This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft File: D5_AEbXohjvPO7cq12ldMZdCuEQ.mft (raw, json) Hash identifier: kRSqGQarETtMtCTHfW/73/WOyyjm3iqHmdM+bb9KXIY= Subject key identifier: AD:D5:2D:35:64:CB:DC:C8:C6:17:AF:56:C3:08:67:F0:2A:4F:7B:7E Authority key identifier: 0F:9F:C0:11:B5:E8:86:3B:CF:3B:B7:2A:D7:69:5D:31:97:42:B8:44 Certificate issuer: /CN=0f9fc011b5e8863bcf3bb72ad7695d319742b844 Certificate serial: 019AF12E6BA6C3BBD32925393A0BAC20D67A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft Manifest number: 07 Signing time: Sat 06 Dec 2025 01:02:22 +0000 Manifest this update: Sat 06 Dec 2025 01:02:22 +0000 Manifest next update: Sun 07 Dec 2025 01:02:22 +0000 Files and hashes: 1: D5_AEbXohjvPO7cq12ldMZdCuEQ.crl (hash: 8rShYrVN/UMBLOgZ9UrDAF9W+x3Cr7k0X/WaVHHNSTE=) 2: NxLvMYol0olJ_a7M2jOjxwotMgE.roa (hash: gZMQTh5QGYR6z+uiDzdpi1iLsmG+EUbRWqft6dnE/nk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:6b:a6:c3:bb:d3:29:25:39:3a:0b:ac:20:d6:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9fc011b5e8863bcf3bb72ad7695d319742b844 Validity Not Before: Dec 6 01:02:22 2025 GMT Not After : Dec 7 01:02:22 2025 GMT Subject: CN=add52d3564cbdcc8c617af56c30867f02a4f7b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fe:2f:86:c8:78:2a:04:d6:2d:d6:c8:76:7d: 40:e0:d0:df:b4:cc:cd:0e:cd:1e:d7:79:b5:f1:35: 77:8e:e7:03:21:77:49:7c:b6:e2:6e:d6:e4:5b:aa: 22:6b:35:bb:7c:84:08:1d:0e:ff:4f:f6:30:aa:42: 83:bf:4e:c3:02:be:59:95:6e:76:73:66:69:d2:1a: 17:08:82:c3:cd:12:3e:35:41:eb:7c:e0:42:1a:b7: e6:a2:b0:ba:5a:d2:e1:f2:bb:d6:22:c5:bc:aa:a5: 00:f9:ea:f9:6d:1d:f7:70:d5:0d:12:a5:a1:01:7c: 48:70:25:e1:de:81:73:22:4b:30:53:37:4b:28:a4: 07:ab:6e:13:b2:76:91:72:f5:3c:db:98:fd:63:26: 54:5a:b2:71:3d:ef:21:11:04:0e:8a:b7:d7:fd:0e: 24:be:29:97:a1:00:f0:28:f0:65:56:0d:2a:c5:25: 48:b8:29:67:67:31:ad:40:ee:ae:ac:45:bd:a6:89: 9e:24:8e:76:1f:32:91:a6:dc:68:25:59:bd:e0:d1: e8:5c:6d:89:b2:31:9e:01:4a:2f:96:d0:b4:a0:1a: bc:14:7a:d5:c1:44:13:6c:b2:1c:08:b0:01:5d:b0: 8b:87:4f:a0:f0:fa:0f:97:d5:75:37:59:85:24:e3: 5b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D5:2D:35:64:CB:DC:C8:C6:17:AF:56:C3:08:67:F0:2A:4F:7B:7E X509v3 Authority Key Identifier: keyid:0F:9F:C0:11:B5:E8:86:3B:CF:3B:B7:2A:D7:69:5D:31:97:42:B8:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a4:5e:39:a4:ca:8f:4e:bb:bf:8f:c9:4d:06:e6:c7:91:93: 