This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft File: D5XJyafxmprXF-TapTDIXPmauXU.mft (raw, json) Hash identifier: HD4haqh4uTVcAh82kbTyg3qoWkZThj3Iug93ggDOTW0= Subject key identifier: 3B:DA:23:29:2A:17:CE:90:3A:EF:B3:93:EE:89:A8:E9:90:2C:8A:55 Authority key identifier: 0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75 Certificate issuer: /CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975 Certificate serial: 019AF12D7206D44EA29EA4678A2D47F80E2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft Manifest number: 0791 Signing time: Sat 06 Dec 2025 01:01:18 +0000 Manifest this update: Sat 06 Dec 2025 01:01:18 +0000 Manifest next update: Sun 07 Dec 2025 01:01:18 +0000 Files and hashes: 1: D5XJyafxmprXF-TapTDIXPmauXU.crl (hash: Z2xq+zjqAml8Xg+HeOhytcBwpO9TR3kqZ/JxyDd354E=) 2: dJjjOIsvcmwG1yw0BY5P71sFVUw.roa (hash: 71ssAltTmbpploHF43pU09n+JXavvKYPHb8mMd4Firs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:72:06:d4:4e:a2:9e:a4:67:8a:2d:47:f8:0e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975 Validity Not Before: Dec 6 01:01:18 2025 GMT Not After : Dec 7 01:01:18 2025 GMT Subject: CN=3bda23292a17ce903aefb393ee89a8e9902c8a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2d:55:d7:5e:d6:d2:06:84:df:30:a1:49:9a: 27:0d:fe:0d:e7:b2:12:a1:e5:f6:9f:69:14:f5:4b: 5b:d5:0a:c3:ef:fd:9d:86:0b:6d:8f:32:c2:0d:1c: 6c:0e:39:5d:72:f6:e7:1b:15:83:16:1a:f6:3c:81: db:e7:6b:b8:5c:11:ae:05:1b:6c:59:41:af:76:16: 4c:52:a1:40:e4:69:52:1f:49:14:9b:51:1e:4c:32: 27:b2:a8:78:48:71:46:2e:f1:ef:c6:14:f8:9e:a8: 07:5c:9c:be:fa:c2:a3:10:63:85:94:11:3a:6d:de: 9a:47:b8:65:f4:0b:3a:fc:f7:06:dd:71:91:1c:b1: 60:cc:bd:71:e4:02:95:47:a7:e6:48:0e:04:31:b2: e4:78:a6:c6:fb:ca:77:83:81:6b:db:7f:6f:61:34: 9d:c5:df:ff:d9:0c:ec:9c:79:88:4d:80:e9:29:08: 27:51:bc:6d:90:33:77:be:74:26:58:8c:52:4d:84: b5:34:f3:cf:a9:99:e4:b9:8e:09:c0:1f:0a:e3:17: 89:50:5a:9d:0d:a1:0d:ae:f7:e3:7c:bf:90:55:cf: 6f:0c:78:89:a8:ed:82:ca:1d:84:46:c4:16:b6:fa: 19:5f:07:d5:89:75:8f:8d:9e:ee:47:de:04:eb:aa: cf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DA:23:29:2A:17:CE:90:3A:EF:B3:93:EE:89:A8:E9:90:2C:8A:55 X509v3 Authority Key Identifier: keyid:0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:9e:98:de:95:4f:a9:02:a3:8c:3a:46:d5:46:0a:d3:e0:62: 6b:ac:9e:3e:fc:a5:34:c5:2a:30:15:87:d9:6d:86:fc:22:ff: b3:40:cd:14:ab:3f:f9:b4:21:3c:0b:81:53:d9:72:92:36:d5: 80:98:a0:4d:16:f5:7d:d7:bd:c7:6b:e6:13:7a:f2:ab:f4:b4: 15:67:9e:09:97:f6:8a:30:40:14:6c:e7:24:3d:a9:8d:69:da: 10:39:53:90:3c:73:42:de:99:d0:ed:f4:de:30:61:30:96:1d: c8:62:eb:d9:84:82:8d:c3:57:88:e5:63:29:20:25:36:a2:9e: 2d:5f:b5:d7:62:61:4e:2d:bf:9c:df:6f:43:25:56:7e:1c:91: 09:63:41:c7:d9:ee:a2:7a:d5:f4:ff:e0:79:43:f9:b2:76:8c: ad:80:fa:46:20:66:b4:2c:f7:d3:c5:7e:70:c0:ea:4d:d9:29: c8:71:83:63:9e:70:a0:5a:9b:43:57:f3:7c:65:b4:2f:cc:26: 09:59:88:33:b5:1d:d6:9e:62:27:16:98:95:0a:ec:32:42:12: fe:a8:8c:e4:d9:8c:0d:8b:0a:af:c7:f6:25:48:80:fc:6f:3c: ef:cf:b5:b0:87:53:3c:7d:a6:b9:9c:2b:d8:73:34:46:1e:c4: ef:b4:24:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXIG1E6inqRnii1H+A4qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOTVjOWM5YTdmMTlhOWFkNzE3ZTRkYWE1MzBjODVjZjk5 YWI5NzUwHhcNMjUxMjA2MDEwMTE4WhcNMjUxMjA3MDEwMTE4WjAzMTEwLwYDVQQD EygzYmRhMjMyOTJhMTdjZTkwM2FlZmIzOTNlZTg5YThlOTkwMmM4YTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS1V117W0gaE3zChSZonDf4N57IS oeX2n2kU9Utb1QrD7/2dhgttjzLCDRxsDjldcvbnGxWDFhr2PIHb52u4XBGuBRts WUGvdhZMUqFA5GlSH0kUm1EeTDInsqh4SHFGLvHvxhT4nqgHXJy++sKjEGOFlBE6 bd6aR7hl9As6/PcG3XGRHLFgzL1x5AKVR6fmSA4EMbLkeKbG+8p3g4Fr239vYTSd xd//2QzsnHmITYDpKQgnUbxtkDN3vnQmWIxSTYS1NPPPqZnkuY4JwB8K4xeJUFqd DaENrvfjfL+QVc9vDHiJqO2Cyh2ERsQWtvoZXwfViXWPjZ7uR94E66rPfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvaIykqF86QOu+zk+6JqOmQLIpVMB8GA1UdIwQY MBaAFA+Vycmn8Zqa1xfk2qUwyFz5mrl1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDVYSnlhZnhtcHJYRi1UYXBURElYUG1hdVhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wOGY1Y2QtOGVlYy00ZDU1LTg4MTIt YzkzNjU5Zjc2NzM3LzEvRDVYSnlhZnhtcHJYRi1UYXBURElYUG1hdVhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8wOGY1Y2QtOGVlYy00ZDU1LTg4MTItYzkzNjU5Zjc2NzM3 LzEvRDVYSnlhZnhtcHJYRi1UYXBURElYUG1hdVhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfp6Y3pVP qQKjjDpG1UYK0+Bia6yePvylNMUqMBWH2W2G/CL/s0DNFKs/+bQhPAuBU9lykjbV gJigTRb1fde9x2vmE3ryq/S0FWeeCZf2ijBAFGznJD2pjWnaEDlTkDxzQt6Z0O30 3jBhMJYdyGLr2YSCjcNXiOVjKSAlNqKeLV+112JhTi2/nN9vQyVWfhyRCWNBx9nu onrV9P/geUP5snaMrYD6RiBmtCz308V+cMDqTdkpyHGDY55woFqbQ1fzfGW0L8wm CVmIM7Ud1p5iJxaYlQrsMkIS/qiM5NmMDYsKr8f2JUiA/G8878+1sIdTPH2muZwr 2HM0Rh7E77Qkug== -----END CERTIFICATE-----Generated at Sat Dec 6 10:05:05 2025 by rpki-client