This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft File: 5iNO09jKltxRjTXB58kr6_z2zk0.mft (raw, json) Hash identifier: iGZGUd8vYENEn3yN2Ksqf19ytBwT8y5wsOPD/vF2SCU= Subject key identifier: 6A:8E:7D:91:58:0A:DB:A7:48:A1:F8:1F:24:82:2B:9E:3A:F5:3D:46 Authority key identifier: E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D Certificate issuer: /CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d Certificate serial: 019B3C0FF7C21A9B4654F677A3127D4FD000 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft Manifest number: 1717 Signing time: Sat 20 Dec 2025 14:00:37 +0000 Manifest this update: Sat 20 Dec 2025 14:00:37 +0000 Manifest next update: Sun 21 Dec 2025 14:00:37 +0000 Files and hashes: 1: 5iNO09jKltxRjTXB58kr6_z2zk0.crl (hash: xTPKq86ePKaDJ+KA8AEthmRFYFzWUAj7DK5eLVzIQIk=) 2: 9wh4IjR2WdijxIEialrBfGScnoA.roa (hash: aGpT2hqWZX/M5kbSljEdFZvRHYfWgQ/Qc0ertXxiLJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:f7:c2:1a:9b:46:54:f6:77:a3:12:7d:4f:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d Validity Not Before: Dec 20 14:00:37 2025 GMT Not After : Dec 21 14:00:37 2025 GMT Subject: CN=6a8e7d91580adba748a1f81f24822b9e3af53d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3e:23:04:0f:09:45:4a:85:38:7d:17:c0:a5: 53:93:29:5d:9c:50:76:0a:3d:b7:96:4f:73:75:19: d1:87:7b:96:6c:fc:64:af:cb:2e:05:4b:d5:20:36: 75:6c:7c:e1:15:4b:7c:b2:eb:a7:dc:a5:f1:4c:e5: 4c:37:68:c5:51:cb:2e:e2:86:f3:69:83:e0:8f:e2: fc:ff:e4:53:5c:97:4c:2e:85:cd:65:c2:32:07:d6: 09:41:84:60:96:37:60:4c:fa:ad:6f:73:74:87:f5: 0a:2b:69:06:cb:97:84:56:85:14:bb:46:17:39:4c: a2:88:12:79:77:30:70:e7:d8:a2:ee:bb:4b:e9:80: d0:3c:4c:f3:6c:0d:8b:67:67:8b:22:2f:c3:01:de: 68:af:d4:f6:32:17:3e:d6:48:bf:ab:57:75:77:aa: b6:c0:b9:72:46:4b:dd:6c:57:32:de:01:8b:1a:3a: d2:0b:19:d1:e4:c5:c1:e1:63:77:62:53:56:42:be: 0a:28:9d:a3:c6:ea:b4:c3:b8:ed:a9:ad:1c:f5:83: 8d:a9:fe:92:cd:a5:e5:26:c3:df:2a:34:86:1f:7e: c3:29:2c:85:4a:f7:e9:48:58:bf:bb:f1:07:9c:0f: 9b:86:1b:27:e2:00:1a:b6:a6:93:64:8d:29:82:0e: e2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8E:7D:91:58:0A:DB:A7:48:A1:F8:1F:24:82:2B:9E:3A:F5:3D:46 X509v3 Authority Key Identifier: keyid:E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:f4:8c:09:29:e8:f4:8b:de:26:40:54:66:8a:fd:87:90:64: 98:52:d2:2e:5d:93:1d:0a:84:26:7f:d0:e6:a8:eb:d2:29:71: c1:cc:cc:bc:e3:14:87:89:31:30:10:47:2c:c6:bc:08:35:9c: b8:0d:a9:fb:68:eb:ec:57:e4:46:ac:e2:33:fc:e7:27:4f:c3: 25:06:e1:77:38:d6:59:4e:eb:f5:b0:9f:70:d8:94:95:92:e1: 83:8f:eb:b5:fd:b5:83:1a:06:2f:4c:96:56:eb:5e:4e:2c:63: 08:79:64:d8:b8:ad:2e:f9:4c:70:2e:a8:81:76:a9:ed:85:02: 0f:1b:5b:c0:1f:fd:ff:b1:27:e8:59:08:27:1a:8e:8c:3b:51: dc:94:2e:7b:a5:d4:f1:4a:05:c6:33:dd:9f:5b:85:6f:d5:97: b3:7b:66:01:64:62:a6:08:84:fa:cb:6a:93:25:5c:6f:e4:72: de:b2:be:19:e0:15:e5:08:98:58:6f:e0:94:14:c4:ce:be:d2: b5:08:ad:25:f0:87:5b:b2:04:2a:ce:29:d4:9a:a8:c7:2c:b2: d4:91:7b:76:9c:79:d8:79:5b:67:73:de:de:e8:dd:23:20:74: a4:30:0a:fd:e4:15:d6:e8:10:9f:83:7e:50:d6:a2:75:bc:fc: 87:69:99:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D/fCGptGVPZ3oxJ9T9AAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MjM0ZWQzZDhjYTk2ZGM1MThkMzVjMWU3YzkyYmViZmNm NmNlNGQwHhcNMjUxMjIwMTQwMDM3WhcNMjUxMjIxMTQwMDM3WjAzMTEwLwYDVQQD Eyg2YThlN2Q5MTU4MGFkYmE3NDhhMWY4MWYyNDgyMmI5ZTNhZjUzZDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj4jBA8JRUqFOH0XwKVTkyldnFB2 Cj23lk9zdRnRh3uWbPxkr8suBUvVIDZ1bHzhFUt8suun3KXxTOVMN2jFUcsu4obz aYPgj+L8/+RTXJdMLoXNZcIyB9YJQYRgljdgTPqtb3N0h/UKK2kGy5eEVoUUu0YX OUyiiBJ5dzBw59ii7rtL6YDQPEzzbA2LZ2eLIi/DAd5or9T2Mhc+1ki/q1d1d6q2 wLlyRkvdbFcy3gGLGjrSCxnR5MXB4WN3YlNWQr4KKJ2jxuq0w7jtqa0c9YONqf6S zaXlJsPfKjSGH37DKSyFSvfpSFi/u/EHnA+bhhsn4gAatqaTZI0pgg7ipQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqOfZFYCtunSKH4HySCK5469T1GMB8GA1UdIwQY MBaAFOYjTtPYypbcUY01wefJK+v89s5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWlOTzA5aktsdHhSalRYQjU4a3I2X3oyemswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC85YjY3NGMtMzY1Ny00YzI1LTk5NTMt M2Y3MDQwOTk3NjgyLzEvNWlOTzA5aktsdHhSalRYQjU4a3I2X3oyemswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC85YjY3NGMtMzY1Ny00YzI1LTk5NTMtM2Y3MDQwOTk3Njgy LzEvNWlOTzA5aktsdHhSalRYQjU4a3I2X3oyemswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePSMCSno 9IveJkBUZor9h5BkmFLSLl2THQqEJn/Q5qjr0ilxwczMvOMUh4kxMBBHLMa8CDWc uA2p+2jr7FfkRqziM/znJ0/DJQbhdzjWWU7r9bCfcNiUlZLhg4/rtf21gxoGL0yW VuteTixjCHlk2LitLvlMcC6ogXap7YUCDxtbwB/9/7En6FkIJxqOjDtR3JQue6XU 8UoFxjPdn1uFb9WXs3tmAWRipgiE+stqkyVcb+Ry3rK+GeAV5QiYWG/glBTEzr7S tQitJfCHW7IEKs4p1Jqoxyyy1JF7dpx52HlbZ3Pe3ujdIyB0pDAK/eQV1ugQn4N+ UNaidbz8h2mZCw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:29:01 2025 by rpki-client