This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft File: du6ffY5dGMUIhPgzeK5Iui_NpuI.mft (raw, json) Hash identifier: w6CUxLfIqmaLQkCk9TCsqjrWIEHvfAUcm4Lyna9UAHE= Subject key identifier: 27:DE:68:FC:3D:48:0D:3D:4F:54:2A:CD:6D:86:36:A2:4B:C9:E0:C5 Authority key identifier: 76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2 Certificate issuer: /CN=76ee9f7d8e5d18c50884f83378ae48ba2fcda6e2 Certificate serial: 019AF208E2E28E6C9DFB76E38C16A3CAEE19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft Manifest number: 12B9 Signing time: Sat 06 Dec 2025 05:00:59 +0000 Manifest this update: Sat 06 Dec 2025 05:00:59 +0000 Manifest next update: Sun 07 Dec 2025 05:00:59 +0000 Files and hashes: 1: du6ffY5dGMUIhPgzeK5Iui_NpuI.crl (hash: zO5jDBx8eEMT56GCFeCECOF33erMHb/YRwogN9Q8GI4=) 2: mXqLLr6nY4_O8xCSHszNUcdYNRQ.roa (hash: mR7ch814nod8YJeRcpIlHri0tj0aQVOIDu8w+ijK6HU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e2:e2:8e:6c:9d:fb:76:e3:8c:16:a3:ca:ee:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76ee9f7d8e5d18c50884f83378ae48ba2fcda6e2 Validity Not Before: Dec 6 05:00:59 2025 GMT Not After : Dec 7 05:00:59 2025 GMT Subject: CN=27de68fc3d480d3d4f542acd6d8636a24bc9e0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2b:72:98:04:c1:5e:1c:d0:3c:02:55:bf:41: ac:34:a6:53:c3:a8:dc:23:8d:59:6d:b9:98:57:84: c7:7f:08:7c:9a:7d:39:e0:7e:36:4d:f0:17:40:4d: db:83:18:c5:aa:d0:7b:f6:e2:f6:90:f1:5a:0f:fd: 1b:fc:5c:11:a9:6b:68:69:82:ce:57:27:de:3e:51: 19:55:85:16:b8:98:73:2d:63:b2:ad:65:a7:2b:a3: 81:d5:92:cc:b3:84:32:22:1f:bd:ec:f6:8e:3b:9f: f4:5f:7b:8b:6b:bf:87:3b:55:6a:94:d4:78:d0:65: bb:8c:bc:63:e8:92:1c:7c:04:fa:86:15:9a:5b:90: c5:fd:82:98:24:a8:df:ac:1e:86:5c:8a:e1:d7:aa: fc:0b:ff:9f:a2:85:fb:77:ab:86:72:4b:11:1a:0b: 25:0b:c0:af:c6:2b:52:b7:91:f5:2c:c8:24:0f:30: 07:22:10:08:d6:76:cd:73:76:5b:1f:de:ed:cc:92: 8b:b7:9e:7f:44:dd:b2:ad:bb:1c:ad:23:47:7d:42: a9:ff:f7:cd:5b:28:8b:e5:38:98:42:68:01:58:fd: 96:85:01:6f:17:d5:86:2e:60:3c:ac:a3:46:0e:89: 67:3f:e2:8a:68:7e:c2:c6:f2:8b:87:b6:54:31:a0: 44:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DE:68:FC:3D:48:0D:3D:4F:54:2A:CD:6D:86:36:A2:4B:C9:E0:C5 X509v3 Authority Key Identifier: keyid:76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e3:a5:25:f0:02:ab:6f:a0:9d:2d:cc:63:c4:df:dd:7e:91: 94:e1:e4:3f:d3:fd:c5:d6:20:ff:e9:eb:79:00:40:03:70:b6: c4:8f:80:58:2b:cf:40:b8:e2:27:19:5d:e5:f6:7e:42:5c:ad: a5:eb:84:34:d9:5c:07:7c:19:f2:37:de:46:35:36:e6:03:15: 2c:a7:0f:54:7c:9e:07:bb:7e:83:45:49:25:8d:0e:5f:f8:a5: 2a:d6:21:08:28:46:5f:b9:ad:06:34:a8:f5:04:da:4c:fa:b0: 51:74:2e:d0:6d:42:c2:6b:39:73:27:b7:2a:6f:58:ec:69:fc: 82:75:f4:03:f6:a0:89:73:86:c7:37:7a:15:17:ff:67:25:aa: 20:a7:b6:3d:f1:d7:d6:6c:54:6e:07:15:49:a5:8e:b9:b3:71: 70:74:c1:bf:eb:50:6d:68:71:b1:31:72:1d:2d:a8:d4:9c:bf: 8c:5d:d5:ca:8f:85:20:60:41:f8:52:a0:ad:ae:b2:3e:e7:47: 54:86:0d:cf:99:6b:6d:31:ad:00:9d:0b:49:0d:02:31:97:ec: 99:72:a4:5c:87:8d:15:9d:5c:66:95:18:5f:f8:9e:50:b2:83: 05:38:a7:ae:27:10:bf:2c:e2:24:0e:39:e9:cf:43:a2:13:48: 29:46:80:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOLijmyd+3bjjBajyu4ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZWU5ZjdkOGU1ZDE4YzUwODg0ZjgzMzc4YWU0OGJhMmZj ZGE2ZTIwHhcNMjUxMjA2MDUwMDU5WhcNMjUxMjA3MDUwMDU5WjAzMTEwLwYDVQQD EygyN2RlNjhmYzNkNDgwZDNkNGY1NDJhY2Q2ZDg2MzZhMjRiYzllMGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApStymATBXhzQPAJVv0GsNKZTw6jc I41ZbbmYV4THfwh8mn054H42TfAXQE3bgxjFqtB79uL2kPFaD/0b/FwRqWtoaYLO VyfePlEZVYUWuJhzLWOyrWWnK6OB1ZLMs4QyIh+97PaOO5/0X3uLa7+HO1VqlNR4 0GW7jLxj6JIcfAT6hhWaW5DF/YKYJKjfrB6GXIrh16r8C/+fooX7d6uGcksRGgsl C8CvxitSt5H1LMgkDzAHIhAI1nbNc3ZbH97tzJKLt55/RN2yrbscrSNHfUKp//fN WyiL5TiYQmgBWP2WhQFvF9WGLmA8rKNGDolnP+KKaH7CxvKLh7ZUMaBE0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfeaPw9SA09T1QqzW2GNqJLyeDFMB8GA1UdIwQY MBaAFHbun32OXRjFCIT4M3iuSLovzabiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHU2ZmZZNWRHTVVJaFBnemVLNUl1aV9OcHVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hYTNiNDItYjYwMS00MGI0LWIyOTkt YmY4ZTk2MGZlMGFkLzEvZHU2ZmZZNWRHTVVJaFBnemVLNUl1aV9OcHVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9hYTNiNDItYjYwMS00MGI0LWIyOTktYmY4ZTk2MGZlMGFk LzEvZHU2ZmZZNWRHTVVJaFBnemVLNUl1aV9OcHVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALeOlJfAC q2+gnS3MY8Tf3X6RlOHkP9P9xdYg/+nreQBAA3C2xI+AWCvPQLjiJxld5fZ+Qlyt peuENNlcB3wZ8jfeRjU25gMVLKcPVHyeB7t+g0VJJY0OX/ilKtYhCChGX7mtBjSo 9QTaTPqwUXQu0G1Cwms5cye3Km9Y7Gn8gnX0A/agiXOGxzd6FRf/ZyWqIKe2PfHX 1mxUbgcVSaWOubNxcHTBv+tQbWhxsTFyHS2o1Jy/jF3Vyo+FIGBB+FKgra6yPudH VIYNz5lrbTGtAJ0LSQ0CMZfsmXKkXIeNFZ1cZpUYX/ieULKDBTinricQvyziJA45 6c9DohNIKUaAUg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:07 2025 by rpki-client