This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json) Hash identifier: oV4dMccQvkGEEOt3r3K1c9+xlq82qdLS7gfzCXyC6wg= Subject key identifier: 99:75:30:5D:9A:AE:94:D7:B2:7E:C6:9B:03:AB:42:5C:70:CF:EA:83 Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa Certificate serial: 019AF1D26167050490F3C8230004F4378DDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft Manifest number: 11F8 Signing time: Sat 06 Dec 2025 04:01:27 +0000 Manifest this update: Sat 06 Dec 2025 04:01:27 +0000 Manifest next update: Sun 07 Dec 2025 04:01:27 +0000 Files and hashes: 1: 1NP21bBcjBPyQEY2JxKMTy8KWnI.roa (hash: nEpG5QclJFuSzinXm1Th0RF7eqEVbPT7VUvAfBWJ6uw=) 2: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: pm+3hjjSqtNpHfRX6ica8VHPEuqVfU4AqcydB+FbgbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:61:67:05:04:90:f3:c8:23:00:04:f4:37:8d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa Validity Not Before: Dec 6 04:01:27 2025 GMT Not After : Dec 7 04:01:27 2025 GMT Subject: CN=9975305d9aae94d7b27ec69b03ab425c70cfea83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e3:a9:77:03:5e:39:5e:68:3d:4d:9e:b1:7f: 00:d8:62:36:be:19:71:46:dd:13:3f:40:ce:d1:b3: ea:05:ed:31:fe:52:42:7e:50:af:83:a5:a3:ad:7e: 37:3e:3d:97:5a:bd:95:94:47:a5:38:1e:56:7e:5c: b8:65:a1:41:88:47:98:a5:86:12:04:bf:98:51:f9: 90:cd:88:f4:cf:98:8b:56:3b:79:dc:c2:07:58:64: a2:a7:87:1d:89:dd:c5:ef:93:bb:9c:59:22:1c:40: 6e:8e:4e:86:66:e3:dd:10:14:6a:2c:50:5d:8a:62: 66:98:8f:98:b7:45:c6:5d:72:26:81:20:4e:f7:2d: a4:6a:17:65:d7:03:31:f7:21:0a:50:7d:71:3e:f6: bd:2e:07:7f:3a:d9:86:ea:cc:ef:1d:33:5c:e4:2d: 88:fa:44:f3:8b:84:49:c4:5b:87:f0:1a:1a:77:1e: 36:9f:e0:4b:d7:74:f0:25:39:7e:51:b8:ae:49:7e: e0:cb:bb:82:84:d9:7b:bc:1f:5d:89:ae:33:2c:02: d0:6b:5b:e6:ea:1d:89:4f:a4:5f:be:31:1a:4a:ee: f9:1d:47:ce:2f:ff:da:bf:23:4b:91:46:1b:3c:3e: b1:01:18:ba:6f:a8:9b:d7:06:cd:82:c8:0a:ad:ce: 87:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:75:30:5D:9A:AE:94:D7:B2:7E:C6:9B:03:AB:42:5C:70:CF:EA:83 X509v3 Authority Key Identifier: keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:32:9f:45:cc:cf:f5:98:58:17:6c:35:e8:08:ed:34:1a:c6: 26:df:f3:20:2f:76:bb:f3:72:69:4f:b4:49:82:2c:fd:30:e4: bd:5f:92:7c:14:9b:fa:33:cf:85:1a:37:d0:9c:7c:18:0f:5a: 09:6f:e2:8b:00:aa:cc:4f:29:79:52:ad:61:5f:40:9d:fb:89: 9f:a0:ab:28:54:aa:5f:c2:7f:82:ff:18:e5:ea:69:12:4d:74: 03:d1:24:8d:6c:2d:7c:02:03:f7:6a:07:bd:35:60:cd:76:79: a7:ee:69:df:d8:46:ab:ab:89:2f:d0:d5:f7:67:ee:10:00:1d: ec:61:14:6c:f1:86:a2:f5:2a:d2:63:df:18:43:df:4e:39:48: 61:5f:0d:5b:97:1b:0c:57:86:d3:9b:21:9c:93:2d:27:07:8a: 50:bc:08:bd:76:96:b0:0e:9a:1c:96:28:8a:de:5d:b8:83:b5: 3b:56:dd:94:41:10:7e:93:f4:b6:11:aa:ee:fa:c2:40:c2:2c: 49:bc:71:17:6c:ac:d6:b1:e5:36:c5:00:e3:45:6b:91:e4:12: a2:62:79:55:21:c7:c0:0e:cd:d8:e9:a7:93:00:39:99:87:71: 3c:47:4d:71:04:d7:4e:86:74:3d:df:71:ea:5a:3a:5c:40:db: 83:00:ff:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0mFnBQSQ88gjAAT0N43cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZTczMmU2YjI0OTA5M2U3OWExYTUwN2NiY2Q4MTk2ZjAx ODE3ZmEwHhcNMjUxMjA2MDQwMTI3WhcNMjUxMjA3MDQwMTI3WjAzMTEwLwYDVQQD Eyg5OTc1MzA1ZDlhYWU5NGQ3YjI3ZWM2OWIwM2FiNDI1YzcwY2ZlYTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquOpdwNeOV5oPU2esX8A2GI2vhlx Rt0TP0DO0bPqBe0x/lJCflCvg6WjrX43Pj2XWr2VlEelOB5Wfly4ZaFBiEeYpYYS BL+YUfmQzYj0z5iLVjt53MIHWGSip4cdid3F75O7nFkiHEBujk6GZuPdEBRqLFBd imJmmI+Yt0XGXXImgSBO9y2kahdl1wMx9yEKUH1xPva9Lgd/OtmG6szvHTNc5C2I +kTzi4RJxFuH8Boadx42n+BL13TwJTl+UbiuSX7gy7uChNl7vB9dia4zLALQa1vm 6h2JT6RfvjEaSu75HUfOL//avyNLkUYbPD6xARi6b6ib1wbNgsgKrc6H5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJl1MF2arpTXsn7GmwOrQlxwz+qDMB8GA1UdIwQY MBaAFA/nMuaySQk+eaGlB8vNgZbwGBf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUt YTI3Nzg5ODI5M2I5LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUtYTI3Nzg5ODI5M2I5 LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTKfRczP 9ZhYF2w16AjtNBrGJt/zIC92u/NyaU+0SYIs/TDkvV+SfBSb+jPPhRo30Jx8GA9a CW/iiwCqzE8peVKtYV9AnfuJn6CrKFSqX8J/gv8Y5eppEk10A9EkjWwtfAID92oH vTVgzXZ5p+5p39hGq6uJL9DV92fuEAAd7GEUbPGGovUq0mPfGEPfTjlIYV8NW5cb DFeG05shnJMtJweKULwIvXaWsA6aHJYoit5duIO1O1bdlEEQfpP0thGq7vrCQMIs SbxxF2ys1rHlNsUA40VrkeQSomJ5VSHHwA7N2OmnkwA5mYdxPEdNcQTXToZ0Pd9x 6lo6XEDbgwD/MQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:32 2025 by rpki-client