5f:8d:21:fe:64:20:12:c5:7f:78:51:58:55:06:7c:71:9c:71: e9:14:9c:98:5b:4b:88:a0:bd:cf:df:f7:6c:df:f9:90:cb:23: 6a:81:f0:00:31:47:3f:53:bb:6c:6b:02:49:90:5e:b1:c7:36: f1:49:39:fe:76:5a:b9:de:6f:ae:ec:c2:06:06:25:42:f4:a7: 2a:e2:99:8e:ee:c4:97:fb:4a:44:17:9e:a5:27:21:69:d8:3f: f9:a8:d8:82:fb:f5:27:39:af:fe:31:ea:f9:d3:59:8f:1d:1c: c4:7f:66:7a:9c:fb:60:56:a5:41:db:a5:77:be:c5:55:2f:30: 41:c6:16:fc:28:5e:cd:dd:e0:24:1b:1e:9d:5f:3b:ed:d6:e5: d1:82:f8:66:63:ba:82:0c:6d:75:6b:30:85:58:35:d1:b1:6a: fd:99:7a:cb:88:c5:e1:50:f6:fb:8b:62:18:3c:e2:34:85:8f: ec:46:5f:bf:27:59:aa:48:af:20:5e:ce:2d:a4:2a:b8:82:86: 43:3b:be:64:a7:d7:db:25:0c:36:a4:bf:c4:a0:b5:6a:2d:9b: d8:b5:47:1d:91:ab:5b:b7:10:0d:6f:18:44:4f:a6:77:e4:ca: 3d:0e:cc:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmumw7vTKSU5OgusINZ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOWZjMDExYjVlODg2M2JjZjNiYjcyYWQ3Njk1ZDMxOTc0 MmI4NDQwHhcNMjUxMjA2MDEwMjIyWhcNMjUxMjA3MDEwMjIyWjAzMTEwLwYDVQQD EyhhZGQ1MmQzNTY0Y2JkY2M4YzYxN2FmNTZjMzA4NjdmMDJhNGY3YjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP4vhsh4KgTWLdbIdn1A4NDftMzN Ds0e13m18TV3jucDIXdJfLbibtbkW6oiazW7fIQIHQ7/T/YwqkKDv07DAr5ZlW52 c2Zp0hoXCILDzRI+NUHrfOBCGrfmorC6WtLh8rvWIsW8qqUA+er5bR33cNUNEqWh AXxIcCXh3oFzIkswUzdLKKQHq24TsnaRcvU825j9YyZUWrJxPe8hEQQOirfX/Q4k vimXoQDwKPBlVg0qxSVIuClnZzGtQO6urEW9pomeJI52HzKRptxoJVm94NHoXG2J sjGeAUovltC0oBq8FHrVwUQTbLIcCLABXbCLh0+g8PoPl9V1N1mFJONbzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3VLTVky9zIxhevVsMIZ/AqT3t+MB8GA1UdIwQY MBaAFA+fwBG16IY7zzu3KtdpXTGXQrhEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDVfQUViWG9oanZQTzdjcTEybGRNWmRDdUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zYWJjNzQtYTg0Zi00YzZjLWFmMGQt NzBjNTg5ZGQyMTcxLzEvRDVfQUViWG9oanZQTzdjcTEybGRNWmRDdUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zYWJjNzQtYTg0Zi00YzZjLWFmMGQtNzBjNTg5ZGQyMTcx LzEvRDVfQUViWG9oanZQTzdjcTEybGRNWmRDdUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqReOaTK j067v4/JTQbmx5GTX40h/mQgEsV/eFFYVQZ8cZxx6RScmFtLiKC9z9/3bN/5kMsj aoHwADFHP1O7bGsCSZBescc28Uk5/nZaud5vruzCBgYlQvSnKuKZju7El/tKRBee pSchadg/+ajYgvv1Jzmv/jHq+dNZjx0cxH9mepz7YFalQduld77FVS8wQcYW/Che zd3gJBsenV877dbl0YL4ZmO6ggxtdWswhVg10bFq/Zl6y4jF4VD2+4tiGDziNIWP 7EZfvydZqkivIF7OLaQquIKGQzu+ZKfX2yUMNqS/xKC1ai2b2LVHHZGrW7cQDW8Y RE+md+TKPQ7MkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:01 2025 by rpki-client