This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft File: f5tM_cmw2ePDHg67gebxscu9yeQ.mft (raw, json) Hash identifier: dGO10rNbvRG2imbQJlmof8hMuGOMyHsII4FCtzqQ2jI= Subject key identifier: 52:A4:D2:74:D1:CA:6D:84:69:35:4A:FB:1F:E3:41:4F:68:F4:C2:88 Authority key identifier: 7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4 Certificate issuer: /CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4 Certificate serial: 019B552B79B6EC3CCBEF85C9D1E1F96537CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft Manifest number: 0D74 Signing time: Thu 25 Dec 2025 11:01:11 +0000 Manifest this update: Thu 25 Dec 2025 11:01:11 +0000 Manifest next update: Fri 26 Dec 2025 11:01:11 +0000 Files and hashes: 1: f5tM_cmw2ePDHg67gebxscu9yeQ.crl (hash: vmNT3y5FbrO1fk7EGYKqc2cYuw5+HqlsWrZdJSfTZTE=) 2: zalftAHY0_vxWVcBQe7AUMKmyP4.roa (hash: IBVaMGf4826YIxpRZf58g0sJemKA+k9XLc2S0P/3S8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 11:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:2b:79:b6:ec:3c:cb:ef:85:c9:d1:e1:f9:65:37:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4 Validity Not Before: Dec 25 11:01:11 2025 GMT Not After : Dec 26 11:01:11 2025 GMT Subject: CN=52a4d274d1ca6d8469354afb1fe3414f68f4c288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2b:aa:3b:72:a5:3c:75:1b:ea:eb:c3:56:cf: da:be:21:8b:b8:7b:6f:0d:04:dd:3f:c4:f1:37:cf: 99:cb:1e:80:c8:ca:e8:96:2f:53:cc:ea:b8:56:73: 5f:c0:83:f3:ef:e3:65:f8:f6:d4:76:ba:23:d8:0d: 0a:bd:d0:62:34:ff:d2:34:a9:3d:d8:fc:71:a2:72: ca:1f:c5:d7:76:a6:09:2b:d1:05:5b:b7:59:1c:41: 0e:d3:36:6f:f7:21:57:16:22:a7:95:a9:ae:77:56: 4e:82:56:f4:09:15:1c:7d:ae:74:7e:63:3c:1d:86: 23:a0:54:e9:79:6b:9c:7a:51:81:e3:ea:6a:4f:5b: e8:89:96:4c:81:6f:41:ab:8e:8c:55:93:8b:27:0b: e6:b3:13:19:7f:69:b8:9a:a2:b8:6d:a7:f7:ef:8b: 00:76:80:0a:98:c3:b5:99:55:17:b3:a2:f4:3d:87: 17:67:f3:a6:91:af:bf:50:bc:18:1c:e2:19:72:9e: 73:de:30:01:2f:cd:00:28:0b:e9:13:5e:e1:a5:f3: 78:da:3c:3a:a8:93:f8:2a:28:eb:d5:bc:33:8d:29: 28:a5:f3:fc:b2:88:32:4b:78:e0:f1:e8:a5:5b:af: e0:48:46:c9:af:f7:40:a3:16:53:fb:7f:b1:46:1a: 23:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A4:D2:74:D1:CA:6D:84:69:35:4A:FB:1F:E3:41:4F:68:F4:C2:88 X509v3 Authority Key Identifier: keyid:7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:76:5d:46:31:1f:30:e3:6e:4b:cb:8d:e2:10:d1:b2:9a:57: c5:08:da:8c:ac:6b:e9:84:f5:f8:8f:22:a9:bf:7c:16:4c:1d: