This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft File: du8KDuj6FU162kOK8SEiac4KzEE.mft (raw, json) Hash identifier: PJsD0ZSw8u0VLJstmJl32bLDn0XqxSwVMGb1icnYLjc= Subject key identifier: A9:D6:CA:F3:2D:89:44:8D:05:12:74:EC:94:06:F2:53:46:DB:F8:FD Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41 Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41 Certificate serial: 019AF389C22288609A85870646BB9F1B28AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft Manifest number: 06D8 Signing time: Sat 06 Dec 2025 12:01:22 +0000 Manifest this update: Sat 06 Dec 2025 12:01:22 +0000 Manifest next update: Sun 07 Dec 2025 12:01:22 +0000 Files and hashes: 1: 2CWxlLP-g2_NKa4Kkpj2mT541B8.roa (hash: mmFiMDnNmanIcg6TQLMQsrDR/+z17sNvs6gtqCoQhp0=) 2: _fP9Z6Qv2kJn-Wq44o76SeffPHk.roa (hash: 4imK77f8nPoaw3AiGFAa7c39oqo+0JEgUABlegcK0lE=) 3: du8KDuj6FU162kOK8SEiac4KzEE.crl (hash: 02ecoxvkgVIOigwG6k/SufP5r5tr3w4uurkT91bViUs=) 4: l65724QI29Rvj8Dehw-WDE4zXrs.roa (hash: GIynNXgCpE42jnQGxrKvLDY9GYzVvsdz2aApBnrj/3E=) 5: zGpb-ZeCY1IKeaoUCFy7z97Xemo.roa (hash: mbhMc1h15zK2CFg+s3mq9POrXrfojhoCA2jehVwrtX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:c2:22:88:60:9a:85:87:06:46:bb:9f:1b:28:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41 Validity Not Before: Dec 6 12:01:22 2025 GMT Not After : Dec 7 12:01:22 2025 GMT Subject: CN=a9d6caf32d89448d051274ec9406f25346dbf8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:30:10:f5:b9:e8:79:4d:d7:5a:35:4e:0a:26: 06:03:f5:31:37:3a:38:d0:d0:f8:a5:15:93:3d:66: cb:4a:e9:8c:fd:c3:8c:7b:ad:10:c4:30:50:90:69: a4:09:7a:2b:e6:6b:7a:85:58:3d:c8:6c:7a:66:f5: e8:c7:4b:e2:93:ae:b1:e0:e6:4f:a8:75:0f:96:a8: da:f4:3a:a5:88:00:b2:0e:58:fb:03:b7:90:4a:d2: ed:65:30:da:a4:5a:ab:51:3e:25:f1:08:b9:31:ce: 59:8d:4d:b0:b9:51:ea:0d:31:d1:2b:eb:a8:19:d9: 9e:7a:f8:5a:3b:62:88:52:94:90:1e:61:c8:f0:0d: 45:4b:76:05:c2:a2:69:60:e9:86:5c:5c:8c:83:7c: 41:03:f9:a2:9d:74:1f:a7:ce:1f:2d:c3:75:f3:d6: f9:93:a7:aa:b5:f7:ff:5f:58:a7:b2:b7:e6:7d:07: ed:82:8a:62:b3:d7:45:20:f9:c0:27:5b:5e:7f:05: 1a:f0:d0:f2:6e:3c:7f:13:eb:8a:72:80:25:ef:04: cb:59:b2:af:2d:cd:2b:82:f1:25:da:eb:78:e1:e3: 9f:25:e4:44:81:c8:27:81:71:83:fa:c8:3a:8b:ea: 4b:11:cd:e2:99:ce:b1:ff:b6:2b:db:4b:51:c9:0b: 62:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D6:CA:F3:2D:89:44:8D:05:12:74:EC:94:06:F2:53:46:DB:F8:FD X509v3 Authority Key Identifier: keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:7a:42:7f:1f:22:8b:b7:e1:60:f5:69:93:44:1e:91:72:e8: 