This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft File: r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json) Hash identifier: mE/MH0biEnPpk3t5LKUrSKTKkYBTNw7DC8u+YrU4cbk= Subject key identifier: 9B:67:54:7A:E5:44:92:BE:DE:06:22:D3:38:71:8B:5C:95:18:4A:47 Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e Certificate serial: 019B3BA2021719EA1D98397E30E5F5CFEB7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft Manifest number: 1792 Signing time: Sat 20 Dec 2025 12:00:31 +0000 Manifest this update: Sat 20 Dec 2025 12:00:31 +0000 Manifest next update: Sun 21 Dec 2025 12:00:31 +0000 Files and hashes: 1: 1F7uxkd5CHW5Nl3RYcymdv41PuQ.roa (hash: CcbwxJuJRF3/aA4m69pX7txPfcLVx2hNzHSkmTtnNVg=) 2: QeHpbtcVegm_fxifqKVsyOrrnCI.roa (hash: kUP9nfM2R6M+pjapUE5Nq3EsDSCVioJ2tIXCwSXgaIE=) 3: Ut4GTsDHJeU3zkPEm31-Rn0qsYs.roa (hash: 3T0SrQbpOW/kf5QQEBkIw9oRgVjDjlSvCikCjuKXds8=) 4: lwWk6gYDfPgTiw1I1FH-cpoHm-4.roa (hash: yGaK09dhA4d1XHm7tuZO0sTpyctbGTSJ/ciNb0ty54Q=) 5: myG4Sawx0LfJTRmA5fYEdv4-s1g.roa (hash: YBdxt4BRgQWeWo/h8hkYVlVlmJP13HxJ2W8fQJqxi34=) 6: q3PjiJcA5Wmvu-x4hS5Ctn6vg7k.roa (hash: aR28mDR0AXgw+ne2p9IcwrnOZCQ+luqP2WRf/HY4Z7Q=) 7: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: oyplhNwAcR8Ab7nvc03GAIpDqB/bjyY9ArWwsNPP7Wk=) 8: vn8OwjKW13Vvv7-w646PZQwlT1g.roa (hash: SQoW5zSKhm7XP9vCmJ5BfcEIft5q/8KQA6dRhI8YlXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:02:17:19:ea:1d:98:39:7e:30:e5:f5:cf:eb:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e Validity Not Before: Dec 20 12:00:31 2025 GMT Not After : Dec 21 12:00:31 2025 GMT Subject: CN=9b67547ae54492bede0622d338718b5c95184a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:53:7e:5d:7b:b3:89:33:4d:2b:36:15:cf:d0: ec:6b:fc:55:00:7b:cd:39:91:96:a4:49:c6:8a:48: 12:ad:51:ea:5a:e3:74:85:50:16:5f:cb:03:ca:da: a9:d9:c5:4c:c5:0b:eb:5a:6d:b6:08:f1:e6:e9:4a: 68:45:0b:9d:bc:40:2e:7b:d6:f9:82:da:19:a2:9e: 17:cc:88:f9:0a:5f:f5:4c:aa:05:bc:c3:a7:0c:96: ae:9b:8c:15:21:77:d8:b8:10:1d:86:e2:81:ad:2e: d4:8d:0d:92:a2:fd:60:29:ab:5e:ba:e1:eb:fe:fc: ac:d8:d8:f5:97:25:50:eb:c9:b1:b2:2d:54:8b:f2: 04:e8:3f:08:b8:c9:4a:dd:f9:03:8c:62:42:7c:cf: 08:98:b5:4a:75:56:5a:7c:7c:5c:cc:83:95:51:c2: 5d:3c:0a:5d:8e:a8:ad:f6:51:88:54:0b:fa:b7:a2: 5f:67:bb:76:3a:08:55:48:6b:42:85:ad:99:ff:92: f5:70:8b:7b:28:69:68:dd:f1:59:35:7c:c8:50:48: eb:67:0a:3c:4b:55:8c:9a:2c:44:65:93:3e:3f:eb: 1d:8b:80:1b:dd:a6:be:b2:ea:bb:b9:af:5b:77:69: 58:cd:ad:66:57:be:3f:43:a9:4a:4e:7e:79:a0:f0: