This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft File: p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft (raw, json) Hash identifier: uv0lYIO44uTdhrS9BQc3OyVtYoltL6W7cwVRDTY3eqs= Subject key identifier: 7C:B1:77:19:4E:35:55:2C:1F:88:B3:A9:E0:B5:A7:16:54:71:58:8C Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093 Certificate serial: 019B3FB5E5AF2D33FE9B2C75E57E71760736 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft Manifest number: 17A4 Signing time: Sun 21 Dec 2025 07:00:43 +0000 Manifest this update: Sun 21 Dec 2025 07:00:43 +0000 Manifest next update: Mon 22 Dec 2025 07:00:43 +0000 Files and hashes: 1: FFaDrp2TE8Iso6bJlqnb0FqxMJo.roa (hash: Jw9G+J8hnCo8w1musIzxpySO6bTcvYrzNLckyhAd2sE=) 2: oJr4DCeqtN2tV6Ugf36L9eXTcTI.roa (hash: vOwTJ+3Vsj2ap8ElFcEgLM26b3Nku6y6ruqjJGc7XJs=) 3: p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl (hash: ulY+OX7NxagoVhnU/LHg1Yb+tX2y7s/DOuXGpm1J73I=) 4: wx9ZLfHq6PPLS3pCuhQK4_vKdmU.roa (hash: DnxpnoHYAliciPu4AVi4OmZMasKtCCrMr0Wd+JxLlgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:e5:af:2d:33:fe:9b:2c:75:e5:7e:71:76:07:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093 Validity Not Before: Dec 21 07:00:43 2025 GMT Not After : Dec 22 07:00:43 2025 GMT Subject: CN=7cb177194e35552c1f88b3a9e0b5a7165471588c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:da:10:6d:68:89:4c:41:bf:bf:ac:02:a5: a4:52:df:4f:a7:47:8c:a4:fe:f9:6b:f2:f1:61:73: 02:34:56:8c:af:73:9b:e1:7e:78:b0:f3:d6:4a:bd: 95:fd:e0:42:d4:a0:04:c8:a6:30:4a:02:e2:5b:0a: ca:9b:78:3a:42:df:8f:d2:21:67:31:37:01:e9:f3: 34:52:ad:6d:40:3e:b5:6a:a8:f7:a4:f0:9c:95:2f: 93:10:3e:8a:d5:ba:c4:30:37:2d:03:a3:f8:f2:c8: d3:69:38:9e:d7:c9:33:c9:ba:b7:47:b1:14:3d:6c: 2d:cf:4c:1c:86:17:ac:98:7e:a6:26:2c:6f:bf:4b: 9a:01:e8:ba:c1:50:4f:12:c1:43:21:cb:3b:bb:4c: 48:61:1c:fe:59:a0:8e:e8:d2:7b:8a:ef:d0:f6:d5: 59:c8:61:c7:bf:fb:8d:12:0b:5c:e2:cc:27:a9:82: 9d:4d:2e:a5:6e:ca:ee:4c:52:0f:01:e2:35:a6:4d: 0a:6c:a2:c2:4a:40:9a:d9:33:b2:35:c9:e7:c8:3f: 84:26:da:1f:7e:9b:02:11:49:1c:66:0f:43:49:0d: 90:71:bd:b1:b8:0b:07:d8:fd:34:84:ad:fe:0a:e8: fa:99:22:91:c6:58:81:04:c4:91:09:ee:38:dc:4e: fa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B1:77:19:4E:35:55:2C:1F:88:B3:A9:E0:B5:A7:16:54:71:58:8C X509v3 Authority Key Identifier: keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:9b:a6:1e:cd:7c:36:4b:ba:51:20:ad:3a:1a:2d:93:29:cc: 0b:14:11:9f:d9:60:79:15:92:30:dd:93:94:44:a4:fb:53:28: b9:0d:55:96:24:c5:54:d4:7f:d5:ad:08:e3:25:65:48:cf:f1: d3:04:a5:1c:9c:c5:64:d6:62:a1:a4:c8:f4:4d:5e:d8:62:83: aa:16:cf:6f:0d:e4:47:56:65:a6:16:e6:27:0f:f5:27:ce:b4: 47:fe:31:83:80:b8:c9:ad:fa:24:0d:3d:e3:e5:3d:08:4e:7f: f7:fe:18:c9:57:1c:3c:d5:0c:ab:ca:42:29:21:26:5d:e0:9d: 92:0d:74:ff:66:1d:3c:77:86:97:53:b4:34:e7:92:2c:fe:be: 56:eb:c1:42:83:b5:b0:83:1c:4b:92:18:e5:97:3d:49:17:36: 0a:d3:84:89:13:92:19:52:31:ae:78:9c:05:60:aa:dd:46:38: ae:ea:6a:b3:5c:86:fb:78:1c:1e:35:48:be:1c:32:8d:67:8f: b1:86:e7:5e:18:a0:d3:02:b2:e2:d2:12:32:68:f9:c0:c6:93: 7e:00:29:2b:ff:6c:41:22:81:e7:55:3e:ce:39:34:b1:ac:24: 1b:28:1f:85:2b:3b:4d:29:4b:96:06:ca:69:ce:5a:74:f7:0b: 54:aa:0f:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/teWvLTP+myx15X5xdgc2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OWJiYTI4MDVhOTg4OTU0ZTRmZWM0MjU3MDUzMGYxNmY5 ZTcwOTMwHhcNMjUxMjIxMDcwMDQzWhcNMjUxMjIyMDcwMDQzWjAzMTEwLwYDVQQD Eyg3Y2IxNzcxOTRlMzU1NTJjMWY4OGIzYTllMGI1YTcxNjU0NzE1ODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ/aEG1oiUxBv7+sAqWkUt9Pp0eM pP75a/LxYXMCNFaMr3Ob4X54sPPWSr2V/eBC1KAEyKYwSgLiWwrKm3g6Qt+P0iFn MTcB6fM0Uq1tQD61aqj3pPCclS+TED6K1brEMDctA6P48sjTaTie18kzybq3R7EU PWwtz0wchhesmH6mJixvv0uaAei6wVBPEsFDIcs7u0xIYRz+WaCO6NJ7iu/Q9tVZ yGHHv/uNEgtc4swnqYKdTS6lbsruTFIPAeI1pk0KbKLCSkCa2TOyNcnnyD+EJtof fpsCEUkcZg9DSQ2Qcb2xuAsH2P00hK3+Cuj6mSKRxliBBMSRCe443E76xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHyxdxlONVUsH4izqeC1pxZUcViMMB8GA1UdIwQY MBaAFKebuigFqYiVTk/sQlcFMPFvnnCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMt ZTFlZDlkZDJhMDJhLzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMtZTFlZDlkZDJhMDJh LzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJumHs18 Nku6USCtOhotkynMCxQRn9lgeRWSMN2TlESk+1MouQ1VliTFVNR/1a0I4yVlSM/x 0wSlHJzFZNZioaTI9E1e2GKDqhbPbw3kR1ZlphbmJw/1J860R/4xg4C4ya36JA09 4+U9CE5/9/4YyVccPNUMq8pCKSEmXeCdkg10/2YdPHeGl1O0NOeSLP6+VuvBQoO1 sIMcS5IY5Zc9SRc2CtOEiROSGVIxrnicBWCq3UY4rupqs1yG+3gcHjVIvhwyjWeP sYbnXhig0wKy4tISMmj5wMaTfgApK/9sQSKB51U+zjk0sawkGygfhSs7TSlLlgbK ac5adPcLVKoP8Q== -----END CERTIFICATE-----Generated at Sun Dec 21 13:21:09 2025 by rpki-client