This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft File: druWg5UW9vs1BsYgZNY9YoeaUnc.mft (raw, json) Hash identifier: 1rrCIz85LQ7qtP/HiiPORbKiSjYWQ1C4dZhD/H/VzGI= Subject key identifier: 51:F7:07:7D:DE:33:AE:70:2F:B2:43:BB:5E:0F:A8:56:F0:5E:6C:47 Authority key identifier: 76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77 Certificate issuer: /CN=76bb96839516f6fb3506c62064d63d62879a5277 Certificate serial: 019AF164161BE77093CC2D3FC17CCF78B242 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft Manifest number: 1170 Signing time: Sat 06 Dec 2025 02:00:59 +0000 Manifest this update: Sat 06 Dec 2025 02:00:59 +0000 Manifest next update: Sun 07 Dec 2025 02:00:59 +0000 Files and hashes: 1: A0Dli097tMkIVnJa3m1bqPYzScQ.roa (hash: xNtn+JNQ7hliFuQK823llLTpPPrEWU/YIk1KW2YsDWg=) 2: druWg5UW9vs1BsYgZNY9YoeaUnc.crl (hash: t9Ist4E5ECG6gw3Bu8W96QClozMJbXWTrpXBNdElOp4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:16:1b:e7:70:93:cc:2d:3f:c1:7c:cf:78:b2:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76bb96839516f6fb3506c62064d63d62879a5277 Validity Not Before: Dec 6 02:00:59 2025 GMT Not After : Dec 7 02:00:59 2025 GMT Subject: CN=51f7077dde33ae702fb243bb5e0fa856f05e6c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:38:f6:8b:41:9f:b0:25:9a:f2:0e:d7:7a:31: a4:32:93:19:19:04:9b:73:9e:28:e2:13:62:c8:4c: 50:6e:16:82:c9:2a:92:64:95:d5:6a:cf:f8:f0:21: b3:97:c8:dc:48:b0:c3:d9:da:1e:ce:cc:46:31:cc: 75:f4:f2:ce:84:ce:47:76:5e:90:ed:42:37:ed:33: 9f:d1:f9:4b:25:c9:c0:c7:96:98:d4:68:b8:cb:2c: ea:37:42:1f:cd:b6:2d:64:c9:cf:8f:07:b7:05:6b: b7:b5:97:75:dd:6e:29:9f:50:10:2b:a7:c2:9e:c8: ec:ab:cc:81:44:27:c9:17:6a:07:5a:bf:83:ed:10: 9b:ec:e1:ba:8f:98:c3:35:81:61:0a:aa:01:3b:46: 14:0c:68:34:77:b9:58:db:59:8a:10:c0:1e:5d:68: 51:8e:9b:5d:2b:26:f1:7c:9c:d0:6e:36:bb:5c:51: e8:12:56:f6:39:68:36:63:8b:b0:3e:ba:a6:76:dc: 86:93:8c:dd:44:45:8d:5b:61:4b:d9:ba:24:ea:b1: 19:b8:13:38:9c:6b:8d:37:b1:f4:0f:08:eb:b5:c5: c6:71:ac:ea:13:c6:68:26:99:f4:b4:2c:7d:0a:d2: 14:9b:00:7f:a9:f7:25:09:cf:1b:9a:e1:fd:a6:70: 63:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F7:07:7D:DE:33:AE:70:2F:B2:43:BB:5E:0F:A8:56:F0:5E:6C:47 X509v3 Authority Key Identifier: keyid:76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:db:43:5e:c9:10:1e:0b:1b:7f:f2:68:e6:ea:9e:ba:cf:bf: 