This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft File: D1T54Kep6u6svFsQMQI1t_0O7QM.mft (raw, json) Hash identifier: 1AIMXsxNr+4ZMAxvdh4NXHhzNXPCBMCJL4pPBocbUXw= Subject key identifier: 0A:3E:D4:19:66:42:DC:8F:F0:6D:6A:A1:7C:84:06:AB:EA:01:54:CA Authority key identifier: 0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03 Certificate issuer: /CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03 Certificate serial: 019AF2AD95C9BE36EE4A251E031CFB73467E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft Manifest number: 135E Signing time: Sat 06 Dec 2025 08:00:53 +0000 Manifest this update: Sat 06 Dec 2025 08:00:53 +0000 Manifest next update: Sun 07 Dec 2025 08:00:53 +0000 Files and hashes: 1: D1T54Kep6u6svFsQMQI1t_0O7QM.crl (hash: mWTWCBLotwsRmpn7AEdTrWogt9queDLiTymWCZCS5Ok=) 2: n_c4PLsmjJy0yCliC8En4sc8wCw.roa (hash: cMBCvEWECFAcwZYZaTXi+y0wWCPFximX6N1nRpp3vNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:95:c9:be:36:ee:4a:25:1e:03:1c:fb:73:46:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03 Validity Not Before: Dec 6 08:00:53 2025 GMT Not After : Dec 7 08:00:53 2025 GMT Subject: CN=0a3ed4196642dc8ff06d6aa17c8406abea0154ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3e:59:3c:d6:f5:1f:2c:a1:52:b5:20:17:a9: e6:b5:bd:89:2b:26:e9:fd:a3:86:fe:53:2e:40:76: 04:ef:71:ba:da:fb:91:26:51:2d:70:94:1d:bb:1d: 3e:b2:b1:5b:e5:1b:81:67:41:05:93:8f:f3:db:71: 30:50:10:76:fa:34:e7:61:d2:a2:3f:78:1c:22:aa: 55:ba:87:02:87:5a:46:59:af:f5:42:fd:d6:00:91: 62:50:f7:02:2a:ec:bf:1e:1d:1e:47:bf:4e:a9:44: 4c:6b:8d:7c:23:86:f0:7c:fb:95:aa:a4:dd:4d:3e: d9:a5:aa:e0:fb:0a:1e:31:49:07:22:ca:c3:b1:c7: 8f:4b:e2:58:b8:64:e6:53:54:e7:af:eb:5a:00:f1: d5:04:92:18:71:65:d4:5e:60:5f:c0:1b:5d:34:3d: 8f:e2:82:ec:eb:e3:19:5a:46:d5:3d:56:45:eb:60: fd:43:b5:dd:89:7d:fc:ec:0a:67:c4:07:dc:e0:5b: 7f:8e:b8:40:77:43:cf:95:d9:bb:c5:8a:dc:ff:e3: bb:40:4b:46:13:8b:45:e5:e3:58:a9:df:46:b2:2e: 7d:ef:c6:60:07:2d:4a:8e:65:22:9e:c8:d2:78:a9: 04:50:04:69:d3:f8:fb:e7:19:85:1e:d2:29:c5:31: a6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3E:D4:19:66:42:DC:8F:F0:6D:6A:A1:7C:84:06:AB:EA:01:54:CA X509v3 Authority Key Identifier: keyid:0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ad:72:a3:f8:e2:8b:a7:b6:0a:11:31:f1:c6:20:5f:32:aa: 1a:aa:9e:64:33:5d:c5:2d:75:cf:c3:37:ed:98:0f:9f:33:0b: ec:53:a0:da:bf:46:9d:d2:2e:63:b4:3b:01:59:34:f6:91:b4: f2:c3:e0:72:a2:b2:b9:54:24:a6:c4:77:83:aa:91:cc:be:ef: 11:a3:2d:63:bd:59:82:b4:eb:87:51:af:34:97:a0:09:70:9b: 3f:53:9b:23:73:0e:7e:af:52:02:70:92:69:a1:e9:6f:7d:42: fd:a1:da:e8:50:04:7a:df:f6:05:2a:bd:c2:b4:75:31:4a:dc: 16:cb:bf:88:cb:83:af:33:44:f7:6c:a0:ba:2b:cc:f8:cc:33: 6a:1a:b3:e1:0e:78:04:06:2e:de:82:04:2b:35:85:a1:f1:77: 6a:3d:14:0a:d5:99:9a:78:de:a9:72:5b:7f:60:db:d7:70:88: e7:5c:d4:73:6e:c7:8e:40:ba:8e:99:ce:8e:e5:cd:57:f7:fe: 5a:4d:20:b7:0e:1e:82:6a:4d:88:91:7f:45:9a:cf:6e:5a:37: ad:d3:c3:0d:dc:fd:1c:25:f6:90:79:99:92:6e:1a:75:16:0a: 97:15:1e:ce:52:8a:5b:18:37:ab:67:ae:24:e5:eb:e2:0a:90: bd:a3:47:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZXJvjbuSiUeAxz7c0Z+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNTRmOWUwYTdhOWVhZWVhY2JjNWIxMDMxMDIzNWI3ZmQw ZWVkMDMwHhcNMjUxMjA2MDgwMDUzWhcNMjUxMjA3MDgwMDUzWjAzMTEwLwYDVQQD EygwYTNlZDQxOTY2NDJkYzhmZjA2ZDZhYTE3Yzg0MDZhYmVhMDE1NGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT5ZPNb1HyyhUrUgF6nmtb2JKybp /aOG/lMuQHYE73G62vuRJlEtcJQdux0+srFb5RuBZ0EFk4/z23EwUBB2+jTnYdKi P3gcIqpVuocCh1pGWa/1Qv3WAJFiUPcCKuy/Hh0eR79OqURMa418I4bwfPuVqqTd TT7Zparg+woeMUkHIsrDscePS+JYuGTmU1Tnr+taAPHVBJIYcWXUXmBfwBtdND2P 4oLs6+MZWkbVPVZF62D9Q7XdiX387ApnxAfc4Ft/jrhAd0PPldm7xYrc/+O7QEtG E4tF5eNYqd9Gsi5978ZgBy1KjmUinsjSeKkEUARp0/j75xmFHtIpxTGmFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAo+1BlmQtyP8G1qoXyEBqvqAVTKMB8GA1UdIwQY MBaAFA9U+eCnqerurLxbEDECNbf9Du0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85MDU5YzgtYmJkOC00ZjZlLWE2MGUt ZWYyNmMzNDRlZjAxLzEvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS85MDU5YzgtYmJkOC00ZjZlLWE2MGUtZWYyNmMzNDRlZjAx LzEvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADq1yo/ji i6e2ChEx8cYgXzKqGqqeZDNdxS11z8M37ZgPnzML7FOg2r9GndIuY7Q7AVk09pG0 8sPgcqKyuVQkpsR3g6qRzL7vEaMtY71ZgrTrh1GvNJegCXCbP1ObI3MOfq9SAnCS aaHpb31C/aHa6FAEet/2BSq9wrR1MUrcFsu/iMuDrzNE92yguivM+Mwzahqz4Q54 BAYu3oIEKzWFofF3aj0UCtWZmnjeqXJbf2Db13CI51zUc27HjkC6jpnOjuXNV/f+ Wk0gtw4egmpNiJF/RZrPblo3rdPDDdz9HCX2kHmZkm4adRYKlxUezlKKWxg3q2eu JOXr4gqQvaNHVw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:01 2025 by rpki-client