This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft File: 9dmpKCydJUfFZmNPO6zMvPJYiCc.mft (raw, json) Hash identifier: YpxxkXMO3J0KMASd4AKh6Sqj0gw4kbQjqRSSqtC1WlU= Subject key identifier: BD:2E:1E:18:DA:BD:5F:74:8E:89:6C:29:B4:17:36:D2:79:98:3C:4A Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27 Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827 Certificate serial: 019AF27737A87C3DBD5BBDC6F788603EB2F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft Manifest number: 0D82 Signing time: Sat 06 Dec 2025 07:01:30 +0000 Manifest this update: Sat 06 Dec 2025 07:01:30 +0000 Manifest next update: Sun 07 Dec 2025 07:01:30 +0000 Files and hashes: 1: 2fQddCIl-7Oq1WuhVFDb_ItwFWs.roa (hash: G5bUTFThyurFxXPOBBEBFBWKjBkZ0p5sb4xbB9qr44M=) 2: 37QCkG1k9gzLrRMVOTELOapS-4Y.roa (hash: fObIS1yLlqyANULO1cGplwcB5m0pXnjdZmigUly+6NA=) 3: 9dmpKCydJUfFZmNPO6zMvPJYiCc.crl (hash: Fqfe2nSY3SgeQtZWAv4H41F2G1jYqmmp95PoD3W92fA=) 4: C8rZpiwRRKp7HiBYnxrXRCtzNP4.roa (hash: /a2qXNrKqG5G3jKSkvjhWWJd/4eBrgaawytg7M/VZPQ=) 5: LSwSqqfM6NE3bwsbhZVRM0BePVo.roa (hash: QYxJg9ZEhl4RnY/Twn9fuIOL/2nBIyTko4sjPdP5IhA=) 6: SyqNMF-ydxJR2kxngWZW5-SrEy0.roa (hash: KeocIUb7cPGt5yIgR1YWAUH1gGZjpJ9norLt8H3zU6Q=) 7: gAIi2RzKXjXCtYGsVRw03pRZYeU.roa (hash: PvQsJF0P/z+mLUrW2+GtvSyLdhymARBFgfCdxNsU3JE=) 8: hkqOX4mECokeZ3ChLO-NkzoKVG0.roa (hash: jDSI0Vi3uJHnivxkTcLJyUGbXo6jl9OF+5YD1t9wHog=) 9: xEaq7kolhQn1OmIod6QQM1Gthtk.roa (hash: IC+2lUW0/0ySDq3Q6puBeGjrJpCDJAXfXz5IauHoRHE=) 10: yZE684PU1B3lT-aKA30arKwyTEI.roa (hash: isFNdgWP0HVp5O76X23OI/gh9YCy0xYVcwqK0QPMZ60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:37:a8:7c:3d:bd:5b:bd:c6:f7:88:60:3e:b2:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827 Validity Not Before: Dec 6 07:01:30 2025 GMT Not After : Dec 7 07:01:30 2025 GMT Subject: CN=bd2e1e18dabd5f748e896c29b41736d279983c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:49:ef:b7:03:2e:d2:7c:c0:f5:ed:e5:b9:a2: 62:7e:c5:89:26:f2:29:3c:0f:42:8f:6e:f2:6a:b5: 24:c0:b3:99:6f:89:8f:86:75:73:a6:4e:7e:84:6f: 88:e7:79:17:64:d3:44:7e:8d:f5:68:bc:a7:73:b6: ca:73:a2:71:50:4e:d0:ab:59:b9:fb:e0:23:2d:25: a2:40:f9:84:f0:79:b1:b3:15:46:a6:d2:cf:8d:95: 56:4a:1e:4e:98:20:2b:44:5e:f1:05:db:07:c2:80: 4d:c5:db:84:48:bf:f4:72:09:db:b3:02:07:bf:ab: 63:e2:85:7e:d3:77:17:b4:2f:6e:b1:5d:89:fe:a6: 89:2b:63:f3:33:0f:4a:97:52:6a:5b:c8:f0:56:b9: 5a:23:3a:21:d3:22:b8:9f:1f:ef:8f:7b:61:2f:d8: 8d:06:f8:bf:4b:3f:0c:c9:26:55:4c:ee:08:ba:35: 44:22:ed:57:12:69:6b:14:33:85:96:cc:ee:12:fe: ee:a8:bd:d3:c2:48:1d:2c:c4:d6:3c:36:9c:d7:b3: 