This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft File: diI5iTgH6wmEboKXJ9cakuljp8g.mft (raw, json) Hash identifier: ju1VrTvKhq2GmNsfuq9shJntAH4CFW4Cten2lY7q6x0= Subject key identifier: 0D:0A:A1:46:24:1A:02:FC:9D:EE:4E:F9:F1:4A:40:0C:96:A6:7F:BF Authority key identifier: 76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8 Certificate issuer: /CN=762239893807eb09846e829727d71a92e963a7c8 Certificate serial: 019AF5E5FD30718635E35D2EC665EAA06EA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 23:01:21 +0000 Manifest this update: Sat 06 Dec 2025 23:01:21 +0000 Manifest next update: Sun 07 Dec 2025 23:01:21 +0000 Files and hashes: 1: diI5iTgH6wmEboKXJ9cakuljp8g.crl (hash: +LuBQeCD75sHSsilMAOGfVwfF6bwRzmN9rbcWAYYF/w=) 2: w5adTJ6rpx7GFh9HwrpqPSVPdiU.roa (hash: yu6wu1UqofZpvT45d3HGEkgUxnnIlkItksil5PiCcao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:fd:30:71:86:35:e3:5d:2e:c6:65:ea:a0:6e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=762239893807eb09846e829727d71a92e963a7c8 Validity Not Before: Dec 6 23:01:21 2025 GMT Not After : Dec 7 23:01:21 2025 GMT Subject: CN=0d0aa146241a02fc9dee4ef9f14a400c96a67fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1c:13:b7:7a:f4:a4:2f:4f:11:7f:df:29:db: 0a:ab:fd:9f:8c:44:14:5b:fb:bd:3a:8e:b6:9b:3b: 2f:d5:99:d4:b1:d8:f1:50:38:53:7c:67:dd:91:69: 10:2a:42:39:70:1e:7f:9f:56:c9:df:e9:26:81:0d: b6:ff:84:dd:23:db:d4:35:88:17:32:a7:ae:90:da: 4d:d0:3f:ed:bf:e6:dc:25:52:b4:9a:51:96:e6:91: 90:41:ca:db:1c:6b:a3:48:73:2c:0c:fe:e9:e1:98: 9a:c8:26:9b:e2:e2:df:43:46:42:d8:8e:c9:c6:7b: b7:58:42:b9:9e:a9:d9:ae:0a:c0:26:30:9a:1d:e6: 3c:db:6c:c7:c0:d6:1a:d4:13:88:db:0d:33:82:49: 2d:b8:36:ca:7d:63:0f:ac:41:d0:15:77:b0:4c:a0: b8:14:ff:0d:0e:ab:0d:7b:bb:a4:df:73:bb:6f:d4: 04:ad:ac:31:e8:bb:1f:20:43:56:f8:16:1b:59:c9: 08:db:b2:19:4d:6b:7a:93:ca:5b:48:78:ce:a0:cf: 02:68:1b:87:04:79:dd:e6:c4:92:d2:19:43:35:14: 15:7a:69:99:f0:46:58:cf:2f:b8:3a:ee:15:b3:23: 42:5b:80:1e:dc:6f:ef:4f:52:78:b1:ba:58:38:46: 02:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0A:A1:46:24:1A:02:FC:9D:EE:4E:F9:F1:4A:40:0C:96:A6:7F:BF X509v3 Authority Key Identifier: keyid:76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:9f:e9:d4:1d:7e:0b:bb:d6:45:ee:8c:ce:eb:a4:27:b9:f1: cc:95:f3:28:6c:3b:03:45:59:0b:bc:c1:ab:a7:9a:14:b0:cc: 