This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft File: r5VJF2-WbToiFBAHkJfIfw4dILE.mft (raw, json) Hash identifier: R66k2FlkPOlQqGOYHTBPADDbiHlKGsNoMp5wrNhc1ew= Subject key identifier: B3:EF:64:1D:B2:4B:AD:69:5F:5F:A9:77:CA:47:EC:02:A6:13:CE:F7 Authority key identifier: AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1 Certificate issuer: /CN=af9549176f966d3a221410079097c87f0e1d20b1 Certificate serial: 019B638B5067666976412D5197BCCBE626D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft Manifest number: 0EFE Signing time: Sun 28 Dec 2025 06:00:32 +0000 Manifest this update: Sun 28 Dec 2025 06:00:32 +0000 Manifest next update: Mon 29 Dec 2025 06:00:32 +0000 Files and hashes: 1: 1n_N6auYiXQ1pyBQYj7m3QI_dSs.roa (hash: LsHjMOF74kduMAehGu3uEfQUdY1PYN7E293m6Bfa2Jo=) 2: r5VJF2-WbToiFBAHkJfIfw4dILE.crl (hash: cNl8j3TmiYV8mi1ONvUhSDccO+3t3KqMwusAy06lzbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:8b:50:67:66:69:76:41:2d:51:97:bc:cb:e6:26:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af9549176f966d3a221410079097c87f0e1d20b1 Validity Not Before: Dec 28 06:00:32 2025 GMT Not After : Dec 29 06:00:32 2025 GMT Subject: CN=b3ef641db24bad695f5fa977ca47ec02a613cef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d1:83:7e:d1:b7:a4:dc:fe:9e:dd:c0:2d:2c: f6:20:ce:90:9e:26:d7:13:98:7c:f6:f7:06:dd:e7: d6:15:fe:68:99:c7:3e:4a:d7:d4:63:e6:6d:36:4f: 1b:a6:d5:6e:30:ee:2f:85:7c:49:84:8c:eb:52:bb: 32:e3:1d:72:4c:a4:64:2f:e7:2e:26:63:f8:8d:74: 09:0a:97:fa:38:79:64:fe:0d:a2:f0:72:af:21:8c: b2:e8:68:84:6e:c5:9b:d1:39:80:0b:d6:ae:a4:5e: 18:69:30:eb:ff:3c:70:5c:9f:27:b5:79:17:2b:b3: 85:fb:c2:b0:3f:ea:68:f1:3c:2d:29:ff:51:6e:f5: 20:70:ef:a4:6d:98:85:ca:eb:80:8a:1a:6b:0f:0f: 43:59:fd:35:5b:68:9c:21:12:81:ef:9b:e8:39:e8: 66:77:c7:d4:19:bf:db:ec:15:69:26:3f:89:a9:54: 1d:43:f9:6e:72:45:15:bb:6d:cf:1e:df:03:d6:69: 5f:51:7f:e2:7c:c9:1d:fd:d5:1f:fc:fe:d0:87:85: 2e:0d:6d:92:96:eb:f4:51:c4:76:40:cb:8d:01:2a: 8b:b2:8a:a0:72:26:c1:61:09:c4:34:74:b5:1b:87: 56:37:54:4b:1a:de:8a:51:64:d7:75:e6:ea:85:00: 88:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EF:64:1D:B2:4B:AD:69:5F:5F:A9:77:CA:47:EC:02:A6:13:CE:F7 X509v3 Authority Key Identifier: keyid:AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:16:1d:8d:77:cc:0d:7b:47:d2:8c:a8:a0:3f:54:67:99:7a: d8:b6:40:af:b8:0a:98:47:ce:80:6c:1a:13:99:b5:9c:b5:dc: