This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft File: p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft (raw, json) Hash identifier: Ewm6TskQPnDa27KOvc+jhRrXIOiftLbW1QkovnIoYB0= Subject key identifier: C8:48:AD:F5:75:50:8D:A1:86:4B:4C:71:9A:65:27:25:71:15:DF:13 Authority key identifier: A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44 Certificate issuer: /CN=a7967d76c2d46720d4cfac0459fa3c3d22005044 Certificate serial: 019B5E9C46096C9AB93152E765C6CC91A06C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft Manifest number: 14A1 Signing time: Sat 27 Dec 2025 07:00:58 +0000 Manifest this update: Sat 27 Dec 2025 07:00:58 +0000 Manifest next update: Sun 28 Dec 2025 07:00:58 +0000 Files and hashes: 1: p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl (hash: uIyZ8fkRIrMQ1KuZyHwxmq76CNJp8l/RZ+bWGAdo0iI=) 2: yBmdgjqKFjOC_LFP16Md73QPZaM.roa (hash: 7uCrDxR1l98wleRX/wBWwg1CUrRxAdBoi9KU5PuzGk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 07:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:9c:46:09:6c:9a:b9:31:52:e7:65:c6:cc:91:a0:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7967d76c2d46720d4cfac0459fa3c3d22005044 Validity Not Before: Dec 27 07:00:58 2025 GMT Not After : Dec 28 07:00:58 2025 GMT Subject: CN=c848adf575508da1864b4c719a6527257115df13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e4:9b:7c:ab:60:a4:5b:6b:da:07:e1:e2:15: 8a:67:d4:31:17:3f:ed:e6:2f:cf:5e:21:e9:cf:17: 45:d3:89:02:a3:a9:7a:29:99:14:29:3a:40:88:34: 32:da:13:b4:1b:ba:32:c4:60:3e:e3:5f:d3:45:a7: 12:b4:0a:5c:29:9c:9a:89:c4:94:87:05:8a:c2:2f: 21:0e:cd:f2:74:4f:ff:79:18:71:6c:d3:b3:cf:ac: 14:76:21:66:39:42:4b:af:78:22:52:d5:1e:ef:d4: 2f:82:e8:65:d7:84:44:40:78:8b:90:ac:6f:e3:f4: 58:19:76:41:e7:78:1e:43:f4:c9:fb:55:30:f9:5b: dd:59:9c:e0:91:00:40:71:5d:be:03:c2:31:36:a3: e2:fb:a6:51:1e:47:80:6e:c7:ea:1b:57:30:a6:d2: 1f:fb:7b:9a:ce:07:17:73:13:46:27:bb:93:96:86: 48:af:9e:02:b1:cd:27:8c:81:1e:2b:0e:ac:0b:b3: c0:fe:93:46:d4:c5:8e:93:95:6b:1f:02:3c:5f:cc: 61:82:e7:82:d1:c8:75:92:cb:a4:fb:6c:c4:a7:5c: 40:3e:7d:2b:72:e7:e0:d9:cd:f7:67:42:27:98:b0: 77:64:02:de:c4:97:3c:23:fb:ee:4b:5f:9a:8e:e3: 48:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:48:AD:F5:75:50:8D:A1:86:4B:4C:71:9A:65:27:25:71:15:DF:13 X509v3 Authority Key Identifier: keyid:A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:ae:d3:a8:14:35:be:e5:3c:e4:22:ed:b7:c9:7a:94:b6:7d: 