This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft File: d0972iMD4D6ANP52MfUEi5mF9n4.mft (raw, json) Hash identifier: JTo+DYue5N/RW85Kyrb1HDm6hfLQbJIL/ZPSKTts8/c= Subject key identifier: A0:CC:43:59:7F:F4:8B:42:6F:25:32:6F:75:E9:2B:C0:BF:01:6F:15 Authority key identifier: 77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E Certificate issuer: /CN=774f7bda2303e03e8034fe7631f5048b9985f67e Certificate serial: 019AF577D67A5DF5CCF269F7D0F59342DECF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft Manifest number: BD Signing time: Sat 06 Dec 2025 21:01:02 +0000 Manifest this update: Sat 06 Dec 2025 21:01:02 +0000 Manifest next update: Sun 07 Dec 2025 21:01:02 +0000 Files and hashes: 1: F8wvoV2Msd-SeHr6PBjzhXHOGKU.roa (hash: GfnGToHeyWjARTLRd2eGQHQuQH+P8p0dtRcm2xvmJe4=) 2: d0972iMD4D6ANP52MfUEi5mF9n4.crl (hash: x14vh1IUk39x9JlIi7HzkU8bK5itffvtBhVElJxwjvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:d6:7a:5d:f5:cc:f2:69:f7:d0:f5:93:42:de:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=774f7bda2303e03e8034fe7631f5048b9985f67e Validity Not Before: Dec 6 21:01:02 2025 GMT Not After : Dec 7 21:01:02 2025 GMT Subject: CN=a0cc43597ff48b426f25326f75e92bc0bf016f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:84:ae:63:cd:0d:f0:1e:6f:7a:7b:c8:d8:1f: 0d:04:b0:b9:55:f1:7d:93:1c:d9:86:35:a3:ce:ff: 90:62:ff:c8:81:44:a6:34:80:30:26:53:f4:26:ed: 43:58:fd:31:ee:d0:64:94:96:c5:3f:3d:71:ad:13: 13:0a:92:3f:fd:06:ef:31:67:c0:b8:e7:8d:03:3b: a3:14:e9:c2:a5:59:7b:d6:17:f9:33:81:d9:1f:59: 4e:dc:d8:7e:a3:f4:3c:31:3f:a1:7e:71:4d:18:4e: 35:eb:27:e7:f5:1d:55:e0:ea:70:04:ef:cc:7a:3b: 47:9e:75:56:1e:70:24:39:0a:a6:da:7a:26:0f:56: 31:3d:b4:ff:30:2e:81:36:18:52:dd:33:4a:ba:b3: 6f:bc:ff:a2:e4:e2:3e:e6:7a:fd:d6:fc:b8:b0:20: 6b:b7:92:33:74:8f:dd:be:98:c8:74:f2:91:23:18: bd:4f:47:3f:6b:45:77:4a:86:3c:4f:31:7c:40:81: b8:e1:11:9e:32:f7:a5:d2:65:e9:ff:1d:fb:90:a5: 0a:7d:ab:ad:d3:c1:b7:9f:8c:1b:83:e7:6e:2c:60: ad:b9:c2:86:11:d3:d7:96:c5:ed:06:25:90:d1:6e: 9c:17:38:66:a1:d7:cb:ec:ea:d9:29:3d:32:bf:2f: 13:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CC:43:59:7F:F4:8B:42:6F:25:32:6F:75:E9:2B:C0:BF:01:6F:15 X509v3 Authority Key Identifier: keyid:77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:fe:94:1e:5a:2f:dd:04:01:9c:44:e1:47:5c:80:06:20:bb: 58:c2:58:0d:3c:3b:ec:43:ab:f8:c3:e2:fe:7a:10:7f:d4:58: 