This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft File: d2ijHlyKWogiWYmhuu9KOBM4YBo.mft (raw, json) Hash identifier: G5KEs+HOZQJLX/ZtnLfdRD9s7SolEWoNvi1AkoIPSoI= Subject key identifier: 75:DD:88:51:72:46:09:45:D8:BB:23:0D:5C:C9:57:BA:53:6B:90:97 Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A Certificate issuer: /CN=7768a31e5c8a5a88225989a1baef4a381338601a Certificate serial: 019AF208BD6542C50FACB0540A9953ACBF07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:00:50 +0000 Manifest this update: Sat 06 Dec 2025 05:00:50 +0000 Manifest next update: Sun 07 Dec 2025 05:00:50 +0000 Files and hashes: 1: 1-Q1JJEM-283CkQsyWnWZizkRRH0.roa (hash: pMkrNzbMgj6JidKdCAH0olpZAepxai3+rIJ34FZ4TEQ=) 2: d2ijHlyKWogiWYmhuu9KOBM4YBo.crl (hash: oMRKbPPBzQ0MiWNGxyRotCr/uJRN7SH8rPSP+GXfhQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:bd:65:42:c5:0f:ac:b0:54:0a:99:53:ac:bf:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a Validity Not Before: Dec 6 05:00:50 2025 GMT Not After : Dec 7 05:00:50 2025 GMT Subject: CN=75dd885172460945d8bb230d5cc957ba536b9097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a2:d6:a2:f0:af:88:f4:c0:89:bf:a5:0f:14: 12:31:81:27:de:24:b7:0a:64:71:ae:d9:8a:60:cd: c4:e5:aa:79:e8:61:aa:8e:c1:34:52:e1:09:7d:ef: 96:41:7b:cd:1d:8e:1d:0a:01:de:82:65:c6:ef:9e: 32:21:e7:c7:0b:de:2a:58:f9:fa:97:8a:a0:11:c1: 58:d7:77:1e:e3:31:c8:1f:79:2c:ee:94:fb:24:64: c6:52:38:ef:9a:6d:b7:e1:41:28:5f:74:35:18:82: 2c:14:34:7a:75:d4:af:33:9e:8d:72:e8:bf:85:d6: 43:72:ba:40:c7:be:39:94:0a:f4:a1:36:69:ea:b0: 0f:a8:94:9e:e2:18:eb:6a:57:bd:be:cd:ca:24:22: 2b:7a:e7:1c:6f:2b:a7:dc:93:0f:81:61:2f:7f:1f: c1:62:e4:29:99:6b:87:33:b2:33:e5:4a:ef:2e:79: 33:bb:e7:ec:e7:db:b7:b2:51:92:d6:2e:08:da:9b: 60:92:d9:94:b2:e9:dc:56:69:32:64:22:af:de:99: 51:f4:60:75:f2:86:99:c8:ef:c8:55:c1:2e:f7:e0: 9b:4c:93:7e:e8:a1:c0:84:70:d0:6c:5c:8e:1e:f8: f6:d2:37:b9:c8:4d:a9:9d:69:13:ac:b8:07:e0:41: b7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DD:88:51:72:46:09:45:D8:BB:23:0D:5C:C9:57:BA:53:6B:90:97 X509v3 Authority Key Identifier: keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:06:a8:24:21:78:30:c0:ce:d7:19:c6:91:dd:19:cd:48:45: 93:6d:3a:a9:9d:20:99:df:f1:96:c6:ed:73:e3:2c:1d:8a:c2: 68:b9:7f:87:59:e3:59:51:c3:39:a1:c2:7e:5d:26:e1:45:4d: f0:f7:93:52:e9:35:b6:c4:8a:37:0a:30:9d:c9:e1:dc:7e:f0: f3:aa:70:2b:d2:b3:35:a4:6f:48:f1:d2:4a:2c:6c:0f:01:e1: 9f:b0:fc:82:5c:7d:71:1d:e7:18:80:8d:fd:98:3d:1e:91:ae: 11:18:1a:75:ef:b1:67:7a:5d:f0:58:20:d2:30:77:86:3f:f5: 09:fc:ec:c5:be:ee:3a:7f:f3:2a:98:d4:1f:60:e3:72:e9:5c: ac:16:f6:83:fc:ad:f4:c7:3c:a8:b9:80:11:a0:a4:41:27:ed: d8:05:d7:a3:2c:d6:ca:6c:6b:8c:98:37:e1:69:95:a9:dd:e7: 2c:38:db:e6:20:88:32:3a:2c:38:d6:ce:31:ac:0f:83:a1:91: a1:5f:c7:68:b3:3c:74:64:e8:db:71:7f:20:7f:a0:cb:fb:d4: 8f:a7:c2:d4:86:52:f3:6b:f1:5c:d9:cc:b3:91:ee:79:43:b7: b5:af:55:b7:f6:7b:5f:bf:11:2a:5f:29:77:62:34:af:55:79: eb:83:3e:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCL1lQsUPrLBUCplTrL8HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NjhhMzFlNWM4YTVhODgyMjU5ODlhMWJhZWY0YTM4MTMz ODYwMWEwHhcNMjUxMjA2MDUwMDUwWhcNMjUxMjA3MDUwMDUwWjAzMTEwLwYDVQQD Eyg3NWRkODg1MTcyNDYwOTQ1ZDhiYjIzMGQ1Y2M5NTdiYTUzNmI5MDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqLWovCviPTAib+lDxQSMYEn3iS3 CmRxrtmKYM3E5ap56GGqjsE0UuEJfe+WQXvNHY4dCgHegmXG754yIefHC94qWPn6 l4qgEcFY13ce4zHIH3ks7pT7JGTGUjjvmm234UEoX3Q1GIIsFDR6ddSvM56Ncui/ hdZDcrpAx745lAr0oTZp6rAPqJSe4hjrale9vs3KJCIreuccbyun3JMPgWEvfx/B YuQpmWuHM7Iz5UrvLnkzu+fs59u3slGS1i4I2ptgktmUsuncVmkyZCKv3plR9GB1 8oaZyO/IVcEu9+CbTJN+6KHAhHDQbFyOHvj20je5yE2pnWkTrLgH4EG3jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXdiFFyRglF2LsjDVzJV7pTa5CXMB8GA1UdIwQY MBaAFHdoox5cilqIIlmJobrvSjgTOGAaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9lMzA1MGUtOTk5NC00Yjk2LWJjNzkt NzY2ZWFkN2U2NTEzLzEvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9lMzA1MGUtOTk5NC00Yjk2LWJjNzktNzY2ZWFkN2U2NTEz LzEvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwaoJCF4 MMDO1xnGkd0ZzUhFk206qZ0gmd/xlsbtc+MsHYrCaLl/h1njWVHDOaHCfl0m4UVN 8PeTUuk1tsSKNwowncnh3H7w86pwK9KzNaRvSPHSSixsDwHhn7D8glx9cR3nGICN /Zg9HpGuERgade+xZ3pd8Fgg0jB3hj/1Cfzsxb7uOn/zKpjUH2DjculcrBb2g/yt 9Mc8qLmAEaCkQSft2AXXoyzWymxrjJg34WmVqd3nLDjb5iCIMjosONbOMawPg6GR oV/HaLM8dGTo23F/IH+gy/vUj6fC1IZS82vxXNnMs5HueUO3ta9Vt/Z7X78RKl8p d2I0r1V564M+DQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:33 2025 by rpki-client