This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft File: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft (raw, json) Hash identifier: O+Whi2SgiJrmW9WkT2603kAWHWcfOnJFUFfkW9Y5+QQ= Subject key identifier: FA:68:56:76:A8:06:33:CE:88:0C:6B:32:6A:F4:AA:3D:20:7F:D4:3F Authority key identifier: 76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA Certificate issuer: /CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa Certificate serial: 019AF20948CDD4269228B53F64ADDECD318F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft Manifest number: 06A9 Signing time: Sat 06 Dec 2025 05:01:25 +0000 Manifest this update: Sat 06 Dec 2025 05:01:25 +0000 Manifest next update: Sun 07 Dec 2025 05:01:25 +0000 Files and hashes: 1: bsvx6NPc5wE4z82KVeJlkoJxWms.roa (hash: 6rlBzLZqcg/z+eAbxCr25c2freBfaX3gVlYhMsk4Kok=) 2: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl (hash: lH9Fkxlr14dlEhsSucM1/CsLBjnEO9ikV5doobm9bWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:48:cd:d4:26:92:28:b5:3f:64:ad:de:cd:31:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa Validity Not Before: Dec 6 05:01:25 2025 GMT Not After : Dec 7 05:01:25 2025 GMT Subject: CN=fa685676a80633ce880c6b326af4aa3d207fd43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a1:91:71:14:c9:1b:e3:7b:05:8d:69:11:e9: f2:2c:4d:b2:92:02:ff:0b:c0:17:0b:69:9e:85:b1: 17:e0:1c:e9:95:1b:89:68:2a:42:52:9e:bb:03:10: 96:fd:92:d8:fa:db:8d:b3:1c:39:a7:88:4e:cf:1a: 7e:0d:48:80:01:c4:75:84:a4:b4:a8:ca:af:2f:8f: fe:fa:eb:9f:8b:86:b4:05:53:1c:c4:6d:26:07:42: 2f:58:20:e4:41:7f:37:b2:bd:83:af:51:21:d6:34: f7:39:d3:49:b2:c2:4a:57:42:8b:2d:27:29:1e:a8: 5a:e7:95:b8:1f:51:6b:85:15:5c:09:7e:21:a1:a1: 22:23:53:9c:58:14:2f:4f:25:66:41:03:9a:2d:4b: 5d:0b:8c:77:be:03:fd:54:4d:87:66:ad:3a:0f:5c: e7:71:f8:33:1a:2d:78:94:91:9b:44:2f:13:c7:ca: b6:43:5b:c6:5e:da:81:c3:df:19:0f:c1:ba:2c:b6: 0c:a1:6d:a2:36:22:da:be:b2:7b:03:b5:87:02:49: d8:4f:5c:eb:8a:46:b4:6e:69:d4:9c:3b:39:f5:01: 1f:ab:a2:00:1e:e0:dc:51:92:04:c9:91:93:99:df: c4:22:f2:28:10:3d:aa:29:61:03:e6:dc:77:da:47: f0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:68:56:76:A8:06:33:CE:88:0C:6B:32:6A:F4:AA:3D:20:7F:D4:3F X509v3 Authority Key Identifier: keyid:76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:6c:4c:e3:cf:c3:88:8d:99:37:96:d1:54:6f:18:18:94:a7: 54:f2:9f:a4:b2:af:9d:ab:82:c6:f0:ec:31:36:5d:80:4d:19: 40:ee:d8:b1:b7:53:15:9d:37:bf:85:19:1a:a9:f1:4b:fc:b8: bd:0d:23:10:3a:1b:d2:b4:65:96:aa:f7:7e:fc:36:ec:58:2f: 3e:2d:9d:1b:d5:0a:b2:59:f5:30:dd:30:05:19:21:a2:6f:51: c1:1c:b2:57:5f:8b:58:dd:66:46:a0:c0:63:ee:65:72:ab:1e: 23:aa:b5:a2:32:9a:5c:31:a9:13:fb:70:eb:67:d0:43:87:b7: d0:a6:c6:9b:10:39:42:7c:d9:13:97:b2:33:7d:78:50:f1:ee: 7d:9c:ae:22:44:1b:f7:be:a2:9c:29:d0:68:dc:a6:58:80:a7: 17:a3:af:53:59:13:d8:2c:92:0d:ef:6d:ed:16:22:85:49:62: a4:ad:82:6c:6a:4d:43:5f:b7:17:6b:2a:8d:76:46:aa:55:13: 13:b9:94:60:10:55:1f:b3:46:00:b9:8e:ed:32:51:19:33:4f: b8:e7:51:96:ef:d6:36:82:4f:66:d4:a4:39:fb:b9:d6:85:98: 74:78:ef:78:98:d8:39:94:e0:40:2e:36:7e:88:39:57:67:1b: 4a:fb:12:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUjN1CaSKLU/ZK3ezTGPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NTA2MzRjNGU0MTc3YjkxODQ0YjZkYzBhZWI3MzI5OGQ4 YjQzZmEwHhcNMjUxMjA2MDUwMTI1WhcNMjUxMjA3MDUwMTI1WjAzMTEwLwYDVQQD EyhmYTY4NTY3NmE4MDYzM2NlODgwYzZiMzI2YWY0YWEzZDIwN2ZkNDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqGRcRTJG+N7BY1pEenyLE2ykgL/ C8AXC2mehbEX4BzplRuJaCpCUp67AxCW/ZLY+tuNsxw5p4hOzxp+DUiAAcR1hKS0 qMqvL4/++uufi4a0BVMcxG0mB0IvWCDkQX83sr2Dr1Eh1jT3OdNJssJKV0KLLScp Hqha55W4H1FrhRVcCX4hoaEiI1OcWBQvTyVmQQOaLUtdC4x3vgP9VE2HZq06D1zn cfgzGi14lJGbRC8Tx8q2Q1vGXtqBw98ZD8G6LLYMoW2iNiLavrJ7A7WHAknYT1zr ika0bmnUnDs59QEfq6IAHuDcUZIEyZGTmd/EIvIoED2qKWED5tx32kfwkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpoVnaoBjPOiAxrMmr0qj0gf9Q/MB8GA1UdIwQY MBaAFHZQY0xOQXe5GES23ArrcymNi0P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGxCalRFNUJkN2tZUkxiY0N1dHpLWTJMUV9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hNGY2ZTQtMTJlNy00MjFmLWFhMzEt NDExNWJkNTA4Mjg0LzEvZGxCalRFNUJkN2tZUkxiY0N1dHpLWTJMUV9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9hNGY2ZTQtMTJlNy00MjFmLWFhMzEtNDExNWJkNTA4Mjg0 LzEvZGxCalRFNUJkN2tZUkxiY0N1dHpLWTJMUV9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmxM48/D iI2ZN5bRVG8YGJSnVPKfpLKvnauCxvDsMTZdgE0ZQO7YsbdTFZ03v4UZGqnxS/y4 vQ0jEDob0rRllqr3fvw27FgvPi2dG9UKsln1MN0wBRkhom9RwRyyV1+LWN1mRqDA Y+5lcqseI6q1ojKaXDGpE/tw62fQQ4e30KbGmxA5QnzZE5eyM314UPHufZyuIkQb 976inCnQaNymWICnF6OvU1kT2CySDe9t7RYihUlipK2CbGpNQ1+3F2sqjXZGqlUT E7mUYBBVH7NGALmO7TJRGTNPuOdRlu/WNoJPZtSkOfu51oWYdHjveJjYOZTgQC42 fog5V2cbSvsSXA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:05 2025 by rpki-client