This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft File: t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft (raw, json) Hash identifier: A89K+XF251+QeRaLZO1BNOiYHgpU1A9DrSOo3ZvJCAw= Subject key identifier: 75:2E:C2:EB:B3:B0:1C:D8:60:E9:FF:4A:C6:30:09:53:EE:BD:99:36 Authority key identifier: B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94 Certificate issuer: /CN=b795aaf033004c92d7a26c236c14d32552d78d94 Certificate serial: 019B3D59BD5F1B6ABA346F667933C8788197 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft Manifest number: 1154 Signing time: Sat 20 Dec 2025 20:00:49 +0000 Manifest this update: Sat 20 Dec 2025 20:00:49 +0000 Manifest next update: Sun 21 Dec 2025 20:00:49 +0000 Files and hashes: 1: oAZxYtQ4Og3cgsl-3lYamhsa7e4.roa (hash: 3ae/XOyTNvdp+V+oKgkV4BxFv5zwWxKjx15ZyehKjvA=) 2: t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl (hash: UA9hDVPvajLCWoyCEqy/CyGRzFIpvowtWIgOHBlqLGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:bd:5f:1b:6a:ba:34:6f:66:79:33:c8:78:81:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b795aaf033004c92d7a26c236c14d32552d78d94 Validity Not Before: Dec 20 20:00:49 2025 GMT Not After : Dec 21 20:00:49 2025 GMT Subject: CN=752ec2ebb3b01cd860e9ff4ac6300953eebd9936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:73:d1:6d:dc:dd:3c:33:c3:fa:d3:ec:68:a3: d6:ec:5c:b5:ef:c2:1a:ed:6a:62:de:c0:cd:98:d2: 83:e1:5b:97:ff:59:82:fb:97:a1:4e:0b:d8:55:e9: 3e:8f:42:7f:58:8c:fe:8f:e7:86:0b:6a:4c:be:ab: ad:f7:72:ce:ff:a5:ff:3d:ef:5b:bd:16:de:97:90: 92:95:60:af:6b:ff:b0:0f:c7:58:b5:18:fd:cd:09: ca:22:14:f9:3f:1d:56:ea:82:9a:e2:3a:41:b5:77: ee:4f:e4:f7:bc:e0:48:50:80:70:39:9c:d5:09:ad: e0:42:b3:d9:61:bd:9d:a8:26:77:c0:0a:a2:4a:4a: db:ec:06:19:24:78:09:e7:33:0b:27:04:30:18:ed: 6e:44:44:e7:a5:fd:ff:a7:fd:4e:0a:40:2f:1f:3d: df:03:93:51:17:b1:04:66:fe:5e:6b:6d:ff:33:23: aa:7c:3e:98:fa:c9:80:c1:14:45:7f:12:53:2f:4a: 1b:e9:17:c5:4d:ae:ad:53:19:95:54:0f:4b:8f:ab: d4:8a:e6:d4:ce:ac:b4:f1:03:14:2c:2c:48:32:64: e9:66:96:47:f8:60:8f:8f:db:35:67:2c:b5:ca:cb: bf:ec:b6:a8:dd:23:9e:34:57:5b:60:5f:84:8d:b7: 90:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2E:C2:EB:B3:B0:1C:D8:60:E9:FF:4A:C6:30:09:53:EE:BD:99:36 X509v3 Authority Key Identifier: keyid:B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:9a:77:64:42:a7:3c:65:d8:3d:7b:b3:5b:5e:b8:f0:02:dd: 