This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft File: 05aWp2gOlVKR_q-h77qfvP8viIs.mft (raw, json) Hash identifier: RrrlQSLCQL1COhkhbnpk5vaY55ltf7tCd97+eX3ewWg= Subject key identifier: 3A:79:6B:31:6C:E0:D0:E1:1D:1D:18:BC:C8:5E:76:21:E1:58:69:2F Authority key identifier: D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B Certificate issuer: /CN=d39696a7680e955291feafa1efba9fbcff2f888b Certificate serial: 019B3A90D1D426954AB39A8B74269F39CACE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft Manifest number: 1278 Signing time: Sat 20 Dec 2025 07:02:07 +0000 Manifest this update: Sat 20 Dec 2025 07:02:07 +0000 Manifest next update: Sun 21 Dec 2025 07:02:07 +0000 Files and hashes: 1: 05aWp2gOlVKR_q-h77qfvP8viIs.crl (hash: wjpduTHQoZXf1McaOvl2ri6hVltwvnfw5LsqhmT2E9w=) 2: rB2INOwVRpDLnI62nHFRLMGjim8.roa (hash: 4e9dGvThW6tLmtEOnyeNLHSG2RRsUkaY7l6l90Sl8lc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:d1:d4:26:95:4a:b3:9a:8b:74:26:9f:39:ca:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d39696a7680e955291feafa1efba9fbcff2f888b Validity Not Before: Dec 20 07:02:07 2025 GMT Not After : Dec 21 07:02:07 2025 GMT Subject: CN=3a796b316ce0d0e11d1d18bcc85e7621e158692f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:81:f0:63:da:62:95:b4:f9:54:82:c4:18:48: 25:08:25:1e:b1:dc:7c:85:eb:07:65:9d:0e:c6:2c: 9e:91:ef:bc:12:81:b4:03:81:3e:48:68:51:fd:7c: 90:90:f6:e4:70:08:9b:d2:bc:8c:c5:ce:9f:e5:cb: 18:8f:87:19:14:e5:6b:32:ba:4a:d9:99:9b:6a:49: ba:03:02:ae:73:71:3f:6b:21:50:18:a6:f1:09:bc: 06:93:10:7d:5d:08:8f:ba:aa:47:ae:3b:02:c1:58: fb:3a:d2:b3:ff:31:af:ca:8d:48:25:1f:cd:cd:0d: 74:01:2d:58:e2:33:9c:6f:7a:d5:1d:ba:8f:49:1c: b8:b4:44:b4:56:36:56:5a:6c:1b:1c:75:97:50:66: 69:e2:d6:ef:39:e1:b7:44:8c:b0:28:96:26:a1:66: 0b:a9:31:bf:3e:e3:8e:f9:19:cd:4d:89:13:bd:0b: 8c:50:a5:12:2b:42:d7:fe:d6:3a:8e:f2:17:65:6a: 44:f9:12:c4:87:cd:d8:ac:e0:b5:50:e3:45:89:51: 26:c7:4c:38:1a:aa:e3:3a:1a:e7:1b:12:29:b2:3a: 6c:bb:e4:3b:16:ec:c7:b5:c6:96:2c:a5:26:91:7d: 8e:91:61:89:9b:8e:1b:d1:7c:88:1b:f7:8c:c2:ee: cf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:79:6B:31:6C:E0:D0:E1:1D:1D:18:BC:C8:5E:76:21:E1:58:69:2F X509v3 Authority Key Identifier: keyid:D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:d4:23:2a:47:2b:c6:cd:4f:f8:cc:09:14:d4:14:10:88:b5: 