This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft File: F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft (raw, json) Hash identifier: tbqk9DVWtz73Jlu9SRh+cri4+qiL8e/EQoneHjIJWW8= Subject key identifier: A7:D2:45:E7:94:1F:0A:D6:49:AA:87:6B:70:5A:1B:14:4F:DF:BF:60 Authority key identifier: 17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6 Certificate issuer: /CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6 Certificate serial: 019B7222B99F461EDCD1773B2A548CF3A1E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft Manifest number: 11D9 Signing time: Wed 31 Dec 2025 02:00:36 +0000 Manifest this update: Wed 31 Dec 2025 02:00:36 +0000 Manifest next update: Thu 01 Jan 2026 02:00:36 +0000 Files and hashes: 1: F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl (hash: sQtCZejLmOUiz4kp8xjetTFyBCaKYeoObcRT+/iB7Zg=) 2: yE23Ocmf6UL-BZW4Ii8cb9cwJW8.roa (hash: B4pB1U7bD/UVzN0Npz90KrUX1VNbCaaMzhCxilCVAfk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:22:b9:9f:46:1e:dc:d1:77:3b:2a:54:8c:f3:a1:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6 Validity Not Before: Dec 31 02:00:36 2025 GMT Not After : Jan 1 02:00:36 2026 GMT Subject: CN=a7d245e7941f0ad649aa876b705a1b144fdfbf60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cd:4a:dd:98:96:95:86:e0:c6:18:44:f5:75: e5:10:e3:2b:d8:41:f1:ed:98:65:93:32:f5:2c:33: 1c:36:76:73:e8:23:14:6b:1c:2e:94:8a:e5:38:5d: 16:f2:c1:b4:94:8e:7f:bc:d4:be:d1:5f:11:e6:d3: 19:15:57:7b:4a:ae:76:17:c3:08:52:64:95:fb:a6: 42:5f:42:9b:ff:aa:d1:d2:7a:57:18:7f:60:9a:1e: f3:13:ad:fd:3a:75:c1:ac:df:f1:e9:9f:a7:11:22: ae:79:47:95:5c:bc:a3:24:e8:95:bb:b3:dd:ec:c1: 8b:77:ba:7c:56:6f:b8:8f:aa:88:96:02:9c:60:cc: af:c6:ad:19:5c:6f:03:76:e8:49:8c:ab:0a:32:d7: 33:89:30:e1:81:98:32:df:82:ff:0a:e4:7d:8c:1b: bd:2d:a0:f0:0a:29:67:24:03:df:99:fe:3c:47:80: 6f:d8:2b:ea:f0:b3:ac:a4:b4:f1:ea:60:78:d1:1d: b5:b3:f5:b7:93:22:c2:ff:d7:38:83:5f:b2:3d:17: 1f:33:1b:6f:69:23:d7:55:a1:1e:0e:d2:c1:f2:90: e3:5b:f8:2f:38:5f:f4:b5:b9:81:77:0c:9e:0c:dd: e3:21:ba:d5:cf:7e:1c:2c:45:69:fc:0e:4f:fa:ea: 9e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D2:45:E7:94:1F:0A:D6:49:AA:87:6B:70:5A:1B:14:4F:DF:BF:60 X509v3 Authority Key Identifier: keyid:17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:6e:5f:26:5e:63:13:6d:8d:98:d1:94:3b:4b:ce:ab:8e:9d: 29:6c:f7:46:e4:44:6c:a3:f2:23:5e:fc:87:17:20:16:38:c2: 