This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft File: b5NgtvWDmq_c4hzW3nY72qJr-_A.mft (raw, json) Hash identifier: f5cQ6QB+L6tVw3dgaGdMoZxw0olVLmlgLcVhowVIpM8= Subject key identifier: F1:BF:A0:73:C5:D0:A5:82:5C:49:90:76:E3:8F:60:2B:1F:53:77:EC Authority key identifier: 6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0 Certificate issuer: /CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0 Certificate serial: 019B4E4D6510BE5F4CCDB3BC96A3DCAB54B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft Manifest number: 0B9F Signing time: Wed 24 Dec 2025 03:00:53 +0000 Manifest this update: Wed 24 Dec 2025 03:00:53 +0000 Manifest next update: Thu 25 Dec 2025 03:00:53 +0000 Files and hashes: 1: 3-lLWfL65uJnHZ2rztKfPXmI6kg.roa (hash: TNLFS3eE9Ow6yD/bR32mYv3A5v+ZXVoId2+UI7n/x9s=) 2: b5NgtvWDmq_c4hzW3nY72qJr-_A.crl (hash: iBcrRF15UNKpXXdPdk5cCuxAgj3W5xouD90EVUSLrn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:65:10:be:5f:4c:cd:b3:bc:96:a3:dc:ab:54:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0 Validity Not Before: Dec 24 03:00:53 2025 GMT Not After : Dec 25 03:00:53 2025 GMT Subject: CN=f1bfa073c5d0a5825c499076e38f602b1f5377ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:19:fc:fc:55:10:3f:95:74:39:23:3e:63:d7: 10:c1:c0:aa:5f:d3:4d:59:68:ba:61:91:4a:f9:9e: 85:86:ca:e6:16:1a:4c:fa:39:24:cd:4f:64:6b:39: da:55:7d:37:4a:66:7a:73:3d:a6:17:5e:32:1a:15: 29:7c:00:90:59:47:73:ec:93:f5:60:15:94:2e:3e: e9:f5:15:b0:13:33:4d:c2:bc:49:5a:91:d5:9c:6c: 5a:c1:a3:ee:0d:92:e5:03:b1:31:32:56:2c:fd:07: 16:60:da:e1:fc:06:4f:64:fb:b8:1e:14:ec:e8:6a: 93:db:dc:79:43:17:33:42:be:78:0f:ee:a6:6c:8f: d3:7b:a6:a4:fd:6f:3e:11:b0:5c:59:1c:39:43:e5: 7f:1e:74:65:3c:65:f3:ff:0a:b4:8e:b6:77:61:cb: da:63:58:52:84:df:1e:2c:0d:dc:bd:86:7c:30:f1: 12:81:54:b9:86:37:a4:48:66:c3:91:07:6c:4f:ad: 4a:3e:a5:3a:c7:3c:df:31:55:aa:e4:67:8e:49:33: 35:aa:ac:cc:65:03:f7:0c:7c:50:07:1f:37:1e:5c: 0a:b3:f9:26:a3:24:2f:85:b1:27:22:06:3e:f2:a6: 99:2f:47:6f:16:59:59:81:19:c0:3a:a9:a7:88:ba: ac:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BF:A0:73:C5:D0:A5:82:5C:49:90:76:E3:8F:60:2B:1F:53:77:EC X509v3 Authority Key Identifier: keyid:6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f0:bc:38:1c:08:7a:28:48:98:65:cd:d1:5c:08:3b:f6:5a: ef:c8:af:ea:8a:08:b9:af:66:0a:3c:12:97:bd:c1:d0:4e:a7: 