2b:e9:b9:67:69:aa:47:ce:d5:e5:56:e3:8f:e0:b3:8e:06:6e: 3e:ba:6d:af:ea:1c:cd:ab:c6:2f:5b:ff:0c:c5:76:ed:73:56: 40:8c:cb:b9:0b:80:92:8a:83:91:eb:0f:9a:1e:ba:40:95:42: bb:85:d2:60:45:62:6d:ff:92:a8:e6:5a:c5:dc:a4:89:43:0a: 78:f6:d5:ac:ba:68:d0:ab:6d:41:29:61:83:e4:19:40:63:28: 96:04:bb:91:21:3d:77:0d:df:09:03:24:e4:21:45:49:c5:d7: d8:b7:9a:33:b6:e5:81:e4:aa:37:c1:41:31:3b:03:73:34:6b: 37:d1:5a:e2:15:4e:2f:ec:aa:9a:9d:46:da:6b:c0:ea:13:98: 67:28:aa:08:02:19:ea:76:99:25:da:00:ff:09:b0:25:71:e8: 2c:4f:62:ce:84:81:5c:ff:55:82:01:b3:a6:4a:b7:6e:2d:d8: 3f:f8:f3:84:d2:ff:e7:4c:3a:b9:a5:da:df:02:0b:05:a5:9c: 35:e1:99:dd:59:95:77:68:7c:a1:15:55:ef:1f:53:d1:50:3d: cd:52:06:2c:b8:e5:74:c3:57:17:58:f0:fe:b0:4d:f8:c1:c6: 8f:b5:8e:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzicIiiGCahYcGRrufGyiqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZWYwYTBlZThmYTE1NGQ3YWRhNDM4YWYxMjEyMjY5Y2Uw YWNjNDEwHhcNMjUxMjA2MTIwMTIyWhcNMjUxMjA3MTIwMTIyWjAzMTEwLwYDVQQD EyhhOWQ2Y2FmMzJkODk0NDhkMDUxMjc0ZWM5NDA2ZjI1MzQ2ZGJmOGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9DAQ9bnoeU3XWjVOCiYGA/UxNzo4 0ND4pRWTPWbLSumM/cOMe60QxDBQkGmkCXor5mt6hVg9yGx6ZvXox0vik66x4OZP qHUPlqja9DqliACyDlj7A7eQStLtZTDapFqrUT4l8Qi5Mc5ZjU2wuVHqDTHRK+uo GdmeevhaO2KIUpSQHmHI8A1FS3YFwqJpYOmGXFyMg3xBA/minXQfp84fLcN189b5 k6eqtff/X1insrfmfQftgopis9dFIPnAJ1tefwUa8NDybjx/E+uKcoAl7wTLWbKv Lc0rgvEl2ut44eOfJeREgcgngXGD+sg6i+pLEc3imc6x/7Yr20tRyQtiPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnWyvMtiUSNBRJ07JQG8lNG2/j9MB8GA1UdIwQY MBaAFHbvCg7o+hVNetpDivEhImnOCsxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHU4S0R1ajZGVTE2MmtPSzhTRWlhYzRLekVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xNjg2YzMtZGE3MC00YjU0LWFiMmIt M2JlOTk1ZDJiYmRhLzEvZHU4S0R1ajZGVTE2MmtPSzhTRWlhYzRLekVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8xNjg2YzMtZGE3MC00YjU0LWFiMmItM2JlOTk1ZDJiYmRh LzEvZHU4S0R1ajZGVTE2MmtPSzhTRWlhYzRLekVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArnpCfx8i i7fhYPVpk0QekXLoK+m5Z2mqR87V5Vbjj+CzjgZuPrptr+oczavGL1v/DMV27XNW QIzLuQuAkoqDkesPmh66QJVCu4XSYEVibf+SqOZaxdykiUMKePbVrLpo0KttQSlh g+QZQGMolgS7kSE9dw3fCQMk5CFFScXX2LeaM7blgeSqN8FBMTsDczRrN9Fa4hVO L+yqmp1G2mvA6hOYZyiqCAIZ6naZJdoA/wmwJXHoLE9izoSBXP9VggGzpkq3bi3Y P/jzhNL/50w6uaXa3wILBaWcNeGZ3VmVd2h8oRVV7x9T0VA9zVIGLLjldMNXF1jw /rBN+MHGj7WO3w== -----END CERTIFICATE-----Generated at Sat Dec 6 20:24:49 2025 by rpki-client