This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft File: i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json) Hash identifier: yn7y/GJv86D+v9niQerJrdMsth9Ktb1om/0eYPlP5q4= Subject key identifier: 6F:1F:12:3B:5F:67:6D:F1:E3:95:F4:A2:C0:0F:89:61:0B:F0:BF:93 Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac Certificate serial: 019B6BE9913F595612407845599D193FCB03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft Manifest number: 05CF Signing time: Mon 29 Dec 2025 21:00:27 +0000 Manifest this update: Mon 29 Dec 2025 21:00:27 +0000 Manifest next update: Tue 30 Dec 2025 21:00:27 +0000 Files and hashes: 1: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: gU7Wz0sjsbpnOEmTWbLEPVvuMF8UNQX+KugMBADnAts=) 2: tCW9fwISpjkcZibIaKBsjXs7N7A.roa (hash: NwxiC6aogmrL5itM5Y4be2nBp9O9LLOH8w2QrDP5u38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 21:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:e9:91:3f:59:56:12:40:78:45:59:9d:19:3f:cb:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac Validity Not Before: Dec 29 21:00:27 2025 GMT Not After : Dec 30 21:00:27 2025 GMT Subject: CN=6f1f123b5f676df1e395f4a2c00f89610bf0bf93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:86:50:93:f0:6d:1d:26:3e:fd:38:d0:a0:b1: 7f:04:95:14:3e:57:59:5e:ac:7c:1a:c3:d1:a8:57: 34:b6:d2:a7:60:61:68:2b:43:9c:1c:41:dc:9f:f1: a5:f7:0d:c9:ef:57:6f:96:52:88:7d:45:aa:8c:15: de:70:cc:d0:0f:ec:1d:15:f1:72:46:fa:4e:95:76: 36:16:c4:8a:ec:fd:ea:1b:9a:4e:27:ea:fe:c1:9f: 16:69:45:da:6b:95:15:20:72:d3:54:d3:04:e5:4b: 1a:34:84:96:0b:02:d4:34:63:1a:8d:79:9e:b1:31: be:05:b6:b4:09:cc:c5:9f:1d:17:ed:41:7e:1d:7a: 95:3b:6c:f7:db:b5:d7:6d:e6:12:91:31:76:33:7b: dd:7d:62:1d:8f:1a:60:e9:e7:39:a5:94:56:2e:2e: a5:2d:58:00:e0:b6:0f:44:9e:3c:3e:d7:b1:f2:01: 41:ce:7c:73:36:3f:fc:07:88:e5:78:ca:cf:e4:4e: ad:40:aa:7d:28:a6:77:fe:a6:5f:a1:d8:e5:1d:43: 98:14:c2:b4:ca:79:77:61:af:4d:74:57:bc:9e:af: 1a:91:30:db:79:70:1d:27:a6:23:31:b5:ea:04:6a: f5:c4:cb:94:74:05:11:45:ca:3f:90:27:d6:7f:d7: fe:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1F:12:3B:5F:67:6D:F1:E3:95:F4:A2:C0:0F:89:61:0B:F0:BF:93 X509v3 Authority Key Identifier: keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:ef:00:a7:a0:f6:7f:e2:b1:57:58:b2:a3:65:ae:fc:5a:68: a9:7f:da:9c:64:14:b0:be:1c:dc:b2:d8:01:15:c6:6e:3d:49: 