This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft File: d5KQMR5unPpeUX-rsNlvqaccPaE.mft (raw, json) Hash identifier: Q6puB+WyEjJvDZKMWjeoPGhpKSWmvJ1xZIMzWA42s84= Subject key identifier: 01:99:36:BC:3C:EA:77:9D:D7:BA:7A:B5:A2:C1:BF:8B:5B:87:98:48 Authority key identifier: 77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1 Certificate issuer: /CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1 Certificate serial: 019AF0BEE65B09E99DC4F100E2C73B61873C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 23:00:33 +0000 Manifest this update: Fri 05 Dec 2025 23:00:33 +0000 Manifest next update: Sat 06 Dec 2025 23:00:33 +0000 Files and hashes: 1: LOkJgQnrVhTjIGglVDZP2nXIS3k.roa (hash: w0AA95RC5IbPZCqkTY536mw4aIKSxO5pRstC+7ehig8=) 2: d5KQMR5unPpeUX-rsNlvqaccPaE.crl (hash: 9aMtLiM2Je/LgGNwmMs0C2iAZFiYz9tJRQ8PWir3zx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.crl rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:e6:5b:09:e9:9d:c4:f1:00:e2:c7:3b:61:87:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1 Validity Not Before: Dec 5 23:00:33 2025 GMT Not After : Dec 6 23:00:33 2025 GMT Subject: CN=019936bc3cea779dd7ba7ab5a2c1bf8b5b879848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2e:42:93:8c:11:1f:b8:2a:d7:b6:3a:b6:8a: 3f:57:b3:0a:43:56:3d:ea:49:c1:35:3c:c6:22:43: 8a:ca:21:53:78:89:41:76:0a:8c:69:f0:9f:58:0b: 11:a0:7e:40:d8:98:7c:50:af:b7:bb:07:0e:45:74: 57:0d:25:5e:37:2d:3b:c6:c5:12:e9:d6:e8:65:82: b7:4d:5f:c2:25:66:64:91:80:50:a9:f1:3e:93:f7: 38:9f:38:4b:14:9f:3e:23:04:42:8b:c9:f1:03:eb: 3d:8e:85:f8:e2:cb:67:95:6a:95:12:a8:aa:30:a3: 46:c0:fe:93:83:3c:8f:1b:1f:e8:3e:b6:f8:a7:3b: c5:c4:c7:7c:3e:dd:f3:79:5d:a3:09:78:c5:2d:a8: dc:b9:97:04:21:fa:0c:72:45:cb:5e:c2:76:90:19: 6b:0a:e1:48:cd:fe:9a:1a:8a:d2:dd:99:51:88:42: cc:1a:07:3e:91:39:ba:b3:5c:dd:2e:97:bf:18:d1: 53:89:51:5a:3b:16:59:45:a6:23:fd:41:84:86:a5: 97:30:4e:a6:ed:9e:84:7b:61:f3:06:74:e9:34:06: b3:73:3f:32:a2:04:56:7b:59:ef:3e:62:a2:b6:1f: 46:35:21:9f:a0:f6:35:8a:82:42:04:83:0a:0c:f8: 5f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:99:36:BC:3C:EA:77:9D:D7:BA:7A:B5:A2:C1:BF:8B:5B:87:98:48 X509v3 Authority Key Identifier: keyid:77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:11:0d:8b:9f:ec:bc:0c:ee:79:4d:38:2f:44:38:65:4f:a9: 34:c4:73:82:8b:eb:40:94:62:8c:6d:1f:d9:4f:d4:fa:8b:2f: 