This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft File: v5nSPIJymoBJ51ZXdahkvDqigu8.mft (raw, json) Hash identifier: w7Hky8Bry/csfwRYunaRphkh1atj3ULU7wVom3ET1Ck= Subject key identifier: 3E:B7:B3:D1:97:D9:9D:FF:A9:C0:3B:3F:63:32:E6:63:E8:35:BD:0D Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF Certificate issuer: /CN=bf99d23c82729a8049e7565775a864bc3aa282ef Certificate serial: 019B5BD1F74706BE1444135EA8222DD7B3CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft Manifest number: 082F Signing time: Fri 26 Dec 2025 18:00:45 +0000 Manifest this update: Fri 26 Dec 2025 18:00:45 +0000 Manifest next update: Sat 27 Dec 2025 18:00:45 +0000 Files and hashes: 1: v5nSPIJymoBJ51ZXdahkvDqigu8.crl (hash: cVgu0NH8p5/HdhimfOCMj6nSLj9dvmEH7sDgyw5uYuI=) 2: ybOueXNsSJri02mQKQibbKcroL4.roa (hash: rsUCG/CXGaoh8At3iU9kgYgz39f7x4KapImvavgysk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 18:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d1:f7:47:06:be:14:44:13:5e:a8:22:2d:d7:b3:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef Validity Not Before: Dec 26 18:00:45 2025 GMT Not After : Dec 27 18:00:45 2025 GMT Subject: CN=3eb7b3d197d99dffa9c03b3f6332e663e835bd0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1a:d2:d5:7d:27:3a:b0:87:8c:7f:b1:45:b9: 6e:a6:4a:74:0f:d8:aa:ca:65:f5:eb:e4:a7:56:df: 17:b8:a1:e0:d8:cd:a0:d8:ed:65:63:3a:26:a8:69: 55:89:fd:03:72:c1:11:6b:fc:16:a2:6a:1f:6a:0c: ed:35:dd:88:ca:24:d7:58:26:ea:0e:d2:1e:a3:e9: b2:9a:ee:78:9b:d9:5c:58:50:a9:eb:cf:fb:94:d1: ba:86:84:cb:c1:7c:83:ee:f7:7d:09:92:f3:88:19: 35:ae:96:4b:11:fb:a6:e2:ca:ee:0b:c8:6e:a5:4d: 4f:00:60:f9:aa:7a:04:0f:fb:99:2a:d9:5e:d8:57: 6e:91:a9:d0:f7:2b:9d:16:d1:86:19:f0:f4:b3:8f: f2:dc:0b:43:b1:6c:7c:9a:ca:50:3b:87:4f:4f:70: 52:44:ca:25:1b:6a:72:14:8b:01:76:73:62:d5:0a: 71:38:4f:12:bd:c3:46:68:ec:73:fe:a8:f9:d2:c2: 42:31:62:45:56:b1:13:83:fe:85:15:12:fa:ce:3a: b3:81:2a:9a:bb:82:3c:65:83:9e:6a:31:08:1e:12: b6:43:53:64:6e:b6:d0:4a:b9:8e:d3:65:25:bb:a6: 8a:b5:58:ff:be:bc:82:ad:7e:05:28:ac:2c:15:da: b3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B7:B3:D1:97:D9:9D:FF:A9:C0:3B:3F:63:32:E6:63:E8:35:BD:0D X509v3 Authority Key Identifier: keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:59:a4:9f:a1:63:14:70:80:fc:0a:56:38:33:28:03:85:b5: 6f:6e:02:dc:d6:5d:68:28:10:bd:5b:92:d4:0c:93:9c:73:24: 