61:6d:8f:17:d6:6a:fa:71:69:f3:a6:f7:e3:09:3b:e3:b0:fe: 42:20:39:9c:c0:49:31:98:5a:97:3c:10:7c:fc:b9:e0:17:f4: 6d:7d:e1:d4:1e:71:91:dc:17:a8:cd:be:26:d2:3b:8c:4a:6b: 36:34:7b:c4:d4:72:66:59:3c:da:14:70:f3:1a:fb:b5:5e:a2: 64:58:c4:48:7b:f2:71:aa:6a:70:8b:1e:30:c3:29:70:fc:8c: 24:31:0b:25:4e:01:c1:72:46:2d:df:10:f3:c9:40:a5:1d:04: 1a:88:9c:43:55:7a:18:f7:5d:5d:94:7f:fe:4e:9c:06:d1:d7: dc:45:ef:ca:ce:c5:0f:16:5d:99:d1:4e:d2:7d:fc:03:54:d5: eb:5a:62:91:c6:0f:f2:cb:93:54:05:99:64:06:0b:d9:84:cf: 24:60:6c:31:30:7a:6b:d2:e6:04:2c:d3:9b:0e:d8:02:1e:92: ed:e6:2a:58:cb:34:f6:a8:7b:08:b9:b4:42:8c:81:9c:bc:75: 5b:43:43:19:cd:c2:5d:13:09:58:77:7d:cd:05:5d:8d:ee:9b: b6:61:72:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyIrmfRh7c0Xc7KlSM86HmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTIzOWY5OTEzZGZjN2Q3YWFhYTk1ZmY0YzliNjFiZjQy YjcyZDYwHhcNMjUxMjMxMDIwMDM2WhcNMjYwMTAxMDIwMDM2WjAzMTEwLwYDVQQD EyhhN2QyNDVlNzk0MWYwYWQ2NDlhYTg3NmI3MDVhMWIxNDRmZGZiZjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc1K3ZiWlYbgxhhE9XXlEOMr2EHx 7ZhlkzL1LDMcNnZz6CMUaxwulIrlOF0W8sG0lI5/vNS+0V8R5tMZFVd7Sq52F8MI UmSV+6ZCX0Kb/6rR0npXGH9gmh7zE639OnXBrN/x6Z+nESKueUeVXLyjJOiVu7Pd 7MGLd7p8Vm+4j6qIlgKcYMyvxq0ZXG8DduhJjKsKMtcziTDhgZgy34L/CuR9jBu9 LaDwCilnJAPfmf48R4Bv2Cvq8LOspLTx6mB40R21s/W3kyLC/9c4g1+yPRcfMxtv aSPXVaEeDtLB8pDjW/gvOF/0tbmBdwyeDN3jIbrVz34cLEVp/A5P+uqevwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfSReeUHwrWSaqHa3BaGxRP379gMB8GA1UdIwQY MBaAFBeSOfmRPfx9eqqpX/TJthv0K3LWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVJNS1aRTlfSDE2cXFsZjlNbTJHX1FyY3RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kMzE0OWMtZjRkYy00ODM3LThiODYt YzYxMjMwNWNmMDg5LzEvRjVJNS1aRTlfSDE2cXFsZjlNbTJHX1FyY3RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9kMzE0OWMtZjRkYy00ODM3LThiODYtYzYxMjMwNWNmMDg5 LzEvRjVJNS1aRTlfSDE2cXFsZjlNbTJHX1FyY3RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp25fJl5j E22NmNGUO0vOq46dKWz3RuREbKPyI178hxcgFjjCYW2PF9Zq+nFp86b34wk747D+ QiA5nMBJMZhalzwQfPy54Bf0bX3h1B5xkdwXqM2+JtI7jEprNjR7xNRyZlk82hRw 8xr7tV6iZFjESHvycapqcIseMMMpcPyMJDELJU4BwXJGLd8Q88lApR0EGoicQ1V6 GPddXZR//k6cBtHX3EXvys7FDxZdmdFO0n38A1TV61pikcYP8suTVAWZZAYL2YTP JGBsMTB6a9LmBCzTmw7YAh6S7eYqWMs09qh7CLm0QoyBnLx1W0NDGc3CXRMJWHd9 zQVdje6btmFyVA== -----END CERTIFICATE-----Generated at Wed Dec 31 05:25:58 2025 by rpki-client