This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft File: B5602MZfOntFTKKl5fZAlOnYi9M.mft (raw, json) Hash identifier: hsFMA1Fhbr+46MC9U5o/3j+PKw/ctqVorCGrJjK8dbA= Subject key identifier: 15:D0:FC:F9:9B:EF:C8:6A:9F:61:67:3B:12:B3:DF:9F:85:28:59:91 Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3 Certificate issuer: /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3 Certificate serial: 019B40C8DC234C0E843E09B6FDE9A2BCDD57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 12:01:03 +0000 Manifest this update: Sun 21 Dec 2025 12:01:03 +0000 Manifest next update: Mon 22 Dec 2025 12:01:03 +0000 Files and hashes: 1: AY8RhKUHj2NodWuR-dwkYpgBEvk.roa (hash: 8sR3EhQJ4OZ7BluQZL72WnRYRz2pw1cIu2X1WaLS0DE=) 2: B5602MZfOntFTKKl5fZAlOnYi9M.crl (hash: 8mrUbUMPRCjw/mRxiMzxnYBMTTiEZbWDuOA2H+DfG/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:dc:23:4c:0e:84:3e:09:b6:fd:e9:a2:bc:dd:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3 Validity Not Before: Dec 21 12:01:03 2025 GMT Not After : Dec 22 12:01:03 2025 GMT Subject: CN=15d0fcf99befc86a9f61673b12b3df9f85285991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:91:88:75:39:d8:95:0a:bb:8a:da:e1:e5:9f: 47:2d:70:1b:3d:b6:19:02:0e:a4:aa:de:aa:b8:ce: fa:62:e7:82:46:f6:5d:e1:1d:29:53:14:48:57:bf: 2c:8d:f4:1d:4c:db:c2:c5:d4:03:3f:99:9c:ca:75: ed:d0:90:79:90:9f:60:64:41:9d:3e:7b:c2:a3:39: 5a:e4:09:10:3d:14:8e:15:25:86:ea:78:04:22:ce: 55:ab:50:6b:7f:f0:39:69:22:8e:df:20:63:94:b4: b2:08:34:d6:1b:f8:97:05:44:fa:18:a3:dd:52:38: ab:ce:38:e7:aa:d0:70:1c:54:dd:b0:e6:98:58:e7: 50:6d:5d:bf:59:7e:27:9b:4d:ae:7f:0b:1c:72:19: 13:6d:44:97:fc:73:4b:5e:9a:13:af:d7:67:d5:80: d5:83:61:22:3a:2b:66:26:3b:d8:2b:7c:27:b4:7d: 0e:b2:46:e8:a1:ea:9d:e3:ce:e9:ab:a8:99:5f:37: 58:0d:96:ec:d3:db:10:99:e7:75:90:9e:61:36:29: ce:25:7f:8c:4c:b9:bc:62:0c:da:58:82:31:18:b9: 1b:a0:7d:02:d2:3b:2e:28:db:3a:58:30:c0:b7:fa: 89:19:9e:a2:19:e2:91:ea:1f:52:f5:34:b9:47:3f: 5d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D0:FC:F9:9B:EF:C8:6A:9F:61:67:3B:12:B3:DF:9F:85:28:59:91 X509v3 Authority Key Identifier: keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:cc:59:bd:e6:bf:bd:2d:ab:17:a1:30:41:54:04:f2:fa:9d: 32:bc:31:49:0d:9d:be:b8:62:fa:a3:15:1c:3e:f8:de:5f:0d: fa:64:d6:5a:6b:13:9a:b2:d9:b3:c4:32:34:87:dc:cd:37:13: 