This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft File: sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json) Hash identifier: wtZ8cSL1GnJr8b/xsI+SjjySXHLdELmTCyAnjjsxGN4= Subject key identifier: 47:66:58:7E:58:10:B5:6D:43:91:EE:6B:A6:C4:10:B2:29:A1:C2:3A Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e Certificate serial: 019B3D910144F08C61591EC77EE1F3785140 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft Manifest number: 05E9 Signing time: Sat 20 Dec 2025 21:01:11 +0000 Manifest this update: Sat 20 Dec 2025 21:01:11 +0000 Manifest next update: Sun 21 Dec 2025 21:01:11 +0000 Files and hashes: 1: mMP3R6Y_E5t6fees10l8AYe8F8o.roa (hash: GVxHnVRZ4k3nHcgJKtEX5VgjvPdVGaTcdXcLRvNp8IM=) 2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: D86Hq2DXEiXNEucOlcnt6iZcb+trTFyd9h2JXtWfQXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:01:44:f0:8c:61:59:1e:c7:7e:e1:f3:78:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e Validity Not Before: Dec 20 21:01:11 2025 GMT Not After : Dec 21 21:01:11 2025 GMT Subject: CN=4766587e5810b56d4391ee6ba6c410b229a1c23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5b:3a:3b:fe:ce:0a:a0:30:94:72:84:49:a7: 0a:46:6e:a4:39:ef:98:7a:c9:d2:23:d3:64:bd:c5: 5d:98:64:96:36:cd:c0:1b:65:1e:9e:e8:29:20:43: db:c4:29:47:0a:91:b7:df:27:15:23:a1:3c:8c:9d: ef:20:5c:3a:18:ae:55:61:4b:b0:4d:1b:9e:d9:44: 12:18:55:66:73:86:76:cb:5e:45:d2:43:11:94:3f: 39:f4:a2:6e:a1:95:4b:a9:98:8d:9d:a1:74:7a:a5: 64:d4:3e:fd:c5:aa:8b:d4:b9:76:f5:b6:f2:72:3d: e7:38:87:1e:b0:95:e5:45:76:4b:c3:0e:98:3e:48: 02:5c:dd:c2:c9:07:50:02:e7:7d:68:ff:f7:ec:3c: 54:c0:4f:97:11:e7:3b:45:67:ac:79:f2:60:4c:1f: ac:35:37:d8:24:25:61:15:ff:e9:88:85:57:b4:df: 8c:95:49:9e:c0:81:90:aa:a5:73:8a:9c:3f:dc:f1: 50:b6:81:ff:41:32:30:3a:4b:d4:e5:1a:73:10:dd: 95:91:0d:67:04:8c:52:3e:02:e1:39:b6:13:ab:25: cd:ef:0e:b3:d2:99:5b:47:f6:9f:cb:41:a9:b9:6a: a6:e8:3e:a9:83:c4:d3:17:e2:4b:5a:19:78:f6:a8: 98:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:66:58:7E:58:10:B5:6D:43:91:EE:6B:A6:C4:10:B2:29:A1:C2:3A X509v3 Authority Key Identifier: keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:64:fa:52:8d:f0:a0:8e:4d:5c:2a:a9:17:86:f4:ee:96:36: d9:bc:16:a0:8e:a7:b0:66:29:9b:d0:45:12:ba:22:6b:70:ff: e8:f6:22:f6:dd:de:33:7d:ca:c1:73:41:45:9d:3b:92:42:96: 99:84:0e:47:e1:18:34:0c:b7:a3:57:69:ad:8a:81:75:49:ab: a5:a4:2e:79:d6:a0:20:58:a2:89:21:b6:31:7d:b1:31:4f:1d: 69:e6:84:57:3d:33:bf:d2:bd:5e:84:97:99:fe:2c:f6:35:35: 96:79:29:d1:12:88:d5:52:a0:dd:43:36:77:b5:52:bf:81:1f: b5:ba:dc:f9:b7:70:33:f3:a0:ca:63:23:2e:75:04:b1:e1:ce: 01:6e:45:aa:10:96:67:ed:e9:5a:8d:00:a3:32:33:8a:c1:2f: a2:98:13:c6:7d:77:08:54:8b:ff:3e:75:c8:c1:69:35:36:6b: 36:40:ad:e5:73:bc:98:1d:a2:e7:dc:72:b0:63:94:21:91:11: f7:83:c1:35:58:99:d6:1f:99:f2:cc:bf:22:64:7b:43:8e:ee: 63:44:c3:35:17:f1:09:b5:26:13:5a:90:68:6a:7d:d8:5e:2c: 6d:19:5e:ba:e6:21:4a:c1:9c:30:1c:f4:02:54:4f:f7:42:65: 1d:c0:3a:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kQFE8IxhWR7HfuHzeFFAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMzlhYjgyOThmYTM2M2FlODM3ZTUzMDAyODk2OWNjNWNi ZjEwNGUwHhcNMjUxMjIwMjEwMTExWhcNMjUxMjIxMjEwMTExWjAzMTEwLwYDVQQD Eyg0NzY2NTg3ZTU4MTBiNTZkNDM5MWVlNmJhNmM0MTBiMjI5YTFjMjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVs6O/7OCqAwlHKESacKRm6kOe+Y esnSI9NkvcVdmGSWNs3AG2UenugpIEPbxClHCpG33ycVI6E8jJ3vIFw6GK5VYUuw TRue2UQSGFVmc4Z2y15F0kMRlD859KJuoZVLqZiNnaF0eqVk1D79xaqL1Ll29bby cj3nOIcesJXlRXZLww6YPkgCXN3CyQdQAud9aP/37DxUwE+XEec7RWesefJgTB+s NTfYJCVhFf/piIVXtN+MlUmewIGQqqVzipw/3PFQtoH/QTIwOkvU5RpzEN2VkQ1n BIxSPgLhObYTqyXN7w6z0plbR/afy0GpuWqm6D6pg8TTF+JLWhl49qiYhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdmWH5YELVtQ5Hua6bEELIpocI6MB8GA1UdIwQY MBaAFLA5q4KY+jY66DflMAKJacxcvxBOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZmQ3MmYtZWY3Ny00NTM3LTg5ZTkt OWZiZDk2M2E1MTNjLzEvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZmQ3MmYtZWY3Ny00NTM3LTg5ZTktOWZiZDk2M2E1MTNj LzEvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWT6Uo3w oI5NXCqpF4b07pY22bwWoI6nsGYpm9BFEroia3D/6PYi9t3eM33KwXNBRZ07kkKW mYQOR+EYNAy3o1dprYqBdUmrpaQuedagIFiiiSG2MX2xMU8daeaEVz0zv9K9XoSX mf4s9jU1lnkp0RKI1VKg3UM2d7VSv4Eftbrc+bdwM/OgymMjLnUEseHOAW5FqhCW Z+3pWo0AozIzisEvopgTxn13CFSL/z51yMFpNTZrNkCt5XO8mB2i59xysGOUIZER 94PBNViZ1h+Z8sy/ImR7Q47uY0TDNRfxCbUmE1qQaGp92F4sbRleuuYhSsGcMBz0 AlRP90JlHcA6Kw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:18:21 2025 by rpki-client