d1:0c:d0:ca:e9:d1:96:86:cf:f7:68:43:d7:bf:2d:3f:31:82: a5:fc:73:ad:28:be:e3:da:2c:86:90:22:08:16:c7:ba:ae:c6: 88:9f:da:f9:a1:93:84:38:10:7c:c8:e9:3c:56:cf:2f:06:1b: e2:b2:84:12:13:48:c5:c7:61:21:02:ea:13:1f:d6:54:08:e8: aa:ea:c7:c5:83:e2:34:9d:9f:a4:23:74:ec:6f:6e:83:99:1e: 70:d2:30:ba:f8:9b:35:45:37:4e:f0:d6:32:b6:4b:51:97:c2: 6e:81:85:34:a7:0f:31:35:69:4b:a2:e1:1c:fa:d2:87:bd:cb: 92:0a:28:3c:4d:b6:ca:94:4f:eb:1f:a5:e2:4b:7d:6a:21:38: 67:f0:69:5f:a1:b3:af:25:07:c3:3f:ef:89:9f:e7:fa:0b:f6: e1:5c:d1:8b:49:35:38:dc:8a:db:1d:cf:13:5a:22:70:f8:1b: 39:94:ba:17:33:94:6f:90:45:67:da:42:45:68:63:9a:af:63: be:ca:93:eb:fd:70:30:8c:dd:21:4c:67:c3:6c:c9:e3:f0:22: 7f:72:1c:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVK3m27DzL74XJ0eH5ZTfMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmOWI0Y2ZkYzliMGQ5ZTNjMzFlMGViYjgxZTZmMWIxY2Ji ZGM5ZTQwHhcNMjUxMjI1MTEwMTExWhcNMjUxMjI2MTEwMTExWjAzMTEwLwYDVQQD Eyg1MmE0ZDI3NGQxY2E2ZDg0NjkzNTRhZmIxZmUzNDE0ZjY4ZjRjMjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiuqO3KlPHUb6uvDVs/aviGLuHtv DQTdP8TxN8+Zyx6AyMroli9TzOq4VnNfwIPz7+Nl+PbUdroj2A0KvdBiNP/SNKk9 2PxxonLKH8XXdqYJK9EFW7dZHEEO0zZv9yFXFiKnlamud1ZOglb0CRUcfa50fmM8 HYYjoFTpeWucelGB4+pqT1voiZZMgW9Bq46MVZOLJwvmsxMZf2m4mqK4baf374sA doAKmMO1mVUXs6L0PYcXZ/Omka+/ULwYHOIZcp5z3jABL80AKAvpE17hpfN42jw6 qJP4Kijr1bwzjSkopfP8sogyS3jg8eilW6/gSEbJr/dAoxZT+3+xRhojywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKk0nTRym2EaTVK+x/jQU9o9MKIMB8GA1UdIwQY MBaAFH+bTP3JsNnjwx4Ou4Hm8bHLvcnkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjV0TV9jbXcyZVBESGc2N2dlYnhzY3U5eWVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84MjQ2ZWItODQ2OS00MmRmLWEwOGYt OTBjNDIxZjU1YWRiLzEvZjV0TV9jbXcyZVBESGc2N2dlYnhzY3U5eWVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi84MjQ2ZWItODQ2OS00MmRmLWEwOGYtOTBjNDIxZjU1YWRi LzEvZjV0TV9jbXcyZVBESGc2N2dlYnhzY3U5eWVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHZdRjEf MONuS8uN4hDRsppXxQjajKxr6YT1+I8iqb98Fkwd0QzQyunRlobP92hD178tPzGC pfxzrSi+49oshpAiCBbHuq7GiJ/a+aGThDgQfMjpPFbPLwYb4rKEEhNIxcdhIQLq Ex/WVAjoqurHxYPiNJ2fpCN07G9ug5kecNIwuvibNUU3TvDWMrZLUZfCboGFNKcP MTVpS6LhHPrSh73LkgooPE22ypRP6x+l4kt9aiE4Z/BpX6GzryUHwz/viZ/n+gv2 4VzRi0k1ONyK2x3PE1oicPgbOZS6FzOUb5BFZ9pCRWhjmq9jvsqT6/1wMIzdIUxn w2zJ4/Aif3Ic5w== -----END CERTIFICATE-----Generated at Thu Dec 25 21:10:14 2025 by rpki-client