This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft File: 95d69YDIUMyL-QZJ-b2opqSL85Y.mft (raw, json) Hash identifier: yjOAqlkM1tzRAHFeL6mU/hqp1ZUuyr5xudaqoQpwdtk= Subject key identifier: 29:2F:4F:27:39:83:73:5F:8A:C8:FB:9D:E3:9C:C0:54:B1:21:7D:B9 Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96 Certificate issuer: /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396 Certificate serial: 019AF2ADA9D30517E85533849AA00CC92679 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft Manifest number: 0DE5 Signing time: Sat 06 Dec 2025 08:00:58 +0000 Manifest this update: Sat 06 Dec 2025 08:00:58 +0000 Manifest next update: Sun 07 Dec 2025 08:00:58 +0000 Files and hashes: 1: 95d69YDIUMyL-QZJ-b2opqSL85Y.crl (hash: IKbweCQusrwm9hmnN2fBmzFHwjlJ1DtlLckgthLT+Nw=) 2: cmLjyeJCay-rIpV13cL4nS3umqA.roa (hash: zv80BsoFgYMaUhk2eqxE9kG1WrpCEraiiqsDzPaa4r8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:a9:d3:05:17:e8:55:33:84:9a:a0:0c:c9:26:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396 Validity Not Before: Dec 6 08:00:58 2025 GMT Not After : Dec 7 08:00:58 2025 GMT Subject: CN=292f4f273983735f8ac8fb9de39cc054b1217db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:89:a7:87:15:c6:70:cc:3a:90:b8:9e:05:b5: 11:58:20:d2:44:c3:fb:92:de:1a:32:5e:5c:39:e4: 15:c6:2a:9b:9e:b7:2a:fe:c1:b1:d3:c7:38:a5:22: ec:23:a8:1b:5a:92:f9:38:7c:8e:16:ab:13:04:7a: ae:f5:6f:68:c9:04:e6:42:70:cf:a7:d9:b6:df:d1: 5c:b0:d0:96:ca:a2:c1:51:a1:dc:59:93:93:e3:69: 44:15:76:4a:00:b6:70:92:0c:f3:32:28:03:ea:31: 0d:02:cf:c7:7e:e2:39:21:29:28:2f:2e:13:8e:1e: cd:0c:ff:9c:47:f4:df:cc:a4:56:cb:e3:ff:c5:04: 29:a2:c0:1c:05:57:03:3f:c2:ac:b7:2d:61:84:df: 3c:15:81:ed:37:23:c4:5d:09:ee:7a:58:23:59:73: 85:b2:f0:19:b9:52:c6:fe:ea:7b:75:57:f5:7b:20: da:19:e6:ee:9e:b5:76:da:a0:e7:c3:00:82:bb:b2: 41:ab:a5:b3:f7:26:ab:5e:d2:58:6f:03:43:bd:15: e0:54:1c:eb:88:6d:1b:64:f2:5e:07:c8:22:16:06: 0f:74:66:b5:5c:17:44:1f:d9:76:c6:a7:27:c0:09: 4a:09:93:09:1b:a0:06:55:c3:3f:16:c0:ee:c3:bb: 02:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2F:4F:27:39:83:73:5F:8A:C8:FB:9D:E3:9C:C0:54:B1:21:7D:B9 X509v3 Authority Key Identifier: keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:af:ad:92:aa:60:76:75:0d:6a:f6:dd:3c:17:92:e1:97:88: a1:80:33:a1:7d:97:fa:88:98:6d:9a:fe:03:77:84:67:54:b4: 