This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft File: rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft (raw, json) Hash identifier: I9TKZToed8sq3aPa6E4nkzRSKTPrg4iJXuU9mT6IV7Q= Subject key identifier: 5F:41:0E:30:4A:AD:8B:D7:0A:77:AC:E8:0B:1D:3B:81:65:4C:B6:1E Authority key identifier: AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5 Certificate issuer: /CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5 Certificate serial: 019B6EB50AAEF163AAF1846423C8952BD24F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft Manifest number: 152D Signing time: Tue 30 Dec 2025 10:01:57 +0000 Manifest this update: Tue 30 Dec 2025 10:01:57 +0000 Manifest next update: Wed 31 Dec 2025 10:01:57 +0000 Files and hashes: 1: Nco7jM6fCKkEkhm4JQ4zIvrvqCo.roa (hash: BIdys9GlZzlGys/T7bq6Tcptb5M/oc7ReQGRtjoEJCs=) 2: TSnW5LPn5ivCEhZ09WlDUHGtTTs.roa (hash: G+x6DV9h2vgaW8F6rPRXljn5SD+izN1YCHl7dux4srI=) 3: rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl (hash: vnkphrbIUewwkmgFLssk27vrqlDJg0WG6a6W27N2CwY=) 4: saUKT6D6bfZZPO38YMOF0mTQhqs.roa (hash: yp3Hci3AL4Pw4TRERBpmO5GUDFOXjceWniFUMKPDbyw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 10:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:b5:0a:ae:f1:63:aa:f1:84:64:23:c8:95:2b:d2:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5 Validity Not Before: Dec 30 10:01:57 2025 GMT Not After : Dec 31 10:01:57 2025 GMT Subject: CN=5f410e304aad8bd70a77ace80b1d3b81654cb61e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5e:03:c1:f4:cc:7a:57:7f:37:4a:ba:5c:ae: 7e:28:9d:00:40:2f:33:00:ee:0c:be:f1:6e:d1:2a: d6:56:21:90:40:28:05:ef:75:d7:eb:e3:95:c6:95: 48:bc:99:e2:7f:c3:61:d1:50:06:cf:6b:ff:26:e3: d7:96:87:1a:8b:18:25:26:6c:a2:09:a2:9e:83:c2: 36:1c:a7:8f:90:23:6f:2c:f4:ee:73:d5:29:40:d2: 90:4f:aa:89:1f:4e:89:d5:8e:3e:63:39:2e:19:e2: 60:5f:0c:b3:91:ca:8f:17:ed:de:d1:63:de:5a:8c: 71:a2:90:9f:42:ec:8b:15:47:bc:a8:12:5c:bf:2f: a2:cb:09:99:61:bd:69:c9:dc:ac:d4:4f:76:7b:09: f3:14:2e:61:92:64:42:32:35:a0:e4:fb:b4:7b:a8: d2:a7:a8:26:4d:bd:f3:d5:53:5c:11:7f:3b:78:9b: 9e:31:7f:e1:21:d6:ce:3a:b0:0f:97:22:07:b1:a0: 44:b8:75:03:a5:40:95:45:f9:c0:55:15:bb:eb:eb: cb:5b:15:5e:a9:11:81:62:d9:d0:63:77:cc:71:3f: 20:9b:ff:b1:74:a7:0f:0d:87:8b:08:f7:c7:53:43: 74:6c:8e:24:d9:df:53:62:9b:e1:7c:21:28:e2:d7: 3e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:41:0E:30:4A:AD:8B:D7:0A:77:AC:E8:0B:1D:3B:81:65:4C:B6:1E X509v3 Authority Key Identifier: keyid:AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:f4:d9:99:9d:61:e9:78:d7:d8:3a:89:10:15:aa:63:a8:a9: 5d:54:51:65:5a:15:de:13:77:87:5e:06:36:53:a2:7f:2d:c9: e6:c8:64:8f:4d:9d:c0:67:f8:b9:25:3e:dd:16:ab:51:f8:41: 4b:84:48:87:9e:9e:b7:e4:0d:2b:70:5a:29:b4:72:89:cd:ab: bb:e4:41:bb:84:74:b5:bc:2b:aa:9e:ab:40:dc:a6:10:9f:90: 4c:18:76:60:35:bd:b1:00:22:1d:76:bb:18:83:1c:3a:de:5e: 01:df:e3:6b:09:7d:fa:6f:6b:18:ae:b6:9b:28:11:01:1d:78: 51:44:c6:1c:7e:08:ac:8a:93:60:8e:9d:de:71:08:fe:f1:e8: 5b:87:e7:4a:c9:7b:01:a9:66:a2:7b:2b:80:d6:7e:8c:c6:92: fc:80:c3:f6:e6:a4:40:39:c9:0f:11:74:b0:27:eb:43:cf:5b: 07:d2:e6:49:32:36:60:3c:2d:5c:46:f6:26:bf:80:af:b8:34: 2d:f6:ad:be:05:0f:b1:2c:07:dc:ca:b2:9d:ad:3d:2f:1d:c8: b6:b6:d4:84:57:e4:59:30:87:f0:ea:07:f3:4b:e7:da:65:ad: ec:2a:42:da:7a:b5:80:21:03:c4:a8:b4:c0:f4:ba:da:e1:b7: 39:5c:9c:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtutQqu8WOq8YRkI8iVK9JPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNWZjNmM2YWVhM2YwZTRlZGY3Y2NiOTJlNmViMjM3N2E3 NDc5YTUwHhcNMjUxMjMwMTAwMTU3WhcNMjUxMjMxMTAwMTU3WjAzMTEwLwYDVQQD Eyg1ZjQxMGUzMDRhYWQ4YmQ3MGE3N2FjZTgwYjFkM2I4MTY1NGNiNjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF4DwfTMeld/N0q6XK5+KJ0AQC8z AO4MvvFu0SrWViGQQCgF73XX6+OVxpVIvJnif8Nh0VAGz2v/JuPXlocaixglJmyi CaKeg8I2HKePkCNvLPTuc9UpQNKQT6qJH06J1Y4+YzkuGeJgXwyzkcqPF+3e0WPe WoxxopCfQuyLFUe8qBJcvy+iywmZYb1pydys1E92ewnzFC5hkmRCMjWg5Pu0e6jS p6gmTb3z1VNcEX87eJueMX/hIdbOOrAPlyIHsaBEuHUDpUCVRfnAVRW76+vLWxVe qRGBYtnQY3fMcT8gm/+xdKcPDYeLCPfHU0N0bI4k2d9TYpvhfCEo4tc+LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9BDjBKrYvXCnes6AsdO4FlTLYeMB8GA1UdIwQY MBaAFKxfxsauo/Dk7ffMuS5usjd6dHmlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckZfR3hxNmo4T1R0OTh5NUxtNnlOM3AwZWFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wODI3ZTAtMzMzMS00MGI0LTk5YjIt OWExMzcwOTJjZGQwLzEvckZfR3hxNmo4T1R0OTh5NUxtNnlOM3AwZWFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wODI3ZTAtMzMzMS00MGI0LTk5YjItOWExMzcwOTJjZGQw LzEvckZfR3hxNmo4T1R0OTh5NUxtNnlOM3AwZWFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePTZmZ1h 6XjX2DqJEBWqY6ipXVRRZVoV3hN3h14GNlOify3J5shkj02dwGf4uSU+3RarUfhB S4RIh56et+QNK3BaKbRyic2ru+RBu4R0tbwrqp6rQNymEJ+QTBh2YDW9sQAiHXa7 GIMcOt5eAd/jawl9+m9rGK62mygRAR14UUTGHH4IrIqTYI6d3nEI/vHoW4fnSsl7 AalmonsrgNZ+jMaS/IDD9uakQDnJDxF0sCfrQ89bB9LmSTI2YDwtXEb2Jr+Ar7g0 LfatvgUPsSwH3Mqyna09Lx3ItrbUhFfkWTCH8OoH80vn2mWt7CpC2nq1gCEDxKi0 wPS62uG3OVycdw== -----END CERTIFICATE-----Generated at Tue Dec 30 18:44:57 2025 by rpki-client