This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json) Hash identifier: 5v6dpJ2H39+rz6eFY5tzOpdkNNH/YJRf2uYXJJpX190= Subject key identifier: C5:17:98:03:AD:68:A7:68:C2:27:85:A4:09:E2:70:AA:B8:ED:26:FD Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Certificate serial: 019AF088637AE3824BE0E9BD4545715B667E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft Manifest number: 1771 Signing time: Fri 05 Dec 2025 22:01:01 +0000 Manifest this update: Fri 05 Dec 2025 22:01:01 +0000 Manifest next update: Sat 06 Dec 2025 22:01:01 +0000 Files and hashes: 1: 54dHE0jadLwCWG8zkr-DJUOEEaw.roa (hash: oNDnO3daYus3xELeZDv1QShW9ceHJLAT7TByuVM8qlM=) 2: G5C1ZqYlTLCRRxbHStMwHe3D7Ns.roa (hash: LpFTYAOw4TDfnjUrddNXOWvBHb296+OG0h5PcCYbZJE=) 3: L_hiJ_zTIPvJHKnWltGOdh1BBUE.roa (hash: fnkqnOVp0hCGhUIs9oj2vYD3xsZ2o6VTqPgLKa54b08=) 4: _udyEbevQeyPMsntui78RQRmYXo.roa (hash: 8RRyytezjUw6YTel2ifQgoEKUcJPXqM6Y67HGaLLOtA=) 5: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: f+msLml/nzo64tQK7uYZEExttrBvXBonJfq5M18ERds=) 6: d_QjM08NyWxu6Tcwa6Z9vaHDI6E.roa (hash: 2UiuRNdprh1vh3n/JUuIuP4pSF4iJgcL2G0BqHfLcb8=) 7: gu5dao22fJp9scPActSQNTp8QK4.roa (hash: SFp8Pdfj96YgeaI0ilX+9ls8kY++x5GaLl2llXmCJNc=) 8: jwpY6rERA_zyIv98bpD7R8nes4o.roa (hash: zhq9elSEk74CwB7NZMhv2D35pQpbRAFiT6FBizp5Yp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:63:7a:e3:82:4b:e0:e9:bd:45:45:71:5b:66:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Validity Not Before: Dec 5 22:01:01 2025 GMT Not After : Dec 6 22:01:01 2025 GMT Subject: CN=c5179803ad68a768c22785a409e270aab8ed26fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0a:5b:0c:b0:dc:c4:9d:06:f7:a3:73:5f:30: 23:d8:2f:0f:cf:ae:e1:ce:06:ef:b8:73:c4:ae:98: 34:68:d1:a5:a1:6b:af:fa:d6:51:46:00:c7:13:dc: 54:95:6e:29:63:56:e7:1e:dd:ad:b6:b7:c3:1b:96: f0:b5:d7:17:6d:48:77:a1:b9:f3:a3:32:2f:81:06: ee:dd:67:90:76:6d:26:69:b2:01:64:05:fa:ae:4b: d8:70:25:65:bc:a7:62:6b:e8:9d:33:f9:80:e4:d2: 7a:49:75:ff:41:94:d8:3b:bf:ae:c7:7f:f1:34:10: db:ef:a6:89:c4:0b:59:6c:ff:d5:55:3a:4f:fd:3a: 98:89:6d:f1:c4:0b:39:1b:6f:8e:4f:cb:c0:b5:90: 0f:da:1a:06:d4:b3:1e:69:53:5b:68:9c:14:f4:f3: a4:a9:4f:56:33:e2:2f:ce:76:48:76:17:01:c1:2c: 26:e8:2e:5e:da:73:6b:43:1f:30:a4:40:1b:b7:cd: 73:08:a0:91:1c:58:98:b3:cf:32:82:b0:a8:12:ec: 13:34:73:f9:0d:c6:88:ed:ce:50:0b:3e:09:e5:7a: e7:c7:ee:ba:55:c8:d4:6b:fe:83:11:89:04:9b:ad: 