65:36:7b:a4:dd:db:c0:9d:bd:90:42:fc:50:de:b4: cb:fc:f5:77:2a:21:22:56:61:4c:7f:2d:ae:cf:2c: d2:7f:3b:ee:75:68:c9:aa:24:f0:c9:a8:fa:64:00: e6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2E:1E:18:DA:BD:5F:74:8E:89:6C:29:B4:17:36:D2:79:98:3C:4A X509v3 Authority Key Identifier: keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:cd:0a:a7:3e:e5:ac:04:61:f7:6e:09:f1:71:fb:0e:78:27: 33:54:4a:52:68:df:6d:16:a6:47:25:7c:87:9e:f8:59:e0:61: 8a:89:63:07:eb:f4:ed:49:17:7f:e3:6a:a6:5d:b0:57:a2:48: 37:e4:5f:51:41:24:d8:68:7b:94:b0:56:30:4b:17:bc:5f:c9: 83:50:08:3f:c8:8f:a2:59:fd:de:86:00:32:84:7b:e6:d7:32: 5b:fa:be:7a:18:a3:36:9e:5c:78:af:99:60:e3:48:46:53:fe: fc:71:6e:96:7c:79:02:3d:e2:19:1d:4b:cb:de:b5:13:71:03: 4d:d0:94:53:23:cf:91:ec:4b:00:ba:2c:5b:a1:6f:ce:43:c8: df:0d:d5:b1:93:87:f5:3f:6b:f7:23:ba:08:d9:b3:af:56:91: 62:d2:de:49:8d:18:42:29:17:1f:f9:5e:e1:e7:2c:44:39:dc: e6:47:f1:72:47:9d:98:b0:41:b2:ac:69:85:fb:9c:08:62:67: e4:2a:15:0a:db:2d:04:99:be:79:3d:1b:3e:5d:e5:ea:68:9e: 4a:fa:af:ca:12:5f:10:66:d0:c3:cf:6a:b4:67:a2:ff:5a:6e: c5:1e:28:fa:7b:95:ee:2a:1f:e6:27:ec:d8:c5:9d:a1:3b:2f: 00:53:01:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzeofD29W73G94hgPrLxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZDlhOTI4MmM5ZDI1NDdjNTY2NjM0ZjNiYWNjY2JjZjI1 ODg4MjcwHhcNMjUxMjA2MDcwMTMwWhcNMjUxMjA3MDcwMTMwWjAzMTEwLwYDVQQD EyhiZDJlMWUxOGRhYmQ1Zjc0OGU4OTZjMjliNDE3MzZkMjc5OTgzYzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10nvtwMu0nzA9e3luaJifsWJJvIp PA9Cj27yarUkwLOZb4mPhnVzpk5+hG+I53kXZNNEfo31aLync7bKc6JxUE7Qq1m5 ++AjLSWiQPmE8HmxsxVGptLPjZVWSh5OmCArRF7xBdsHwoBNxduESL/0cgnbswIH v6tj4oV+03cXtC9usV2J/qaJK2PzMw9Kl1JqW8jwVrlaIzoh0yK4nx/vj3thL9iN Bvi/Sz8MySZVTO4IujVEIu1XEmlrFDOFlszuEv7uqL3TwkgdLMTWPDac17NlNnuk 3dvAnb2QQvxQ3rTL/PV3KiEiVmFMfy2uzyzSfzvudWjJqiTwyaj6ZADmjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0uHhjavV90jolsKbQXNtJ5mDxKMB8GA1UdIwQY MBaAFPXZqSgsnSVHxWZjTzuszLzyWIgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjct OGNmNDFjYWZkY2UyLzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjctOGNmNDFjYWZkY2Uy LzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKs0Kpz7l rARh924J8XH7DngnM1RKUmjfbRamRyV8h574WeBhioljB+v07UkXf+Nqpl2wV6JI N+RfUUEk2Gh7lLBWMEsXvF/Jg1AIP8iPoln93oYAMoR75tcyW/q+ehijNp5ceK+Z YONIRlP+/HFulnx5Aj3iGR1Ly961E3EDTdCUUyPPkexLALosW6FvzkPI3w3VsZOH 9T9r9yO6CNmzr1aRYtLeSY0YQikXH/le4ecsRDnc5kfxckedmLBBsqxphfucCGJn 5CoVCtstBJm+eT0bPl3l6mieSvqvyhJfEGbQw89qtGei/1puxR4o+nuV7iof5ifs 2MWdoTsvAFMBWg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:12 2025 by rpki-client