This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft File: ds5jfUe3gATQzPrjceaBh2isP6U.mft (raw, json) Hash identifier: yIc3nugO3KZMFW6tTqLW5DJSeEuotjXZUHoFCLZGiW4= Subject key identifier: 84:B1:F4:18:FC:AA:94:95:F1:B7:08:C5:CD:58:FC:4C:48:EB:9D:02 Authority key identifier: 76:CE:63:7D:47:B7:80:04:D0:CC:FA:E3:71:E6:81:87:68:AC:3F:A5 Certificate issuer: /CN=76ce637d47b78004d0ccfae371e6818768ac3fa5 Certificate serial: 019AF23FDFCABBCC00EC156D2816ECF3952C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft Manifest number: 1583 Signing time: Sat 06 Dec 2025 06:01:03 +0000 Manifest this update: Sat 06 Dec 2025 06:01:03 +0000 Manifest next update: Sun 07 Dec 2025 06:01:03 +0000 Files and hashes: 1: 2v9WLSFviNLhCEs3PI8ghWfG43g.roa (hash: s4HF4L3IMaVI3bReAfOPFKeWOp26BrTGFcFThVgszh4=) 2: ds5jfUe3gATQzPrjceaBh2isP6U.crl (hash: ji5KUx1URm+fZKxBae2bttW6bLsDMhZguc8lINCCA20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:df:ca:bb:cc:00:ec:15:6d:28:16:ec:f3:95:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76ce637d47b78004d0ccfae371e6818768ac3fa5 Validity Not Before: Dec 6 06:01:03 2025 GMT Not After : Dec 7 06:01:03 2025 GMT Subject: CN=84b1f418fcaa9495f1b708c5cd58fc4c48eb9d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:38:ee:49:4f:07:ad:77:d0:be:f8:f5:58:92: d0:5d:30:1d:4f:b7:65:fc:a0:87:0a:73:e8:06:4d: db:61:fc:1e:a9:f2:2d:bc:78:2c:9a:35:32:7c:37: 53:56:f2:8d:15:3c:3c:29:85:fd:ff:a9:10:a2:c6: 25:26:42:cb:fc:b3:69:62:da:58:17:6a:4a:f9:d1: f6:37:b4:f0:48:ac:5e:27:be:9c:46:c7:70:05:ff: ac:76:e5:fa:0e:af:59:a5:7b:a0:30:61:6a:c0:3f: 0c:4d:78:a0:15:b3:0b:68:92:73:05:05:12:ad:50: 46:78:eb:55:41:41:12:27:15:34:f2:a0:4c:20:6b: 78:9a:07:7b:98:62:74:36:7d:85:38:6b:e6:13:ef: 9b:77:a4:59:d0:ff:69:47:3a:57:82:95:d5:0d:d0: 51:36:16:2a:45:e1:94:17:2b:8f:09:94:e0:7d:9f: e9:c3:62:63:6c:76:2c:36:39:06:5e:e3:f6:a9:f5: 29:4d:26:c7:33:21:d2:06:56:0f:0c:4f:ac:d5:92: 74:55:aa:ed:9a:6b:6c:30:55:aa:32:e4:53:f5:b7: 51:12:db:fc:b9:df:48:80:97:53:74:f3:a0:33:4e: 3f:8a:b4:15:97:3e:3a:0c:f6:86:9c:b9:e8:29:db: a5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B1:F4:18:FC:AA:94:95:F1:B7:08:C5:CD:58:FC:4C:48:EB:9D:02 X509v3 Authority Key Identifier: keyid:76:CE:63:7D:47:B7:80:04:D0:CC:FA:E3:71:E6:81:87:68:AC:3F:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:04:93:cb:91:4b:ba:5e:82:f6:34:4a:eb:d8:26:e1:2d:3b: 