This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft File: d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft (raw, json) Hash identifier: LzMj0rWnWuRCShzlQdkuBZeS6o53BgLO2PkpeGQA9vo= Subject key identifier: E9:DE:F7:8C:B2:55:BA:D7:A0:7D:9E:80:9B:09:54:68:E0:EB:C6:83 Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98 Certificate issuer: /CN=777c49d3f627335190e3c2ec3654e154cfd45398 Certificate serial: 019AF31C826CDC39ECDC149DC42D9AB3A408 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft Manifest number: 0E4B Signing time: Sat 06 Dec 2025 10:02:03 +0000 Manifest this update: Sat 06 Dec 2025 10:02:03 +0000 Manifest next update: Sun 07 Dec 2025 10:02:03 +0000 Files and hashes: 1: JS20272zzOd7lsvAhAy2fEVjeyI.roa (hash: cOcrvgmIxE66W+f+FGaVHK7zq1S4gdeOGb2xk9gX0lg=) 2: d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl (hash: 0qDjdn1ckplN+xWOuQxxsyrR83BQp1F3e+LNB5BRjr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:82:6c:dc:39:ec:dc:14:9d:c4:2d:9a:b3:a4:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398 Validity Not Before: Dec 6 10:02:03 2025 GMT Not After : Dec 7 10:02:03 2025 GMT Subject: CN=e9def78cb255bad7a07d9e809b095468e0ebc683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d8:14:56:bc:68:d5:db:b1:f5:f3:a1:42:01: 1c:07:91:6e:bb:f2:71:9e:bd:5e:81:67:7e:86:31: 9c:10:de:21:ea:74:7a:6f:70:25:f0:57:13:d7:51: 7f:a3:6a:45:0b:7f:f7:16:74:f4:3d:40:69:dd:d0: 8c:93:18:9d:b9:07:3b:46:a0:38:ba:ae:47:ff:65: a6:ad:22:30:be:4f:52:fd:be:09:b5:2e:2a:b9:73: c8:98:c4:12:3f:34:96:8c:12:58:a1:97:84:a7:b7: 21:a3:a5:89:1b:ea:c8:a9:a5:80:08:92:54:aa:4d: d3:2c:70:86:de:b3:d4:9e:3f:b8:ab:01:c3:7b:4d: f6:e0:b0:6f:c8:87:d1:1b:44:7e:f2:85:e6:93:cf: 0f:4d:39:2d:b5:2f:8a:a5:d1:e3:18:1b:eb:d8:92: f0:14:a6:8b:ae:5c:98:6b:d5:2e:61:79:0d:9b:73: d5:e4:2e:2e:f7:e8:8d:31:ee:56:13:1a:e5:21:b3: 26:61:12:8a:64:ce:53:62:bd:9c:d3:a8:39:5c:1d: 6b:b7:b5:4d:08:f7:2b:bd:06:75:c7:e9:ff:29:e0: 8c:33:2f:b1:fb:73:1e:f1:e8:04:75:55:f0:c3:4d: 44:c1:92:a3:c2:6c:d2:5f:aa:23:1f:82:3e:db:57: 96:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DE:F7:8C:B2:55:BA:D7:A0:7D:9E:80:9B:09:54:68:E0:EB:C6:83 X509v3 Authority Key Identifier: keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:bc:4e:d5:8b:93:43:ea:a7:e0:ab:09:70:9c:0d:33:cc:4b: fe:3b:0a:ea:d4:b2:a4:73:9b:b3:f1:90:41:30:c2:be:02:10: e0:87:e8:60:09:8d:06:f9:bf:33:e3:d6:a4:e5:9b:97:91:86: 75:eb:39:34:27:ba:36:bf:c7:f4:c3:85:44:78:9b:74:51:ba: f6:90:a1:82:1d:fb:1a:35:70:91:2c:5d:d8:d0:5a:0e:21:5c: cf:0b:91:e2:36:dc:79:83:74:10:b6:cc:88:4c:62:59:a4:cf: 5e:72:6e:02:c3:c2:52:a8:65:99:c1:e0:85:d7:ac:93:ce:a3: d5:4d:80:16:7f:ab:f4:43:9f:39:f7:3b:28:92:ff:59:7f:98: 34:e3:1b:07:23:08:d7:4d:0a:dd:85:f1:a9:af:c6:2b:d9:90: 7a:40:fc:a4:07:99:aa:a8:47:07:ba:41:d6:a0:72:b1:fa:2b: 81:48:72:0c:89:80:32:5b:52:d2:16:04:b8:a3:e2:71:d6:fc: 9e:9e:a1:61:cc:8d:dd:b8:20:05:dd:0c:c6:d6:5b:5c:9e:3e: 72:f1:98:38:ba:f7:2d:a5:d6:9b:f6:ec:0a:aa:4a:4e:20:e9: 14:23:1f:9f:9a:3d:35:f7:71:7c:10:4b:ed:e8:56:61:a9:e8: 66:2d:10:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHIJs3Dns3BSdxC2as6QIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3N2M0OWQzZjYyNzMzNTE5MGUzYzJlYzM2NTRlMTU0Y2Zk NDUzOTgwHhcNMjUxMjA2MTAwMjAzWhcNMjUxMjA3MTAwMjAzWjAzMTEwLwYDVQQD EyhlOWRlZjc4Y2IyNTViYWQ3YTA3ZDllODA5YjA5NTQ2OGUwZWJjNjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9gUVrxo1dux9fOhQgEcB5Fuu/Jx nr1egWd+hjGcEN4h6nR6b3Al8FcT11F/o2pFC3/3FnT0PUBp3dCMkxiduQc7RqA4 uq5H/2WmrSIwvk9S/b4JtS4quXPImMQSPzSWjBJYoZeEp7cho6WJG+rIqaWACJJU qk3TLHCG3rPUnj+4qwHDe0324LBvyIfRG0R+8oXmk88PTTkttS+KpdHjGBvr2JLw FKaLrlyYa9UuYXkNm3PV5C4u9+iNMe5WExrlIbMmYRKKZM5TYr2c06g5XB1rt7VN CPcrvQZ1x+n/KeCMMy+x+3Me8egEdVXww01EwZKjwmzSX6ojH4I+21eWWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOne94yyVbrXoH2egJsJVGjg68aDMB8GA1UdIwQY MBaAFHd8SdP2JzNRkOPC7DZU4VTP1FOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny81ZTdhMzEtZWU2My00MTIwLTk1MmMt Y2QyZjhjOTRmOTc0LzEvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny81ZTdhMzEtZWU2My00MTIwLTk1MmMtY2QyZjhjOTRmOTc0 LzEvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLxO1YuT Q+qn4KsJcJwNM8xL/jsK6tSypHObs/GQQTDCvgIQ4IfoYAmNBvm/M+PWpOWbl5GG des5NCe6Nr/H9MOFRHibdFG69pChgh37GjVwkSxd2NBaDiFczwuR4jbceYN0ELbM iExiWaTPXnJuAsPCUqhlmcHghdesk86j1U2AFn+r9EOfOfc7KJL/WX+YNOMbByMI 100K3YXxqa/GK9mQekD8pAeZqqhHB7pB1qBysforgUhyDImAMltS0hYEuKPicdb8 np6hYcyN3bggBd0MxtZbXJ4+cvGYOLr3LaXWm/bsCqpKTiDpFCMfn5o9NfdxfBBL 7ehWYanoZi0QQA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:21:12 2025 by rpki-client