81:26:51:53:be:20:b9:6f:db:69:a1:dd:66:20:21:70:09:f0: e8:06:48:fc:8a:c0:c7:91:a2:64:b7:df:08:19:af:e9:81:7a: 10:c1:bd:ba:17:66:b8:32:aa:50:04:b3:d6:3d:d7:26:2a:2c: 12:93:d6:22:f9:f4:a1:93:09:85:5f:ee:7f:bc:b6:5f:be:db: d6:48:69:41:3b:a7:77:59:14:d2:ea:d8:75:69:11:49:3d:24: 19:48:68:0c:5d:14:e6:38:7e:2b:65:ae:d2:3d:42:33:ea:43: 0c:d7:bf:95:1a:1b:bc:c1:e9:ac:cb:dd:c0:18:dd:74:76:25: ed:8e:1a:5f:e9:38:59:76:59:67:39:a1:47:db:ea:9d:99:15: 32:b2:62:3f:c1:8d:3b:0e:e9:09:96:95:a7:54:82:08:5d:31: 5c:57:e1:f7:ac:f7:ad:a8:1f:73:84:dd:9d:48:6e:7c:16:e6: 38:66:84:ed:f7:47:45:e1:e4:4c:70:6d:2b:16:b7:22:17:a3: 04:78:c7:7a:08:26:ec:89:7c:06:a8:15:db:8a:ea:42:7a:cc: f6:bd:76:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTWUQvl9MzbO8lqPcq1S4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOTM2MGI2ZjU4MzlhYWZkY2UyMWNkNmRlNzYzYmRhYTI2 YmZiZjAwHhcNMjUxMjI0MDMwMDUzWhcNMjUxMjI1MDMwMDUzWjAzMTEwLwYDVQQD EyhmMWJmYTA3M2M1ZDBhNTgyNWM0OTkwNzZlMzhmNjAyYjFmNTM3N2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRn8/FUQP5V0OSM+Y9cQwcCqX9NN WWi6YZFK+Z6FhsrmFhpM+jkkzU9kaznaVX03SmZ6cz2mF14yGhUpfACQWUdz7JP1 YBWULj7p9RWwEzNNwrxJWpHVnGxawaPuDZLlA7ExMlYs/QcWYNrh/AZPZPu4HhTs 6GqT29x5QxczQr54D+6mbI/Te6ak/W8+EbBcWRw5Q+V/HnRlPGXz/wq0jrZ3Ycva Y1hShN8eLA3cvYZ8MPESgVS5hjekSGbDkQdsT61KPqU6xzzfMVWq5GeOSTM1qqzM ZQP3DHxQBx83HlwKs/kmoyQvhbEnIgY+8qaZL0dvFllZgRnAOqmniLqs4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPG/oHPF0KWCXEmQduOPYCsfU3fsMB8GA1UdIwQY MBaAFG+TYLb1g5qv3OIc1t52O9qia/vwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjVOZ3R2V0RtcV9jNGh6VzNuWTcycUpyLV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lMDU2MTQtMjgyNC00Mjk4LWJlMGMt ZTNhN2ZmMTFjNjMxLzEvYjVOZ3R2V0RtcV9jNGh6VzNuWTcycUpyLV9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9lMDU2MTQtMjgyNC00Mjk4LWJlMGMtZTNhN2ZmMTFjNjMx LzEvYjVOZ3R2V0RtcV9jNGh6VzNuWTcycUpyLV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvC8OBwI eihImGXN0VwIO/Za78iv6ooIua9mCjwSl73B0E6ngSZRU74guW/baaHdZiAhcAnw 6AZI/IrAx5GiZLffCBmv6YF6EMG9uhdmuDKqUASz1j3XJiosEpPWIvn0oZMJhV/u f7y2X77b1khpQTund1kU0urYdWkRST0kGUhoDF0U5jh+K2Wu0j1CM+pDDNe/lRob vMHprMvdwBjddHYl7Y4aX+k4WXZZZzmhR9vqnZkVMrJiP8GNOw7pCZaVp1SCCF0x XFfh96z3ragfc4TdnUhufBbmOGaE7fdHReHkTHBtKxa3IhejBHjHeggm7Il8BqgV 24rqQnrM9r12EA== -----END CERTIFICATE-----Generated at Wed Dec 24 12:27:05 2025 by rpki-client