This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft File: ud8VbuGLaVjUMGtjEbSghnY-_2I.mft (raw, json) Hash identifier: lQ2h+n7crcNHHAoLxB3fYKUWtSkngYvCg0ajpBpDuMY= Subject key identifier: 5F:E1:93:19:52:E9:FE:20:21:93:EC:99:5B:5B:00:A7:45:56:64:E5 Authority key identifier: B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62 Certificate issuer: /CN=b9df156ee18b6958d4306b6311b4a086763eff62 Certificate serial: 019AF12D6579AEC1761F85D0998A8B4265B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft Manifest number: 136E Signing time: Sat 06 Dec 2025 01:01:15 +0000 Manifest this update: Sat 06 Dec 2025 01:01:15 +0000 Manifest next update: Sun 07 Dec 2025 01:01:15 +0000 Files and hashes: 1: Rz_g2oWyKG-Vw1QEp2fRKBiV6zs.roa (hash: F5azyHcNhL5q+y/WKX+C217rx2nLkYCoYjrcB90ZhMg=) 2: dO0iAzf59ELGy5YFAfLCImx6CoY.roa (hash: khd3I95oYPZ7Oe9vWseJ5vBlqZ90z8OH3SOmldjOK5o=) 3: ud8VbuGLaVjUMGtjEbSghnY-_2I.crl (hash: ANx86M/yXAO2v744O3DRLnbX2uh5rPpja72J+jZWmgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:65:79:ae:c1:76:1f:85:d0:99:8a:8b:42:65:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9df156ee18b6958d4306b6311b4a086763eff62 Validity Not Before: Dec 6 01:01:15 2025 GMT Not After : Dec 7 01:01:15 2025 GMT Subject: CN=5fe1931952e9fe202193ec995b5b00a7455664e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3f:24:02:fc:69:be:33:b4:73:6e:e3:9d:a3: 2b:e2:82:d0:21:fa:1e:a6:a5:88:f4:7a:68:1f:76: d5:39:ed:f7:a8:8a:33:7c:6f:ea:a9:6d:85:37:96: 58:27:cc:e9:b4:4e:32:a0:c8:8c:f0:03:33:26:ba: 3e:db:12:42:69:4f:fd:0c:73:dd:d2:ef:41:1d:10: 8c:7e:fa:65:c4:bf:6b:f9:6d:11:66:5c:3e:63:fe: 08:ac:2c:ce:03:10:b6:20:81:21:45:7b:fa:18:6a: fa:f1:64:39:d9:c0:91:9e:80:e6:df:16:f1:df:d8: 37:1a:c3:a4:1d:0a:d3:db:45:ed:33:92:60:c0:24: 64:06:47:9c:70:c9:2d:8d:8a:0a:1a:4f:9d:77:d9: 80:d2:b0:a9:e0:52:57:15:83:3d:e6:00:06:fc:24: a5:70:00:6d:95:7b:34:0d:b1:8a:6e:b8:02:d2:99: 39:b4:05:72:d6:f7:07:2f:2b:24:e4:49:18:c5:9b: 50:91:91:d6:ec:4d:a3:7a:e7:3e:65:87:c9:34:e5: 69:71:7e:28:f4:61:be:04:26:9a:5e:70:ac:84:cb: f5:34:cb:dc:c7:a2:f0:d8:14:a4:6e:58:a3:ef:1b: 1c:15:ee:64:b1:4a:cc:79:0a:af:30:4b:1f:00:f2: 13:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E1:93:19:52:E9:FE:20:21:93:EC:99:5B:5B:00:A7:45:56:64:E5 X509v3 Authority Key Identifier: keyid:B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:dd:df:24:9a:15:f2:14:d3:11:5b:a9:1c:1d:ba:7c:ed:67: