This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft File: _5JbpaQQRnlkY0z_SvrXelbaRyI.mft (raw, json) Hash identifier: DP6DRXbzxyHOWLNyfbG9NkHPXFGZr1boGwQTEoMQxno= Subject key identifier: 51:8A:9C:6C:4E:1B:F8:52:FF:00:83:23:8B:A4:3C:0C:71:5C:FD:29 Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22 Certificate issuer: /CN=ff925ba5a410467964634cff4afad77a56da4722 Certificate serial: 019B3C104D79C40042D105C7194355D4E35C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft Manifest number: 0618 Signing time: Sat 20 Dec 2025 14:00:59 +0000 Manifest this update: Sat 20 Dec 2025 14:00:59 +0000 Manifest next update: Sun 21 Dec 2025 14:00:59 +0000 Files and hashes: 1: YCBMVw8lhfTbZWn4cTYVsc3blBQ.roa (hash: DAw8H6oh39jnMGAPAS2Ix82bT3BCrrolFFfmIIaPBT0=) 2: _5JbpaQQRnlkY0z_SvrXelbaRyI.crl (hash: 1m+qsD9hmekPwmdcOhbOcDYZWD1sAicc+9pxmCxJtLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:4d:79:c4:00:42:d1:05:c7:19:43:55:d4:e3:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722 Validity Not Before: Dec 20 14:00:59 2025 GMT Not After : Dec 21 14:00:59 2025 GMT Subject: CN=518a9c6c4e1bf852ff0083238ba43c0c715cfd29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c3:2c:70:bd:46:e2:04:0b:4b:c1:de:55:d5: 95:32:21:95:a9:c1:68:5a:bf:f3:a2:ed:d0:78:9a: ba:7f:f8:03:89:eb:c9:1b:04:fe:5f:24:62:41:92: 85:22:0c:c2:dd:99:f8:f1:e2:0f:bb:90:11:8a:b7: 4e:9f:cf:71:24:02:80:f9:5f:f0:42:9c:59:0a:02: 19:f7:ac:d5:7c:d1:36:14:6d:33:97:e2:d9:38:de: c8:16:32:84:b7:27:d6:84:63:ee:33:06:45:3b:5d: bd:2f:fd:9c:21:cb:3a:b8:91:99:28:1c:f1:4d:c5: f0:be:4f:67:50:91:90:2f:ad:74:a7:de:3b:e1:84: 80:bb:84:4a:01:b2:4d:0d:af:ef:11:3a:4f:41:b6: b5:a7:30:43:9f:dc:ef:5c:ef:f8:84:d4:e3:56:a2: 1e:5c:0e:67:4e:2c:31:c7:75:4c:cf:8f:b5:a0:07: 53:8b:4c:cd:1a:dd:61:9b:86:b8:8c:4d:93:49:3b: 83:8a:23:75:58:0c:64:7f:09:37:9f:dd:4c:57:d3: 29:3b:e2:8d:01:ad:52:57:fe:30:ef:22:99:94:56: 71:31:fc:4f:a1:69:f9:ea:3a:8d:82:af:ac:06:df: 54:31:50:e3:74:16:cf:bc:5c:3e:60:6c:a5:af:c7: 3d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8A:9C:6C:4E:1B:F8:52:FF:00:83:23:8B:A4:3C:0C:71:5C:FD:29 X509v3 Authority Key Identifier: keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:24:41:be:3b:13:6c:96:4a:09:4a:bc:42:70:62:fe:ce:b7: 6a:7d:91:bb:af:82:70:e0:65:0c:08:71:a1:03:c7:52:c0:c9: 