This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft File: B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json) Hash identifier: XX4gVEKPpoKNxeuraQagEoBpPXJVkFVrhp/Arma2B8c= Subject key identifier: 3D:C6:5A:A7:72:B3:D1:94:56:DE:AE:BE:A8:1A:6F:06:1D:DB:AC:26 Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8 Certificate issuer: /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8 Certificate serial: 019B34C536D16E061707006FDAEA399A20E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft Manifest number: 0ED3 Signing time: Fri 19 Dec 2025 04:01:38 +0000 Manifest this update: Fri 19 Dec 2025 04:01:38 +0000 Manifest next update: Sat 20 Dec 2025 04:01:38 +0000 Files and hashes: 1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: vhVnuiPxtpZLznLWs2GgQJ512EA1o9nhKM57ma8evBs=) 2: _N04c68vWF1WhXHOL5knYD5yM1Q.roa (hash: G/pN2CsDPm/52PLm2tgxp/9Fe9uuvo9jdn7HkaDsAhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:36:d1:6e:06:17:07:00:6f:da:ea:39:9a:20:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8 Validity Not Before: Dec 19 04:01:38 2025 GMT Not After : Dec 20 04:01:38 2025 GMT Subject: CN=3dc65aa772b3d19456deaebea81a6f061ddbac26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:78:19:f7:12:63:f2:12:b2:a5:a8:7f:ef:cc: e6:23:e0:f5:d4:ba:e7:97:7d:99:50:ca:17:f0:66: a6:fe:0a:f7:23:d5:62:74:7c:e6:16:9b:cb:61:00: 59:da:1a:f0:11:3a:f1:66:95:6f:0a:b0:93:24:74: ab:7d:47:d6:0f:7a:ee:c5:06:09:cd:c2:23:3f:f4: 44:f0:c5:c3:cf:90:95:d3:e2:05:56:d0:5e:ef:8f: 7d:e5:8c:44:89:fa:bf:66:e7:d4:24:03:bf:5c:39: aa:ed:ec:b8:5c:4d:8f:5a:9e:74:df:dd:dd:68:e5: ee:5b:16:18:2a:bd:5b:d6:e3:97:4e:4b:70:02:07: 94:3e:79:74:6c:63:9f:d7:18:cd:d4:35:33:eb:aa: 0e:0e:92:ff:0c:dc:58:3c:7a:e6:ea:ae:ae:aa:b2: b6:2d:8e:bf:11:87:03:6c:d4:fc:61:a1:0e:a2:29: be:60:61:a2:61:44:aa:be:2d:d2:20:12:d9:df:0b: 2f:31:0e:51:b5:ea:a0:c1:5b:a7:06:18:7d:5f:e5: b4:50:8c:6b:da:6e:7c:3c:fc:58:bb:de:fd:8c:f9: 78:32:de:a4:21:c2:14:a8:b4:ba:f2:dd:e4:e0:92: bf:7e:f2:ab:57:35:ff:f6:56:9f:31:26:b3:28:8c: f9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C6:5A:A7:72:B3:D1:94:56:DE:AE:BE:A8:1A:6F:06:1D:DB:AC:26 X509v3 Authority Key Identifier: keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:78:4f:73:b9:03:c1:1b:0a:81:cd:fd:f4:90:8f:d2:6e:db: 66:d6:f3:c4:01:0c:a7:1d:52:8a:08:2a:ef:00:b7:94:bd:63: ad:36:82:47:96:db:6a:cf:a9:b8:1d:c7:e8:cd:1a:b0:be:f5: d4:d4:0d:63:ab:4b:f9:a3:42:1c:dc:4b:67:ad:05:e4:cc:96: 3d:35:a6:2b:4f:26:f3:17:22:c9:83:7d:9d:ba:14:fd:9a:46: ad:d6:5e:80:bf:31:bf:97:01:36:40:b5:45:67:4c:27:f1:7b: 74:19:ba:21:74:e2:52:67:fd:a7:09:cf:8b:a8:52:4b:e6:2f: 5b:23:93:d0:6e:74:f6:15:46:be:a7:57:4a:5d:f5:e8:d3:ac: 1f:8f:9a:72:9e:75:ee:4b:5b:c0:8b:c6:61:36:d4:8e:e5:ff: b4:df:66:0a:e8:82:8d:8f:09:d4:fc:ae:15:06:f9:94:d1:cf: 3f:00:94:7d:9f:68:26:a3:9a:8c:ab:06:83:ca:da:f5:e2:77: e0:f4:79:11:c5:81:08:3d:6c:41:89:68:f9:89:87:fa:69:d7: ea:85:a4:96:d6:01:67:51:98:4d:1e:76:0b:6b:94:9e:5e:a7: f1:47:94:7d:45:77:36:29:90:f8:4a:32:ce:3e:e9:25:56:60: d4:7d:3a:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xTbRbgYXBwBv2uo5miDhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OWM5NzM4ZmM3YjFlNDA2NGM1YzYzNmJiYTZhOGI1NDkz OTFjYTgwHhcNMjUxMjE5MDQwMTM4WhcNMjUxMjIwMDQwMTM4WjAzMTEwLwYDVQQD EygzZGM2NWFhNzcyYjNkMTk0NTZkZWFlYmVhODFhNmYwNjFkZGJhYzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHgZ9xJj8hKypah/78zmI+D11Lrn l32ZUMoX8Gam/gr3I9VidHzmFpvLYQBZ2hrwETrxZpVvCrCTJHSrfUfWD3ruxQYJ zcIjP/RE8MXDz5CV0+IFVtBe74995YxEifq/ZufUJAO/XDmq7ey4XE2PWp50393d aOXuWxYYKr1b1uOXTktwAgeUPnl0bGOf1xjN1DUz66oODpL/DNxYPHrm6q6uqrK2 LY6/EYcDbNT8YaEOoim+YGGiYUSqvi3SIBLZ3wsvMQ5RteqgwVunBhh9X+W0UIxr 2m58PPxYu979jPl4Mt6kIcIUqLS68t3k4JK/fvKrVzX/9lafMSazKIz52QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3GWqdys9GUVt6uvqgabwYd26wmMB8GA1UdIwQY MBaAFAeclzj8ex5AZMXGNrumqLVJORyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjV5WE9QeDdIa0JreGNZMnU2YW90VWs1SEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zY2ZjZDktNDk0Yy00MWM4LTgxZTIt ZDQxODE1M2EzMGE2LzEvQjV5WE9QeDdIa0JreGNZMnU2YW90VWs1SEtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8zY2ZjZDktNDk0Yy00MWM4LTgxZTItZDQxODE1M2EzMGE2 LzEvQjV5WE9QeDdIa0JreGNZMnU2YW90VWs1SEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHhPc7kD wRsKgc399JCP0m7bZtbzxAEMpx1Siggq7wC3lL1jrTaCR5bbas+puB3H6M0asL71 1NQNY6tL+aNCHNxLZ60F5MyWPTWmK08m8xciyYN9nboU/ZpGrdZegL8xv5cBNkC1 RWdMJ/F7dBm6IXTiUmf9pwnPi6hSS+YvWyOT0G509hVGvqdXSl316NOsH4+acp51 7ktbwIvGYTbUjuX/tN9mCuiCjY8J1PyuFQb5lNHPPwCUfZ9oJqOajKsGg8ra9eJ3 4PR5EcWBCD1sQYlo+YmH+mnX6oWkltYBZ1GYTR52C2uUnl6n8UeUfUV3NimQ+Eoy zj7pJVZg1H063Q== -----END CERTIFICATE-----Generated at Fri Dec 19 09:14:11 2025 by rpki-client