62:95:62:cc:8f:ab:57:18:9b:4f:93:11:68:b0:db:c0:70:b4: 2e:54:37:33:af:3d:a6:0f:c7:e3:58:0d:81:43:a3:e8:51:d2: 46:70:f8:8b:aa:a8:d1:7f:1e:db:dc:c2:39:79:7e:82:74:22: e0:38:c4:74:fe:d7:2d:19:1c:3f:c4:32:68:d1:f6:d7:ea:99: ae:e2:93:e8:d8:3a:e8:aa:fc:83:29:75:88:f6:7c:d6:90:41: ee:d0:db:70:34:cb:02:15:7b:f1:c7:55:01:cb:ad:16:74:0f: 0e:45:b9:bb:2c:69:c9:3b:fc:59:27:55:ce:e8:a7:1c:5d:93: 59:dc:22:0c:a4:88:77:d0:15:be:68:f2:d4:79:c5:5f:cd:fc: 84:98:b7:10:f2:05:5e:53:5c:24:8c:4a:71:53:cd:9b:44:b5: 50:02:e2:6d:07:e3:a1:0d:de:fc:67:e1:36:bc:22:7e:52:ce: 77:8e:6a:ad:27:66:8e:98:2f:67:f9:94:1f:d8:5f:96:34:6a: 76:5d:aa:4e:16:2b:15:11:9f:f0:56:88:a3:00:be:6f:76:dc: 4d:c3:85:50:56:1f:55:11:e4:1d:e2:e5:9e:84:a4:60:2b:44: b4:95:18:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9/Ku8wA7BVtKBbs85UsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2Y2U2MzdkNDdiNzgwMDRkMGNjZmFlMzcxZTY4MTg3Njhh YzNmYTUwHhcNMjUxMjA2MDYwMTAzWhcNMjUxMjA3MDYwMTAzWjAzMTEwLwYDVQQD Eyg4NGIxZjQxOGZjYWE5NDk1ZjFiNzA4YzVjZDU4ZmM0YzQ4ZWI5ZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zjuSU8HrXfQvvj1WJLQXTAdT7dl /KCHCnPoBk3bYfweqfItvHgsmjUyfDdTVvKNFTw8KYX9/6kQosYlJkLL/LNpYtpY F2pK+dH2N7TwSKxeJ76cRsdwBf+sduX6Dq9ZpXugMGFqwD8MTXigFbMLaJJzBQUS rVBGeOtVQUESJxU08qBMIGt4mgd7mGJ0Nn2FOGvmE++bd6RZ0P9pRzpXgpXVDdBR NhYqReGUFyuPCZTgfZ/pw2JjbHYsNjkGXuP2qfUpTSbHMyHSBlYPDE+s1ZJ0Vart mmtsMFWqMuRT9bdREtv8ud9IgJdTdPOgM04/irQVlz46DPaGnLnoKduljQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISx9Bj8qpSV8bcIxc1Y/ExI650CMB8GA1UdIwQY MBaAFHbOY31Ht4AE0Mz643HmgYdorD+lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHM1amZVZTNnQVRRelByamNlYUJoMmlzUDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83MzA5YTktNDZjOC00MjQwLWFmZWYt ODQwODgxYTRkMzBkLzEvZHM1amZVZTNnQVRRelByamNlYUJoMmlzUDZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS83MzA5YTktNDZjOC00MjQwLWFmZWYtODQwODgxYTRkMzBk LzEvZHM1amZVZTNnQVRRelByamNlYUJoMmlzUDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwSTy5FL ul6C9jRK69gm4S07YpVizI+rVxibT5MRaLDbwHC0LlQ3M689pg/H41gNgUOj6FHS RnD4i6qo0X8e29zCOXl+gnQi4DjEdP7XLRkcP8QyaNH21+qZruKT6Ng66Kr8gyl1 iPZ81pBB7tDbcDTLAhV78cdVAcutFnQPDkW5uyxpyTv8WSdVzuinHF2TWdwiDKSI d9AVvmjy1HnFX838hJi3EPIFXlNcJIxKcVPNm0S1UALibQfjoQ3e/GfhNrwiflLO d45qrSdmjpgvZ/mUH9hfljRqdl2qThYrFRGf8FaIowC+b3bcTcOFUFYfVRHkHeLl noSkYCtEtJUYcA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:15 2025 by rpki-client