This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft File: rB5-vncjkuz4xhcsJvHGfuPGGIM.mft (raw, json) Hash identifier: 26WICoaqQV+UbQx+VNym2euNLty+7sFQ+Ef8bHfCJBM= Subject key identifier: C9:6E:D3:CB:D8:BD:67:03:71:80:69:09:23:FD:BE:BA:A0:EB:83:C3 Authority key identifier: AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83 Certificate issuer: /CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883 Certificate serial: 019B17CCBE3FBDC7C3A47A8ECC978630CF56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft Manifest number: 0B1D Signing time: Sat 13 Dec 2025 13:00:52 +0000 Manifest this update: Sat 13 Dec 2025 13:00:52 +0000 Manifest next update: Sun 14 Dec 2025 13:00:52 +0000 Files and hashes: 1: djea3wowsH9-GL3nIoFch0gf_Ow.roa (hash: t6fqkUvoXSupS3l5uRjJ3VosWSd+9PoyLIE+ML64T24=) 2: rB5-vncjkuz4xhcsJvHGfuPGGIM.crl (hash: 0H6K3f5O0vtmGiItqWMUWPRyQq2HvwvGIf1BRg5R/c0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:cc:be:3f:bd:c7:c3:a4:7a:8e:cc:97:86:30:cf:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883 Validity Not Before: Dec 13 13:00:52 2025 GMT Not After : Dec 14 13:00:52 2025 GMT Subject: CN=c96ed3cbd8bd67037180690923fdbebaa0eb83c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b3:17:8b:8e:8b:f9:b4:4c:b8:bb:51:dc:74: d6:e5:7c:0a:c4:19:74:fe:67:a9:7d:60:4a:29:81: 66:95:fb:2a:5c:e1:6a:42:bb:bb:3a:ce:03:4b:c0: 37:e5:47:e8:d7:79:4e:2c:65:38:58:85:b4:f4:6f: 98:94:0c:95:e4:f5:82:d2:60:ff:b1:9b:0b:78:49: b2:ac:7e:e9:f5:ae:69:b4:97:da:69:78:f2:6a:30: 96:5b:ed:56:96:78:2b:a7:0b:2b:91:39:44:c5:9a: c6:9d:c1:f9:1f:bb:6c:77:2e:e6:5c:27:4f:fc:3e: c1:96:a2:1b:f2:7b:dd:85:eb:3b:67:82:5c:b1:44: 38:c2:97:17:7d:cb:f9:2d:ee:b8:00:fc:94:98:86: 99:43:39:3f:83:4a:ae:7a:c6:8e:3d:f1:c3:37:ff: 21:17:9e:62:fc:ca:85:06:1e:3b:bf:c6:72:e6:af: c4:cc:80:29:54:61:30:3e:63:a7:7e:ed:36:c2:06: c1:74:26:fb:76:98:78:20:ab:37:45:09:98:a8:df: da:44:7c:5a:a2:73:85:37:3a:df:f0:aa:43:40:d8: a4:c9:ad:67:76:19:e0:d4:84:e1:5e:42:c0:32:a0: da:37:b5:8a:ef:87:e6:c3:12:71:10:51:95:6e:72: 3c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6E:D3:CB:D8:BD:67:03:71:80:69:09:23:FD:BE:BA:A0:EB:83:C3 X509v3 Authority Key Identifier: keyid:AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b9:b0:b4:f1:c9:33:e6:e8:92:c0:f8:82:15:9c:eb:ed:b3: 60:6e:c8:83:f2:2e:65:cc:05:20:73:e0:ba:94:b3:bf:24:84: