This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft File: d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft (raw, json) Hash identifier: /lw+WJL3Y7++M48ZQVrFIgQxysuMA77ooW68tc7085Q= Subject key identifier: 7B:09:3C:CC:7A:2F:9F:51:6E:CF:C4:0D:D8:4B:CD:E9:F0:64:53:3B Authority key identifier: 77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D Certificate issuer: /CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d Certificate serial: 019AF1D20264E4E9EAE01807560BACBCC896 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 04:01:03 +0000 Manifest this update: Sat 06 Dec 2025 04:01:03 +0000 Manifest next update: Sun 07 Dec 2025 04:01:03 +0000 Files and hashes: 1: 9RiEw_mWI329p00ygK6PV3zCib8.roa (hash: 76xZV8riwU1FZRHFqIOaKnZ1x4iN7Apxati5A/6/dRc=) 2: d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl (hash: mwzX7b5jUDIwQ6NKLbL4QOlCFkywobuGOaJSvBse3eI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:02:64:e4:e9:ea:e0:18:07:56:0b:ac:bc:c8:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d Validity Not Before: Dec 6 04:01:03 2025 GMT Not After : Dec 7 04:01:03 2025 GMT Subject: CN=7b093ccc7a2f9f516ecfc40dd84bcde9f064533b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a5:07:52:90:27:25:29:9d:6b:3f:22:6b:29: 97:15:da:7f:43:63:bd:19:d6:ae:4d:db:10:ea:e8: 9e:41:76:a6:96:ae:5c:8b:82:1a:20:c9:7d:4b:79: 08:5f:f5:9d:46:c3:26:2c:bf:dc:54:90:c7:cd:c3: 27:5e:b1:0c:b2:10:81:78:02:fc:fe:a5:db:29:59: e4:2d:84:5e:4a:eb:62:41:90:14:70:35:68:ad:57: ab:24:eb:9e:fd:a8:86:f7:35:c0:47:de:bf:f3:13: 22:ca:83:b4:d8:bb:4a:5a:8e:1d:3b:be:9c:ba:a0: 17:3d:49:3b:b0:98:78:73:02:58:fe:62:76:53:0f: 9f:31:d3:7f:6c:76:2d:46:39:be:34:0f:85:75:e6: d3:ae:6b:fe:f0:d8:93:36:22:3c:33:9d:d1:7d:ff: 83:4a:e7:62:f0:99:ad:6a:03:b6:99:e8:60:f8:c6: dd:b0:25:2f:1f:0e:aa:e3:9a:e1:75:47:c3:09:57: e3:b3:0b:8a:45:f8:33:02:a6:e7:86:46:aa:01:c0: ce:1d:6b:6f:05:8b:8b:45:87:5e:ff:91:3f:6f:72: 21:4e:56:bf:ca:e0:21:36:51:f9:01:b6:f1:1f:59: 56:0e:e6:6d:ed:e4:68:1b:38:61:27:85:37:2d:53: 71:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:09:3C:CC:7A:2F:9F:51:6E:CF:C4:0D:D8:4B:CD:E9:F0:64:53:3B X509v3 Authority Key Identifier: keyid:77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:32:21:28:03:2c:fd:b6:44:b4:d4:8e:03:af:6c:11:ae:ba: 89:d2:9e:e4:6d:e1:66:d3:09:d0:c8:8c:e3:f8:7f:02:c0:28: 11:cd:2d:d5:bc:67:e7:70:82:26:b3:77:67:bb:67:bf:45:b7: d3:dc:ee:e0:41:48:05:db:fe:34:01:cf:ad:b9:86:c5:5b:a6: 81:56:d3:c1:97:dc:df:49:2c:d8:72:a6:4f:d1:e1:d5:2b:b0: b5:62:7c:76:fe:75:56:6e:1d:b4:c4:47:0d:67:1d:ad:ab:a8: 9c:20:df:48:55:c2:ce:8e:d1:95:7e:e2:0d:f1:b2:53:76:71: 3c:14:d3:19:e0:d5:89:e9:91:0c:66:60:0f:6c:06:fa:a1:82: 55:79:ec:5a:5a:f5:14:90:62:5a:6e:4c:19:a3:d6:eb:8d:fb: e9:a6:b4:48:c9:fe:8c:8e:e7:c7:cc:3f:2e:93:b8:44:6b:78: 7b:d1:02:f3:d7:de:90:3a:20:21:52:9c:18:db:75:87:dd:11: 0a:80:cc:1a:8a:67:9c:42:ba:2e:1b:31:68:03:0e:3b:0f:3c: db:f6:1c:e6:1a:aa:40:70:1b:76:2c:84:f4:b6:b8:35:23:d4: d9:23:37:d6:8e:ea:8f:6e:c8:90:66:22:3a:3a:ef:5c:8f:0e: 26:5b:b7:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gJk5Onq4BgHVgusvMiWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OGEyZjM2NjAyYzc2ZmE3Mjk3YjRlNTlmNThkZGEwZDUw MWVhMGQwHhcNMjUxMjA2MDQwMTAzWhcNMjUxMjA3MDQwMTAzWjAzMTEwLwYDVQQD Eyg3YjA5M2NjYzdhMmY5ZjUxNmVjZmM0MGRkODRiY2RlOWYwNjQ1MzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqUHUpAnJSmdaz8iaymXFdp/Q2O9 GdauTdsQ6uieQXamlq5ci4IaIMl9S3kIX/WdRsMmLL/cVJDHzcMnXrEMshCBeAL8 /qXbKVnkLYReSutiQZAUcDVorVerJOue/aiG9zXAR96/8xMiyoO02LtKWo4dO76c uqAXPUk7sJh4cwJY/mJ2Uw+fMdN/bHYtRjm+NA+FdebTrmv+8NiTNiI8M53Rff+D Sudi8JmtagO2mehg+MbdsCUvHw6q45rhdUfDCVfjswuKRfgzAqbnhkaqAcDOHWtv BYuLRYde/5E/b3IhTla/yuAhNlH5AbbxH1lWDuZt7eRoGzhhJ4U3LVNxsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsJPMx6L59Rbs/EDdhLzenwZFM7MB8GA1UdIwQY MBaAFHeKLzZgLHb6cpe05Z9Y3aDVAeoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDRvdk5tQXNkdnB5bDdUbG4xamRvTlVCNmcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9iZWRlOTAtOTM5Yi00OTJjLWIwYzgt NzNiYmQwMmNiZDM3LzEvZDRvdk5tQXNkdnB5bDdUbG4xamRvTlVCNmcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9iZWRlOTAtOTM5Yi00OTJjLWIwYzgtNzNiYmQwMmNiZDM3 LzEvZDRvdk5tQXNkdnB5bDdUbG4xamRvTlVCNmcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjIhKAMs /bZEtNSOA69sEa66idKe5G3hZtMJ0MiM4/h/AsAoEc0t1bxn53CCJrN3Z7tnv0W3 09zu4EFIBdv+NAHPrbmGxVumgVbTwZfc30ks2HKmT9Hh1SuwtWJ8dv51Vm4dtMRH DWcdrauonCDfSFXCzo7RlX7iDfGyU3ZxPBTTGeDViemRDGZgD2wG+qGCVXnsWlr1 FJBiWm5MGaPW64376aa0SMn+jI7nx8w/LpO4RGt4e9EC89fekDogIVKcGNt1h90R CoDMGopnnEK6LhsxaAMOOw882/Yc5hqqQHAbdiyE9La4NSPU2SM31o7qj27IkGYi OjrvXI8OJlu3gw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:44 2025 by rpki-client