This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft File: m5fCLQsziopFqhNFsJF7oNyXM5A.mft (raw, json) Hash identifier: HwGfW3ymBcvrOM8E10aSQ7l3/j4jdqKfkQI4sG9A0Gs= Subject key identifier: 83:4F:B8:17:F4:83:E8:BC:4C:3D:64:66:62:86:29:D1:CA:1C:86:8C Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90 Certificate issuer: /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390 Certificate serial: 019B3C7F810A82FD3F6558DA19D4014AAAEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft Manifest number: 13C2 Signing time: Sat 20 Dec 2025 16:02:27 +0000 Manifest this update: Sat 20 Dec 2025 16:02:27 +0000 Manifest next update: Sun 21 Dec 2025 16:02:27 +0000 Files and hashes: 1: 7McjxupphmUTIDMB5hb0zSdkKPU.roa (hash: EbiTg62JkmhMKsH+lFrkNiNAuLRjLLKFna7hKz3yDps=) 2: A5RYkDh5iQHsMCEi9eKiE3UYQTY.roa (hash: 2Z2MMJPop83/eKqvvRjbHx9UxdjVWLlOnDA0QnBD8dM=) 3: m5fCLQsziopFqhNFsJF7oNyXM5A.crl (hash: qzbPUlYxfEKbcEV2d54Yh1pC71Buow36rTKHZtiTWE0=) 4: pjqTP4jfQfsNA8tjYi42Sc1-S88.roa (hash: H5/YZQfh0J/SWAF5xqrnL8j1DdrlYslU+4bEkRfwqM8=) 5: s9-7uzfILp_wqpuTQ6RY06M_vb0.roa (hash: Pd9QbCwquRy9rtMT/uczWDR3qfrQi3t7npfRPZFPtOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:81:0a:82:fd:3f:65:58:da:19:d4:01:4a:aa:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390 Validity Not Before: Dec 20 16:02:27 2025 GMT Not After : Dec 21 16:02:27 2025 GMT Subject: CN=834fb817f483e8bc4c3d6466628629d1ca1c868c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:aa:58:5d:56:a5:bd:a0:14:50:4a:c1:af:81: 2e:ad:99:da:47:fc:05:25:52:22:92:4f:0f:9c:4a: 65:61:fd:e4:22:6b:d7:1a:a3:98:74:ae:10:a6:de: f5:65:18:f3:5f:94:bb:30:a2:6a:e5:68:c8:26:a7: 9b:19:61:9a:66:ef:9b:ce:41:95:4a:f2:d0:d6:fc: 2c:44:85:3e:d0:34:7e:de:5b:49:d9:80:ca:8b:4a: e7:9b:c5:85:ea:b9:8b:c6:c2:9c:de:7e:8d:5d:cc: 5a:c2:36:19:1d:03:69:98:98:75:fe:39:1c:f3:a0: 98:9d:30:a5:09:17:29:70:e4:47:53:dd:13:fc:d4: 33:7e:f8:26:47:97:54:21:83:93:86:5d:b4:c9:96: 22:64:d8:88:fa:b3:56:5b:af:9d:96:fe:b8:fb:c0: c3:28:6c:6f:ac:3b:6d:32:d7:1f:30:02:31:67:d8: 54:61:4b:c8:d0:0c:28:d6:b1:d5:c5:44:1a:01:63: b8:fd:06:55:1b:31:cf:1b:98:56:82:ed:0d:4b:05: 09:61:fa:11:de:49:c5:e1:66:5a:e4:5a:e3:7a:aa: 66:b4:9a:3d:1e:fb:f5:98:b2:7c:cf:d9:27:fb:e8: 8a:37:d6:9a:93:89:05:46:71:44:d7:f7:ca:ad:9e: a5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4F:B8:17:F4:83:E8:BC:4C:3D:64:66:62:86:29:D1:CA:1C:86:8C X509v3 Authority Key Identifier: keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:74:26:53:c4:b7:27:e7:5f:41:ce:cd:23:cc:70:42:39:94: e2:f5:09:9f:c2:cc:4d:03:88:d6:05:87:e4:d8:73:b4:f3:9d: a0:35:93:71:0a:3f:7d:7b:6f:fd:82:dd:6b:c9:36:e4:c6:17: 1e:05:9d:30:b8:9d:a6:49:11:ac:2d:6d:7c:bd:02:eb:0f:ec: 08:27:a7:d2:60:0d:49:57:d4:ff:ef:a0:9c:1b:65:d4:d6:51: 9e:ce:75:9a:b7:23:aa:c1:50:0b:d9:f8:57:91:86:2d:30:92: b5:12:c8:a0:15:a3:a5:7b:95:b1:79:67:49:91:6a:4b:77:ce: 9b:dd:22:9a:4b:fa:15:43:98:85:35:02:25:0a:3d:56:53:9b: 23:b1:69:e6:e0:67:4d:0a:5c:e3:f1:87:f3:8a:3d:6e:12:c8: 21:e1:76:82:48:cb:86:aa:42:e1:d4:f3:1f:dc:2d:69:20:eb: a8:16:33:e6:22:98:6a:e1:e0:f8:c6:c4:b2:0d:26:ea:50:22: 98:73:74:0c:1e:06:ac:34:14:cd:d3:6a:80:1b:c7:3f:d7:41: 82:8b:b7:51:48:45:eb:07:70:72:d2:e3:5c:27:36:55:d5:9a: d9:23:b4:66:ad:e5:12:f5:e8:bf:3e:05:05:97:93:2d:0f:2d: d4:44:1a:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f4EKgv0/ZVjaGdQBSqruMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliOTdjMjJkMGIzMzhhOGE0NWFhMTM0NWIwOTE3YmEwZGM5 NzMzOTAwHhcNMjUxMjIwMTYwMjI3WhcNMjUxMjIxMTYwMjI3WjAzMTEwLwYDVQQD Eyg4MzRmYjgxN2Y0ODNlOGJjNGMzZDY0NjY2Mjg2MjlkMWNhMWM4NjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhapYXValvaAUUErBr4EurZnaR/wF JVIikk8PnEplYf3kImvXGqOYdK4Qpt71ZRjzX5S7MKJq5WjIJqebGWGaZu+bzkGV SvLQ1vwsRIU+0DR+3ltJ2YDKi0rnm8WF6rmLxsKc3n6NXcxawjYZHQNpmJh1/jkc 86CYnTClCRcpcORHU90T/NQzfvgmR5dUIYOThl20yZYiZNiI+rNWW6+dlv64+8DD KGxvrDttMtcfMAIxZ9hUYUvI0Awo1rHVxUQaAWO4/QZVGzHPG5hWgu0NSwUJYfoR 3knF4WZa5FrjeqpmtJo9Hvv1mLJ8z9kn++iKN9aak4kFRnFE1/fKrZ6lmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINPuBf0g+i8TD1kZmKGKdHKHIaMMB8GA1UdIwQY MBaAFJuXwi0LM4qKRaoTRbCRe6DclzOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTVmQ0xRc3ppb3BGcWhORnNKRjdvTnlYTTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lMjI1OGQtOGJjNS00NGVkLTgwNzMt YWU5OTllZDdjNWQ0LzEvbTVmQ0xRc3ppb3BGcWhORnNKRjdvTnlYTTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9lMjI1OGQtOGJjNS00NGVkLTgwNzMtYWU5OTllZDdjNWQ0 LzEvbTVmQ0xRc3ppb3BGcWhORnNKRjdvTnlYTTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQnQmU8S3 J+dfQc7NI8xwQjmU4vUJn8LMTQOI1gWH5NhztPOdoDWTcQo/fXtv/YLda8k25MYX HgWdMLidpkkRrC1tfL0C6w/sCCen0mANSVfU/++gnBtl1NZRns51mrcjqsFQC9n4 V5GGLTCStRLIoBWjpXuVsXlnSZFqS3fOm90imkv6FUOYhTUCJQo9VlObI7Fp5uBn TQpc4/GH84o9bhLIIeF2gkjLhqpC4dTzH9wtaSDrqBYz5iKYauHg+MbEsg0m6lAi mHN0DB4GrDQUzdNqgBvHP9dBgou3UUhF6wdwctLjXCc2VdWa2SO0Zq3lEvXovz4F BZeTLQ8t1EQaXQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:33:45 2025 by rpki-client