22:e3:79:5d:29:d5:9b:77:c9:bb:1f:72:a3:26:36:92:2d:e3: 33:f6:66:c8:69:9a:a1:07:91:3c:e3:59:ae:0f:5a:03:b6:30: 53:83:16:d6:2a:c4:a0:74:43:00:e0:aa:17:51:56:1b:dc:19: d3:e0:c5:29:4c:92:9f:ae:93:ae:8c:c8:07:89:31:7b:77:b8: d1:66:b8:c2:f7:a1:d7:89:45:a2:14:aa:89:9c:44:ec:e0:d8: d3:8d:ef:dd:e9:ae:86:43:7f:8e:bc:35:2b:dc:fa:65:71:cd: ba:f5:be:be:c4:28:29:cd:c7:ce:b4:3c:ad:51:0a:b4:a4:87: d2:18:5e:6f:3c:a9:69:1f:2e:b8:cb:2a:d0:23:56:73:16:8f: 1b:30:24:82:b8:5f:12:01:e0:80:0c:f1:83:f8:82:2a:10:f9: c6:76:7e:03:8a:2d:89:2a:7e:a9:1b:29:1b:c9:d3:d5:45:73: a4:51:fa:44:0f:3b:e3:9f:17:99:9a:9e:1f:1e:93:64:71:ee: 03:64:96:8a:a0:ca:b1:18:82:ae:cb:98:b1:00:5e:dd:bd:16: 15:71:1f:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EE15xABC0QXHGUNV1ONcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOTI1YmE1YTQxMDQ2Nzk2NDYzNGNmZjRhZmFkNzdhNTZk YTQ3MjIwHhcNMjUxMjIwMTQwMDU5WhcNMjUxMjIxMTQwMDU5WjAzMTEwLwYDVQQD Eyg1MThhOWM2YzRlMWJmODUyZmYwMDgzMjM4YmE0M2MwYzcxNWNmZDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8MscL1G4gQLS8HeVdWVMiGVqcFo Wr/zou3QeJq6f/gDievJGwT+XyRiQZKFIgzC3Zn48eIPu5ARirdOn89xJAKA+V/w QpxZCgIZ96zVfNE2FG0zl+LZON7IFjKEtyfWhGPuMwZFO129L/2cIcs6uJGZKBzx TcXwvk9nUJGQL610p9474YSAu4RKAbJNDa/vETpPQba1pzBDn9zvXO/4hNTjVqIe XA5nTiwxx3VMz4+1oAdTi0zNGt1hm4a4jE2TSTuDiiN1WAxkfwk3n91MV9MpO+KN Aa1SV/4w7yKZlFZxMfxPoWn56jqNgq+sBt9UMVDjdBbPvFw+YGylr8c94wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGKnGxOG/hS/wCDI4ukPAxxXP0pMB8GA1UdIwQY MBaAFP+SW6WkEEZ5ZGNM/0r613pW2kciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzVKYnBhUVFSbmxrWTB6X1N2clhlbGJhUnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jNjhlNWYtOGVmYS00M2ZmLTg5MGYt MjcyOTYwYmM0MzIyLzEvXzVKYnBhUVFSbmxrWTB6X1N2clhlbGJhUnlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jNjhlNWYtOGVmYS00M2ZmLTg5MGYtMjcyOTYwYmM0MzIy LzEvXzVKYnBhUVFSbmxrWTB6X1N2clhlbGJhUnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCRBvjsT bJZKCUq8QnBi/s63an2Ru6+CcOBlDAhxoQPHUsDJIuN5XSnVm3fJux9yoyY2ki3j M/ZmyGmaoQeRPONZrg9aA7YwU4MW1irEoHRDAOCqF1FWG9wZ0+DFKUySn66TrozI B4kxe3e40Wa4wveh14lFohSqiZxE7ODY043v3emuhkN/jrw1K9z6ZXHNuvW+vsQo Kc3HzrQ8rVEKtKSH0hhebzypaR8uuMsq0CNWcxaPGzAkgrhfEgHggAzxg/iCKhD5 xnZ+A4otiSp+qRspG8nT1UVzpFH6RA87458XmZqeHx6TZHHuA2SWiqDKsRiCrsuY sQBe3b0WFXEfzA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:38:05 2025 by rpki-client