af:c7:34:d5:c1:08:01:c5:ac:68:a4:ff:8b:de:d6:0a:24:45: 78:11:61:1c:68:e7:8b:c4:01:59:63:f2:51:9a:7e:d7:1f:3f: 3f:b4:e9:c7:01:96:59:13:06:60:c1:f0:2a:51:35:9d:e5:33: 8e:05:7f:bb:4b:85:a1:ca:66:87:16:5c:45:8b:bf:6e:50:ca: d3:76:d1:fb:3c:63:a2:0a:a2:97:e4:45:80:e5:54:35:f7:45: 14:e4:32:fa:fb:4c:61:c7:e2:76:9e:3f:14:0e:20:03:6f:3a: e6:33:47:6d:5a:90:66:84:92:e6:d5:a7:e1:0e:77:0a:50:db: f3:36:d1:69:64:5e:ed:c4:42:78:f4:d6:7a:b1:9d:ed:42:af: 3c:4b:58:de:f6:78:b0:b1:7d:86:3d:a0:6d:75:cf:24:25:35: ab:bc:3e:01:91:c9:2a:a4:a5:a2:51:be:33:77:10:0f:40:63: b6:49:ad:67:2d:4a:a5:ae:e2:63:6f:5f:2a:f9:43:90:f3:77: 3b:6c:8a:38:eb:04:55:d6:8c:28:55:d7:9d:c8:c8:76:6a:7c: 0b:3f:07:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsXzL4/vcfDpHqOzJeGMM9WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMWU3ZWJlNzcyMzkyZWNmOGM2MTcyYzI2ZjFjNjdlZTNj NjE4ODMwHhcNMjUxMjEzMTMwMDUyWhcNMjUxMjE0MTMwMDUyWjAzMTEwLwYDVQQD EyhjOTZlZDNjYmQ4YmQ2NzAzNzE4MDY5MDkyM2ZkYmViYWEwZWI4M2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurMXi46L+bRMuLtR3HTW5XwKxBl0 /mepfWBKKYFmlfsqXOFqQru7Os4DS8A35Ufo13lOLGU4WIW09G+YlAyV5PWC0mD/ sZsLeEmyrH7p9a5ptJfaaXjyajCWW+1WlngrpwsrkTlExZrGncH5H7tsdy7mXCdP /D7BlqIb8nvdhes7Z4JcsUQ4wpcXfcv5Le64APyUmIaZQzk/g0quesaOPfHDN/8h F55i/MqFBh47v8Zy5q/EzIApVGEwPmOnfu02wgbBdCb7dph4IKs3RQmYqN/aRHxa onOFNzrf8KpDQNikya1ndhng1IThXkLAMqDaN7WK74fmwxJxEFGVbnI8uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlu08vYvWcDcYBpCSP9vrqg64PDMB8GA1UdIwQY MBaAFKwefr53I5Ls+MYXLCbxxn7jxhiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckI1LXZuY2prdXo0eGhjc0p2SEdmdVBHR0lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi82M2JjNmMtM2Y3NC00Zjc3LWI2OWEt YTIxODZmODY4NTE5LzEvckI1LXZuY2prdXo0eGhjc0p2SEdmdVBHR0lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi82M2JjNmMtM2Y3NC00Zjc3LWI2OWEtYTIxODZmODY4NTE5 LzEvckI1LXZuY2prdXo0eGhjc0p2SEdmdVBHR0lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7mwtPHJ M+boksD4ghWc6+2zYG7Ig/IuZcwFIHPgupSzvySEr8c01cEIAcWsaKT/i97WCiRF eBFhHGjni8QBWWPyUZp+1x8/P7TpxwGWWRMGYMHwKlE1neUzjgV/u0uFocpmhxZc RYu/blDK03bR+zxjogqil+RFgOVUNfdFFOQy+vtMYcfidp4/FA4gA2865jNHbVqQ ZoSS5tWn4Q53ClDb8zbRaWRe7cRCePTWerGd7UKvPEtY3vZ4sLF9hj2gbXXPJCU1 q7w+AZHJKqSlolG+M3cQD0BjtkmtZy1Kpa7iY29fKvlDkPN3O2yKOOsEVdaMKFXX ncjIdmp8Cz8HlQ== -----END CERTIFICATE-----Generated at Sat Dec 13 14:27:25 2025 by rpki-client