This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft File: s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft (raw, json) Hash identifier: m+s3/QrGuBciGRHXJKNpHR6jEuv34dhOllEmrAQANbA= Subject key identifier: 5D:E2:CA:72:72:41:09:DA:7C:F9:A9:31:C8:61:60:38:12:78:0E:8A Authority key identifier: B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36 Certificate issuer: /CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036 Certificate serial: 019AF5AE5A8503A08157FAC05C787E39D81E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft Manifest number: 0D81 Signing time: Sat 06 Dec 2025 22:00:35 +0000 Manifest this update: Sat 06 Dec 2025 22:00:35 +0000 Manifest next update: Sun 07 Dec 2025 22:00:35 +0000 Files and hashes: 1: s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl (hash: eTd4gllirBanDfVyqXPoqI8/cInAhZQ8/IK/oNwOmH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:5a:85:03:a0:81:57:fa:c0:5c:78:7e:39:d8:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036 Validity Not Before: Dec 6 22:00:35 2025 GMT Not After : Dec 7 22:00:35 2025 GMT Subject: CN=5de2ca72724109da7cf9a931c861603812780e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4d:4b:2b:7a:fb:ec:09:4c:f8:39:44:c7:12: dd:3d:1f:49:65:11:c2:14:4d:6d:4b:14:1d:50:70: 2c:16:7e:72:4b:9d:1a:f7:45:00:0a:eb:14:73:84: f0:96:3b:c4:de:51:eb:97:94:05:61:d2:6f:23:da: 6b:bd:92:bb:5c:b4:db:49:8b:0e:a0:fc:74:c9:8a: ab:6b:eb:30:6c:8e:0d:bb:b4:e7:ee:73:19:a5:d9: aa:09:04:ff:2a:a7:73:44:8c:1a:f3:4e:62:0a:06: da:db:af:1d:b6:4e:86:4a:2b:50:bf:19:43:ed:74: 70:d5:b3:18:47:51:c7:a7:1d:a3:21:59:2d:8a:88: 01:61:61:53:ed:f9:cf:98:eb:77:09:df:95:80:02: 09:a5:82:36:06:ab:b1:1d:4f:f6:bc:5c:1d:e5:2e: 60:42:a9:02:e3:a9:1b:04:a1:c8:d6:0f:f9:ce:25: 07:aa:5e:94:a8:7e:6e:c9:26:9c:3f:fc:29:09:92: fc:74:77:69:42:ec:e5:18:b5:24:04:a3:56:b7:27: ef:66:e2:56:fd:67:19:98:f1:62:c1:c9:b7:f1:1a: d3:43:fb:ad:b7:f7:06:ca:b1:2b:a3:4b:66:9b:18: 60:11:a3:92:ec:ff:1b:61:56:f6:31:11:c7:2b:c8: 73:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E2:CA:72:72:41:09:DA:7C:F9:A9:31:C8:61:60:38:12:78:0E:8A X509v3 Authority Key Identifier: keyid:B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:8b:82:4d:81:06:53:ec:56:24:47:01:10:7b:1f:97:93:36: c1:2c:d1:e6:7b:b2:35:39:8d:c1:86:03:ea:80:41:c9:de:ce: c5:77:34:85:0d:af:75:ae:72:5e:8f:8c:55:87:32:24:ad:ed: 1b:e9:01:ec:5e:06:2e:02:4d:e8:17:e6:80:c3:36:81:14:46: 2c:da:d2:48:1e:4f:20:08:3e:2e:ad:59:01:c2:11:15:21:92: a0:14:69:ce:a3:4a:05:d7:e1:8b:aa:95:72:18:35:90:a0:7e: f3:fa:58:94:61:98:d9:1e:fb:33:e8:56:1a:c2:c3:ed:d0:80: 7c:43:e2:37:5b:32:4e:71:ed:dd:64:2a:c7:57:b9:e2:83:f1: 0d:d5:73:44:23:33:0a:9b:b5:20:2a:76:3b:36:4a:f7:a0:3b: 9b:dd:6a:76:95:9c:df:79:f9:a9:7a:e8:c2:1b:a3:15:1f:80: 9e:f3:e6:74:14:93:cd:4d:cb:80:a9:d0:51:c7:f8:a8:8e:02: 00:2d:7a:5d:ab:6d:99:a1:e4:5b:0a:f0:9e:ff:b9:5f:ac:30: e4:df:39:07:4c:d3:52:bb:e6:ef:de:fe:d6:0f:dd:dc:a6:56: dc:48:05:09:07:97:ed:f5:07:36:d1:b9:42:1b:57:25:78:a2: 4d:bd:31:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rlqFA6CBV/rAXHh+OdgeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOWU1ZjM4OGRjMzQ5MWE0Yzk1NDdiYjU3ODhlMmZlNGY1 MGQwMzYwHhcNMjUxMjA2MjIwMDM1WhcNMjUxMjA3MjIwMDM1WjAzMTEwLwYDVQQD Eyg1ZGUyY2E3MjcyNDEwOWRhN2NmOWE5MzFjODYxNjAzODEyNzgwZThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU1LK3r77AlM+DlExxLdPR9JZRHC FE1tSxQdUHAsFn5yS50a90UACusUc4TwljvE3lHrl5QFYdJvI9prvZK7XLTbSYsO oPx0yYqra+swbI4Nu7Tn7nMZpdmqCQT/KqdzRIwa805iCgba268dtk6GSitQvxlD 7XRw1bMYR1HHpx2jIVktiogBYWFT7fnPmOt3Cd+VgAIJpYI2BquxHU/2vFwd5S5g QqkC46kbBKHI1g/5ziUHql6UqH5uySacP/wpCZL8dHdpQuzlGLUkBKNWtyfvZuJW /WcZmPFiwcm38RrTQ/utt/cGyrEro0tmmxhgEaOS7P8bYVb2MRHHK8hzmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3iynJyQQnafPmpMchhYDgSeA6KMB8GA1UdIwQY MBaAFLOeXziNw0kaTJVHu1eI4v5PUNA2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczU1Zk9JM0RTUnBNbFVlN1Y0amlfazlRMERZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8wMGNlMGItNDQxMy00NThiLWI3MWYt NWRjZWI5ZWNjMmI3LzEvczU1Zk9JM0RTUnBNbFVlN1Y0amlfazlRMERZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8wMGNlMGItNDQxMy00NThiLWI3MWYtNWRjZWI5ZWNjMmI3 LzEvczU1Zk9JM0RTUnBNbFVlN1Y0amlfazlRMERZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYuCTYEG U+xWJEcBEHsfl5M2wSzR5nuyNTmNwYYD6oBByd7OxXc0hQ2vda5yXo+MVYcyJK3t G+kB7F4GLgJN6BfmgMM2gRRGLNrSSB5PIAg+Lq1ZAcIRFSGSoBRpzqNKBdfhi6qV chg1kKB+8/pYlGGY2R77M+hWGsLD7dCAfEPiN1syTnHt3WQqx1e54oPxDdVzRCMz Cpu1ICp2OzZK96A7m91qdpWc33n5qXrowhujFR+AnvPmdBSTzU3LgKnQUcf4qI4C AC16XattmaHkWwrwnv+5X6ww5N85B0zTUrvm797+1g/d3KZW3EgFCQeX7fUHNtG5 QhtXJXiiTb0xOw== -----END CERTIFICATE-----Generated at Sun Dec 7 05:31:18 2025 by rpki-client