0d:cb:f2:39:5b:08:f8:95:bb:b7:51:19:46:e7:f1:19:85:1b: 6d:15:68:47:33:65:3e:73:40:b6:a7:c3:94:96:af:8f:c3:5e: 08:e1:c9:3f:7d:12:fb:c8:33:3b:99:76:1a:ec:74:5b:1f:34: 58:c9:7d:0b:e9:82:eb:7f:68:fa:d2:03:c6:d0:d7:24:b2:bf: cc:aa:5c:6d:65:d3:9a:e0:ff:90:49:ba:cd:5e:f9:35:d1:8e: 9d:af:0c:f0:ed:39:17:a2:ad:10:eb:cb:26:5c:f7:9e:d9:96: 05:ca:7a:76:f1:2e:d0:32:21:61:55:4e:e2:44:5c:b3:64:b3: 9a:73:65:5c:0c:a8:84:ac:6a:ea:4c:c2:fa:46:ba:d2:71:95: 97:18:5c:be:98:cd:d6:9a:72:ce:fd:8a:8b:0d:c3:0c:40:88: 9a:e2:68:f9:13:42:11:28:5a:b4:46:39:45:35:49:87:7b:fc: 75:76:c3:33:e0:d4:f9:a0:85:04:29:08:b3:47:ad:67:cb:5a: e6:a3:c5:55:72:b0:10:51:1f:33:8d:ba:3c:e6:fb:b2:4c:ce: db:01:72:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtr6ZE/WVYSQHhFWZ0ZP8sDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOWNjNTdjYTg0NzIzYWVjMjg0MTE0NWY2ZjdkMzAxYmRm MzViYWMwHhcNMjUxMjI5MjEwMDI3WhcNMjUxMjMwMjEwMDI3WjAzMTEwLwYDVQQD Eyg2ZjFmMTIzYjVmNjc2ZGYxZTM5NWY0YTJjMDBmODk2MTBiZjBiZjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoZQk/BtHSY+/TjQoLF/BJUUPldZ Xqx8GsPRqFc0ttKnYGFoK0OcHEHcn/Gl9w3J71dvllKIfUWqjBXecMzQD+wdFfFy RvpOlXY2FsSK7P3qG5pOJ+r+wZ8WaUXaa5UVIHLTVNME5UsaNISWCwLUNGMajXme sTG+Bba0CczFnx0X7UF+HXqVO2z327XXbeYSkTF2M3vdfWIdjxpg6ec5pZRWLi6l LVgA4LYPRJ48Ptex8gFBznxzNj/8B4jleMrP5E6tQKp9KKZ3/qZfodjlHUOYFMK0 ynl3Ya9NdFe8nq8akTDbeXAdJ6YjMbXqBGr1xMuUdAURRco/kCfWf9f+uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8fEjtfZ23x45X0osAPiWEL8L+TMB8GA1UdIwQY MBaAFIucxXyoRyOuwoQRRfb30wG981usMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTV6RmZLaEhJNjdDaEJGRjl2ZlRBYjN6VzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zOGU2ZjctNGUzNS00YzJkLTk5Nzct MDk3Y2I4ZGYyYTI0LzEvaTV6RmZLaEhJNjdDaEJGRjl2ZlRBYjN6VzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zOGU2ZjctNGUzNS00YzJkLTk5NzctMDk3Y2I4ZGYyYTI0 LzEvaTV6RmZLaEhJNjdDaEJGRjl2ZlRBYjN6VzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASe8Ap6D2 f+KxV1iyo2Wu/FpoqX/anGQUsL4c3LLYARXGbj1JDcvyOVsI+JW7t1EZRufxGYUb bRVoRzNlPnNAtqfDlJavj8NeCOHJP30S+8gzO5l2Gux0Wx80WMl9C+mC639o+tID xtDXJLK/zKpcbWXTmuD/kEm6zV75NdGOna8M8O05F6KtEOvLJlz3ntmWBcp6dvEu 0DIhYVVO4kRcs2SzmnNlXAyohKxq6kzC+ka60nGVlxhcvpjN1ppyzv2Kiw3DDECI muJo+RNCEShatEY5RTVJh3v8dXbDM+DU+aCFBCkIs0etZ8ta5qPFVXKwEFEfM426 POb7skzO2wFyLQ== -----END CERTIFICATE-----Generated at Tue Dec 30 06:37:37 2025 by rpki-client