This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft File: 24oKPWpEpYME4bHb9i5dehaziHo.mft (raw, json) Hash identifier: iWO3kHt7ibo7xMtLoBO3V9Xi7aYKYeziPCP0Dht8Qtg= Subject key identifier: 80:12:E9:FC:AE:D9:9C:CF:39:82:78:DA:F9:CC:BA:5D:8E:93:2C:B1 Authority key identifier: DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A Certificate issuer: /CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a Certificate serial: 019AF5AF281B4998108B6691AC16AA817EC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 22:01:28 +0000 Manifest this update: Sat 06 Dec 2025 22:01:28 +0000 Manifest next update: Sun 07 Dec 2025 22:01:28 +0000 Files and hashes: 1: 24oKPWpEpYME4bHb9i5dehaziHo.crl (hash: Qmg0u5h8kMjDiRcg61Rn8AI3XgSRFwX+N1ObYco1P5Q=) 2: wHHMwXNW_N83G6X6FvCX0cxSHMc.roa (hash: EDHNa2I735GRLd+NXqVnh5LuTlV6xmWH1ELRRt1kANs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:28:1b:49:98:10:8b:66:91:ac:16:aa:81:7e:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a Validity Not Before: Dec 6 22:01:28 2025 GMT Not After : Dec 7 22:01:28 2025 GMT Subject: CN=8012e9fcaed99ccf398278daf9ccba5d8e932cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b7:09:d4:f9:d1:83:41:1b:10:28:db:4f:48: d1:3c:0a:08:8a:3a:bb:d8:41:e8:e0:b7:42:d7:fe: 37:59:e2:be:b6:30:31:c1:e1:4c:3c:76:f1:07:f9: 99:4f:a5:d6:35:7c:31:66:74:35:04:f0:8c:2a:50: 4a:86:b9:97:fe:59:71:86:f6:bf:46:54:32:1f:8f: da:c2:5f:20:82:b3:1b:f7:a4:40:5a:4f:ef:ef:71: dc:c5:db:f5:83:61:90:4c:09:0f:0a:53:07:19:ca: 29:e1:c5:59:87:e3:c1:fa:ed:9f:90:e7:39:08:14: 99:49:01:4b:21:3f:04:6a:14:f2:ef:ae:b1:81:f9: 4c:3e:f7:bf:9e:98:ed:c7:84:40:4c:fa:34:a5:14: 62:4f:16:1d:63:52:5c:a9:5e:76:07:6a:f8:7c:4a: 83:15:ec:8a:04:67:b0:5c:18:7d:fe:13:45:3e:e2: 65:49:b3:ef:7f:07:51:25:db:bb:37:93:c7:73:16: e1:55:9b:c7:08:eb:ee:55:fe:da:ad:01:8e:8a:c3: 80:f7:98:b8:53:c0:76:bb:34:4e:41:d5:ef:1e:a9: a5:18:71:da:09:a7:71:72:e4:eb:3c:92:10:ef:c5: 77:5b:6b:6c:d3:3e:66:54:b7:2e:c4:33:5e:0d:85: 0f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:12:E9:FC:AE:D9:9C:CF:39:82:78:DA:F9:CC:BA:5D:8E:93:2C:B1 X509v3 Authority Key Identifier: keyid:DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b9:3a:83:0e:81:c5:7f:c7:6b:f7:60:ed:7e:19:60:12:0b: 11:b7:b9:a8:6b:eb:de:1d:03:96:31:ad:f7:89:25:8f:ab:ac: 5a:ae:24:db:bc:a3:7c:67:14:6e:26:87:b3:a6:0c:62:df:32: 