79:5b:5a:e6:26:bf:07:ba:9c:94:c3:4c:d4:25:ac:76:ad:be: a1:11:7b:80:46:c4:c3:d1:a4:b5:5c:6b:69:3c:e5:44:f6:54: 2d:02:1b:4b:06:54:48:38:ec:ab:32:6f:2d:58:4c:66:b9:80: 0a:54:44:a1:84:f8:6e:ad:7d:5b:61:00:21:ae:ef:60:a9:0a: cc:fe:a9:15:e5:59:5d:66:9c:ae:f4:2e:f2:35:6a:c6:cf:1a: 5a:77:b9:7f:16:3f:47:f3:fb:83:ce:29:12:e6:41:1f:15:39: 86:aa:0a:be:a6:4d:b5:3c:d8:89:2f:5e:fd:c5:ca:ec:15:f3: c6:3b:19:8f:3c:a0:d8:47:32:92:f6:64:0c:b4:a3:7a:87:2a: f9:61:c9:78:ce:96:c0:f1:e2:9f:bf:bd:8b:f4:fd:9d:6b:8b: 8f:77:53:8d:ae:19:1e:3c:49:7e:8b:96:79:04:8b:7f:cc:f1: e4:d8:ad:07:94:2d:23:91:39:70:16:f8:ca:f9:54:40:25:56: 68:25:cc:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyNwjTA6EPgm2/emivN1XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OWViNGQ4YzY1ZjNhN2I0NTRjYTJhNWU1ZjY0MDk0ZTlk ODhiZDMwHhcNMjUxMjIxMTIwMTAzWhcNMjUxMjIyMTIwMTAzWjAzMTEwLwYDVQQD EygxNWQwZmNmOTliZWZjODZhOWY2MTY3M2IxMmIzZGY5Zjg1Mjg1OTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypGIdTnYlQq7itrh5Z9HLXAbPbYZ Ag6kqt6quM76YueCRvZd4R0pUxRIV78sjfQdTNvCxdQDP5mcynXt0JB5kJ9gZEGd PnvCozla5AkQPRSOFSWG6ngEIs5Vq1Brf/A5aSKO3yBjlLSyCDTWG/iXBUT6GKPd UjirzjjnqtBwHFTdsOaYWOdQbV2/WX4nm02ufwscchkTbUSX/HNLXpoTr9dn1YDV g2EiOitmJjvYK3wntH0Oskbooeqd487pq6iZXzdYDZbs09sQmed1kJ5hNinOJX+M TLm8YgzaWIIxGLkboH0C0jsuKNs6WDDAt/qJGZ6iGeKR6h9S9TS5Rz9dtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXQ/Pmb78hqn2FnOxKz35+FKFmRMB8GA1UdIwQY MBaAFAeetNjGXzp7RUyipeX2QJTp2IvTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjU2MDJNWmZPbnRGVEtLbDVmWkFsT25ZaTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yZmMwMDctMzYxZC00ZjQ3LWFhZjct NDg0ZDg0M2U2ZGUzLzEvQjU2MDJNWmZPbnRGVEtLbDVmWkFsT25ZaTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yZmMwMDctMzYxZC00ZjQ3LWFhZjctNDg0ZDg0M2U2ZGUz LzEvQjU2MDJNWmZPbnRGVEtLbDVmWkFsT25ZaTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAocxZvea/ vS2rF6EwQVQE8vqdMrwxSQ2dvrhi+qMVHD743l8N+mTWWmsTmrLZs8QyNIfczTcT eVta5ia/B7qclMNM1CWsdq2+oRF7gEbEw9GktVxraTzlRPZULQIbSwZUSDjsqzJv LVhMZrmAClREoYT4bq19W2EAIa7vYKkKzP6pFeVZXWacrvQu8jVqxs8aWne5fxY/ R/P7g84pEuZBHxU5hqoKvqZNtTzYiS9e/cXK7BXzxjsZjzyg2EcykvZkDLSjeocq +WHJeM6WwPHin7+9i/T9nWuLj3dTja4ZHjxJfouWeQSLf8zx5NitB5QtI5E5cBb4 yvlUQCVWaCXMXA== -----END CERTIFICATE-----Generated at Sun Dec 21 18:55:14 2025 by rpki-client