9d:52:5c:a0:57:c6:aa:a7:a6:6d:d4:3d:d2:38:db:ed:00:56: 9f:d8:79:17:1e:6c:97:6d:b8:32:fe:8e:88:6f:c9:e6:bd:0a: e0:42:7b:83:71:5e:97:a3:dc:85:fd:96:23:01:88:7d:b8:02: 8f:54:a0:28:bc:98:99:98:8e:1f:1d:3f:9e:fa:bd:f3:d4:9e: 80:ec:db:4d:d5:88:24:5f:e0:9a:19:8a:f6:07:c4:71:d6:d0: f9:2e:e7:ba:54:e8:e6:0d:bc:af:03:81:e7:73:80:18:da:89: b4:34:1d:82:b9:e4:d6:5e:75:43:13:a6:09:db:cd:05:f8:26: f9:63:b3:25:ae:d3:04:bf:bf:28:c4:19:32:08:15:d9:53:bd: 4e:63:f8:62:7d:32:f8:ba:fe:13:c2:2e:08:84:12:5f:ee:8a: 62:cf:0d:4c:f0:17:53:c6:81:a6:4b:9f:68:f8:96:41:14:f7: a8:fd:1d:f6:f6:af:b4:d7:c2:08:40:37:4b:00:8e:5c:da:f2: 50:7e:e9:28:2b:0c:a4:af:6a:e8:36:8c:15:ef:a6:6f:d2:27: 09:57:ab:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0fdHBr4URBNeqCIt17PPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmOTlkMjNjODI3MjlhODA0OWU3NTY1Nzc1YTg2NGJjM2Fh MjgyZWYwHhcNMjUxMjI2MTgwMDQ1WhcNMjUxMjI3MTgwMDQ1WjAzMTEwLwYDVQQD EygzZWI3YjNkMTk3ZDk5ZGZmYTljMDNiM2Y2MzMyZTY2M2U4MzViZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhrS1X0nOrCHjH+xRblupkp0D9iq ymX16+SnVt8XuKHg2M2g2O1lYzomqGlVif0DcsERa/wWomofagztNd2IyiTXWCbq DtIeo+mymu54m9lcWFCp68/7lNG6hoTLwXyD7vd9CZLziBk1rpZLEfum4sruC8hu pU1PAGD5qnoED/uZKtle2FdukanQ9yudFtGGGfD0s4/y3AtDsWx8mspQO4dPT3BS RMolG2pyFIsBdnNi1QpxOE8SvcNGaOxz/qj50sJCMWJFVrETg/6FFRL6zjqzgSqa u4I8ZYOeajEIHhK2Q1NkbrbQSrmO02Ulu6aKtVj/vryCrX4FKKwsFdqzeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD63s9GX2Z3/qcA7P2My5mPoNb0NMB8GA1UdIwQY MBaAFL+Z0jyCcpqASedWV3WoZLw6ooLvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjVuU1BJSnltb0JKNTFaWGRhaGt2RHFpZ3U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYWQ1M2EtZjExOC00YTg4LThjMmYt OTg3MDg2Y2NhYjg0LzEvdjVuU1BJSnltb0JKNTFaWGRhaGt2RHFpZ3U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYWQ1M2EtZjExOC00YTg4LThjMmYtOTg3MDg2Y2NhYjg0 LzEvdjVuU1BJSnltb0JKNTFaWGRhaGt2RHFpZ3U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlmkn6Fj FHCA/ApWODMoA4W1b24C3NZdaCgQvVuS1AyTnHMknVJcoFfGqqembdQ90jjb7QBW n9h5Fx5sl224Mv6OiG/J5r0K4EJ7g3Fel6Pchf2WIwGIfbgCj1SgKLyYmZiOHx0/ nvq989SegOzbTdWIJF/gmhmK9gfEcdbQ+S7nulTo5g28rwOB53OAGNqJtDQdgrnk 1l51QxOmCdvNBfgm+WOzJa7TBL+/KMQZMggV2VO9TmP4Yn0y+Lr+E8IuCIQSX+6K Ys8NTPAXU8aBpkufaPiWQRT3qP0d9vavtNfCCEA3SwCOXNryUH7pKCsMpK9q6DaM Fe+mb9InCVerdA== -----END CERTIFICATE-----Generated at Sat Dec 27 02:50:27 2025 by rpki-client