This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft File: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft (raw, json) Hash identifier: BjqFI7xCpnFAJ/y+Ket7XA1ouHMK8gPf9cPpKG7yyBw= Subject key identifier: 0B:7F:CD:55:BA:7E:48:B5:7C:BC:9A:1D:AF:EA:D7:74:D9:73:14:BD Authority key identifier: 0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E Certificate issuer: /CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e Certificate serial: 019AF208B6FC8EB3945FBDE14A439E115312 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft Manifest number: 04E8 Signing time: Sat 06 Dec 2025 05:00:48 +0000 Manifest this update: Sat 06 Dec 2025 05:00:48 +0000 Manifest next update: Sun 07 Dec 2025 05:00:48 +0000 Files and hashes: 1: 6BzrArwu58N5sBVvJVBthqND_N4.roa (hash: OfB+8pNfA8OgycXqKbk5L8hxFdJxQJhdYPo6qkN9fXA=) 2: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl (hash: 5nXCmwsen67NYOVvx7Us0yjoQRWZ68HIU0a4GtyiYNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b6:fc:8e:b3:94:5f:bd:e1:4a:43:9e:11:53:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e Validity Not Before: Dec 6 05:00:48 2025 GMT Not After : Dec 7 05:00:48 2025 GMT Subject: CN=0b7fcd55ba7e48b57cbc9a1dafead774d97314bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:e8:60:7f:95:49:c4:cd:6e:14:e8:c4:0d: c0:05:6e:5d:1e:fe:20:c4:39:e5:d8:6d:98:cc:2c: 3e:dd:07:84:1d:7e:36:24:62:9b:23:5c:10:77:09: 4b:ab:a6:0e:7b:78:5c:22:11:60:3b:40:16:8c:ad: 1b:f9:a6:57:18:64:6a:b2:68:41:2d:a5:e4:80:99: be:48:98:5b:30:7a:ce:8a:08:d9:7c:79:4f:00:f4: 56:fe:c8:71:00:7b:f3:bf:40:bc:7d:a7:1e:d3:d1: 45:99:4c:db:b9:2c:f9:23:98:e2:55:ac:b5:4f:12: 62:03:2c:dc:6e:cd:a7:46:be:cc:1e:d6:f1:08:03: cd:3e:3b:9a:c8:77:42:7c:fb:dd:b9:e6:92:09:0b: e3:1d:e4:38:d3:ba:f8:54:04:9d:62:15:12:6a:1f: 27:a8:b0:96:d7:87:0a:f9:bb:81:a7:35:8c:b3:2c: 9d:c7:6f:5a:e0:50:a4:8d:fa:e5:12:eb:ac:78:c6: 85:b6:d9:6f:11:89:da:07:34:c5:39:15:d6:52:bc: 88:62:51:7b:88:aa:ee:a6:4b:3b:6a:10:a4:3d:ed: 96:d4:c9:f7:6d:f7:6e:b7:ed:c2:96:d5:61:6f:96: 7c:a9:f8:66:4e:db:77:a6:92:2e:f1:b2:be:a8:72: 7a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:7F:CD:55:BA:7E:48:B5:7C:BC:9A:1D:AF:EA:D7:74:D9:73:14:BD X509v3 Authority Key Identifier: keyid:0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:9d:cd:93:50:b1:92:6f:a0:c7:e7:50:9c:6c:72:24:d5:01: 1a:5b:60:db:27:54:34:53:1e:6a:b2:37:31:98:aa:9c:de:72: b3:4a:fe:65:f5:7d:dc:b6:91:35:18:8d:b3:66:fe:26:d9:ff: 7f:49:72:2f:6f:a9:73:f2:7d:00:73:49:4d:7b:17:fc:98:0e: 2c:96:c0:4a:62:e1:31:f4:47:a0:bb:29:5e:40:43:3c:8f:bf: 25:6e:dd:c1:ec:cd:50:fa:46:ce:9a:f5:1e:a4:78:79:c2:cf: e4:a8:06:7c:55:93:ee:55:83:91:d4:ba:36:e2:56:a1:f6:0b: 2a:26:93:3d:9b:11:83:9d:33:49:37:63:ed:35:61:27:a0:f2: 39:8b:09:1d:1c:c8:dd:95:04:54:2a:53:02:bd:4b:c7:1c:af: cd:26:8a:0e:5c:b6:f0:0a:b0:3b:ae:42:b5:0d:87:a0:e7:79: 31:99:af:c9:10:90:fd:a7:ff:09:e0:72:5d:fe:0e:fa:1c:49: b6:4a:55:a3:46:da:45:3f:92:26:29:34:ca:a7:a7:5d:22:ce: 7d:86:92:9a:c1:ac:3e:b6:55:2f:3e:23:46:a9:93:e1:74:aa: af:7e:a0:50:0f:39:ef:65:6c:9a:4d:72:38:0e:56:93:ed:43: 21:1b:78:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLb8jrOUX73hSkOeEVMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOWM1YWU5NGNhZGVkODc1YzhkYjJmNTgzM2NhODhkMmY2 OGVkMGUwHhcNMjUxMjA2MDUwMDQ4WhcNMjUxMjA3MDUwMDQ4WjAzMTEwLwYDVQQD EygwYjdmY2Q1NWJhN2U0OGI1N2NiYzlhMWRhZmVhZDc3NGQ5NzMxNGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqPoYH+VScTNbhToxA3ABW5dHv4g xDnl2G2YzCw+3QeEHX42JGKbI1wQdwlLq6YOe3hcIhFgO0AWjK0b+aZXGGRqsmhB LaXkgJm+SJhbMHrOigjZfHlPAPRW/shxAHvzv0C8face09FFmUzbuSz5I5jiVay1 TxJiAyzcbs2nRr7MHtbxCAPNPjuayHdCfPvdueaSCQvjHeQ407r4VASdYhUSah8n qLCW14cK+buBpzWMsyydx29a4FCkjfrlEuuseMaFttlvEYnaBzTFORXWUryIYlF7 iKrupks7ahCkPe2W1Mn3bfdut+3CltVhb5Z8qfhmTtt3ppIu8bK+qHJ6QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAt/zVW6fki1fLyaHa/q13TZcxS9MB8GA1UdIwQY MBaAFA+cWulMre2HXI2y9YM8qI0vaO0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mZDFkZDUtMzI5NC00NTUwLWEzZTYt OWFhYmI5OWZhMTBjLzEvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9mZDFkZDUtMzI5NC00NTUwLWEzZTYtOWFhYmI5OWZhMTBj LzEvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc53Nk1Cx km+gx+dQnGxyJNUBGltg2ydUNFMearI3MZiqnN5ys0r+ZfV93LaRNRiNs2b+Jtn/ f0lyL2+pc/J9AHNJTXsX/JgOLJbASmLhMfRHoLspXkBDPI+/JW7dwezNUPpGzpr1 HqR4ecLP5KgGfFWT7lWDkdS6NuJWofYLKiaTPZsRg50zSTdj7TVhJ6DyOYsJHRzI 3ZUEVCpTAr1LxxyvzSaKDly28AqwO65CtQ2HoOd5MZmvyRCQ/af/CeByXf4O+hxJ tkpVo0baRT+SJik0yqenXSLOfYaSmsGsPrZVLz4jRqmT4XSqr36gUA8572Vsmk1y OA5Wk+1DIRt4yg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:24 2025 by rpki-client