This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft File: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft (raw, json) Hash identifier: lp7VOSSiL2NRZM3YYNEol1hkcCv5zcr1mSqLKJGVfz4= Subject key identifier: 4A:99:C8:11:17:B2:DC:1F:DB:21:7E:78:1D:AB:E4:87:60:BD:4B:39 Authority key identifier: 57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D Certificate issuer: /CN=5797245d78078985c147dccbe0ec6d168dd9982d Certificate serial: 019B3D59EF8E5BD867D9C29FE0D7EBCADC3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft Manifest number: 1473 Signing time: Sat 20 Dec 2025 20:01:02 +0000 Manifest this update: Sat 20 Dec 2025 20:01:02 +0000 Manifest next update: Sun 21 Dec 2025 20:01:02 +0000 Files and hashes: 1: LXZlJTG3YsWQvmeHm3moz8YZuWw.roa (hash: mxP6NSnPOQlaHwnP8UnNjh2RIRc/bI9gDbXBJw+o1lw=) 2: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl (hash: Ep3LeRW1wLIwDb9hrrm4xNco6SXyqEegQc/Sks99tjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:ef:8e:5b:d8:67:d9:c2:9f:e0:d7:eb:ca:dc:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5797245d78078985c147dccbe0ec6d168dd9982d Validity Not Before: Dec 20 20:01:02 2025 GMT Not After : Dec 21 20:01:02 2025 GMT Subject: CN=4a99c81117b2dc1fdb217e781dabe48760bd4b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9d:f6:a5:61:cc:70:0d:f3:e0:5f:ce:19:ec: 54:82:05:b4:f0:51:81:54:bd:25:f5:5f:d0:9b:d0: c9:7b:88:00:d5:22:b7:61:83:be:5e:38:5e:ba:f1: a1:7d:62:58:a0:6d:63:b5:37:79:f4:b4:47:32:fd: be:ee:e3:ca:ca:db:3f:cc:2a:db:27:cd:3c:4e:9a: b5:dd:4c:52:98:ff:e4:d1:cf:01:8c:da:b2:a4:a5: 27:fb:78:ac:32:9d:2b:fe:38:5f:6e:98:17:57:13: 5c:2f:81:30:91:e5:b6:0c:28:a8:c5:f5:98:af:e5: ca:83:e7:54:76:99:ea:b3:fc:3c:19:8d:de:1c:a4: 06:10:d2:99:3b:c4:f0:a9:a8:dd:cb:4a:66:c8:7f: e1:0b:60:13:07:15:dd:14:3a:46:80:f4:c2:01:cc: ff:64:73:3f:ab:5f:f8:b0:d2:bf:81:26:3c:95:6c: 33:7b:e3:26:7c:cc:cf:43:45:f0:6a:8b:09:1b:45: c7:b7:f0:71:2f:4e:72:c4:0e:d6:68:c7:87:dc:e7: 0f:1a:e2:3c:16:c7:8c:7b:a3:fa:70:a3:23:66:eb: e8:49:f5:b7:7a:8c:ad:02:4d:31:85:99:2c:9e:1d: 1e:05:b1:30:cc:92:ec:c3:bd:32:4e:02:71:54:0f: 37:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:99:C8:11:17:B2:DC:1F:DB:21:7E:78:1D:AB:E4:87:60:BD:4B:39 X509v3 Authority Key Identifier: keyid:57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:98:7b:f1:9b:77:cd:5d:d5:b5:ff:75:08:e4:86:58:10:95: e1:e7:7a:1b:b7:ad:1e:66:aa:7e:e4:d8:27:10:76:fb:1c:5f: 8d:5b:40:ed:7b:b8:a2:c4:cc:ef:35:aa:14:d6:1b:28:90:07: 0a:f6:4e:f9:35:12:bb:a7:ab:45:02:3f:09:2b:1e:52:07:9e: 1b:03:64:50:9a:99:aa:ad:03:3d:5e:21:95:8d:91:30:19:8d: 33:ff:2b:fb:1c:73:39:ee:ec:35:c6:80:a6:fa:19:35:12:02: 96:54:d2:ee:ca:8d:15:79:8c:a2:82:50:84:d6:24:c6:e0:b0: e7:31:60:e6:60:39:b1:fc:e4:29:44:81:ca:31:f0:8e:55:21: 70:1a:d8:44:2a:77:ce:25:29:7f:3e:72:f2:47:78:8b:2c:d4: ae:c9:69:0f:cb:f2:b3:57:36:1d:46:4f:4d:1f:3e:26:f8:86: fb:30:de:79:11:a5:40:75:bc:51:12:a9:5e:74:2b:e2:a2:44: 04:d4:6e:ff:e6:14:61:30:b5:c4:e9:5f:bc:14:4f:01:9f:a2: 21:0e:68:e3:99:4a:f2:b5:f3:aa:b9:a2:70:d5:8b:6a:a6:f0: 36:17:1f:ad:af:8e:97:c0:69:5a:56:9b:1f:8d:9f:4c:a0:d9: 09:78:74:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9We+OW9hn2cKf4Nfrytw7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3OTcyNDVkNzgwNzg5ODVjMTQ3ZGNjYmUwZWM2ZDE2OGRk OTk4MmQwHhcNMjUxMjIwMjAwMTAyWhcNMjUxMjIxMjAwMTAyWjAzMTEwLwYDVQQD Eyg0YTk5YzgxMTE3YjJkYzFmZGIyMTdlNzgxZGFiZTQ4NzYwYmQ0YjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Z32pWHMcA3z4F/OGexUggW08FGB VL0l9V/Qm9DJe4gA1SK3YYO+XjheuvGhfWJYoG1jtTd59LRHMv2+7uPKyts/zCrb J808Tpq13UxSmP/k0c8BjNqypKUn+3isMp0r/jhfbpgXVxNcL4EwkeW2DCioxfWY r+XKg+dUdpnqs/w8GY3eHKQGENKZO8Twqajdy0pmyH/hC2ATBxXdFDpGgPTCAcz/ ZHM/q1/4sNK/gSY8lWwze+MmfMzPQ0XwaosJG0XHt/BxL05yxA7WaMeH3OcPGuI8 FseMe6P6cKMjZuvoSfW3eoytAk0xhZksnh0eBbEwzJLsw70yTgJxVA83IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqZyBEXstwf2yF+eB2r5IdgvUs5MB8GA1UdIwQY MBaAFFeXJF14B4mFwUfcy+DsbRaN2ZgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjVja1hYZ0hpWVhCUjl6TDRPeHRGbzNabUMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xMTE1NzktYWUxOS00MjUxLTk3ODUt NzNlMzhjY2UxMzgzLzEvVjVja1hYZ0hpWVhCUjl6TDRPeHRGbzNabUMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8xMTE1NzktYWUxOS00MjUxLTk3ODUtNzNlMzhjY2UxMzgz LzEvVjVja1hYZ0hpWVhCUjl6TDRPeHRGbzNabUMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5h78Zt3 zV3Vtf91COSGWBCV4ed6G7etHmaqfuTYJxB2+xxfjVtA7Xu4osTM7zWqFNYbKJAH CvZO+TUSu6erRQI/CSseUgeeGwNkUJqZqq0DPV4hlY2RMBmNM/8r+xxzOe7sNcaA pvoZNRICllTS7sqNFXmMooJQhNYkxuCw5zFg5mA5sfzkKUSByjHwjlUhcBrYRCp3 ziUpfz5y8kd4iyzUrslpD8vys1c2HUZPTR8+JviG+zDeeRGlQHW8URKpXnQr4qJE BNRu/+YUYTC1xOlfvBRPAZ+iIQ5o45lK8rXzqrmicNWLaqbwNhcfra+Ol8BpWlab H42fTKDZCXh0oQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:05:45 2025 by rpki-client