9d:10:90:0b:b1:a5:cc:ef:b6:f0:fb:cf:92:83:69:94:55:18: 2c:4f:fe:29:f0:5e:d9:c9:c2:60:ef:17:ff:c0:41:52:a0:27: 79:11:0f:7b:bf:fc:be:d5:93:93:3b:9f:fa:ee:62:4f:cb:55: 57:d7:e7:96:58:c5:69:9f:08:08:f9:0a:90:9d:9b:32:6d:57: a7:fc:f4:29:37:4b:f6:8c:63:fa:68:a9:58:9c:9a:b5:ad:63: 36:f3:8a:15:da:c6:35:c3:00:c9:68:74:19:7d:aa:8d:4f:d1: bf:f0:6a:6f:fe:91:da:65:df:d3:41:d1:fd:0c:59:ca:f7:5f: 4d:e4:6d:f9:29:07:96:20:0d:42:6c:fd:95:9b:66:fd:76:1f: d9:b1:c6:58:17:81:66:53:97:a9:35:37:4f:0a:b1:b6:4e:7f: d5:b8:6b:db:b2:bb:8d:53:7f:2e:98:dd:6d:27:97:8b:f4:5e: 00:05:17:ca:64:6a:b8:cb:d5:26:11:d8:5f:40:e5:d3:65:97: af:dc:42:ce:43:94:b2:11:a9:c6:96:b6:0a:a0:95:57:40:48: 66:05:85:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryranTBRfoVTOEmqAMySZ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3OTc3YWY1ODBjODUwY2M4YmY5MDY0OWY5YmRhOGE2YTQ4 YmYzOTYwHhcNMjUxMjA2MDgwMDU4WhcNMjUxMjA3MDgwMDU4WjAzMTEwLwYDVQQD EygyOTJmNGYyNzM5ODM3MzVmOGFjOGZiOWRlMzljYzA1NGIxMjE3ZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4mnhxXGcMw6kLieBbURWCDSRMP7 kt4aMl5cOeQVxiqbnrcq/sGx08c4pSLsI6gbWpL5OHyOFqsTBHqu9W9oyQTmQnDP p9m239FcsNCWyqLBUaHcWZOT42lEFXZKALZwkgzzMigD6jENAs/HfuI5ISkoLy4T jh7NDP+cR/TfzKRWy+P/xQQposAcBVcDP8Ksty1hhN88FYHtNyPEXQnuelgjWXOF svAZuVLG/up7dVf1eyDaGebunrV22qDnwwCCu7JBq6Wz9yarXtJYbwNDvRXgVBzr iG0bZPJeB8giFgYPdGa1XBdEH9l2xqcnwAlKCZMJG6AGVcM/FsDuw7sC2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkvTyc5g3Nfisj7neOcwFSxIX25MB8GA1UdIwQY MBaAFPeXevWAyFDMi/kGSfm9qKaki/OWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTVkNjlZRElVTXlMLVFaSi1iMm9wcVNMODVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iMzYxZWYtNWY2OS00YmNiLTk4M2Mt MjExMjgwMjcyNTVkLzEvOTVkNjlZRElVTXlMLVFaSi1iMm9wcVNMODVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9iMzYxZWYtNWY2OS00YmNiLTk4M2MtMjExMjgwMjcyNTVk LzEvOTVkNjlZRElVTXlMLVFaSi1iMm9wcVNMODVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6+tkqpg dnUNavbdPBeS4ZeIoYAzoX2X+oiYbZr+A3eEZ1S0nRCQC7GlzO+28PvPkoNplFUY LE/+KfBe2cnCYO8X/8BBUqAneREPe7/8vtWTkzuf+u5iT8tVV9fnlljFaZ8ICPkK kJ2bMm1Xp/z0KTdL9oxj+mipWJyata1jNvOKFdrGNcMAyWh0GX2qjU/Rv/Bqb/6R 2mXf00HR/QxZyvdfTeRt+SkHliANQmz9lZtm/XYf2bHGWBeBZlOXqTU3Twqxtk5/ 1bhr27K7jVN/LpjdbSeXi/ReAAUXymRquMvVJhHYX0Dl02WXr9xCzkOUshGpxpa2 CqCVV0BIZgWFTA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:23:37 2025 by rpki-client