4f:9a:a0:5f:9b:21:58:9b:25:0f:36:4d:bc:99:f5:f6:ac:59: 70:b1:39:ce:4c:53:ed:fe:63:fc:be:35:27:32:18:01:a6:c7: af:b2:4c:53:cc:af:9b:21:e5:b4:6c:e6:15:66:52:0d:70:0a: 2e:8f:24:3f:0a:54:6a:a9:66:85:4c:e1:12:63:4b:29:de:d4: 47:fc:d8:b5:3b:0f:0a:25:91:7c:23:b1:93:82:53:5a:a1:4c: 2d:e6:63:c0:07:ea:62:14:a8:5c:35:e6:98:8d:a3:35:28:47: 5e:09:6f:aa:7d:35:86:e8:46:01:15:7f:ab:b7:ed:e1:4f:d7: dd:b7:b4:c2:17:44:5c:45:c4:70:0e:e3:37:13:3f:cf:2a:4b: 71:83:5c:d4:3c:d0:be:99:84:2b:50:6f:28:d2:60:13:7f:43: b8:38:3e:2f:e1:cd:80:40:8b:ba:53:20:32:4c:fb:2f:1f:ad: 70:45:5d:60:7b:89:a5:6d:3a:af:38:e6:ab:dd:d8:80:c4:3f: 30:3e:60:e2:a1:d6:82:fb:61:1a:dd:e8:eb:8e:03:80:20:b3: 1e:6d:da:cd:d6:83:67:b7:ce:57:2f:2c:14:5f:e9:3e:eb:83: 67:08:bd:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kNHUJpVKs5qLdCafOcrOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzOTY5NmE3NjgwZTk1NTI5MWZlYWZhMWVmYmE5ZmJjZmYy Zjg4OGIwHhcNMjUxMjIwMDcwMjA3WhcNMjUxMjIxMDcwMjA3WjAzMTEwLwYDVQQD EygzYTc5NmIzMTZjZTBkMGUxMWQxZDE4YmNjODVlNzYyMWUxNTg2OTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoHwY9pilbT5VILEGEglCCUesdx8 hesHZZ0Oxiyeke+8EoG0A4E+SGhR/XyQkPbkcAib0ryMxc6f5csYj4cZFOVrMrpK 2Zmbakm6AwKuc3E/ayFQGKbxCbwGkxB9XQiPuqpHrjsCwVj7OtKz/zGvyo1IJR/N zQ10AS1Y4jOcb3rVHbqPSRy4tES0VjZWWmwbHHWXUGZp4tbvOeG3RIywKJYmoWYL qTG/PuOO+RnNTYkTvQuMUKUSK0LX/tY6jvIXZWpE+RLEh83YrOC1UONFiVEmx0w4 GqrjOhrnGxIpsjpsu+Q7FuzHtcaWLKUmkX2OkWGJm44b0XyIG/eMwu7PIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDp5azFs4NDhHR0YvMhediHhWGkvMB8GA1UdIwQY MBaAFNOWlqdoDpVSkf6voe+6n7z/L4iLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy82OGU4NTctZTJlOS00MmQ1LTg2NGUt Y2M3YWQxNmQxYjBjLzEvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy82OGU4NTctZTJlOS00MmQ1LTg2NGUtY2M3YWQxNmQxYjBj LzEvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9QjKkcr xs1P+MwJFNQUEIi1T5qgX5shWJslDzZNvJn19qxZcLE5zkxT7f5j/L41JzIYAabH r7JMU8yvmyHltGzmFWZSDXAKLo8kPwpUaqlmhUzhEmNLKd7UR/zYtTsPCiWRfCOx k4JTWqFMLeZjwAfqYhSoXDXmmI2jNShHXglvqn01huhGARV/q7ft4U/X3be0whdE XEXEcA7jNxM/zypLcYNc1DzQvpmEK1BvKNJgE39DuDg+L+HNgECLulMgMkz7Lx+t cEVdYHuJpW06rzjmq93YgMQ/MD5g4qHWgvthGt3o644DgCCzHm3azdaDZ7fOVy8s FF/pPuuDZwi9dg== -----END CERTIFICATE-----Generated at Sat Dec 20 12:21:50 2025 by rpki-client