23:cc:6b:ac:d5:db:91:78:a9:08:11:7f:b9:21:f3: 12:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:17:98:03:AD:68:A7:68:C2:27:85:A4:09:E2:70:AA:B8:ED:26:FD X509v3 Authority Key Identifier: keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:b8:82:13:aa:6f:d1:9f:c7:4e:0b:66:12:4e:66:db:a8:3a: f4:e9:bd:7b:f4:d9:e6:82:17:19:5c:b7:d9:a2:ce:28:49:98: 84:66:a6:24:0c:05:a7:d5:a2:bc:d1:27:94:fb:d9:1f:1b:a0: f6:12:19:78:b2:b5:db:eb:02:d4:95:cd:3d:8b:0a:ed:da:51: 8d:c1:27:50:1b:ea:ea:75:0e:3e:3b:30:b8:be:fd:d1:cf:5c: a7:fa:92:32:61:f2:91:c1:5e:bf:0e:8b:da:a0:7c:c1:ae:ba: 9c:fc:dd:bc:9e:59:90:ac:d1:e4:24:0f:43:df:01:90:04:b1: 32:2e:dd:7a:9a:fb:1d:49:49:27:d3:dc:e4:0d:1c:9c:dd:45: f2:40:93:40:ad:94:48:04:d5:92:44:c8:e9:37:c8:fc:9a:c7: e3:ec:c0:6f:83:8d:e8:30:22:23:28:64:c1:e4:4b:60:8b:b0: 14:1c:4a:e9:5c:6b:00:bf:c0:f1:32:77:13:a2:3c:bd:ef:4d: 7a:3d:b6:3e:d8:45:92:af:3d:f6:3f:28:52:f8:b0:36:53:cb: 3f:a9:2c:b8:02:20:58:64:7a:57:61:12:ea:09:64:04:d2:a9: 6a:5b:df:7d:fd:1c:35:73:f0:ba:d3:e8:e2:6d:64:93:2c:bb: 46:4f:49:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiGN644JL4Om9RUVxW2Z+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm OWRlNTYwHhcNMjUxMjA1MjIwMTAxWhcNMjUxMjA2MjIwMTAxWjAzMTEwLwYDVQQD EyhjNTE3OTgwM2FkNjhhNzY4YzIyNzg1YTQwOWUyNzBhYWI4ZWQyNmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQpbDLDcxJ0G96NzXzAj2C8Pz67h zgbvuHPErpg0aNGloWuv+tZRRgDHE9xUlW4pY1bnHt2ttrfDG5bwtdcXbUh3obnz ozIvgQbu3WeQdm0mabIBZAX6rkvYcCVlvKdia+idM/mA5NJ6SXX/QZTYO7+ux3/x NBDb76aJxAtZbP/VVTpP/TqYiW3xxAs5G2+OT8vAtZAP2hoG1LMeaVNbaJwU9POk qU9WM+IvznZIdhcBwSwm6C5e2nNrQx8wpEAbt81zCKCRHFiYs88ygrCoEuwTNHP5 DcaI7c5QCz4J5Xrnx+66VcjUa/6DEYkEm60jzGus1duReKkIEX+5IfMSMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUXmAOtaKdowieFpAnicKq47Sb9MB8GA1UdIwQY MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt ZDkzMzdkYjM5ZDFmLzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7iCE6pv 0Z/HTgtmEk5m26g69Om9e/TZ5oIXGVy32aLOKEmYhGamJAwFp9WivNEnlPvZHxug 9hIZeLK12+sC1JXNPYsK7dpRjcEnUBvq6nUOPjswuL790c9cp/qSMmHykcFevw6L 2qB8wa66nPzdvJ5ZkKzR5CQPQ98BkASxMi7depr7HUlJJ9Pc5A0cnN1F8kCTQK2U SATVkkTI6TfI/JrH4+zAb4ON6DAiIyhkweRLYIuwFBxK6VxrAL/A8TJ3E6I8ve9N ej22PthFkq899j8oUviwNlPLP6ksuAIgWGR6V2ES6glkBNKpalvfff0cNXPwutPo 4m1kkyy7Rk9Jaw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:27 2025 by rpki-client