ac:2a:3a:b8:7c:08:2f:0e:df:25:ce:c3:f2:18:32:50:c8:78: f2:c4:37:26:2f:eb:8f:d0:87:fc:cd:51:c0:3e:e8:ac:c2:f5: b6:cc:d4:ab:15:ed:14:2d:e1:8f:41:b1:15:f4:55:eb:cb:dc: 31:40:6c:3a:09:be:36:4a:4a:7c:6c:bc:7f:21:d7:ae:05:56: 64:1f:43:b5:9c:8c:95:5f:9e:86:0c:e9:c0:6e:62:35:24:81: fb:42:85:8b:20:d7:92:31:69:37:19:78:d5:49:ed:b6:d6:06: 08:c1:1f:ee:4b:99:a5:40:d8:b6:cd:5d:9b:bb:cd:38:90:1f: b0:63:d5:b9:70:4b:40:cb:6c:8b:53:a4:ca:6a:a7:46:06:bf: c1:0b:78:e2:4c:c1:9f:ab:9a:1f:d0:94:0a:66:9c:b2:a2:94: 78:64:0f:62:e2:55:98:69:3b:7d:19:89:b3:45:8b:67:1d:1a: 63:75:6b:dd:0f:9a:76:32:a0:4c:6f:f8:d0:88:f0:31:89:08: cf:8a:e8:91:ea:b2:b5:27:bb:9b:b5:5a:3b:01:31:70:04:c3: 88:84:f3:15:23:27:b1:fa:2f:b8:33:76:e9:d1:ea:2a:d4:3e: e8:4b:b9:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWV5rsF2H4XQmYqLQmW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZGYxNTZlZTE4YjY5NThkNDMwNmI2MzExYjRhMDg2NzYz ZWZmNjIwHhcNMjUxMjA2MDEwMTE1WhcNMjUxMjA3MDEwMTE1WjAzMTEwLwYDVQQD Eyg1ZmUxOTMxOTUyZTlmZTIwMjE5M2VjOTk1YjViMDBhNzQ1NTY2NGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD8kAvxpvjO0c27jnaMr4oLQIfoe pqWI9HpoH3bVOe33qIozfG/qqW2FN5ZYJ8zptE4yoMiM8AMzJro+2xJCaU/9DHPd 0u9BHRCMfvplxL9r+W0RZlw+Y/4IrCzOAxC2IIEhRXv6GGr68WQ52cCRnoDm3xbx 39g3GsOkHQrT20XtM5JgwCRkBkeccMktjYoKGk+dd9mA0rCp4FJXFYM95gAG/CSl cABtlXs0DbGKbrgC0pk5tAVy1vcHLysk5EkYxZtQkZHW7E2jeuc+ZYfJNOVpcX4o 9GG+BCaaXnCshMv1NMvcx6Lw2BSkblij7xscFe5ksUrMeQqvMEsfAPITLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/hkxlS6f4gIZPsmVtbAKdFVmTlMB8GA1UdIwQY MBaAFLnfFW7hi2lY1DBrYxG0oIZ2Pv9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWQ4VmJ1R0xhVmpVTUd0akViU2doblktXzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9kNjQ2MWYtMTdlMy00OTg2LWE1ZjYt NzJhNGIzYTliYjQ0LzEvdWQ4VmJ1R0xhVmpVTUd0akViU2doblktXzJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9kNjQ2MWYtMTdlMy00OTg2LWE1ZjYtNzJhNGIzYTliYjQ0 LzEvdWQ4VmJ1R0xhVmpVTUd0akViU2doblktXzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY93fJJoV 8hTTEVupHB26fO1nrCo6uHwILw7fJc7D8hgyUMh48sQ3Ji/rj9CH/M1RwD7orML1 tszUqxXtFC3hj0GxFfRV68vcMUBsOgm+NkpKfGy8fyHXrgVWZB9DtZyMlV+ehgzp wG5iNSSB+0KFiyDXkjFpNxl41UntttYGCMEf7kuZpUDYts1dm7vNOJAfsGPVuXBL QMtsi1OkymqnRga/wQt44kzBn6uaH9CUCmacsqKUeGQPYuJVmGk7fRmJs0WLZx0a Y3Vr3Q+adjKgTG/40IjwMYkIz4rokeqytSe7m7VaOwExcATDiITzFSMnsfovuDN2 6dHqKtQ+6Eu56A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:05:15 2025 by rpki-client