This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft File: sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json) Hash identifier: piPoYRjxp4QL9NOin6HoavR0aNMnryBRABvsOXm+Lrk= Subject key identifier: B4:DC:81:66:92:14:A5:7A:53:26:84:9C:EC:D8:F5:69:1F:D3:76:3C Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e Certificate serial: 019AF23FBF87092A446BC0DFE19A4A7F14BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft Manifest number: 05C2 Signing time: Sat 06 Dec 2025 06:00:55 +0000 Manifest this update: Sat 06 Dec 2025 06:00:55 +0000 Manifest next update: Sun 07 Dec 2025 06:00:55 +0000 Files and hashes: 1: mMP3R6Y_E5t6fees10l8AYe8F8o.roa (hash: GVxHnVRZ4k3nHcgJKtEX5VgjvPdVGaTcdXcLRvNp8IM=) 2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: jhrm2BJPTJIx8p2botfP5nQtapKZnW2RbWtN7HKtVLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:bf:87:09:2a:44:6b:c0:df:e1:9a:4a:7f:14:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e Validity Not Before: Dec 6 06:00:55 2025 GMT Not After : Dec 7 06:00:55 2025 GMT Subject: CN=b4dc81669214a57a5326849cecd8f5691fd3763c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f7:6e:b2:26:40:5a:c5:c1:82:3d:bd:e5:58: 6a:f7:ab:34:b7:c6:29:ec:07:ce:0c:df:fe:75:01: 67:ef:fe:5e:3e:c2:de:5c:9b:10:46:9f:2b:de:ab: c2:5a:be:e3:20:17:b9:af:e2:6c:d5:80:ad:86:ff: 32:dc:e6:72:53:96:61:53:20:b6:81:cd:fb:ca:36: 00:92:06:93:c0:14:ff:92:14:8d:e0:57:c8:c5:2a: cd:d0:4e:3d:3c:57:ab:3c:01:76:54:97:c1:e9:b7: 36:48:40:9e:b7:40:3b:48:de:b6:41:79:0b:ef:69: e7:ae:ac:ab:23:72:bd:f2:27:b8:a1:c6:18:84:a3: f4:24:42:a5:bc:15:48:42:f0:ee:7e:92:93:9d:73: cd:aa:ce:29:71:10:2c:2f:0a:52:0f:d4:de:c5:44: 5d:da:70:26:4f:d2:c3:67:68:66:14:18:7e:e1:da: 35:90:52:56:ee:36:13:92:5a:4d:e5:5b:66:02:03: 03:4a:88:84:85:0c:2e:a3:54:c4:08:0b:77:90:89: 33:d2:87:73:a6:d0:1b:ec:e2:2b:75:f9:12:9b:87: 51:1b:e6:90:a4:16:36:5d:c0:46:08:89:54:0e:cb: a0:b2:78:d4:14:0a:e7:33:8c:6c:46:cb:56:19:79: 34:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DC:81:66:92:14:A5:7A:53:26:84:9C:EC:D8:F5:69:1F:D3:76:3C X509v3 Authority Key Identifier: keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:4c:08:3e:09:14:d5:6b:ba:47:8c:5f:54:a8:de:02:bb:a0: 3a:52:fc:99:04:28:ff:ad:83:60:96:6e:d5:a5:0c:03:36:58: aa:78:61:ce:4f:89:65:c8:c1:36:22:1e:36:3a:f4:80:8c:87: 55:f6:d0:ec:46:99:23:4d:c9:7c:98:3a:a0:f5:66:81:8d:b7: 79:b5:8c:ca:98:8b:db:11:e3:57:89:f4:03:7f:7b:c6:e0:f0: 38:f7:b1:8e:d3:9d:9f:88:5b:da:c7:b6:b7:15:ac:65:b5:4b: 45:6b:e6:c0:51:bd:60:2c:8c:1d:f8:fa:f7:db:44:1d:d4:86: a7:2a:fb:7a:4f:25:a0:cb:1f:4e:80:de:ce:5f:9d:5b:f1:63: 60:3a:ad:56:10:b5:a6:45:35:81:ab:d7:c0:0b:ba:df:cf:c0: 4d:54:13:cc:5e:b4:5c:32:b4:e6:00:db:0a:36:14:50:da:e4: 5b:e8:cf:cf:eb:10:15:cf:89:15:c9:6e:43:59:a8:a7:86:51: 43:a2:b6:f8:30:cf:de:58:23:6f:e4:b0:b9:60:8c:e2:04:19: 3a:28:18:ff:a1:2f:d9:cd:61:6b:fa:28:9c:33:a2:2e:ce:9e: 12:54:2f:94:df:42:51:18:b7:4a:b4:97:23:a1:99:00:51:40: bb:46:af:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7+HCSpEa8Df4ZpKfxS9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMzlhYjgyOThmYTM2M2FlODM3ZTUzMDAyODk2OWNjNWNi ZjEwNGUwHhcNMjUxMjA2MDYwMDU1WhcNMjUxMjA3MDYwMDU1WjAzMTEwLwYDVQQD EyhiNGRjODE2NjkyMTRhNTdhNTMyNjg0OWNlY2Q4ZjU2OTFmZDM3NjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fdusiZAWsXBgj295Vhq96s0t8Yp 7AfODN/+dQFn7/5ePsLeXJsQRp8r3qvCWr7jIBe5r+Js1YCthv8y3OZyU5ZhUyC2 gc37yjYAkgaTwBT/khSN4FfIxSrN0E49PFerPAF2VJfB6bc2SECet0A7SN62QXkL 72nnrqyrI3K98ie4ocYYhKP0JEKlvBVIQvDufpKTnXPNqs4pcRAsLwpSD9TexURd 2nAmT9LDZ2hmFBh+4do1kFJW7jYTklpN5VtmAgMDSoiEhQwuo1TECAt3kIkz0odz ptAb7OIrdfkSm4dRG+aQpBY2XcBGCIlUDsugsnjUFArnM4xsRstWGXk0+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTcgWaSFKV6UyaEnOzY9Wkf03Y8MB8GA1UdIwQY MBaAFLA5q4KY+jY66DflMAKJacxcvxBOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZmQ3MmYtZWY3Ny00NTM3LTg5ZTkt OWZiZDk2M2E1MTNjLzEvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZmQ3MmYtZWY3Ny00NTM3LTg5ZTktOWZiZDk2M2E1MTNj LzEvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEwIPgkU 1Wu6R4xfVKjeArugOlL8mQQo/62DYJZu1aUMAzZYqnhhzk+JZcjBNiIeNjr0gIyH VfbQ7EaZI03JfJg6oPVmgY23ebWMypiL2xHjV4n0A397xuDwOPexjtOdn4hb2se2 txWsZbVLRWvmwFG9YCyMHfj699tEHdSGpyr7ek8loMsfToDezl+dW/FjYDqtVhC1 pkU1gavXwAu638/ATVQTzF60XDK05gDbCjYUUNrkW+jPz+sQFc+JFcluQ1mop4ZR Q6K2+DDP3lgjb+SwuWCM4gQZOigY/6Ev2c1ha/oonDOiLs6eElQvlN9CURi3SrSX I6GZAFFAu0avFg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:59:46 2025 by rpki-client