b0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:67:54:7A:E5:44:92:BE:DE:06:22:D3:38:71:8B:5C:95:18:4A:47 X509v3 Authority Key Identifier: keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:c4:46:14:58:9f:03:16:4a:55:bf:5a:8f:5e:bc:74:f2:62: ae:ea:35:9e:67:95:c5:38:a5:af:41:dc:ac:da:ad:47:ce:a4: ad:e3:ca:21:83:65:79:61:2e:65:72:35:93:b5:98:3d:f9:a4: 92:f4:4b:a3:91:31:13:99:3e:ff:d1:f7:68:b1:68:de:43:62: c8:be:8a:77:48:d2:97:f6:2c:dc:97:60:76:03:5d:6e:1c:2c: 6b:54:d4:38:ae:41:0a:67:76:f5:e6:8e:91:f8:7b:99:db:cb: 48:ca:95:f0:9a:5a:48:67:1b:24:3a:68:a4:38:fc:93:98:00: 93:23:0d:50:a0:ff:d7:8c:41:64:67:c0:7a:29:6c:b3:ae:32: d4:65:5a:0e:20:64:cb:a3:c0:c2:01:61:c6:ff:ff:db:a4:cc: a6:f3:bb:57:9b:9d:05:7a:38:0f:af:23:31:95:5e:d7:ca:96: 68:35:3b:98:85:ea:96:8f:4e:2e:3e:6d:70:98:cf:73:cd:01: 58:8a:6b:ac:ae:eb:8b:97:da:e4:05:c4:7a:2f:3c:bf:e2:49: 2b:64:78:d0:24:f4:98:45:fb:58:ac:45:00:7a:d7:2d:32:65: 52:42:32:b1:ec:e9:04:80:14:9d:a5:7a:86:c9:d0:87:c7:b1: 80:63:79:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ogIXGeodmDl+MOX1z+t+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOTM4NTAzZDcyOTMxNjI2ZGNiOGQxZTk0NmIyYWUwNmE3 M2QwMmUwHhcNMjUxMjIwMTIwMDMxWhcNMjUxMjIxMTIwMDMxWjAzMTEwLwYDVQQD Eyg5YjY3NTQ3YWU1NDQ5MmJlZGUwNjIyZDMzODcxOGI1Yzk1MTg0YTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VN+XXuziTNNKzYVz9Dsa/xVAHvN OZGWpEnGikgSrVHqWuN0hVAWX8sDytqp2cVMxQvrWm22CPHm6UpoRQudvEAue9b5 gtoZop4XzIj5Cl/1TKoFvMOnDJaum4wVIXfYuBAdhuKBrS7UjQ2Sov1gKateuuHr /vys2Nj1lyVQ68mxsi1Ui/IE6D8IuMlK3fkDjGJCfM8ImLVKdVZafHxczIOVUcJd PApdjqit9lGIVAv6t6JfZ7t2OghVSGtCha2Z/5L1cIt7KGlo3fFZNXzIUEjrZwo8 S1WMmixEZZM+P+sdi4Ab3aa+suq7ua9bd2lYza1mV74/Q6lKTn55oPCwSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtnVHrlRJK+3gYi0zhxi1yVGEpHMB8GA1UdIwQY MBaAFK+ThQPXKTFibcuNHpRrKuBqc9AuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYt M2I4YjBkMWE1OWE5LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYtM2I4YjBkMWE1OWE5 LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8RGFFif AxZKVb9aj168dPJiruo1nmeVxTilr0HcrNqtR86krePKIYNleWEuZXI1k7WYPfmk kvRLo5ExE5k+/9H3aLFo3kNiyL6Kd0jSl/Ys3JdgdgNdbhwsa1TUOK5BCmd29eaO kfh7mdvLSMqV8JpaSGcbJDpopDj8k5gAkyMNUKD/14xBZGfAeilss64y1GVaDiBk y6PAwgFhxv//26TMpvO7V5udBXo4D68jMZVe18qWaDU7mIXqlo9OLj5tcJjPc80B WIprrK7ri5fa5AXEei88v+JJK2R40CT0mEX7WKxFAHrXLTJlUkIysezpBIAUnaV6 hsnQh8exgGN5Aw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:15:46 2025 by rpki-client