This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft (raw, json) Hash identifier: KMSB5saV4xRQp+6BF2Xm1FVFqxdTSA8r0YKhIR0eRGk= Subject key identifier: 7F:EC:98:22:5E:7E:32:BE:5B:A2:73:92:08:EA:AB:94:B7:9A:D6:08 Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c Certificate serial: 019AF2AD48F8940B79FF132CE0414E67D540 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft Manifest number: 10C8 Signing time: Sat 06 Dec 2025 08:00:33 +0000 Manifest this update: Sat 06 Dec 2025 08:00:33 +0000 Manifest next update: Sun 07 Dec 2025 08:00:33 +0000 Files and hashes: 1: D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl (hash: 8eZ9AN2bM8RxBHLLsYoeX0xDLI6rbnzJJMjejtBIWrk=) 2: ZPNM7KgQKfcGyvV7_2daewtnAlI.roa (hash: gCwHJt9KCFIRPasHifDhV1IvkNRzDs0fMniT9GCnavA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:48:f8:94:0b:79:ff:13:2c:e0:41:4e:67:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c Validity Not Before: Dec 6 08:00:33 2025 GMT Not After : Dec 7 08:00:33 2025 GMT Subject: CN=7fec98225e7e32be5ba2739208eaab94b79ad608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:16:fe:d0:8a:4f:8c:13:e4:c8:09:cd:2f:b7: 96:ae:2e:b0:0d:91:45:b6:7d:13:54:ee:3f:ec:d7: 77:af:4c:dc:8f:b7:f9:6a:11:71:92:03:91:73:b0: bb:cb:d9:3b:0e:e4:c0:68:9e:d8:e1:8c:37:a0:4d: f5:fa:fc:f4:c3:cb:c5:2a:ea:79:49:e6:2d:a4:85: 2c:63:97:69:b6:c6:e9:ea:12:93:2a:1c:b3:29:88: 22:4f:e7:f7:40:46:5f:f5:f6:97:29:61:09:78:fe: e6:10:7d:13:74:f4:c4:59:f5:18:1b:55:21:2d:8b: 25:98:a9:8e:33:ca:67:31:cb:ea:cc:ba:0e:3a:2c: 05:75:3e:05:77:93:2d:a0:cd:17:dd:70:c9:28:6b: f5:26:93:9d:83:0b:4d:b6:89:02:70:37:f8:d3:58: 22:f3:03:0d:dd:65:64:85:1e:79:11:0a:d8:1f:b4: 7a:94:e9:a9:20:5b:86:e5:67:e0:39:e7:71:81:3c: 80:ff:e5:8c:38:01:44:ed:a5:4b:86:1a:38:38:b2: 42:43:5a:24:b2:6c:33:5c:5c:6f:6b:2f:b5:e8:56: d1:0f:b4:0f:00:18:5d:2a:f5:5e:27:98:b3:08:7c: 8c:27:bb:46:cd:ca:c4:f6:07:91:29:8c:ba:f9:71: 14:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EC:98:22:5E:7E:32:BE:5B:A2:73:92:08:EA:AB:94:B7:9A:D6:08 X509v3 Authority Key Identifier: keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:3d:eb:ba:d0:92:c9:23:a6:31:e7:6e:7f:fd:13:02:7f:65: f0:e1:4b:9f:cb:74:61:36:75:78:37:63:10:9b:bd:1d:ac:9d: 88:22:d2:5b:10:a8:4c:5f:13:9f:25:c2:d9:ac:f2:3e:a2:6f: 47:b6:48:44:78:ca:df:22:82:43:64:80:a0:36:e2:99:8f:14: 47:28:1e:c5:95:dc:49:4e:80:41:bd:80:6c:a6:cf:f2:e5:39: f2:f6:62:96:dd:18:28:18:9f:7e:36:9b:8e:5e:ad:d1:b1:09: de:f4:a4:2c:42:34:e0:43:f8:d4:03:b8:cf:35:80:54:cc:74: 16:1e:32:32:bf:45:4c:5d:75:9d:78:d8:cb:7d:ec:fc:5e:0f: 10:ad:f7:a4:18:24:44:ac:32:56:ba:ce:f0:0c:fb:e0:e2:af: d3:62:1b:67:0d:f1:e5:5d:d1:ec:05:08:18:09:bb:72:90:68: 08:37:47:89:0b:23:20:7e:a5:52:d6:f0:8a:c7:8f:38:0b:95: 15:dd:8d:98:42:ce:ea:38:ab:86:23:d0:ec:3e:7b:3f:7f:c5: 2b:f2:0a:23:7d:de:c1:da:f1:7c:11:9a:03:7a:d6:1d:09:f8: 35:4f:8a:ce:3c:62:93:43:2e:da:81:ee:4c:9b:63:e0:b2:19: 5a:91:81:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrUj4lAt5/xMs4EFOZ9VAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZmUwMDExZWJlNGYyMTZjNThkM2FiNDI4MTJiOTg0MDJi ZTBiMmMwHhcNMjUxMjA2MDgwMDMzWhcNMjUxMjA3MDgwMDMzWjAzMTEwLwYDVQQD Eyg3ZmVjOTgyMjVlN2UzMmJlNWJhMjczOTIwOGVhYWI5NGI3OWFkNjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhb+0IpPjBPkyAnNL7eWri6wDZFF tn0TVO4/7Nd3r0zcj7f5ahFxkgORc7C7y9k7DuTAaJ7Y4Yw3oE31+vz0w8vFKup5 SeYtpIUsY5dptsbp6hKTKhyzKYgiT+f3QEZf9faXKWEJeP7mEH0TdPTEWfUYG1Uh LYslmKmOM8pnMcvqzLoOOiwFdT4Fd5MtoM0X3XDJKGv1JpOdgwtNtokCcDf401gi 8wMN3WVkhR55EQrYH7R6lOmpIFuG5WfgOedxgTyA/+WMOAFE7aVLhho4OLJCQ1ok smwzXFxvay+16FbRD7QPABhdKvVeJ5izCHyMJ7tGzcrE9geRKYy6+XEU/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/smCJefjK+W6Jzkgjqq5S3mtYIMB8GA1UdIwQY MBaAFA/+ABHr5PIWxY06tCgSuYQCvgssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF80QUVldms4aGJGalRxMEtCSzVoQUstQ3l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS85NjE4NGQtNTk4MS00NzAyLTlkMzIt NmNjMGRhZjM0MWM0LzEvRF80QUVldms4aGJGalRxMEtCSzVoQUstQ3l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS85NjE4NGQtNTk4MS00NzAyLTlkMzItNmNjMGRhZjM0MWM0 LzEvRF80QUVldms4aGJGalRxMEtCSzVoQUstQ3l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlD3rutCS ySOmMeduf/0TAn9l8OFLn8t0YTZ1eDdjEJu9HaydiCLSWxCoTF8TnyXC2azyPqJv R7ZIRHjK3yKCQ2SAoDbimY8URygexZXcSU6AQb2AbKbP8uU58vZilt0YKBiffjab jl6t0bEJ3vSkLEI04EP41AO4zzWAVMx0Fh4yMr9FTF11nXjYy33s/F4PEK33pBgk RKwyVrrO8Az74OKv02IbZw3x5V3R7AUIGAm7cpBoCDdHiQsjIH6lUtbwisePOAuV Fd2NmELO6jirhiPQ7D57P3/FK/IKI33ewdrxfBGaA3rWHQn4NU+Kzjxik0Mu2oHu TJtj4LIZWpGBiA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:34 2025 by rpki-client