5a:3a:89:a6:5a:92:62:ec:66:c1:2d:41:6c:18:d5:83:17:7b: 64:6e:37:1c:ef:c3:2e:25:2b:86:af:ed:31:45:76:94:23:2c: 51:84:40:a8:68:26:15:ca:e0:65:da:9a:26:57:87:23:8e:ef: d9:30:db:f5:3a:cb:93:0a:d9:77:61:3f:96:1e:2f:84:43:1f: 5a:07:37:8c:24:16:a8:9b:0c:b7:06:31:ae:cf:33:ea:8a:11: 31:4a:19:95:14:01:68:82:aa:e6:20:a6:c8:84:b0:82:b5:97: 7f:aa:65:26:24:b6:85:43:d3:d4:d9:dd:82:97:74:e6:f8:71: e5:d5:7e:32:e3:c8:a4:5c:a0:cc:c6:2c:ee:52:5d:d1:53:12: da:09:c6:d6:d6:2d:9e:9a:87:63:87:b5:f1:ad:9b:22:4c:ca: ae:d5:c3:af:8d:d1:2a:86:73:90:c9:a9:99:31:32:c0:6d:86: 86:bf:1d:20:ec:29:b9:5e:37:9f:6b:d0:f5:60:72:cb:a6:04: ee:90:e5:af:21:92:88:36:a4:34:be:62:54:13:f0:62:76:49: d6:e5:7d:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d9Z6XfXM8mn30PWTQt7PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NGY3YmRhMjMwM2UwM2U4MDM0ZmU3NjMxZjUwNDhiOTk4 NWY2N2UwHhcNMjUxMjA2MjEwMTAyWhcNMjUxMjA3MjEwMTAyWjAzMTEwLwYDVQQD EyhhMGNjNDM1OTdmZjQ4YjQyNmYyNTMyNmY3NWU5MmJjMGJmMDE2ZjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooSuY80N8B5venvI2B8NBLC5VfF9 kxzZhjWjzv+QYv/IgUSmNIAwJlP0Ju1DWP0x7tBklJbFPz1xrRMTCpI//QbvMWfA uOeNAzujFOnCpVl71hf5M4HZH1lO3Nh+o/Q8MT+hfnFNGE416yfn9R1V4OpwBO/M ejtHnnVWHnAkOQqm2nomD1YxPbT/MC6BNhhS3TNKurNvvP+i5OI+5nr91vy4sCBr t5IzdI/dvpjIdPKRIxi9T0c/a0V3SoY8TzF8QIG44RGeMvel0mXp/x37kKUKfaut 08G3n4wbg+duLGCtucKGEdPXlsXtBiWQ0W6cFzhmodfL7OrZKT0yvy8TKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDMQ1l/9ItCbyUyb3XpK8C/AW8VMB8GA1UdIwQY MBaAFHdPe9ojA+A+gDT+djH1BIuZhfZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDA5NzJpTUQ0RDZBTlA1Mk1mVUVpNW1GOW40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85ZjQ5MGQtOWMwMS00ZDJmLWE5ZWQt MzgxNzA0MDEyY2UyLzEvZDA5NzJpTUQ0RDZBTlA1Mk1mVUVpNW1GOW40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi85ZjQ5MGQtOWMwMS00ZDJmLWE5ZWQtMzgxNzA0MDEyY2Uy LzEvZDA5NzJpTUQ0RDZBTlA1Mk1mVUVpNW1GOW40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbv6UHlov 3QQBnEThR1yABiC7WMJYDTw77EOr+MPi/noQf9RYWjqJplqSYuxmwS1BbBjVgxd7 ZG43HO/DLiUrhq/tMUV2lCMsUYRAqGgmFcrgZdqaJleHI47v2TDb9TrLkwrZd2E/ lh4vhEMfWgc3jCQWqJsMtwYxrs8z6ooRMUoZlRQBaIKq5iCmyISwgrWXf6plJiS2 hUPT1Nndgpd05vhx5dV+MuPIpFygzMYs7lJd0VMS2gnG1tYtnpqHY4e18a2bIkzK rtXDr43RKoZzkMmpmTEywG2Ghr8dIOwpuV43n2vQ9WByy6YE7pDlryGSiDakNL5i VBPwYnZJ1uV97Q== -----END CERTIFICATE-----Generated at Sat Dec 6 23:34:27 2025 by rpki-client