This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft File: D5uga20iZz9_ez0PiJ9HIEQbbgw.mft (raw, json) Hash identifier: lQxSulwkOcmbRs3PWy3zrkIVT+MHlBD11enWO5GObSc= Subject key identifier: 04:C9:B3:2F:6E:1A:F9:5B:21:F2:64:9A:6D:8E:11:A9:63:C5:42:10 Authority key identifier: 0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C Certificate issuer: /CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c Certificate serial: 019AF577D4E8D0210FE11D27352D1AACBDB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft Manifest number: 0714 Signing time: Sat 06 Dec 2025 21:01:02 +0000 Manifest this update: Sat 06 Dec 2025 21:01:02 +0000 Manifest next update: Sun 07 Dec 2025 21:01:02 +0000 Files and hashes: 1: D5uga20iZz9_ez0PiJ9HIEQbbgw.crl (hash: LWrK4dwP12CJ5wFhxlnwD2qzW4oRtFzBh+0/aYOhAyc=) 2: dpEQqFiEzcBminPXKwfV-PABopw.roa (hash: aNr5tdVzzBcZX6IXpoVPaBnNNk42qKTnrWG6P7E7Joo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:d4:e8:d0:21:0f:e1:1d:27:35:2d:1a:ac:bd:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c Validity Not Before: Dec 6 21:01:02 2025 GMT Not After : Dec 7 21:01:02 2025 GMT Subject: CN=04c9b32f6e1af95b21f2649a6d8e11a963c54210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ef:46:e3:c7:2a:70:95:c9:76:26:c8:7a:15: b8:7b:d4:d7:4c:da:2c:ca:88:14:20:a7:c4:72:f2: 72:c8:a0:fd:5e:75:28:ca:2f:65:6a:be:f1:9f:2a: c8:94:64:d5:64:52:a4:00:7f:ad:bf:7e:b7:b8:2b: 5a:dc:99:b9:32:7f:67:9b:79:6a:42:29:93:47:b9: 63:dd:c4:2a:20:2e:8f:bf:01:ea:71:c2:cd:b9:3a: 76:32:fc:44:ad:38:a5:a6:13:46:cc:1f:b5:47:90: a4:85:cb:b0:1e:8d:be:ec:2a:f5:56:57:8e:86:43: 3c:0d:48:09:6c:3a:a2:77:ac:0f:69:66:09:58:75: e8:56:74:d7:ef:45:0d:7c:6d:8d:22:4c:cd:b1:d9: a3:d8:1c:fe:70:41:89:c0:c2:83:21:c8:9b:5d:c4: f8:b7:17:02:ec:27:8f:32:99:30:30:f1:0e:90:08: 4f:e4:9a:d3:0a:fe:52:53:62:b9:8f:f5:ef:27:4b: b8:b8:8a:61:35:8f:7f:bd:e1:96:ae:02:74:2c:51: 38:4c:d3:8a:ac:f5:c1:ca:80:d8:77:93:22:19:ee: 1a:d7:18:fd:ad:cf:40:bc:f5:60:6b:0c:ac:54:c4: 76:c0:b9:e1:9c:26:bf:ef:c9:cf:7c:1f:06:97:53: 49:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C9:B3:2F:6E:1A:F9:5B:21:F2:64:9A:6D:8E:11:A9:63:C5:42:10 X509v3 Authority Key Identifier: keyid:0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:8c:ce:5e:57:e5:8b:c4:15:ac:42:da:e7:e8:ee:da:60:ac: c5:8c:df:6f:d1:74:e3:e7:dd:6e:f3:2e:35:d0:9c:25:fd:24: 9c:d9:1f:d2:8a:b9:a5:a2:85:54:d5:4c:1e:75:63:71:d4:7b: 72:79:b4:b8:e4:5a:b5:28:07:20:43:03:a2:d0:44:57:14:85: 09:c9:f9:7d:14:55:31:c3:d6:b1:25:4e:07:d0:17:90:da:33: 31:39:90:59:29:38:4b:80:b8:1b:cc:71:38:54:86:94:2b:5a: 51:03:72:e4:0a:52:2d:8d:65:04:8f:11:2f:2a:97:8f:9e:a3: 9c:7b:a9:57:e2:51:2f:a4:4c:7f:37:c2:94:1e:b1:40:13:c4: 3b:3c:c8:78:eb:58:b0:df:b1:96:b6:42:f0:63:60:4d:ce:8b: 33:eb:c9:e7:38:15:4f:9b:3f:bc:91:79:99:12:fe:e5:fe:b4: cd:de:d2:fd:e0:09:47:29:d7:e3:76:d3:d4:49:0d:99:d3:28: 6b:55:0c:8a:a2:f8:c3:53:37:14:1f:96:cd:59:a6:8d:57:8b: 49:bb:d0:3b:9d:0b:6e:71:3d:ce:87:3e:ce:0a:14:ba:7b:f2: d0:9a:af:e4:8a:fe:99:80:95:fb:71:ec:90:47:32:a5:7c:b3: 8e:ea:1d:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d9To0CEP4R0nNS0arL22MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOWJhMDZiNmQyMjY3M2Y3ZjdiM2QwZjg4OWY0NzIwNDQx YjZlMGMwHhcNMjUxMjA2MjEwMTAyWhcNMjUxMjA3MjEwMTAyWjAzMTEwLwYDVQQD EygwNGM5YjMyZjZlMWFmOTViMjFmMjY0OWE2ZDhlMTFhOTYzYzU0MjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO9G48cqcJXJdibIehW4e9TXTNos yogUIKfEcvJyyKD9XnUoyi9lar7xnyrIlGTVZFKkAH+tv363uCta3Jm5Mn9nm3lq QimTR7lj3cQqIC6PvwHqccLNuTp2MvxErTilphNGzB+1R5CkhcuwHo2+7Cr1VleO hkM8DUgJbDqid6wPaWYJWHXoVnTX70UNfG2NIkzNsdmj2Bz+cEGJwMKDIcibXcT4 txcC7CePMpkwMPEOkAhP5JrTCv5SU2K5j/XvJ0u4uIphNY9/veGWrgJ0LFE4TNOK rPXByoDYd5MiGe4a1xj9rc9AvPVgawysVMR2wLnhnCa/78nPfB8Gl1NJ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATJsy9uGvlbIfJkmm2OEaljxUIQMB8GA1UdIwQY MBaAFA+boGttImc/f3s9D4ifRyBEG24MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zN2M4ZmYtMTg3Zi00ZDkxLWI0ZDYt MTM2NjU2YTNlZGU3LzEvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zN2M4ZmYtMTg3Zi00ZDkxLWI0ZDYtMTM2NjU2YTNlZGU3 LzEvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYzOXlfl i8QVrELa5+ju2mCsxYzfb9F04+fdbvMuNdCcJf0knNkf0oq5paKFVNVMHnVjcdR7 cnm0uORatSgHIEMDotBEVxSFCcn5fRRVMcPWsSVOB9AXkNozMTmQWSk4S4C4G8xx OFSGlCtaUQNy5ApSLY1lBI8RLyqXj56jnHupV+JRL6RMfzfClB6xQBPEOzzIeOtY sN+xlrZC8GNgTc6LM+vJ5zgVT5s/vJF5mRL+5f60zd7S/eAJRynX43bT1EkNmdMo a1UMiqL4w1M3FB+WzVmmjVeLSbvQO50LbnE9zoc+zgoUunvy0Jqv5Ir+mYCV+3Hs kEcypXyzjuod2A== -----END CERTIFICATE-----Generated at Sun Dec 7 00:17:21 2025 by rpki-client