b7:89:f8:46:6a:03:a4:0d:6b:7a:61:fd:56:87:93:fa:5f:1a: cd:3e:9e:12:22:c5:b4:18:3a:8c:bd:6c:36:85:0d:ff:25:3e: 6a:5d:e8:87:e7:bd:27:ed:b3:e7:1e:ed:02:f8:79:01:cd:2c: f2:2f:60:5c:b5:57:98:5d:ef:8c:c9:5b:17:54:ca:f5:bd:56: 07:47:b5:c2:76:d7:8d:0a:2f:8f:26:ae:97:ed:01:c3:f9:8f: 67:20:f8:bd:78:53:bc:e7:bf:7b:77:b5:e2:f8:ac:5a:93:7c: f3:49:2e:1a:75:3c:b0:2c:dd:dd:42:95:b3:c2:7f:62:e2:13: a3:ab:d8:06:c9:cb:b7:00:29:8d:83:b4:e7:b2:19:ce:a8:e0: 0b:44:ff:4b:cb:f4:02:4f:36:c1:df:77:e8:c6:f8:3a:71:9d: fd:6b:55:27:5c:89:fd:b1:2b:23:a9:42:76:8b:59:5f:22:fa: 2a:a0:9e:d5:e9:a6:24:7c:04:9b:bd:ea:cd:76:7b:7e:f4:b2: 43:0e:aa:38:93:f0:6c:3c:cf:12:96:2c:4a:ad:be:88:34:52: d8:5f:c5:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtji1BnZml2QS1Rl7zL5ibVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOTU0OTE3NmY5NjZkM2EyMjE0MTAwNzkwOTdjODdmMGUx ZDIwYjEwHhcNMjUxMjI4MDYwMDMyWhcNMjUxMjI5MDYwMDMyWjAzMTEwLwYDVQQD EyhiM2VmNjQxZGIyNGJhZDY5NWY1ZmE5NzdjYTQ3ZWMwMmE2MTNjZWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotGDftG3pNz+nt3ALSz2IM6QnibX E5h89vcG3efWFf5omcc+StfUY+ZtNk8bptVuMO4vhXxJhIzrUrsy4x1yTKRkL+cu JmP4jXQJCpf6OHlk/g2i8HKvIYyy6GiEbsWb0TmAC9aupF4YaTDr/zxwXJ8ntXkX K7OF+8KwP+po8TwtKf9RbvUgcO+kbZiFyuuAihprDw9DWf01W2icIRKB75voOehm d8fUGb/b7BVpJj+JqVQdQ/luckUVu23PHt8D1mlfUX/ifMkd/dUf/P7Qh4UuDW2S luv0UcR2QMuNASqLsoqgcibBYQnENHS1G4dWN1RLGt6KUWTXdebqhQCIOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPvZB2yS61pX1+pd8pH7AKmE873MB8GA1UdIwQY MBaAFK+VSRdvlm06IhQQB5CXyH8OHSCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjVWSkYyLVdiVG9pRkJBSGtKZklmdzRkSUxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84NTkxNzAtYTk3NC00YWUzLWEwMjAt M2VhNTlkOTZhNzkwLzEvcjVWSkYyLVdiVG9pRkJBSGtKZklmdzRkSUxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS84NTkxNzAtYTk3NC00YWUzLWEwMjAtM2VhNTlkOTZhNzkw LzEvcjVWSkYyLVdiVG9pRkJBSGtKZklmdzRkSUxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtRYdjXfM DXtH0oyooD9UZ5l62LZAr7gKmEfOgGwaE5m1nLXct4n4RmoDpA1remH9VoeT+l8a zT6eEiLFtBg6jL1sNoUN/yU+al3oh+e9J+2z5x7tAvh5Ac0s8i9gXLVXmF3vjMlb F1TK9b1WB0e1wnbXjQovjyaul+0Bw/mPZyD4vXhTvOe/e3e14visWpN880kuGnU8 sCzd3UKVs8J/YuITo6vYBsnLtwApjYO057IZzqjgC0T/S8v0Ak82wd936Mb4OnGd /WtVJ1yJ/bErI6lCdotZXyL6KqCe1emmJHwEm73qzXZ7fvSyQw6qOJPwbDzPEpYs Sq2+iDRS2F/F4g== -----END CERTIFICATE-----Generated at Sun Dec 28 09:52:35 2025 by rpki-client