This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft File: 05EjiA9CdEbV_wfO-WM-htxJGY0.mft (raw, json) Hash identifier: EEQZx3GqZFG3RmJ3Exy9arbBmuGdv2uPOiiOPmVTo/U= Subject key identifier: 3C:89:39:34:09:05:B1:EB:C5:8D:4F:89:28:15:76:0E:32:F3:0C:8F Authority key identifier: D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D Certificate issuer: /CN=d39123880f427446d5ff07cef9633e86dc49198d Certificate serial: 019AF509E568708B7B9EA39CE2D94BA3753A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft Manifest number: 084F Signing time: Sat 06 Dec 2025 19:00:57 +0000 Manifest this update: Sat 06 Dec 2025 19:00:57 +0000 Manifest next update: Sun 07 Dec 2025 19:00:57 +0000 Files and hashes: 1: 05EjiA9CdEbV_wfO-WM-htxJGY0.crl (hash: 4flm0bedAXaI3JwptQxzMX2wE1XN4txUhD9RRAVhOkU=) 2: ACAbKZCGOdySYGyuoI7JMVLeL_g.roa (hash: R4mTIavVBLK7AnVZngIHkijkl9j+ypSt1m/eE9on3/4=) 3: y-31Qg8vN66n2f6X7cBZ6q-z1HE.roa (hash: AlYM9CLcvWsuEg6knMfGAoMvFzW08av73u5AUGfuSb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:e5:68:70:8b:7b:9e:a3:9c:e2:d9:4b:a3:75:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d39123880f427446d5ff07cef9633e86dc49198d Validity Not Before: Dec 6 19:00:57 2025 GMT Not After : Dec 7 19:00:57 2025 GMT Subject: CN=3c8939340905b1ebc58d4f892815760e32f30c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:eb:20:ee:26:42:99:1f:fd:60:26:2c:e2:6d: 26:ae:60:d3:ab:d8:9a:71:75:09:48:b7:6c:6d:d2: ac:5c:30:45:54:ea:64:ae:e7:f7:63:4d:be:dc:1b: 92:e0:50:ec:38:6e:79:5d:ae:8b:91:4a:74:33:17: 63:d8:2f:bf:ad:03:76:06:2a:43:93:78:f8:c3:54: 8c:94:c2:26:b1:d9:fe:06:ac:4a:99:0c:25:6f:1c: b2:76:94:dc:dc:9c:c9:0f:ca:f7:77:da:59:a2:0b: 19:c5:a3:b3:81:63:c6:91:2d:07:45:00:07:16:85: ca:2e:ce:1d:a2:70:1f:67:87:56:da:57:52:1a:db: 81:5b:45:1a:e5:b9:b1:28:61:0d:84:4c:0f:e4:bb: d5:ff:7b:de:f0:ef:ae:2e:d2:64:40:64:00:e0:fb: be:17:38:ac:a9:12:75:80:14:84:34:62:3c:ec:dd: 86:f9:e1:d0:5b:35:25:d0:13:1a:8f:9d:f0:3d:cd: 0c:c2:4d:89:88:ed:27:de:a3:68:03:7e:48:ff:e9: b2:8e:d2:23:17:dc:6e:8b:a3:54:0c:91:65:e5:29: 03:59:00:ca:21:b4:5f:39:10:4b:6c:b7:99:88:6e: 2c:a7:79:1a:d9:55:19:c0:c5:84:92:a9:f9:01:a0: 22:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:89:39:34:09:05:B1:EB:C5:8D:4F:89:28:15:76:0E:32:F3:0C:8F X509v3 Authority Key Identifier: keyid:D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d9:15:b5:76:eb:67:1d:a4:0c:e6:bd:a4:9b:1a:2a:73:08: 