This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft File: B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json) Hash identifier: xJNMRmocmD7R8vN00s0hzlduNqdTjaK9IbhQYHmIm8o= Subject key identifier: 9F:A7:B8:28:7A:07:E0:7E:B2:BB:9A:19:AD:CB:6E:32:4B:44:BD:BF Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8 Certificate issuer: /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8 Certificate serial: 019B4A02AED354F49EE8981E16FFE76B5EEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft Manifest number: 0EDE Signing time: Tue 23 Dec 2025 07:00:48 +0000 Manifest this update: Tue 23 Dec 2025 07:00:48 +0000 Manifest next update: Wed 24 Dec 2025 07:00:48 +0000 Files and hashes: 1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: KtecOBIkaLN2U/twPS9gDMMWE8fJ1iHAXuh3bc0eUhw=) 2: _N04c68vWF1WhXHOL5knYD5yM1Q.roa (hash: G/pN2CsDPm/52PLm2tgxp/9Fe9uuvo9jdn7HkaDsAhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:02:ae:d3:54:f4:9e:e8:98:1e:16:ff:e7:6b:5e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8 Validity Not Before: Dec 23 07:00:48 2025 GMT Not After : Dec 24 07:00:48 2025 GMT Subject: CN=9fa7b8287a07e07eb2bb9a19adcb6e324b44bdbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5e:19:ed:c7:f5:2a:90:e7:5a:9d:1f:3a:d5: d2:84:32:86:55:b2:1d:a8:b9:3c:ca:8b:d0:d0:9b: a2:0b:0b:0a:be:c5:e3:f2:f7:65:76:50:4a:9c:7b: 22:50:72:f0:33:23:90:c3:bb:f5:09:f9:e6:b3:af: d1:0e:cb:55:ba:b8:94:b5:bb:18:b7:16:45:93:0b: 12:e0:a2:3d:ff:5b:5f:67:95:8f:0a:d6:a9:52:15: 47:c1:a6:41:6e:66:f0:9b:e7:68:e0:a7:9c:cf:ed: 6b:b1:25:18:5a:3f:2b:e2:9d:33:7e:ec:fb:e7:26: 27:77:ee:3c:6b:3f:a7:56:03:8c:c6:e3:d1:4c:19: f2:77:51:bd:31:4a:a6:b7:f8:0e:3b:fd:21:b6:fb: f3:c6:0f:4e:55:55:db:33:4d:f7:4b:62:82:29:b6: b6:9b:25:84:46:1e:34:86:06:63:b2:20:6e:a9:1e: bb:60:21:75:27:e0:ef:1c:e0:27:bf:d0:4d:61:95: 70:7a:32:cc:1a:65:b4:45:2f:8f:f9:52:b1:b2:ad: 40:f4:84:a5:72:b8:19:3f:37:72:78:36:0e:1c:9b: c0:e3:64:37:90:32:28:f3:05:fa:c9:0e:5f:5c:7f: 22:22:00:b6:77:13:b9:e4:9c:a9:b6:8f:93:1a:d3: 88:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A7:B8:28:7A:07:E0:7E:B2:BB:9A:19:AD:CB:6E:32:4B:44:BD:BF X509v3 Authority Key Identifier: keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6f:3e:a5:f2:4c:84:dc:c3:0e:51:22:59:4d:5d:85:88:85: 70:2f:31:ce:14:8d:b6:38:20:14:a0:9c:e8:19:5c:e0:6e:6e: f0:a3:26:af:e9:67:70:0f:16:2a:0f:47:85:ca:b6:14:e5:8d: ff:6c:09:4b:ba:a3:f8:5f:08:59:e8:fd:09:4d:a6:93:0c:95: c2:0f:cf:8c:53:35:27:e1:41:30:25:bb:a5:20:e8:0f:93:ee: aa:11:3a:a5:7b:97:f9:c9:0a:d7:05:67:68:b6:e8:cb:6e:dc: 79:6e:7a:69:86:20:49:12:d0:66:da:17:44:4c:b7:3e:62:7c: 52:be:0e:7f:46:7f:ea:e8:1e:ca:1e:13:89:ca:a7:73:0f:2b: db:d0:cb:df:dc:29:88:9a:c9:c3:c8:49:fe:b4:18:61:05:93: 27:08:1a:35:52:27:43:df:2c:aa:ef:e4:df:72:b5:b4:36:80: 4b:fa:e5:e9:1c:0e:63:c5:0b:45:6b:b2:41:59:9a:89:46:92: 98:b7:a4:6b:fa:7f:0c:a7:06:bb:5d:3a:8f:08:70:2a:5f:d4: aa:64:10:03:c6:bf:c0:54:4b:1c:1a:99:2d:45:ae:6f:bc:95: 9e:0d:34:d4:a7:1e:84:2f:b2:fa:13:da:11:c2:f8:60:c2:16: fa:ab:bc:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKAq7TVPSe6JgeFv/na17sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OWM5NzM4ZmM3YjFlNDA2NGM1YzYzNmJiYTZhOGI1NDkz OTFjYTgwHhcNMjUxMjIzMDcwMDQ4WhcNMjUxMjI0MDcwMDQ4WjAzMTEwLwYDVQQD Eyg5ZmE3YjgyODdhMDdlMDdlYjJiYjlhMTlhZGNiNmUzMjRiNDRiZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA614Z7cf1KpDnWp0fOtXShDKGVbId qLk8yovQ0JuiCwsKvsXj8vdldlBKnHsiUHLwMyOQw7v1Cfnms6/RDstVuriUtbsY txZFkwsS4KI9/1tfZ5WPCtapUhVHwaZBbmbwm+do4Kecz+1rsSUYWj8r4p0zfuz7 5yYnd+48az+nVgOMxuPRTBnyd1G9MUqmt/gOO/0htvvzxg9OVVXbM033S2KCKba2 myWERh40hgZjsiBuqR67YCF1J+DvHOAnv9BNYZVwejLMGmW0RS+P+VKxsq1A9ISl crgZPzdyeDYOHJvA42Q3kDIo8wX6yQ5fXH8iIgC2dxO55Jypto+TGtOI2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+nuCh6B+B+sruaGa3LbjJLRL2/MB8GA1UdIwQY MBaAFAeclzj8ex5AZMXGNrumqLVJORyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjV5WE9QeDdIa0JreGNZMnU2YW90VWs1SEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zY2ZjZDktNDk0Yy00MWM4LTgxZTIt ZDQxODE1M2EzMGE2LzEvQjV5WE9QeDdIa0JreGNZMnU2YW90VWs1SEtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8zY2ZjZDktNDk0Yy00MWM4LTgxZTItZDQxODE1M2EzMGE2 LzEvQjV5WE9QeDdIa0JreGNZMnU2YW90VWs1SEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGm8+pfJM hNzDDlEiWU1dhYiFcC8xzhSNtjggFKCc6Blc4G5u8KMmr+lncA8WKg9Hhcq2FOWN /2wJS7qj+F8IWej9CU2mkwyVwg/PjFM1J+FBMCW7pSDoD5PuqhE6pXuX+ckK1wVn aLboy27ceW56aYYgSRLQZtoXREy3PmJ8Ur4Of0Z/6ugeyh4Ticqncw8r29DL39wp iJrJw8hJ/rQYYQWTJwgaNVInQ98squ/k33K1tDaAS/rl6RwOY8ULRWuyQVmaiUaS mLeka/p/DKcGu106jwhwKl/UqmQQA8a/wFRLHBqZLUWub7yVng001KcehC+y+hPa EcL4YMIW+qu8bQ== -----END CERTIFICATE-----Generated at Tue Dec 23 17:16:47 2025 by rpki-client