF8qfI0+nxeHc/OELqtkHT8K J4Y8MOR8VbYDn0rQQQNI974HHACN3TmfvfgTPjWHlNMcZbouMlm4FwDF9nwf93Aj Ur4+d7tO6Y2GHL20TKjuBUJFcWEb/stnrBkWugh+20jEUwHK/ymlBghB1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMTUV/U/ez7LpSQk3tzoLKvgN8uMB8GA1UdIwQY MBaAFK+VSRdvlm06IhQQB5CXyH8OHSCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjVWSkYyLVdiVG9pRkJBSGtKZklmdzRkSUxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84NTkxNzAtYTk3NC00YWUzLWEwMjAt M2VhNTlkOTZhNzkwLzEvcjVWSkYyLVdiVG9pRkJBSGtKZklmdzRkSUxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS84NTkxNzAtYTk3NC00YWUzLWEwMjAtM2VhNTlkOTZhNzkw LzEvcjVWSkYyLVdiVG9pRkJBSGtKZklmdzRkSUxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHus36Gx yy6UBWpa3gb1V7oVtJCiGqZUdfKg9HTMUKY7JD67NbIcwYhV7O7ReLHa/UVk4Sk0 gmOgZTak849zJuLTawQc33ZmWgbHPxVfswXWQLT7O6eQD8Nw2Zfa6kPqTpAgFs4L sryI7XJ+XNPgEDW2b3jG8QPO6fIAhLOF+4dbXYu9nGl8OElKkzRE83X9sm10sSon scOhR23nMHz6Buq4SuDmqrxY++dFKCm6Iextip4K3btNa2vNYRuuwkEj7XY3uIvX bxk0KV4K7DhOBDNsisFqp2zvUM9Bb3YE7+LMionzCf8R4+CGO3evM0G4wmN5vFQb Lt3H/0Il1d8taQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:49:51 2025 by rpki-client