This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json) Hash identifier: 4kF5hNqIMZQlY34qK5wV1FK12yHllF+CPKMVim3Yzjc= Subject key identifier: 0D:15:42:5B:A1:48:46:77:B7:74:EE:CF:3B:DC:EB:03:89:B8:5E:BF Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb Certificate serial: 019AF19ABB66476E089337ED380D2CE3C00E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft Manifest number: 05CD Signing time: Sat 06 Dec 2025 03:00:40 +0000 Manifest this update: Sat 06 Dec 2025 03:00:40 +0000 Manifest next update: Sun 07 Dec 2025 03:00:40 +0000 Files and hashes: 1: 59Mn6Fq_ztW3ZpObO3_epXiDhpk.roa (hash: cp+rR6j5Vo4FlHwAzBmhQ3KTx+zcyZnQHkQLzqefDBI=) 2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: 0rpeWZZYf/ep+JPj7OHKZxXd7yy7g2PPPv/VpBayZJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:bb:66:47:6e:08:93:37:ed:38:0d:2c:e3:c0:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb Validity Not Before: Dec 6 03:00:40 2025 GMT Not After : Dec 7 03:00:40 2025 GMT Subject: CN=0d15425ba1484677b774eecf3bdceb0389b85ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8f:5c:57:65:55:16:76:4a:d4:40:6b:94:ff: b9:18:62:71:63:61:bb:0b:ee:4d:b4:70:3d:ac:50: 66:fd:56:ff:8d:76:26:16:b4:ad:96:ef:29:30:4b: 9d:39:78:23:b5:61:21:43:6b:26:52:aa:28:e8:bc: b9:6d:ef:81:1e:4a:4f:e5:94:9a:dd:f0:83:fd:4c: da:8a:19:8a:47:b0:9a:5a:b4:41:21:98:a6:6d:47: 52:28:e5:61:3f:d4:c5:b6:35:b5:9f:a6:c3:81:16: 2b:e3:b5:4c:b3:f5:1a:e5:7f:55:3c:d7:0c:a4:e2: e7:bd:66:1a:11:c7:8e:26:1b:d6:26:3a:de:f2:ca: e0:5b:31:8a:67:38:e5:22:42:fc:c4:68:e5:84:82: e9:4d:5a:37:6d:ed:3a:f1:ba:8b:f1:b7:df:6c:96: 82:3f:0a:92:1c:c6:62:c4:65:7b:c0:76:75:01:32: c1:28:e2:f0:0a:db:11:a3:fe:8d:5d:14:e4:2a:1d: 0c:6d:c8:72:83:54:6a:05:40:9b:7e:d0:63:65:3c: 09:e4:b9:60:e3:19:67:a0:cd:09:c0:83:3a:6e:f4: 18:fd:b7:ab:f4:ab:65:80:65:5e:fa:61:e4:2d:56: f0:7e:71:82:27:e8:6c:5c:3d:86:d3:4b:a0:44:13: d1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:15:42:5B:A1:48:46:77:B7:74:EE:CF:3B:DC:EB:03:89:B8:5E:BF X509v3 Authority Key Identifier: keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:61:31:bc:3c:3b:31:73:9f:8c:ed:b5:08:bf:3b:65:b2:a0: e3:3e:0f:48:30:38:db:32:b7:e7:dd:18:08:1a:73:f9:3d:b9: 77:64:2c:db:ea:93:d4:56:38:d4:9f:84:4f:e1:29:7f:50:8e: 79:4f:2a:86:09:c3:63:90:ac:98:6f:dd:13:51:87:fd:c5:9a: e1:36:6b:24:ef:84:52:da:a2:8a:f0:c3:4d:6a:fb:da:17:6d: f3:e8:72:d0:6d:0a:85:4c:fa:5b:2d:9b:ab:58:bb:cf:d0:4c: d8:20:31:51:13:e6:31:9f:1d:d4:67:76:ef:c8:62:c0:30:1c: 15:c2:6f:7d:bc:e4:8d:13:9a:9f:6c:db:13:65:ef:59:1d:55: 7c:9e:91:76:d1:19:ca:ad:50:fa:6e:57:36:27:bb:45:9d:85: 0a:2f:64:a9:d5:83:dc:18:dd:db:8f:f9:87:c0:8f:1f:8d:50: c9:82:f6:0b:e7:fe:ab:69:01:6f:8c:51:bc:c2:e3:26:f2:17: b8:59:ce:33:92:ce:95:66:28:7b:6f:b3:4a:c0:d5:46:79:45: e1:1f:6e:bf:da:81:f6:a9:73:c9:bd:75:2b:4f:93:e0:7b:80: 80:66:63:03:ff:ab:23:08:d1:cb:5c:8b:66:5f:da:ca:f3:d2: 56:6d:7c:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrtmR24IkzftOA0s48AOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NzVkNTNkYjgyMmQyNWRiODI3ZDAzNzdjYmViMDZkMmNh NDFhY2IwHhcNMjUxMjA2MDMwMDQwWhcNMjUxMjA3MDMwMDQwWjAzMTEwLwYDVQQD EygwZDE1NDI1YmExNDg0Njc3Yjc3NGVlY2YzYmRjZWIwMzg5Yjg1ZWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo9cV2VVFnZK1EBrlP+5GGJxY2G7 C+5NtHA9rFBm/Vb/jXYmFrStlu8pMEudOXgjtWEhQ2smUqoo6Ly5be+BHkpP5ZSa 3fCD/UzaihmKR7CaWrRBIZimbUdSKOVhP9TFtjW1n6bDgRYr47VMs/Ua5X9VPNcM pOLnvWYaEceOJhvWJjre8srgWzGKZzjlIkL8xGjlhILpTVo3be068bqL8bffbJaC PwqSHMZixGV7wHZ1ATLBKOLwCtsRo/6NXRTkKh0Mbchyg1RqBUCbftBjZTwJ5Llg 4xlnoM0JwIM6bvQY/ber9KtlgGVe+mHkLVbwfnGCJ+hsXD2G00ugRBPRswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0VQluhSEZ3t3Tuzzvc6wOJuF6/MB8GA1UdIwQY MBaAFHV11T24ItJduCfQN3y+sG0spBrLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFhYVlBiZ2kwbDI0SjlBM2ZMNndiU3lrR3NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mN2YwZjItNDc5ZS00ZjAzLWJhYTIt MDYxZWQ5MzcxNDc1LzEvZFhYVlBiZ2kwbDI0SjlBM2ZMNndiU3lrR3NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9mN2YwZjItNDc5ZS00ZjAzLWJhYTItMDYxZWQ5MzcxNDc1 LzEvZFhYVlBiZ2kwbDI0SjlBM2ZMNndiU3lrR3NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEWExvDw7 MXOfjO21CL87ZbKg4z4PSDA42zK3590YCBpz+T25d2Qs2+qT1FY41J+ET+Epf1CO eU8qhgnDY5CsmG/dE1GH/cWa4TZrJO+EUtqiivDDTWr72hdt8+hy0G0KhUz6Wy2b q1i7z9BM2CAxURPmMZ8d1Gd278hiwDAcFcJvfbzkjROan2zbE2XvWR1VfJ6RdtEZ yq1Q+m5XNie7RZ2FCi9kqdWD3Bjd24/5h8CPH41QyYL2C+f+q2kBb4xRvMLjJvIX uFnOM5LOlWYoe2+zSsDVRnlF4R9uv9qB9qlzyb11K0+T4HuAgGZjA/+rIwjRy1yL Zl/ayvPSVm18dQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:17 2025 by rpki-client