06:1c:ed:5e:0c:56:f0:fa:94:04:a1:1a:f5:c1:90:bf:c1:12: 2a:9d:ec:78:69:21:0c:ce:a8:4c:db:f4:76:c5:b2:99:a3:4d: 94:28:01:09:10:10:99:9f:28:17:7e:1d:d9:4b:27:c3:35:f0: ff:97:d0:61:76:80:88:2b:91:d3:95:2b:40:80:fd:a0:ad:92: 60:99:97:5f:b2:e5:a5:75:76:c2:de:0c:60:e3:8a:3a:61:44: af:30:9f:7a:ab:ae:09:61:87:db:e6:6c:e1:22:2c:cc:fb:db: 70:01:27:16:eb:af:de:8d:c8:da:fc:22:bd:48:60:d6:a2:6f: 3b:7c:a5:eb:98:ce:25:44:4a:d7:f7:1f:05:d4:0b:64:b8:f6: 2c:19:04:ee:2a:fb:5e:82:aa:d1:d3:65:ab:50:e4:43:91:c3: 13:e3:b4:0c:de:53:51:fe:bf:56:f3:61:5c:11:db:2f:ce:0c: fb:fd:69:a4:8a:ab:b4:61:8c:00:1c:aa:22:1c:1d:91:ed:e1: cd:17:63:0d:4b:98:90:e5:74:c2:2e:9c:99:06:b9:62:5c:ca: d6:9f:13:aa:39:ab:f3:32:f5:0f:b8:e9:44:d1:d1:a4:7a:02: cb:57:2f:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wb1fG2q6NG9meTPIeIGXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OTVhYWYwMzMwMDRjOTJkN2EyNmMyMzZjMTRkMzI1NTJk NzhkOTQwHhcNMjUxMjIwMjAwMDQ5WhcNMjUxMjIxMjAwMDQ5WjAzMTEwLwYDVQQD Eyg3NTJlYzJlYmIzYjAxY2Q4NjBlOWZmNGFjNjMwMDk1M2VlYmQ5OTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3PRbdzdPDPD+tPsaKPW7Fy178Ia 7Wpi3sDNmNKD4VuX/1mC+5ehTgvYVek+j0J/WIz+j+eGC2pMvqut93LO/6X/Pe9b vRbel5CSlWCva/+wD8dYtRj9zQnKIhT5Px1W6oKa4jpBtXfuT+T3vOBIUIBwOZzV Ca3gQrPZYb2dqCZ3wAqiSkrb7AYZJHgJ5zMLJwQwGO1uRETnpf3/p/1OCkAvHz3f A5NRF7EEZv5ea23/MyOqfD6Y+smAwRRFfxJTL0ob6RfFTa6tUxmVVA9Lj6vUiubU zqy08QMULCxIMmTpZpZH+GCPj9s1Zyy1ysu/7Lao3SOeNFdbYF+EjbeQYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUuwuuzsBzYYOn/SsYwCVPuvZk2MB8GA1UdIwQY MBaAFLeVqvAzAEyS16JsI2wU0yVS142UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDVXcThETUFUSkxYb213amJCVFRKVkxYalpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jNzUyYjItMThmOS00MTkxLTg4Zjgt YzA2NWYyNDJmMDIwLzEvdDVXcThETUFUSkxYb213amJCVFRKVkxYalpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9jNzUyYjItMThmOS00MTkxLTg4ZjgtYzA2NWYyNDJmMDIw LzEvdDVXcThETUFUSkxYb213amJCVFRKVkxYalpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5p3ZEKn PGXYPXuzW1648ALdBhztXgxW8PqUBKEa9cGQv8ESKp3seGkhDM6oTNv0dsWymaNN lCgBCRAQmZ8oF34d2UsnwzXw/5fQYXaAiCuR05UrQID9oK2SYJmXX7LlpXV2wt4M YOOKOmFErzCfequuCWGH2+Zs4SIszPvbcAEnFuuv3o3I2vwivUhg1qJvO3yl65jO JURK1/cfBdQLZLj2LBkE7ir7XoKq0dNlq1DkQ5HDE+O0DN5TUf6/VvNhXBHbL84M +/1ppIqrtGGMAByqIhwdke3hzRdjDUuYkOV0wi6cmQa5YlzK1p8Tqjmr8zL1D7jp RNHRpHoCy1cvaw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:01:58 2025 by rpki-client