80:a0:1b:45:fd:83:42:91:68:fc:40:67:cc:b8:e2:3d:5b:8c: 1b:f6:fb:88:49:7d:03:82:c0:67:64:44:ce:15:ea:dd:2e:92: 5f:36:c7:e1:fc:98:4b:de:e2:03:3d:32:0f:29:37:d8:d3:80: 4f:ce:e7:26:59:6e:00:38:74:95:80:7f:89:02:14:7e:ff:47: 9f:70:b2:0c:ad:85:0a:bf:5a:f8:49:9b:47:20:9a:3c:0d:29: 99:4f:dc:17:2a:05:f2:5f:d2:50:66:41:45:6b:0b:1f:25:81: 0a:b8:f1:ab:22:99:d5:fd:35:01:cd:22:18:00:c6:0b:aa:39: 67:fe:6f:e4:9d:1b:94:78:69:3b:e3:f3:63:f1:f4:78:2e:31: be:c3:4d:6b:d6:83:b3:3a:f8:5e:d0:3d:35:a8:bb:bb:34:9f: fb:04:c6:d7:98:14:bf:29:66:9b:41:49:01:bf:c9:07:7f:d9: 44:de:4b:c1:35:0c:0a:c1:92:4e:a5:dd:45:e6:dc:33:90:df: 8f:6d:db:03:ab:a7:42:46:e2:98:b2:b2:86:0c:8e:aa:85:30: d3:a3:52:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15f0wcYY1410uxmXqoG6kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MjIzOTg5MzgwN2ViMDk4NDZlODI5NzI3ZDcxYTkyZTk2 M2E3YzgwHhcNMjUxMjA2MjMwMTIxWhcNMjUxMjA3MjMwMTIxWjAzMTEwLwYDVQQD EygwZDBhYTE0NjI0MWEwMmZjOWRlZTRlZjlmMTRhNDAwYzk2YTY3ZmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhwTt3r0pC9PEX/fKdsKq/2fjEQU W/u9Oo62mzsv1ZnUsdjxUDhTfGfdkWkQKkI5cB5/n1bJ3+kmgQ22/4TdI9vUNYgX MqeukNpN0D/tv+bcJVK0mlGW5pGQQcrbHGujSHMsDP7p4ZiayCab4uLfQ0ZC2I7J xnu3WEK5nqnZrgrAJjCaHeY822zHwNYa1BOI2w0zgkktuDbKfWMPrEHQFXewTKC4 FP8NDqsNe7uk33O7b9QErawx6LsfIENW+BYbWckI27IZTWt6k8pbSHjOoM8CaBuH BHnd5sSS0hlDNRQVemmZ8EZYzy+4Ou4VsyNCW4Ae3G/vT1J4sbpYOEYCnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0KoUYkGgL8ne5O+fFKQAyWpn+/MB8GA1UdIwQY MBaAFHYiOYk4B+sJhG6ClyfXGpLpY6fIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGlJNWlUZ0g2d21FYm9LWEo5Y2FrdWxqcDhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85NGMyY2UtOWY3Yi00Y2E3LWFiYmMt Y2E2N2ZkNjRkMzRjLzEvZGlJNWlUZ0g2d21FYm9LWEo5Y2FrdWxqcDhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC85NGMyY2UtOWY3Yi00Y2E3LWFiYmMtY2E2N2ZkNjRkMzRj LzEvZGlJNWlUZ0g2d21FYm9LWEo5Y2FrdWxqcDhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArJ/p1B1+ C7vWRe6MzuukJ7nxzJXzKGw7A0VZC7zBq6eaFLDMgKAbRf2DQpFo/EBnzLjiPVuM G/b7iEl9A4LAZ2REzhXq3S6SXzbH4fyYS97iAz0yDyk32NOAT87nJlluADh0lYB/ iQIUfv9Hn3CyDK2FCr9a+EmbRyCaPA0pmU/cFyoF8l/SUGZBRWsLHyWBCrjxqyKZ 1f01Ac0iGADGC6o5Z/5v5J0blHhpO+PzY/H0eC4xvsNNa9aDszr4XtA9Nai7uzSf +wTG15gUvylmm0FJAb/JB3/ZRN5LwTUMCsGSTqXdRebcM5Dfj23bA6unQkbimLKy hgyOqoUw06NSCw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:41:25 2025 by rpki-client