This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft File: DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft (raw, json) Hash identifier: vQk2ZADXYrSxZTf4DFTYekfDFMngR+8AQ2tpC/3kGCM= Subject key identifier: 96:A2:80:81:D1:42:45:F8:3B:63:7C:81:17:10:84:97:A1:BF:BA:AE Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E Certificate issuer: /CN=0c4579a4028829d37acac65f66c056063251e57e Certificate serial: 019AF12E6580DB1BD0859053A9FDC6848E4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft Manifest number: 0E90 Signing time: Sat 06 Dec 2025 01:02:20 +0000 Manifest this update: Sat 06 Dec 2025 01:02:20 +0000 Manifest next update: Sun 07 Dec 2025 01:02:20 +0000 Files and hashes: 1: DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl (hash: MscnnS9y+zUda/0glIjpDbgOtUJPegOcskYJU7uak1s=) 2: fzCVh6B_DKQwB3K_lMMIaHfyrF8.roa (hash: ywjvOQhNwUvuKUliKOgNli6M3ye5boySGrRRcKij+48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:65:80:db:1b:d0:85:90:53:a9:fd:c6:84:8e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e Validity Not Before: Dec 6 01:02:20 2025 GMT Not After : Dec 7 01:02:20 2025 GMT Subject: CN=96a28081d14245f83b637c8117108497a1bfbaae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:64:ce:e9:fe:a2:b5:1a:a2:17:bf:71:d2:72: 51:c9:9a:db:c6:e4:8e:f3:3e:84:3b:26:10:0c:1f: c3:8e:00:41:58:46:49:b3:2e:07:70:94:78:ee:de: 8d:d8:2c:34:d2:2a:7f:5e:46:ee:0e:ac:c7:23:ac: 0d:57:97:48:be:6f:b0:35:79:cc:52:47:7c:5f:5c: 2c:75:14:d5:22:61:e3:ff:ec:0a:93:00:32:0e:11: 20:15:71:56:c4:60:3c:fe:c9:71:0f:76:32:a4:37: 30:58:8e:ea:21:7c:ee:d6:46:3f:45:1b:23:19:23: 3d:03:68:c8:41:a6:dd:71:e9:ad:08:96:e3:e0:1b: fc:44:9e:e3:52:74:60:9a:1b:00:a0:70:a3:f5:f3: ce:51:d4:c0:0d:8d:b2:47:ec:5e:06:11:9e:f8:36: 98:c8:d0:79:15:fc:7e:e9:19:a6:f4:1b:76:50:a1: 80:be:8d:eb:db:63:1d:60:61:2e:65:7d:8e:fd:06: 8e:d4:c4:c2:e4:dc:0a:1f:51:99:14:4d:cf:21:56: 49:bf:d4:99:bb:f2:64:1f:35:29:cd:c8:52:ee:78: 5c:34:2d:e0:89:80:2d:c8:33:72:e4:34:fc:00:24: 7e:17:0e:7d:cf:62:af:cc:11:30:e6:9a:2d:fe:b0: c6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A2:80:81:D1:42:45:F8:3B:63:7C:81:17:10:84:97:A1:BF:BA:AE X509v3 Authority Key Identifier: keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:14:db:08:d8:b8:d2:89:da:b5:f4:ea:ef:04:a4:99:e7:2a: f8:b1:0a:c7:f9:80:b1:21:6e:cd:78:12:24:68:ff:a0:2d:eb: 34:ee:cd:89:5d:36:0e:4b:3b:dd:01:08:58:f4:1b:1b:b6:fd: 68:1c:55:05:15:be:09:80:c8:fd:8a:4c:83:0e:a7:c0:61:54: 74:cf:29:47:4d:7c:4d:a9:68:37:c1:53:bf:4f:0e:1f:e0:b7: 68:f4:ed:e3:de:9d:9a:b8:55:5e:db:bf:5d:36:49:1a:43:f9: f8:d8:cf:58:95:b4:52:02:d6:84:36:1c:b2:3e:55:3f:e6:cc: 50:e6:a6:9d:e4:65:3e:40:e4:3a:4e:a8:5a:ff:bd:a0:b4:cf: 35:9d:73:10:be:8e:43:ed:82:ef:67:77:45:0f:c2:6c:59:e7: 89:b4:3c:37:77:10:35:0e:73:b6:d4:ef:d7:1a:25:ec:9b:d5: 6a:25:66:19:05:17:7a:d5:05:04:87:7c:1e:32:6e:33:3b:59: 86:1d:5c:2a:0c:d8:38:94:c2:b4:bc:62:a7:2a:78:ed:27:26: cc:bd:54:42:9a:92:85:99:79:c4:8f:07:c0:ca:24:2a:17:bb: 73:4c:23:57:91:57:f9:2a:22:7e:4c:e0:6b:8f:40:bd:b9:72: 69:e4:e7:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmWA2xvQhZBTqf3GhI5NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNDU3OWE0MDI4ODI5ZDM3YWNhYzY1ZjY2YzA1NjA2MzI1 MWU1N2UwHhcNMjUxMjA2MDEwMjIwWhcNMjUxMjA3MDEwMjIwWjAzMTEwLwYDVQQD Eyg5NmEyODA4MWQxNDI0NWY4M2I2MzdjODExNzEwODQ5N2ExYmZiYWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmTO6f6itRqiF79x0nJRyZrbxuSO 8z6EOyYQDB/DjgBBWEZJsy4HcJR47t6N2Cw00ip/XkbuDqzHI6wNV5dIvm+wNXnM Ukd8X1wsdRTVImHj/+wKkwAyDhEgFXFWxGA8/slxD3YypDcwWI7qIXzu1kY/RRsj GSM9A2jIQabdcemtCJbj4Bv8RJ7jUnRgmhsAoHCj9fPOUdTADY2yR+xeBhGe+DaY yNB5Ffx+6Rmm9Bt2UKGAvo3r22MdYGEuZX2O/QaO1MTC5NwKH1GZFE3PIVZJv9SZ u/JkHzUpzchS7nhcNC3giYAtyDNy5DT8ACR+Fw59z2KvzBEw5pot/rDGawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJaigIHRQkX4O2N8gRcQhJehv7quMB8GA1UdIwQY MBaAFAxFeaQCiCnTesrGX2bAVgYyUeV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lZGFlYjUtNWU2ZS00MTFiLTk5Y2It M2M1MDE4MDc4MGIwLzEvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9lZGFlYjUtNWU2ZS00MTFiLTk5Y2ItM2M1MDE4MDc4MGIw LzEvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhTbCNi4 0onatfTq7wSkmecq+LEKx/mAsSFuzXgSJGj/oC3rNO7NiV02Dks73QEIWPQbG7b9 aBxVBRW+CYDI/YpMgw6nwGFUdM8pR018TaloN8FTv08OH+C3aPTt496dmrhVXtu/ XTZJGkP5+NjPWJW0UgLWhDYcsj5VP+bMUOamneRlPkDkOk6oWv+9oLTPNZ1zEL6O Q+2C72d3RQ/CbFnnibQ8N3cQNQ5zttTv1xol7JvVaiVmGQUXetUFBId8HjJuMztZ hh1cKgzYOJTCtLxipyp47ScmzL1UQpqShZl5xI8HwMokKhe7c0wjV5FX+Soifkzg a49AvblyaeTnUg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:08:27 2025 by rpki-client