This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft File: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft (raw, json) Hash identifier: PmccgXacBIDjS8E2UufTQOun7HTSCkaNRqJIPUSBbZA= Subject key identifier: 6F:8C:62:DA:CA:C5:77:E5:F1:03:81:09:BA:7A:BB:6D:25:07:F0:55 Authority key identifier: 0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E Certificate issuer: /CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e Certificate serial: 019B2FD4D83DCEFC7A013744812771B39E01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft Manifest number: 0508 Signing time: Thu 18 Dec 2025 05:00:36 +0000 Manifest this update: Thu 18 Dec 2025 05:00:36 +0000 Manifest next update: Fri 19 Dec 2025 05:00:36 +0000 Files and hashes: 1: 6BzrArwu58N5sBVvJVBthqND_N4.roa (hash: OfB+8pNfA8OgycXqKbk5L8hxFdJxQJhdYPo6qkN9fXA=) 2: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl (hash: VIesulBc4RcLfDLxMANU52fyK/DqhJ18C7f4LM8xfrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d4:d8:3d:ce:fc:7a:01:37:44:81:27:71:b3:9e:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e Validity Not Before: Dec 18 05:00:36 2025 GMT Not After : Dec 19 05:00:36 2025 GMT Subject: CN=6f8c62dacac577e5f1038109ba7abb6d2507f055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e2:85:99:38:92:d0:45:e0:2a:d1:72:9b:ee: 99:28:b8:11:16:52:5d:cf:d2:49:e2:39:3d:70:c6: 4f:73:fe:ea:62:be:74:98:85:33:1c:6a:c1:b5:5f: 83:e9:55:24:39:61:ea:bc:85:e1:89:b0:49:dc:c2: 13:b8:09:34:af:67:64:a6:6e:25:61:0e:82:82:a7: 9e:36:af:0b:eb:e3:13:5e:24:f6:56:37:73:42:59: 68:66:f6:56:c5:db:b8:2e:d0:c4:6b:9a:66:7f:43: bf:b3:eb:dc:e0:b8:cf:7b:1a:ab:68:dd:fb:07:42: e7:0c:35:e4:98:0c:de:8b:f8:ee:25:89:84:ae:c6: 4c:9f:dc:1d:83:26:44:52:4e:ff:40:36:12:da:03: 2e:a7:99:5c:4e:b3:a6:15:af:06:dd:ef:03:77:a0: 2c:22:e5:e3:ad:0d:24:61:d0:d5:ee:98:55:27:86: 6b:53:a9:7f:e2:dd:41:6c:61:34:c2:bf:a3:cf:1b: a6:79:72:93:af:c9:25:d6:63:d4:14:41:62:fc:c0: c7:e0:8b:cb:46:60:69:27:80:8a:4b:ed:99:dc:8b: 43:2d:64:f6:08:35:68:19:62:14:38:ce:f3:fa:37: 58:93:c4:bf:7d:f0:b2:07:c7:d7:53:e0:64:a7:1c: d4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8C:62:DA:CA:C5:77:E5:F1:03:81:09:BA:7A:BB:6D:25:07:F0:55 X509v3 Authority Key Identifier: keyid:0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:f1:c9:4e:fd:74:e7:e1:95:3e:1e:51:6a:cd:42:56:15:0e: 1b:3e:97:80:9a:4b:7a:22:e3:50:1e:32:00:37:7e:4e:55:e6: a3:d7:d2:c0:ef:ee:95:04:20:c2:cd:f9:db:88:2c:b7:ab:d0: 2a:27:86:b3:7b:c1:ab:f7:20:30:63:e2:b4:02:9e:b6:08:ae: a3:93:50:62:48:c9:34:b2:15:7d:96:74:ac:52:86:75:46:cf: 42:57:09:86:c1:19:5c:c0:b6:22:88:b9:2e:48:c1:0d:67:4f: f8:b8:a5:28:b8:49:47:02:0c:1c:92:3e:da:da:f8:66:84:48: c8:ae:e5:09:dd:cc:53:15:6b:b2:b7:ef:76:e3:81:0e:d7:bf: e4:89:4c:46:9c:77:d3:e9:04:a1:3c:e1:ab:90:e5:a3:a6:3a: fb:ff:15:ea:ae:be:b9:ca:a0:e1:12:0f:2c:4b:42:36:2c:3c: fe:f5:33:e9:41:9d:16:9e:76:f4:0c:2b:a0:41:8a:da:5a:d9: c0:3f:28:18:ed:44:11:5a:c3:97:e3:b8:b3:60:cd:bc:9f:18: cb:f6:2e:30:d7:4b:66:a4:0f:8c:00:3a:31:f5:ad:00:6e:8c: 38:64:f6:37:a5:0e:87:a5:a4:2b:c3:45:9a:78:71:0c:cc:fb: b7:3e:9a:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1Ng9zvx6ATdEgSdxs54BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOWM1YWU5NGNhZGVkODc1YzhkYjJmNTgzM2NhODhkMmY2 OGVkMGUwHhcNMjUxMjE4MDUwMDM2WhcNMjUxMjE5MDUwMDM2WjAzMTEwLwYDVQQD Eyg2ZjhjNjJkYWNhYzU3N2U1ZjEwMzgxMDliYTdhYmI2ZDI1MDdmMDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OKFmTiS0EXgKtFym+6ZKLgRFlJd z9JJ4jk9cMZPc/7qYr50mIUzHGrBtV+D6VUkOWHqvIXhibBJ3MITuAk0r2dkpm4l YQ6CgqeeNq8L6+MTXiT2VjdzQlloZvZWxdu4LtDEa5pmf0O/s+vc4LjPexqraN37 B0LnDDXkmAzei/juJYmErsZMn9wdgyZEUk7/QDYS2gMup5lcTrOmFa8G3e8Dd6As IuXjrQ0kYdDV7phVJ4ZrU6l/4t1BbGE0wr+jzxumeXKTr8kl1mPUFEFi/MDH4IvL RmBpJ4CKS+2Z3ItDLWT2CDVoGWIUOM7z+jdYk8S/ffCyB8fXU+BkpxzUuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+MYtrKxXfl8QOBCbp6u20lB/BVMB8GA1UdIwQY MBaAFA+cWulMre2HXI2y9YM8qI0vaO0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mZDFkZDUtMzI5NC00NTUwLWEzZTYt OWFhYmI5OWZhMTBjLzEvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9mZDFkZDUtMzI5NC00NTUwLWEzZTYtOWFhYmI5OWZhMTBj LzEvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcvHJTv10 5+GVPh5Ras1CVhUOGz6XgJpLeiLjUB4yADd+TlXmo9fSwO/ulQQgws3524gst6vQ KieGs3vBq/cgMGPitAKetgiuo5NQYkjJNLIVfZZ0rFKGdUbPQlcJhsEZXMC2Ioi5 LkjBDWdP+LilKLhJRwIMHJI+2tr4ZoRIyK7lCd3MUxVrsrfvduOBDte/5IlMRpx3 0+kEoTzhq5Dlo6Y6+/8V6q6+ucqg4RIPLEtCNiw8/vUz6UGdFp529AwroEGK2lrZ wD8oGO1EEVrDl+O4s2DNvJ8Yy/YuMNdLZqQPjAA6MfWtAG6MOGT2N6UOh6WkK8NF mnhxDMz7tz6a7A== -----END CERTIFICATE-----Generated at Thu Dec 18 07:10:57 2025 by rpki-client