This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft File: f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft (raw, json) Hash identifier: XK2oucj6BKYMMwBGkY3aK78JaHgJa4WfBHj2izpnJ7Q= Subject key identifier: 91:C4:5C:97:DB:FB:D2:EC:18:20:49:CD:79:37:86:F0:40:90:47:D0 Authority key identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2 Certificate issuer: /CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2 Certificate serial: 019B432550C37A21D67C0ED7B136A87256DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft Manifest number: 171E Signing time: Sun 21 Dec 2025 23:01:17 +0000 Manifest this update: Sun 21 Dec 2025 23:01:17 +0000 Manifest next update: Mon 22 Dec 2025 23:01:17 +0000 Files and hashes: 1: OtzZOisV1bM6sc-GLNPwmdom2N8.roa (hash: hJNg1q2HXpx1PLv5SMEFG6V3PCbaVExvvGGJiMCfNyI=) 2: f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl (hash: 8LCMYEWr4uzIhq9LThbCEbkJqaTvxOqjXKeTD4Nh6w4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:50:c3:7a:21:d6:7c:0e:d7:b1:36:a8:72:56:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2 Validity Not Before: Dec 21 23:01:17 2025 GMT Not After : Dec 22 23:01:17 2025 GMT Subject: CN=91c45c97dbfbd2ec182049cd793786f0409047d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f7:47:f4:38:4b:12:24:8e:7a:f5:a8:dd:0c: 0a:ce:27:7e:cf:a9:9c:44:33:74:46:88:7f:83:70: 02:c5:49:7b:9d:48:f0:ec:c5:bb:fd:e4:cb:7e:f4: a5:3b:1f:05:ee:98:8c:53:7c:f7:df:eb:19:bf:6d: 1b:49:14:ef:bf:19:b5:a9:6a:42:4b:0a:a0:bd:78: cc:1d:be:3a:f2:d0:ad:9b:d7:7e:d7:46:41:37:08: 6b:49:e1:ef:a9:b3:20:5f:60:af:53:6a:45:f4:70: 55:5f:a8:09:a2:34:6d:5e:0a:da:2c:da:c7:fc:5d: ca:b1:15:31:ea:ff:b3:e8:b0:04:81:fa:97:e8:a0: 62:aa:2c:ec:43:c5:ec:52:70:a9:f5:bc:a2:b4:2e: ac:8d:78:15:d8:d1:72:12:51:8c:86:cf:3e:aa:76: a9:94:ab:02:99:8d:63:62:61:17:dc:d8:76:4a:03: b2:54:14:42:2d:f1:4a:c5:5d:8d:02:6f:66:d0:12: 5a:91:74:f5:37:81:dd:c1:2b:2d:a1:31:77:26:b2: dc:be:b2:b6:f3:69:08:01:82:aa:7c:56:0e:a3:54: 78:d9:6c:db:95:a5:96:02:7d:30:58:59:4d:9c:96: ae:09:2f:a3:a0:b6:80:67:ed:8a:46:47:91:85:07: de:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C4:5C:97:DB:FB:D2:EC:18:20:49:CD:79:37:86:F0:40:90:47:D0 X509v3 Authority Key Identifier: keyid:7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:d1:26:55:96:38:25:1d:f9:8d:0e:17:7c:40:63:83:36:df: 58:83:2a:d5:f3:25:4a:11:a1:c3:b9:f2:8b:3a:42:51:4f:66: 02:23:b5:d9:87:03:ab:86:2d:e0:e8:b1:62:21:77:d6:0f:17: c4:98:11:42:a8:c8:82:0c:5e:41:67:2d:38:a6:c0:17:51:53: ff:e0:0f:72:5f:1f:9a:fa:06:62:9e:b1:1a:67:19:5f:2e:79: c8:64:d7:4b:13:32:11:c2:4f:21:3e:af:c5:43:92:3b:95:f3: 01:39:c9:99:24:d5:a1:b8:eb:44:d5:e3:1d:57:82:2e:f8:65: ed:59:1a:30:c6:c6:1e:d7:cf:3c:2e:41:95:a4:49:60:2b:99: 5e:2a:e5:a9:2b:d8:a6:ae:f3:8a:73:62:18:9d:ff:23:42:dc: a5:90:57:cb:a1:e0:bd:b5:3d:95:4e:4f:81:42:a5:dd:3c:6e: a8:99:91:68:2f:89:5b:b0:c5:06:64:3a:22:ab:87:8d:87:c2: 80:14:44:a2:d9:8f:bc:60:b7:c0:60:fc:e5:22:dc:35:8e:67: 77:c0:3d:9f:1b:62:f4:38:f4:4c:e0:40:28:75:5e:15:3c:b4: 3e:f2:de:93:0b:35:68:70:16:a8:29:cb:45:1e:d4:7a:5d:e4: 17:a5:cc:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJVDDeiHWfA7XsTaoclbaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmOTJkZjc2MTBmMDQ4ZjQzYmY0NGMzMzZkNDFjNmMxMTU3 ZWYwZTIwHhcNMjUxMjIxMjMwMTE3WhcNMjUxMjIyMjMwMTE3WjAzMTEwLwYDVQQD Eyg5MWM0NWM5N2RiZmJkMmVjMTgyMDQ5Y2Q3OTM3ODZmMDQwOTA0N2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfdH9DhLEiSOevWo3QwKzid+z6mc RDN0Roh/g3ACxUl7nUjw7MW7/eTLfvSlOx8F7piMU3z33+sZv20bSRTvvxm1qWpC SwqgvXjMHb468tCtm9d+10ZBNwhrSeHvqbMgX2CvU2pF9HBVX6gJojRtXgraLNrH /F3KsRUx6v+z6LAEgfqX6KBiqizsQ8XsUnCp9byitC6sjXgV2NFyElGMhs8+qnap lKsCmY1jYmEX3Nh2SgOyVBRCLfFKxV2NAm9m0BJakXT1N4HdwSstoTF3JrLcvrK2 82kIAYKqfFYOo1R42WzblaWWAn0wWFlNnJauCS+joLaAZ+2KRkeRhQfedQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHEXJfb+9LsGCBJzXk3hvBAkEfQMB8GA1UdIwQY MBaAFH+S33YQ8Ej0O/RMM21BxsEVfvDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OGJlMTgtMmYzNS00YzZhLWFhNmEt N2Y3MmY0NGI4OTgyLzEvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81OGJlMTgtMmYzNS00YzZhLWFhNmEtN2Y3MmY0NGI4OTgy LzEvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNEmVZY4 JR35jQ4XfEBjgzbfWIMq1fMlShGhw7nyizpCUU9mAiO12YcDq4Yt4OixYiF31g8X xJgRQqjIggxeQWctOKbAF1FT/+APcl8fmvoGYp6xGmcZXy55yGTXSxMyEcJPIT6v xUOSO5XzATnJmSTVobjrRNXjHVeCLvhl7VkaMMbGHtfPPC5BlaRJYCuZXirlqSvY pq7zinNiGJ3/I0LcpZBXy6HgvbU9lU5PgUKl3TxuqJmRaC+JW7DFBmQ6IquHjYfC gBREotmPvGC3wGD85SLcNY5nd8A9nxti9Dj0TOBAKHVeFTy0PvLekws1aHAWqCnL RR7Uel3kF6XMaw== -----END CERTIFICATE-----Generated at Mon Dec 22 02:50:11 2025 by rpki-client