2f:50:97:35:8f:f9:e9:89:84:33:b2:9b:51:20:d9:55:71:50: fc:bb:90:1d:3b:ca:eb:b3:7d:85:25:14:b2:9f:aa:3b:70:4d: f5:8c:2b:60:79:36:84:d3:72:95:f4:12:b4:d8:99:c9:1d:2b: 06:d2:f0:a0:be:5f:c4:0d:b6:43:27:44:e7:8e:9a:9e:af:55: de:b0:43:72:30:bf:8a:65:42:e7:7b:e1:8d:a0:fb:c9:39:81: 97:2f:d7:f4:24:79:3c:38:08:40:1f:6b:7e:dd:d3:35:24:b7: 28:b7:7e:91:69:ab:85:96:e4:62:58:86:61:b9:7c:bd:58:d7: 88:3c:0a:e7:a4:0e:65:a7:c2:b3:f9:d8:82:fb:0f:e8:cc:84: bc:85:8a:fc:35:c7:6e:b1:3e:9b:5f:32:74:0a:49:39:2a:9f: 3c:b0:8a:08:a7:0a:5f:30:f8:80:b3:ca:74:48:5f:75:38:93: eb:14:85:b7:07:3d:4b:cf:80:59:f6:cd:af:2e:74:bf:78:72: a7:17:b5:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rygbSZgQi2aRrBaqgX7EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOGEwYTNkNmE0NGE1ODMwNGUxYjFkYmY2MmU1ZDdhMTZi Mzg4N2EwHhcNMjUxMjA2MjIwMTI4WhcNMjUxMjA3MjIwMTI4WjAzMTEwLwYDVQQD Eyg4MDEyZTlmY2FlZDk5Y2NmMzk4Mjc4ZGFmOWNjYmE1ZDhlOTMyY2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbcJ1PnRg0EbECjbT0jRPAoIijq7 2EHo4LdC1/43WeK+tjAxweFMPHbxB/mZT6XWNXwxZnQ1BPCMKlBKhrmX/llxhva/ RlQyH4/awl8ggrMb96RAWk/v73Hcxdv1g2GQTAkPClMHGcop4cVZh+PB+u2fkOc5 CBSZSQFLIT8EahTy766xgflMPve/npjtx4RATPo0pRRiTxYdY1JcqV52B2r4fEqD FeyKBGewXBh9/hNFPuJlSbPvfwdRJdu7N5PHcxbhVZvHCOvuVf7arQGOisOA95i4 U8B2uzROQdXvHqmlGHHaCadxcuTrPJIQ78V3W2ts0z5mVLcuxDNeDYUPewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAS6fyu2ZzPOYJ42vnMul2OkyyxMB8GA1UdIwQY MBaAFNuKCj1qRKWDBOGx2/YuXXoWs4h6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjRvS1BXcEVwWU1FNGJIYjlpNWRlaGF6aUhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lNWEyNTMtMTljZi00Y2U4LTljNWMt NTZjNmQ1NTFhOTMyLzEvMjRvS1BXcEVwWU1FNGJIYjlpNWRlaGF6aUhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9lNWEyNTMtMTljZi00Y2U4LTljNWMtNTZjNmQ1NTFhOTMy LzEvMjRvS1BXcEVwWU1FNGJIYjlpNWRlaGF6aUhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7k6gw6B xX/Ha/dg7X4ZYBILEbe5qGvr3h0DljGt94klj6usWq4k27yjfGcUbiaHs6YMYt8y L1CXNY/56YmEM7KbUSDZVXFQ/LuQHTvK67N9hSUUsp+qO3BN9YwrYHk2hNNylfQS tNiZyR0rBtLwoL5fxA22QydE546anq9V3rBDcjC/imVC53vhjaD7yTmBly/X9CR5 PDgIQB9rft3TNSS3KLd+kWmrhZbkYliGYbl8vVjXiDwK56QOZafCs/nYgvsP6MyE vIWK/DXHbrE+m18ydApJOSqfPLCKCKcKXzD4gLPKdEhfdTiT6xSFtwc9S8+AWfbN ry50v3hypxe1fQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:39 2025 by rpki-client