This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft File: _5m8PRSR-CJfiBFk9ZMUS3olyOs.mft (raw, json) Hash identifier: wqCUYVNiMd4SstdDKQ3RJOI8ZydGMJz34M64dNV2GBM= Subject key identifier: D4:CD:6A:82:F2:39:7E:3B:89:6B:EA:B3:0A:1C:06:15:83:3F:0D:0D Authority key identifier: FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB Certificate issuer: /CN=ff99bc3d1491f8225f881164f593144b7a25c8eb Certificate serial: 019B42802ACB85AD48EDA3854A32EB253B03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft Manifest number: 115D Signing time: Sun 21 Dec 2025 20:00:54 +0000 Manifest this update: Sun 21 Dec 2025 20:00:54 +0000 Manifest next update: Mon 22 Dec 2025 20:00:54 +0000 Files and hashes: 1: DmxV1ufKd_5CUtgyMhTR3HZ9Ctc.roa (hash: cD2uBmETpIdrWKKJGmi5CrnlQnFYngKqgmK3aNdcBqA=) 2: _5m8PRSR-CJfiBFk9ZMUS3olyOs.crl (hash: t0dXwsw4AKWonfSxfn3OCwhUSe58k9dteGF0ztv0yRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:2a:cb:85:ad:48:ed:a3:85:4a:32:eb:25:3b:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff99bc3d1491f8225f881164f593144b7a25c8eb Validity Not Before: Dec 21 20:00:54 2025 GMT Not After : Dec 22 20:00:54 2025 GMT Subject: CN=d4cd6a82f2397e3b896beab30a1c0615833f0d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0d:78:fe:17:5f:bb:52:f1:22:f6:fe:ab:2e: 0e:b3:8a:6a:0a:20:57:c2:03:ea:00:48:7d:38:43: 53:d3:7f:2f:08:bb:82:af:0b:5c:71:7b:56:e9:09: 5c:fd:1f:90:e9:4c:4d:7a:f9:a2:2d:ad:7c:f5:90: 5f:d9:a9:cb:1b:e6:dc:df:e1:7b:7a:6d:ca:19:37: c7:1f:a6:7a:bd:56:1b:5c:78:ce:6d:e4:46:6a:b1: 44:89:bc:75:02:4b:69:a8:d9:67:46:5c:22:da:11: 93:6a:ee:67:82:ff:81:b1:95:16:42:cf:00:10:de: 47:d8:9c:ef:02:39:97:11:56:c0:3b:67:4c:ba:e6: a3:fc:22:c1:9f:02:00:8d:3c:36:5c:a4:0e:c1:ce: 42:c0:5f:c3:8b:72:5a:6b:d7:69:00:0f:3a:18:29: 41:ca:54:51:66:e4:ea:ca:8a:3c:9c:1e:66:d5:13: 42:55:15:e8:2c:de:c0:6a:b0:c6:03:18:10:1c:0e: d0:61:ee:fe:97:8b:4f:fa:41:72:a4:38:59:ff:4b: 53:52:d5:42:1b:32:f7:34:59:86:5d:8b:eb:56:3b: 1f:bd:88:f6:78:05:dc:1b:01:6b:bb:e3:9d:69:32: ee:a8:17:48:bf:7c:3e:c7:c1:db:fe:5a:19:94:b7: ab:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CD:6A:82:F2:39:7E:3B:89:6B:EA:B3:0A:1C:06:15:83:3F:0D:0D X509v3 Authority Key Identifier: keyid:FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:51:d1:f3:e8:3d:63:03:d9:b5:a5:09:64:4d:0f:56:9b:4e: c0:0a:d9:93:aa:d3:f0:7d:bd:d9:a2:f9:40:ac:3c:b1:fe:c6: c1:9b:c0:98:81:1b:12:14:96:ca:99:f9:76:a3:56:21:bb:50: ab:28:2a:55:2f:99:ea:68:c0:a9:3c:51:24:f1:d2:e8:d8:4d: a4:e8:cb:78:b7:51:af:67:b1:a7:5d:d7:b5:81:05:00:4c:87: 79:f9:c1:63:a1:a7:a9:7b:3c:f6:b4:eb:f2:c9:dd:ff:70:85: e7:da:8f:b9:66:e4:a6:f1:1b:5c:68:09:ce:54:14:c3:a5:a4: 72:6b:e3:8e:11:7a:74:a0:df:c2:77:86:18:16:0d:b3:33:a0: 6a:f7:60:4f:bb:20:fe:f0:57:7b:03:51:d8:b3:45:30:7b:e3: 1f:55:ba:14:08:d8:ae:63:f4:9f:27:30:0d:97:2c:56:27:8d: b4:ed:32:b8:8e:26:e1:61:ce:a6:8a:66:38:25:3b:f9:9a:2f: 57:cc:b4:9b:ce:56:77:ea:c7:c5:c8:a0:6f:38:78:d4:2f:ea: cf:40:a4:ff:58:15:aa:7f:75:90:32:d2:81:a0:34:1e:77:e4: 26:67:63:7b:7c:d3:3e:01:79:d8:b6:4c:c4:6e:2c:7d:51:1f: 13:23:c2:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgCrLha1I7aOFSjLrJTsDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOTliYzNkMTQ5MWY4MjI1Zjg4MTE2NGY1OTMxNDRiN2Ey NWM4ZWIwHhcNMjUxMjIxMjAwMDU0WhcNMjUxMjIyMjAwMDU0WjAzMTEwLwYDVQQD EyhkNGNkNmE4MmYyMzk3ZTNiODk2YmVhYjMwYTFjMDYxNTgzM2YwZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA14/hdfu1LxIvb+qy4Os4pqCiBX wgPqAEh9OENT038vCLuCrwtccXtW6Qlc/R+Q6UxNevmiLa189ZBf2anLG+bc3+F7 em3KGTfHH6Z6vVYbXHjObeRGarFEibx1AktpqNlnRlwi2hGTau5ngv+BsZUWQs8A EN5H2JzvAjmXEVbAO2dMuuaj/CLBnwIAjTw2XKQOwc5CwF/Di3Jaa9dpAA86GClB ylRRZuTqyoo8nB5m1RNCVRXoLN7AarDGAxgQHA7QYe7+l4tP+kFypDhZ/0tTUtVC GzL3NFmGXYvrVjsfvYj2eAXcGwFru+OdaTLuqBdIv3w+x8Hb/loZlLerGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTNaoLyOX47iWvqswocBhWDPw0NMB8GA1UdIwQY MBaAFP+ZvD0UkfgiX4gRZPWTFEt6JcjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzVtOFBSU1ItQ0pmaUJGazlaTVVTM29seU9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kYTM0MDYtMDRmOS00N2IwLWExMTkt Yjg4YWZlZjEzMzY3LzEvXzVtOFBSU1ItQ0pmaUJGazlaTVVTM29seU9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9kYTM0MDYtMDRmOS00N2IwLWExMTktYjg4YWZlZjEzMzY3 LzEvXzVtOFBSU1ItQ0pmaUJGazlaTVVTM29seU9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqlHR8+g9 YwPZtaUJZE0PVptOwArZk6rT8H292aL5QKw8sf7GwZvAmIEbEhSWypn5dqNWIbtQ qygqVS+Z6mjAqTxRJPHS6NhNpOjLeLdRr2exp13XtYEFAEyHefnBY6GnqXs89rTr 8snd/3CF59qPuWbkpvEbXGgJzlQUw6WkcmvjjhF6dKDfwneGGBYNszOgavdgT7sg /vBXewNR2LNFMHvjH1W6FAjYrmP0nycwDZcsVieNtO0yuI4m4WHOpopmOCU7+Zov V8y0m85Wd+rHxcigbzh41C/qz0Ck/1gVqn91kDLSgaA0HnfkJmdje3zTPgF52LZM xG4sfVEfEyPCkg== -----END CERTIFICATE-----Generated at Mon Dec 22 00:31:00 2025 by rpki-client