This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft File: dIisPOfpHiQMr_IZy-OPzwI78rY.mft (raw, json) Hash identifier: h7fdSCUJTJq2dIMRM4QZG6sW+i7s7tugr9OC1AKoWVA= Subject key identifier: 90:99:D5:DC:E8:A1:FE:98:B3:C9:F5:DE:C2:ED:F3:F0:C6:68:FF:8D Authority key identifier: 74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6 Certificate issuer: /CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6 Certificate serial: 019AF23FB91C6E240A5AC23E6A6A8BC4EDC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft Manifest number: 0C7E Signing time: Sat 06 Dec 2025 06:00:53 +0000 Manifest this update: Sat 06 Dec 2025 06:00:53 +0000 Manifest next update: Sun 07 Dec 2025 06:00:53 +0000 Files and hashes: 1: WUxc8OaDvlLuIRaGhHw99-2pQV8.roa (hash: pHL2ka3zZ/EpxZTpD28h5nmQm9ygfk2G3CW5wJONDzE=) 2: dIisPOfpHiQMr_IZy-OPzwI78rY.crl (hash: s2HdLbtpU7GI/GKf5iC6CrJBxM9Lvm8RqnKXuFi/IMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b9:1c:6e:24:0a:5a:c2:3e:6a:6a:8b:c4:ed:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6 Validity Not Before: Dec 6 06:00:53 2025 GMT Not After : Dec 7 06:00:53 2025 GMT Subject: CN=9099d5dce8a1fe98b3c9f5dec2edf3f0c668ff8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1a:64:a3:12:d4:89:db:50:b4:5e:30:a2:4e: a5:88:6c:92:02:a4:1d:1c:fe:92:c1:6e:7c:21:a6: 58:8b:6f:85:82:a2:fb:bf:e8:36:15:89:2c:3e:7d: b3:1e:9b:dc:ae:ad:5c:83:2b:47:bc:60:4d:d5:40: e0:37:06:26:83:7b:13:15:39:19:de:0a:32:54:e0: 10:00:9f:20:83:04:4e:f1:5b:89:7e:5b:aa:a2:91: 71:1d:08:fa:c9:6c:45:a1:5c:7a:f5:85:4d:72:8d: cb:ff:0c:37:d5:c0:a7:94:57:9c:ed:63:f0:95:4b: 08:16:3f:21:b9:37:60:8c:08:83:33:8c:d4:93:9d: be:43:f3:ca:99:69:80:b5:5d:1b:b9:ad:82:18:ca: 31:4e:53:32:33:b3:4f:73:79:d9:bb:38:9d:24:25: 99:d7:44:80:2f:45:80:84:72:3b:20:17:09:9e:45: f8:08:7d:90:bf:91:c6:b8:f7:11:29:a8:2c:5e:a6: 88:9e:41:b9:f3:2a:12:86:c9:c5:da:cf:e0:0c:a5: fd:00:d4:79:f3:8d:75:70:5c:18:50:ca:52:ed:9e: 75:d4:a0:b7:3e:e6:40:2b:76:17:52:17:3b:8b:ac: 29:dc:02:21:95:ff:9a:be:89:40:38:7c:54:26:38: 09:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:99:D5:DC:E8:A1:FE:98:B3:C9:F5:DE:C2:ED:F3:F0:C6:68:FF:8D X509v3 Authority Key Identifier: keyid:74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:21:98:7c:8d:3b:1c:81:af:c8:89:6c:42:0a:0b:5b:d7:6b: 90:f2:32:ca:69:36:f3:21:30:9b:85:de:a7:40:a0:d3:77:06: f4:7f:e1:ea:95:ad:ae:37:99:3c:3f:d8:2b:2a:c2:df:7a:9b: ee:9e:ec:ca:27:88:0d:22:69:53:bc:2d:37:f5:e8:52:f3:a7: ed:bf:cf:26:16:41:8b:ed:3b:fa:23:6a:c0:06:b0:40:7f:03: 1d:8b:6e:2b:a0:bf:ed:5f:57:a5:28:71:e8:bc:92:c9:1d:4e: 1b:30:ec:4c:cd:d1:4e:24:5e:ba:e2:36:55:4e:52:07:48:bd: 36:9f:e0:f6:a1:90:1f:a4:cb:b6:fb:89:e0:1f:63:4c:33:74: e1:c3:df:64:6b:db:80:e3:92:e8:f4:08:2a:af:c2:9b:43:9a: 41:e0:4d:45:60:2b:71:d7:93:96:cf:6c:dc:52:fa:77:fc:e5: 7f:d9:14:43:52:80:73:a8:47:0a:38:5f:f2:c1:e5:4b:7a:ba: 3a:46:bb:55:af:5d:ed:4e:5b:de:5c:b7:43:88:ba:a2:5e:a9: 3b:a6:db:eb:ed:8f:51:0d:db:af:f0:3c:19:64:76:af:f5:04: e6:9f:02:5a:a5:a9:f1:bc:ab:a8:d0:91:9a:ba:96:32:f5:ec: 81:fa:30:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7kcbiQKWsI+amqLxO3FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ODhhYzNjZTdlOTFlMjQwY2FmZjIxOWNiZTM4ZmNmMDIz YmYyYjYwHhcNMjUxMjA2MDYwMDUzWhcNMjUxMjA3MDYwMDUzWjAzMTEwLwYDVQQD Eyg5MDk5ZDVkY2U4YTFmZTk4YjNjOWY1ZGVjMmVkZjNmMGM2NjhmZjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRpkoxLUidtQtF4wok6liGySAqQd HP6SwW58IaZYi2+FgqL7v+g2FYksPn2zHpvcrq1cgytHvGBN1UDgNwYmg3sTFTkZ 3goyVOAQAJ8ggwRO8VuJfluqopFxHQj6yWxFoVx69YVNco3L/ww31cCnlFec7WPw lUsIFj8huTdgjAiDM4zUk52+Q/PKmWmAtV0bua2CGMoxTlMyM7NPc3nZuzidJCWZ 10SAL0WAhHI7IBcJnkX4CH2Qv5HGuPcRKagsXqaInkG58yoShsnF2s/gDKX9ANR5 8411cFwYUMpS7Z511KC3PuZAK3YXUhc7i6wp3AIhlf+avolAOHxUJjgJpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCZ1dzoof6Ys8n13sLt8/DGaP+NMB8GA1UdIwQY MBaAFHSIrDzn6R4kDK/yGcvjj88CO/K2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZElpc1BPZnBIaVFNcl9JWnktT1B6d0k3OHJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMmUzZDYtZjIyNi00YTdlLTg0MGQt ZDU3NjNmZWNkNjA1LzEvZElpc1BPZnBIaVFNcl9JWnktT1B6d0k3OHJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMmUzZDYtZjIyNi00YTdlLTg0MGQtZDU3NjNmZWNkNjA1 LzEvZElpc1BPZnBIaVFNcl9JWnktT1B6d0k3OHJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyGYfI07 HIGvyIlsQgoLW9drkPIyymk28yEwm4Xep0Cg03cG9H/h6pWtrjeZPD/YKyrC33qb 7p7syieIDSJpU7wtN/XoUvOn7b/PJhZBi+07+iNqwAawQH8DHYtuK6C/7V9XpShx 6LySyR1OGzDsTM3RTiReuuI2VU5SB0i9Np/g9qGQH6TLtvuJ4B9jTDN04cPfZGvb gOOS6PQIKq/Cm0OaQeBNRWArcdeTls9s3FL6d/zlf9kUQ1KAc6hHCjhf8sHlS3q6 Oka7Va9d7U5b3ly3Q4i6ol6pO6bb6+2PUQ3br/A8GWR2r/UE5p8CWqWp8byrqNCR mrqWMvXsgfowgA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:25:01 2025 by rpki-client