This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft File: dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft (raw, json) Hash identifier: xQNhtcL5cLH0HVeA7UDww4EgAMO4giQCPCQP+q4X4yU= Subject key identifier: 55:D9:0A:B2:24:73:29:9B:E2:2D:13:64:4A:88:6E:EA:D5:84:82:D1 Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Certificate serial: 019AF208C9474CA3C860609B4A65E5664E5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft Manifest number: 14D4 Signing time: Sat 06 Dec 2025 05:00:53 +0000 Manifest this update: Sat 06 Dec 2025 05:00:53 +0000 Manifest next update: Sun 07 Dec 2025 05:00:53 +0000 Files and hashes: 1: 3CaVGaLlRCBtJGBXfSGA7zW-rCs.roa (hash: /HyApflaldYM3wui8EYCuzUIG18+LCBycHK+Nr4v5s8=) 2: DK3tbQCBnJzEUSphxlbPexSxuSc.roa (hash: oy+VYg7xPVfsl+GWes1fmQYw3lo7t6n2do65fz6s9kA=) 3: F3KiiuTmtSL0XadHjHoQhTxAjH4.roa (hash: DWttmKkJnsIWb4tK0mLgOer/tZtQK2/fxxZHdJXXFak=) 4: F3n7HQ_-5hfLUMnSJPT42-5gS1s.roa (hash: V9Afb9v9TKReNuPLsv7d0FzqJjRsqmOIEMHbm43eIR4=) 5: M8l7pbK1m9EtbYQB0XFpZb7IbwY.roa (hash: eslpNhlfUyI1j7Yq81Ny5UVDGoF4QOI7V1IgSfchCsk=) 6: OzNkZE0A4KGqWopF7O0_V6_HHEY.roa (hash: b47j+LkzmnAZlUl5ybz1R4hMbe7uAMS3B95OiKd0FIg=) 7: _urUnPm3dxe0dhHO4I67DMxNM8w.roa (hash: peMugiexGfIHSWdQB0rJ+olLWcWf0//IWy/3iCQCuZI=) 8: dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl (hash: lRTDcVeC2xb4fiGA7NJbwVIr9V0P359LIM4rQiZfX80=) 9: jz_nLNjclPhHfjX0vuLb_wLkJFk.roa (hash: ejCaTzxTuDUF4epGs5iKALLv+G7+zeIf8Gj3NXfSijY=) 10: kSpuRGxO_iNcJfkapdieZEQ9Gzw.roa (hash: 91LnZ3BDnBwvzNsiz95IDFu3DO+o+HcnWci0jcIsOmg=) 11: qfhmkc_HwXg7A2m85zz16LT9pVg.roa (hash: SIG/zyJi8NhJ6/P3vG7Ibh4wMdDH8A5hhpK9FvR6ers=) 12: xwhue_TN7n4kY_DklaO9chrfZ6U.roa (hash: tLx491YNuJLEVmsUb0prbwPGwP/xjTFCwH/JtUI48qY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c9:47:4c:a3:c8:60:60:9b:4a:65:e5:66:4e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Validity Not Before: Dec 6 05:00:53 2025 GMT Not After : Dec 7 05:00:53 2025 GMT Subject: CN=55d90ab22473299be22d13644a886eead58482d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:af:db:96:00:36:41:01:22:c9:e7:2e:5a:bb: 5e:32:de:05:cb:08:f7:91:51:30:9f:ee:e8:49:fa: 31:96:23:c0:0e:04:89:0e:11:3c:34:1d:d3:82:45: 33:bc:e8:54:f8:65:5a:2d:d0:72:7b:bf:2e:86:d8: 1a:d3:9e:9c:a3:0b:83:6e:ab:5e:5a:1a:a1:a0:60: 6e:ad:42:ed:7d:2e:3a:41:23:39:b0:0c:79:dc:4a: 8b:89:f5:d2:52:cd:9e:f8:c5:6c:ce:60:22:61:59: 82:d4:e8:76:53:91:2c:bd:6a:6f:43:a6:cb:df:00: 8f:d2:bc:7f:b6:de:e1:c1:b3:d7:2d:68:6b:c0:d5: 76:43:c9:8d:63:b4:15:ab:60:ec:b6:ba:5a:bf:90: 79:46:6e:05:2a:78:2f:15:1c:69:f2:71:fe:18:88: f3:3a:89:71:44:c1:cc:b1:03:4f:9d:80:55:a5:35: 76:83:c2:68:f7:02:14:cc:5a:73:67:fb:c4:38:e4: 27:98:89:f2:1f:89:06:67:cd:fb:7e:b7:c8:9a:8b: 91:81:27:8a:18:f2:bb:80:e3:45:09:46:16:c1:df: 85:63:03:f3:08:6f:3a:76:c7:d7:1c:ae:94:00:b4: 50:28:68:04:e4:f7:d4:7b:c1:e3:72:55:45:53:67: b3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D9:0A:B2:24:73:29:9B:E2:2D:13:64:4A:88:6E:EA:D5:84:82:D1 X509v3 Authority Key Identifier: keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:66:98:02:7f:67:7f:78:12:12:63:3f:24:07:14:91:fb:a3: 52:d1:bf:c9:66:19:bd:93:ee:c7:74:de:c0:e1:59:75:1f:f0: 31:28:3e:86:4b:bc:d6:13:ad:5e:d6:5f:2b:49:95:61:a1:9f: 54:57:56:b9:f2:5a:6b:d7:ae:22:c4:0d:de:47:71:ad:43:e6: 06:6c:7b:25:e5:42:c4:ce:1e:62:b3:40:b1:b7:81:71:a5:91: 0c:47:bf:a5:77:09:9c:09:69:91:50:d5:e2:19:bf:f5:65:f0: aa:95:52:2f:c5:66:12:22:18:74:3e:bf:e5:eb:7f:09:77:2b: b0:96:bc:ad:f3:d8:d4:c7:e3:e9:b2:0b:df:50:ac:78:72:cb: 10:33:68:e6:c5:c1:42:c2:57:95:7d:f2:d2:d7:7b:25:56:3d: ff:16:f8:71:83:2d:63:95:ff:61:e4:a5:a3:9c:ce:49:5f:81: 35:bc:5b:b5:2c:2f:93:62:ea:40:c9:50:05:a0:60:33:17:6b: 57:a2:5a:44:da:3a:f1:24:37:cf:c3:51:10:93:28:51:95:32: d2:d7:1a:7a:12:41:c8:28:e4:ea:13:65:6e:df:47:24:ea:a6: f6:c6:62:f7:17:9a:23:0a:5e:e3:db:1a:d1:6d:c0:44:67:8a: f9:20:0d:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMlHTKPIYGCbSmXlZk5bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1 ZmIwYjUwHhcNMjUxMjA2MDUwMDUzWhcNMjUxMjA3MDUwMDUzWjAzMTEwLwYDVQQD Eyg1NWQ5MGFiMjI0NzMyOTliZTIyZDEzNjQ0YTg4NmVlYWQ1ODQ4MmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq/blgA2QQEiyecuWrteMt4Fywj3 kVEwn+7oSfoxliPADgSJDhE8NB3TgkUzvOhU+GVaLdBye78uhtga056cowuDbqte WhqhoGBurULtfS46QSM5sAx53EqLifXSUs2e+MVszmAiYVmC1Oh2U5EsvWpvQ6bL 3wCP0rx/tt7hwbPXLWhrwNV2Q8mNY7QVq2Dstrpav5B5Rm4FKngvFRxp8nH+GIjz OolxRMHMsQNPnYBVpTV2g8Jo9wIUzFpzZ/vEOOQnmInyH4kGZ837frfImouRgSeK GPK7gONFCUYWwd+FYwPzCG86dsfXHK6UALRQKGgE5PfUe8HjclVFU2ezQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXZCrIkcymb4i0TZEqIburVhILRMB8GA1UdIwQY MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct NWUwZjRhYjgwOWJiLzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtmaYAn9n f3gSEmM/JAcUkfujUtG/yWYZvZPux3TewOFZdR/wMSg+hku81hOtXtZfK0mVYaGf VFdWufJaa9euIsQN3kdxrUPmBmx7JeVCxM4eYrNAsbeBcaWRDEe/pXcJnAlpkVDV 4hm/9WXwqpVSL8VmEiIYdD6/5et/CXcrsJa8rfPY1Mfj6bIL31CseHLLEDNo5sXB QsJXlX3y0td7JVY9/xb4cYMtY5X/YeSlo5zOSV+BNbxbtSwvk2LqQMlQBaBgMxdr V6JaRNo68SQ3z8NREJMoUZUy0tcaehJByCjk6hNlbt9HJOqm9sZi9xeaIwpe49sa 0W3ARGeK+SANsw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:13 2025 by rpki-client