15:4c:6f:10:fc:1d:34:ab:51:ec:05:cf:c2:10:5b:ec:84:c7: 30:2d:d0:29:de:67:ed:0b:54:66:9c:05:a9:d5:10:4f:b8:92: 84:a8:3f:bb:72:7f:4c:4a:65:fd:3d:59:d3:2c:97:f7:62:04: 31:99:06:fe:7c:7e:d2:87:18:71:7a:22:dd:0e:66:72:be:30: 74:ab:47:07:92:3e:01:af:25:92:95:4f:10:61:94:ec:d7:39: 28:d7:4e:24:b1:eb:43:0c:e8:40:4a:c5:1e:24:da:79:39:0e: c2:84:7b:8a:35:36:d5:1c:38:f9:37:d2:3c:a2:51:95:f6:71: 41:8a:2e:bf:75:aa:58:99:c6:3a:e0:b0:d2:72:e3:d2:ca:63: 78:6e:05:2e:ed:a9:cb:7e:f1:c5:09:02:32:2d:19:65:90:25: a4:32:bd:84:ab:b0:f8:c1:db:80:2d:bc:c8:ed:32:91:ac:a3: b5:87:72:61:cf:df:24:44:c5:43:bb:34:87:ff:75:5a:c7:10: b2:51:15:02:de:7c:d7:ff:90:c3:b5:f2:41:12:02:af:ec:d5: d2:09:a0:e7:0e:52:a9:e7:dd:7c:d1:21:43:63:f4:fa:f8:20: 8e:8f:a8:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CeVocIt7nqOc4tlLo3U6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzOTEyMzg4MGY0Mjc0NDZkNWZmMDdjZWY5NjMzZTg2ZGM0 OTE5OGQwHhcNMjUxMjA2MTkwMDU3WhcNMjUxMjA3MTkwMDU3WjAzMTEwLwYDVQQD EygzYzg5MzkzNDA5MDViMWViYzU4ZDRmODkyODE1NzYwZTMyZjMwYzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOsg7iZCmR/9YCYs4m0mrmDTq9ia cXUJSLdsbdKsXDBFVOpkruf3Y02+3BuS4FDsOG55Xa6LkUp0Mxdj2C+/rQN2BipD k3j4w1SMlMImsdn+BqxKmQwlbxyydpTc3JzJD8r3d9pZogsZxaOzgWPGkS0HRQAH FoXKLs4donAfZ4dW2ldSGtuBW0Ua5bmxKGENhEwP5LvV/3ve8O+uLtJkQGQA4Pu+ FzisqRJ1gBSENGI87N2G+eHQWzUl0BMaj53wPc0Mwk2JiO0n3qNoA35I/+myjtIj F9xui6NUDJFl5SkDWQDKIbRfORBLbLeZiG4sp3ka2VUZwMWEkqn5AaAiDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyJOTQJBbHrxY1PiSgVdg4y8wyPMB8GA1UdIwQY MBaAFNORI4gPQnRG1f8HzvljPobcSRmNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDVFamlBOUNkRWJWX3dmTy1XTS1odHhKR1kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82NjFiODQtMTE0ZC00OTI5LWI2ODQt Y2NhMGFkMjY4NWNhLzEvMDVFamlBOUNkRWJWX3dmTy1XTS1odHhKR1kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82NjFiODQtMTE0ZC00OTI5LWI2ODQtY2NhMGFkMjY4NWNh LzEvMDVFamlBOUNkRWJWX3dmTy1XTS1odHhKR1kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9kVtXbr Zx2kDOa9pJsaKnMIFUxvEPwdNKtR7AXPwhBb7ITHMC3QKd5n7QtUZpwFqdUQT7iS hKg/u3J/TEpl/T1Z0yyX92IEMZkG/nx+0ocYcXoi3Q5mcr4wdKtHB5I+Aa8lkpVP EGGU7Nc5KNdOJLHrQwzoQErFHiTaeTkOwoR7ijU21Rw4+TfSPKJRlfZxQYouv3Wq WJnGOuCw0nLj0spjeG4FLu2py37xxQkCMi0ZZZAlpDK9hKuw+MHbgC28yO0ykayj tYdyYc/fJETFQ7s0h/91WscQslEVAt581/+Qw7XyQRICr+zV0gmg5w5SqefdfNEh Q2P0+vggjo+oKw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:11:38 2025 by rpki-client