40:9b:fb:10:8d:ab:e7:19:01:7b:99:01:ca:af:e5:bd:06:9e: a8:be:3a:e3:1f:c8:b3:aa:c6:80:5f:28:52:25:65:6a:b8:11: 94:d7:af:a8:a9:2f:f6:c4:b8:af:e2:df:7b:60:c3:79:44:3e: 6b:dd:12:77:fb:eb:11:d6:8e:09:64:50:c9:83:d9:75:fc:e1: 1b:54:31:af:b6:7a:f5:dc:b4:b5:e2:20:f6:e5:4f:a3:c7:26: 02:0c:73:9b:4d:7e:05:66:a1:f1:50:2b:4b:cc:c3:15:8e:a2: 4d:1f:da:b3:6f:5a:4a:27:1a:27:5a:d6:ab:94:02:05:da:44: b3:3a:8f:ff:12:17:68:4f:23:03:8e:7d:ca:4b:a9:c6:38:15: 66:2f:a0:0c:f0:cc:01:ac:3e:05:01:74:52:a1:2b:ae:9e:a4: ff:43:43:8c:77:87:64:0b:cf:87:bb:be:80:dd:18:17:78:09: 93:2d:19:a3:99:b5:19:e8:12:0e:b1:2c:98:9f:34:0d:7b:6c: 77:ed:f4:c8:c2:8c:5e:ee:3e:c7:ef:5f:43:5f:7b:d9:d1:be: 1b:e2:69:79:98:cf:59:99:34:69:a6:f0:ba:25:25:8d:ec:a1: a9:99:88:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBYb53CTzC0/wXzPeLJCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YmI5NjgzOTUxNmY2ZmIzNTA2YzYyMDY0ZDYzZDYyODc5 YTUyNzcwHhcNMjUxMjA2MDIwMDU5WhcNMjUxMjA3MDIwMDU5WjAzMTEwLwYDVQQD Eyg1MWY3MDc3ZGRlMzNhZTcwMmZiMjQzYmI1ZTBmYTg1NmYwNWU2YzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTj2i0GfsCWa8g7XejGkMpMZGQSb c54o4hNiyExQbhaCySqSZJXVas/48CGzl8jcSLDD2doezsxGMcx19PLOhM5Hdl6Q 7UI37TOf0flLJcnAx5aY1Gi4yyzqN0IfzbYtZMnPjwe3BWu3tZd13W4pn1AQK6fC nsjsq8yBRCfJF2oHWr+D7RCb7OG6j5jDNYFhCqoBO0YUDGg0d7lY21mKEMAeXWhR jptdKybxfJzQbja7XFHoElb2OWg2Y4uwPrqmdtyGk4zdREWNW2FL2bok6rEZuBM4 nGuNN7H0DwjrtcXGcazqE8ZoJpn0tCx9CtIUmwB/qfclCc8bmuH9pnBj/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFH3B33eM65wL7JDu14PqFbwXmxHMB8GA1UdIwQY MBaAFHa7loOVFvb7NQbGIGTWPWKHmlJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNjZhMzUtZjZiMi00ZTNiLWE0M2Et MThlOGI5ODE0Njk1LzEvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lNjZhMzUtZjZiMi00ZTNiLWE0M2EtMThlOGI5ODE0Njk1 LzEvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9tDXskQ Hgsbf/Jo5uqeus+/QJv7EI2r5xkBe5kByq/lvQaeqL464x/Is6rGgF8oUiVlargR lNevqKkv9sS4r+Lfe2DDeUQ+a90Sd/vrEdaOCWRQyYPZdfzhG1Qxr7Z69dy0teIg 9uVPo8cmAgxzm01+BWah8VArS8zDFY6iTR/as29aSicaJ1rWq5QCBdpEszqP/xIX aE8jA459ykupxjgVZi+gDPDMAaw+BQF0UqErrp6k/0NDjHeHZAvPh7u+gN0YF3gJ ky0Zo5m1GegSDrEsmJ80DXtsd+30yMKMXu4+x+9fQ1972dG+G+JpeZjPWZk0aabw uiUljeyhqZmI5w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:22:08 2025 by rpki-client