7a:f1:28:f1:3a:1e:9f:ca:7f:f9:f0:b2:07:1f:46:1e:6a:21: 51:54:8e:e3:cd:d7:2b:cb:a7:7f:8e:7d:eb:58:c4:a2:68:27: 6f:6a:1a:de:da:f3:41:4d:da:92:85:79:32:9c:95:a4:df:46: bf:71:d6:04:89:47:a3:2e:00:35:1f:84:90:89:96:09:57:2f: e6:cb:25:8e:97:5d:9d:27:9c:4b:73:6f:8a:d5:f3:20:f5:9c: bc:11:d2:4c:04:28:4b:be:4e:25:70:e4:f5:82:36:59:4b:7d: b1:75:77:0f:df:4b:89:21:9a:9e:e2:e6:5f:76:10:fe:c0:cc: d5:96:8a:c3:36:d4:78:2e:99:5d:d7:f3:97:1d:b2:07:13:2d: f3:28:c3:2e:68:9b:8f:7d:a6:24:cd:1d:da:cf:07:29:11:58: d7:79:b6:41:21:ed:01:ba:05:9e:de:e4:64:ca:14:52:a6:3e: 29:d1:1e:bd:29:1e:9e:2a:8a:ac:4c:ef:96:41:65:b7:a3:25: ca:e8:19:d0:4e:57:17:a4:8e:d0:27:37:c7:f3:11:27:ee:16: 0c:2c:85:98:75:b8:d7:59:b5:3e:db:bc:51:22:4c:08:c1:3f: ab:2a:88:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtenEYJbJq5MVLnZcbMkaBsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OTY3ZDc2YzJkNDY3MjBkNGNmYWMwNDU5ZmEzYzNkMjIw MDUwNDQwHhcNMjUxMjI3MDcwMDU4WhcNMjUxMjI4MDcwMDU4WjAzMTEwLwYDVQQD EyhjODQ4YWRmNTc1NTA4ZGExODY0YjRjNzE5YTY1MjcyNTcxMTVkZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeSbfKtgpFtr2gfh4hWKZ9QxFz/t 5i/PXiHpzxdF04kCo6l6KZkUKTpAiDQy2hO0G7oyxGA+41/TRacStApcKZyaicSU hwWKwi8hDs3ydE//eRhxbNOzz6wUdiFmOUJLr3giUtUe79Qvguhl14REQHiLkKxv 4/RYGXZB53geQ/TJ+1Uw+VvdWZzgkQBAcV2+A8IxNqPi+6ZRHkeAbsfqG1cwptIf +3uazgcXcxNGJ7uTloZIr54Csc0njIEeKw6sC7PA/pNG1MWOk5VrHwI8X8xhgueC 0ch1ksuk+2zEp1xAPn0rcufg2c33Z0InmLB3ZALexJc8I/vuS1+ajuNI7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhIrfV1UI2hhktMcZplJyVxFd8TMB8GA1UdIwQY MBaAFKeWfXbC1Gcg1M+sBFn6PD0iAFBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDVaOWRzTFVaeURVejZ3RVdmbzhQU0lBVUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84N2I3NjgtMTU0NS00OTRhLTg0Zjkt MWNmNTBhNTM2MDI2LzEvcDVaOWRzTFVaeURVejZ3RVdmbzhQU0lBVUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS84N2I3NjgtMTU0NS00OTRhLTg0ZjktMWNmNTBhNTM2MDI2 LzEvcDVaOWRzTFVaeURVejZ3RVdmbzhQU0lBVUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA167TqBQ1 vuU85CLtt8l6lLZ9evEo8Toen8p/+fCyBx9GHmohUVSO483XK8unf45961jEomgn b2oa3trzQU3akoV5MpyVpN9Gv3HWBIlHoy4ANR+EkImWCVcv5ssljpddnSecS3Nv itXzIPWcvBHSTAQoS75OJXDk9YI2WUt9sXV3D99LiSGanuLmX3YQ/sDM1ZaKwzbU eC6ZXdfzlx2yBxMt8yjDLmibj32mJM0d2s8HKRFY13m2QSHtAboFnt7kZMoUUqY+ KdEevSkeniqKrEzvlkFlt6MlyugZ0E5XF6SO0Cc3x/MRJ+4WDCyFmHW411m1Ptu8 USJMCME/qyqISg== -----END CERTIFICATE-----Generated at Sat Dec 27 10:04:09 2025 by rpki-client