41:51:34:62:45:aa:bb:b5:c3:b7:fb:8d:bc:a6:d5:8a:d4:2e: a9:be:a4:38:33:94:9e:6b:63:e5:a9:31:30:20:0b:40:4f:4a: ac:d3:55:3f:d3:a2:e4:ad:51:4b:1a:eb:93:cd:03:48:ce:e7: ba:4f:8d:5c:7d:7e:27:67:f9:79:89:d4:8f:e4:16:b8:31:b5: 27:37:b3:7e:85:37:70:7c:1d:33:a1:52:00:07:46:ae:0d:14: 8b:be:eb:04:1c:82:68:c3:55:e1:c9:f7:ea:11:96:2b:24:ed: 4e:e4:09:a5:ab:21:dc:12:fa:4f:f2:f7:f4:98:c1:56:e9:93: d6:d7:2d:5e:29:d7:50:ea:2c:78:97:c0:df:62:92:19:b8:55: 78:2b:8e:bf:38:ed:9e:3b:53:f3:58:25:28:ad:e0:68:52:e5: 1c:e9:1f:4d:de:6f:92:a8:13:50:8d:41:97:3a:1d:d9:ad:0c: d5:98:2a:43:96:05:11:03:2a:30:f1:8c:b6:88:8e:9f:d4:6d: 4a:71:f1:93:53:87:2b:dd:90:70:78:e1:a3:75:4d:a4:89:db: 94:ab:c1:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvuZbCemdxPEA4sc7YYc8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OTI5MDMxMWU2ZTljZmE1ZTUxN2ZhYmIwZDk2ZmE5YTcx YzNkYTEwHhcNMjUxMjA1MjMwMDMzWhcNMjUxMjA2MjMwMDMzWjAzMTEwLwYDVQQD EygwMTk5MzZiYzNjZWE3NzlkZDdiYTdhYjVhMmMxYmY4YjViODc5ODQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy5Ck4wRH7gq17Y6too/V7MKQ1Y9 6knBNTzGIkOKyiFTeIlBdgqMafCfWAsRoH5A2Jh8UK+3uwcORXRXDSVeNy07xsUS 6dboZYK3TV/CJWZkkYBQqfE+k/c4nzhLFJ8+IwRCi8nxA+s9joX44stnlWqVEqiq MKNGwP6TgzyPGx/oPrb4pzvFxMd8Pt3zeV2jCXjFLajcuZcEIfoMckXLXsJ2kBlr CuFIzf6aGorS3ZlRiELMGgc+kTm6s1zdLpe/GNFTiVFaOxZZRaYj/UGEhqWXME6m 7Z6Ee2HzBnTpNAazcz8yogRWe1nvPmKith9GNSGfoPY1ioJCBIMKDPhfdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGZNrw86ned17p6taLBv4tbh5hIMB8GA1UdIwQY MBaAFHeSkDEebpz6XlF/q7DZb6mnHD2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDVLUU1SNXVuUHBlVVgtcnNObHZxYWNjUGFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iOGUwM2UtYzM5OC00ZWVlLTg5Mzkt ZjkwOWQ3OWE0NGFkLzEvZDVLUU1SNXVuUHBlVVgtcnNObHZxYWNjUGFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9iOGUwM2UtYzM5OC00ZWVlLTg5MzktZjkwOWQ3OWE0NGFk LzEvZDVLUU1SNXVuUHBlVVgtcnNObHZxYWNjUGFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxENi5/s vAzueU04L0Q4ZU+pNMRzgovrQJRijG0f2U/U+osvQVE0YkWqu7XDt/uNvKbVitQu qb6kODOUnmtj5akxMCALQE9KrNNVP9Oi5K1RSxrrk80DSM7nuk+NXH1+J2f5eYnU j+QWuDG1JzezfoU3cHwdM6FSAAdGrg0Ui77rBByCaMNV4cn36hGWKyTtTuQJpash 3BL6T/L39JjBVumT1tctXinXUOoseJfA32KSGbhVeCuOvzjtnjtT81glKK3gaFLl HOkfTd5vkqgTUI1Blzod2a0M1ZgqQ5YFEQMqMPGMtoiOn9RtSnHxk1OHK92QcHjh o3VNpInblKvB1w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:08 2025 by rpki-client