This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft File: B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json) Hash identifier: fYDZx4V21XtMs03ijwYMYLvY5dAewYiixqgEKZgZTeg= Subject key identifier: AE:1B:FF:FC:D3:92:AE:AD:F8:E2:CA:D6:0E:42:32:6F:60:9E:FA:98 Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8 Certificate issuer: /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8 Certificate serial: 019B32D775D7DA90BA335C5A324B848B8E6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft Manifest number: 0ED2 Signing time: Thu 18 Dec 2025 19:02:19 +0000 Manifest this update: Thu 18 Dec 2025 19:02:19 +0000 Manifest next update: Fri 19 Dec 2025 19:02:19 +0000 Files and hashes: 1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: JUihU7tYMhR506Vqyayi0yAkod5QOOBLDlZhhF2kh4Y=) 2: _N04c68vWF1WhXHOL5knYD5yM1Q.roa (hash: G/pN2CsDPm/52PLm2tgxp/9Fe9uuvo9jdn7HkaDsAhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:75:d7:da:90:ba:33:5c:5a:32:4b:84:8b:8e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8 Validity Not Before: Dec 18 19:02:19 2025 GMT Not After : Dec 19 19:02:19 2025 GMT Subject: CN=ae1bfffcd392aeadf8e2cad60e42326f609efa98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:14:7d:82:b0:d7:83:13:43:94:25:8d:62:7a: f5:8b:ec:0e:fb:3c:15:6f:fc:cf:2e:11:ab:2c:7f: 29:fd:70:21:a7:21:fe:fc:40:13:a6:4c:f9:b1:22: bc:f5:e7:e9:5e:11:df:37:26:56:9b:33:5f:c9:97: 7d:9f:23:98:89:c2:5a:53:da:2b:74:57:44:83:c1: e0:69:e0:da:2e:cc:ec:7b:a5:29:2a:e4:ce:fa:6a: 96:33:b4:45:ab:bf:cb:71:ed:fa:45:0b:13:78:bc: 22:29:66:14:0b:b3:e5:9e:d2:63:94:58:f1:9f:6a: e9:e9:94:ca:29:38:a9:6a:19:27:30:3d:52:46:d3: ab:43:96:c3:12:dd:d3:ec:07:f8:1a:fe:20:76:08: e2:43:82:55:ff:8e:50:af:e1:2f:6a:18:7f:fa:75: 59:18:1d:11:cf:fd:18:14:98:0a:6e:27:42:ed:c0: ca:1e:86:e7:bf:88:45:51:c8:4f:68:53:cc:0f:d3: 3f:76:da:8c:6c:a6:f1:e2:96:08:e7:85:dd:86:b9: 90:fe:0f:53:1d:81:7e:e4:3c:f5:b2:16:42:c9:dd: cc:8a:94:d9:08:fb:0e:b7:db:05:f0:46:0e:6d:17: b3:43:06:20:ba:98:e8:57:2b:bb:a2:77:73:d0:c7: 5c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1B:FF:FC:D3:92:AE:AD:F8:E2:CA:D6:0E:42:32:6F:60:9E:FA:98 X509v3 Authority Key Identifier: keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:08:0d:42:8e:42:c9:91:8a:8d:3d:11:78:a1:2c:a5:9f:3c: 5d:ec:43:b0:bd:94:55:7e:ae:43:e6:9f:ce:40:4d:72:63:0d: 28:cc:63:f5:c1:8b:9a:14:06:b0:d5:4c:45:fc:5f:97:1a:d9: 3a:01:1f:6b:e9:f8:02:96:e4:6c:62:00:15:53:32:5b:4f:ec: 4d:1e:6e:88:bf:f3:8e:96:3e:ba:ef:26:dc:c2:9f:5f:e7:ee: 7c:a6:a1:1f:ac:11:1f:96:c8:41:4f:56:a0:ef:32:cd:3e:a0: 48:28:c9:a8:4a:a0:82:4c:2a:22:24:3a:45:64:87:23:04:76: 6d:40:72:df:7b:17:09:25:a6:f4:1c:ad:74:b5:05:12:5a:6e: 69:e5:22:71:10:a7:fb:2d:9f:2e:58:1b:5f:f1:20:b0:55:a2: 9a:33:9f:aa:ce:d2:f9:c1:2b:01:0a:ba:5c:e1:62:05:57:4c: b7:48:2a:5a:bc:c1:ee:8f:7e:07:8c:58:56:43:36:15:78:66: 97:7a:1b:ea:c9:a1:11:c9:b5:6b:2b:2b:7f:ec:e3:c4:69:07: e0:b9:32:06:4f:a9:5a:62:19:a4:93:97:06:10:8a:60:94:6a: eb:f8:bc:d7:30:a7:58:c6:8c:ea:df:b6:8b:45:22:d1:49:47: 07:19:9c:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy13XX2pC6M1xaMkuEi45rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OWM5NzM4ZmM3YjFlNDA2NGM1YzYzNmJiYTZhOGI1NDkz OTFjYTgwHhcNMjUxMjE4MTkwMjE5WhcNMjUxMjE5MTkwMjE5WjAzMTEwLwYDVQQD EyhhZTFiZmZmY2QzOTJhZWFkZjhlMmNhZDYwZTQyMzI2ZjYwOWVmYTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxR9grDXgxNDlCWNYnr1i+wO+zwV b/zPLhGrLH8p/XAhpyH+/EATpkz5sSK89efpXhHfNyZWmzNfyZd9nyOYicJaU9or dFdEg8HgaeDaLszse6UpKuTO+mqWM7RFq7/Lce36RQsTeLwiKWYUC7PlntJjlFjx n2rp6ZTKKTipahknMD1SRtOrQ5bDEt3T7Af4Gv4gdgjiQ4JV/45Qr+Evahh/+nVZ GB0Rz/0YFJgKbidC7cDKHobnv4hFUchPaFPMD9M/dtqMbKbx4pYI54XdhrmQ/g9T HYF+5Dz1shZCyd3MipTZCPsOt9sF8EYObRezQwYgupjoVyu7ondz0MdcVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4b//zTkq6t+OLK1g5CMm9gnvqYMB8GA1UdIwQY MBaAFAeclzj8ex5AZMXGNrumqLVJORyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjV5WE9QeDdIa0JreGNZMnU2YW90VWs1SEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zY2ZjZDktNDk0Yy00MWM4LTgxZTIt ZDQxODE1M2EzMGE2LzEvQjV5WE9QeDdIa0JreGNZMnU2YW90VWs1SEtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8zY2ZjZDktNDk0Yy00MWM4LTgxZTItZDQxODE1M2EzMGE2 LzEvQjV5WE9QeDdIa0JreGNZMnU2YW90VWs1SEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQgNQo5C yZGKjT0ReKEspZ88XexDsL2UVX6uQ+afzkBNcmMNKMxj9cGLmhQGsNVMRfxflxrZ OgEfa+n4ApbkbGIAFVMyW0/sTR5uiL/zjpY+uu8m3MKfX+fufKahH6wRH5bIQU9W oO8yzT6gSCjJqEqggkwqIiQ6RWSHIwR2bUBy33sXCSWm9BytdLUFElpuaeUicRCn +y2fLlgbX/EgsFWimjOfqs7S+cErAQq6XOFiBVdMt0gqWrzB7o9+B4xYVkM2FXhm l3ob6smhEcm1aysrf+zjxGkH4LkyBk+pWmIZpJOXBhCKYJRq6/i81zCnWMaM6t+2 i0Ui0UlHBxmc9Q== -----END CERTIFICATE-----Generated at Thu Dec 18 23:34:37 2025 by rpki-client