This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json) Hash identifier: jHDlNSg2iY0qPC0oZu/tVvmQzu1mHJsBpzD9yRd9B9Q= Subject key identifier: 05:1A:BD:BF:D6:15:E1:6C:8B:1B:3F:08:D3:9D:86:D2:27:D5:CF:E0 Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb Certificate serial: 019B3532CC29C899C01690FDF7D8E7BE5C36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft Manifest number: 05F0 Signing time: Fri 19 Dec 2025 06:01:20 +0000 Manifest this update: Fri 19 Dec 2025 06:01:20 +0000 Manifest next update: Sat 20 Dec 2025 06:01:20 +0000 Files and hashes: 1: 59Mn6Fq_ztW3ZpObO3_epXiDhpk.roa (hash: cp+rR6j5Vo4FlHwAzBmhQ3KTx+zcyZnQHkQLzqefDBI=) 2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: NXe72PaUaJ70XEkTbhdZT+4QhZREm/pMRgbgxLC6jdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:cc:29:c8:99:c0:16:90:fd:f7:d8:e7:be:5c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb Validity Not Before: Dec 19 06:01:20 2025 GMT Not After : Dec 20 06:01:20 2025 GMT Subject: CN=051abdbfd615e16c8b1b3f08d39d86d227d5cfe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1e:fa:1d:28:86:93:d3:8b:6f:34:7d:96:47: 63:93:8b:76:65:87:a2:15:71:af:0f:0f:c7:0f:d7: 30:45:09:73:4f:97:e2:65:66:e9:23:4d:d0:2b:5e: d0:d9:1c:67:28:02:6b:ff:58:66:57:46:1d:4a:70: d1:dd:d9:81:02:5c:69:04:90:16:9e:ae:41:a8:b0: 28:dd:13:b0:f6:38:78:2a:a3:83:71:ac:70:ab:b8: 17:f3:cb:a7:43:96:dc:b5:75:5e:6e:48:9b:98:98: 23:47:18:63:9c:af:3a:5a:81:39:76:33:ca:8c:05: f4:5b:08:d4:09:ac:ab:62:a1:60:1d:36:6e:f9:87: 9e:d0:53:e1:9a:54:bd:ac:ba:a1:f3:40:7e:c6:8e: 26:a6:21:34:33:39:79:86:ec:5f:5c:c1:68:8c:47: 9e:09:d9:08:07:41:57:00:8f:93:74:3b:cd:68:cc: 6a:42:13:a6:c7:25:ef:07:47:56:78:42:f7:65:4a: b6:29:d8:a4:73:b4:90:d2:2b:60:60:ba:6c:5e:cb: 42:e5:80:70:1e:ea:04:88:e2:b5:78:0a:f3:5d:3d: d6:ec:c0:bc:76:9d:44:b9:d7:1e:e9:0e:35:97:e8: e5:c3:31:b9:da:35:59:ca:f3:a8:7a:11:8b:e8:7d: b2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1A:BD:BF:D6:15:E1:6C:8B:1B:3F:08:D3:9D:86:D2:27:D5:CF:E0 X509v3 Authority Key Identifier: keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:29:fb:e5:da:47:57:e5:30:96:ce:31:db:fe:43:db:64:83: d3:36:63:ba:14:49:61:01:e9:33:0b:7d:f8:aa:86:25:5b:52: 26:c9:3d:24:73:ff:78:a1:d9:bc:fb:92:f4:a5:fa:66:2a:1c: fd:ff:e0:68:e2:0a:8d:2e:36:57:70:08:c8:78:ba:94:ed:e1: d8:4f:b4:e3:57:4b:4f:dd:9e:92:a6:7c:43:ca:e1:e6:12:ed: 88:d2:18:4d:bb:f5:48:f4:04:70:8c:79:6e:02:ec:54:52:59: 11:38:f6:b9:d8:c7:b0:05:c6:09:61:35:8c:6f:33:3b:7e:46: c8:b5:77:1e:c6:ef:17:d5:f2:3d:be:3f:f1:c3:a4:98:53:f8: e3:71:06:07:42:72:70:5a:a5:90:99:fb:63:c8:b1:90:bc:b8: f1:a7:3c:3c:e9:42:23:ff:67:79:50:ba:bd:c5:96:3e:85:0f: b7:3d:6d:81:da:d9:74:a8:15:6e:a2:85:4c:56:ec:81:1e:17: 95:c1:5f:fa:ac:d5:74:0b:81:a6:18:50:7c:94:a4:16:44:91: a5:2f:73:42:a4:a4:25:e9:60:4a:f8:17:04:4e:ee:15:54:cf: de:08:bd:ab:7c:ad:bf:f5:b2:c0:5f:7d:32:17:cd:e3:ce:75: d2:1c:89:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MswpyJnAFpD999jnvlw2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NzVkNTNkYjgyMmQyNWRiODI3ZDAzNzdjYmViMDZkMmNh NDFhY2IwHhcNMjUxMjE5MDYwMTIwWhcNMjUxMjIwMDYwMTIwWjAzMTEwLwYDVQQD EygwNTFhYmRiZmQ2MTVlMTZjOGIxYjNmMDhkMzlkODZkMjI3ZDVjZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh76HSiGk9OLbzR9lkdjk4t2ZYei FXGvDw/HD9cwRQlzT5fiZWbpI03QK17Q2RxnKAJr/1hmV0YdSnDR3dmBAlxpBJAW nq5BqLAo3ROw9jh4KqODcaxwq7gX88unQ5bctXVebkibmJgjRxhjnK86WoE5djPK jAX0WwjUCayrYqFgHTZu+Yee0FPhmlS9rLqh80B+xo4mpiE0Mzl5huxfXMFojEee CdkIB0FXAI+TdDvNaMxqQhOmxyXvB0dWeEL3ZUq2Kdikc7SQ0itgYLpsXstC5YBw HuoEiOK1eArzXT3W7MC8dp1Eudce6Q41l+jlwzG52jVZyvOoehGL6H2yXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUavb/WFeFsixs/CNOdhtIn1c/gMB8GA1UdIwQY MBaAFHV11T24ItJduCfQN3y+sG0spBrLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFhYVlBiZ2kwbDI0SjlBM2ZMNndiU3lrR3NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mN2YwZjItNDc5ZS00ZjAzLWJhYTIt MDYxZWQ5MzcxNDc1LzEvZFhYVlBiZ2kwbDI0SjlBM2ZMNndiU3lrR3NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9mN2YwZjItNDc5ZS00ZjAzLWJhYTItMDYxZWQ5MzcxNDc1 LzEvZFhYVlBiZ2kwbDI0SjlBM2ZMNndiU3lrR3NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARin75dpH V+Uwls4x2/5D22SD0zZjuhRJYQHpMwt9+KqGJVtSJsk9JHP/eKHZvPuS9KX6Zioc /f/gaOIKjS42V3AIyHi6lO3h2E+041dLT92ekqZ8Q8rh5hLtiNIYTbv1SPQEcIx5 bgLsVFJZETj2udjHsAXGCWE1jG8zO35GyLV3HsbvF9XyPb4/8cOkmFP443EGB0Jy cFqlkJn7Y8ixkLy48ac8POlCI/9neVC6vcWWPoUPtz1tgdrZdKgVbqKFTFbsgR4X lcFf+qzVdAuBphhQfJSkFkSRpS9zQqSkJelgSvgXBE7uFVTP3gi9q3ytv/WywF99 MhfN48510hyJtA== -----END CERTIFICATE-----Generated at Fri Dec 19 12:53:02 2025 by rpki-client