This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft File: daWp6O8n4wJyk--E-4-NMPq25tY.mft (raw, json) Hash identifier: fosUonHG2GW/rbi5JTTp1W/U+uUyUpt5mDYqrbQO62M= Subject key identifier: 3E:4A:79:78:DC:3B:70:09:4D:CE:9E:AD:1D:53:95:E0:9D:51:D7:41 Authority key identifier: 75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6 Certificate issuer: /CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6 Certificate serial: 019AF4657AF023515218B955D6A0DB78EC0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 16:01:22 +0000 Manifest this update: Sat 06 Dec 2025 16:01:22 +0000 Manifest next update: Sun 07 Dec 2025 16:01:22 +0000 Files and hashes: 1: SR9wQfEl4hsimVx-_CLVSWn9NLA.roa (hash: 9+X16EqRYxx0KZ3SyD6WKcNWmq57GkzdE/2ZqmRpGZI=) 2: daWp6O8n4wJyk--E-4-NMPq25tY.crl (hash: qLVgJmTZM6z1mYrr/YGMmFhYNxhuZqLrAGAJxptC1AU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:7a:f0:23:51:52:18:b9:55:d6:a0:db:78:ec:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6 Validity Not Before: Dec 6 16:01:22 2025 GMT Not After : Dec 7 16:01:22 2025 GMT Subject: CN=3e4a7978dc3b70094dce9ead1d5395e09d51d741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9c:9b:86:23:1d:34:c5:a1:8c:28:1b:21:bd: 03:99:28:c8:43:46:73:e1:6e:40:67:64:87:c6:cf: 46:d3:7a:b4:a1:88:aa:36:f2:48:e2:66:54:4d:4b: da:fc:69:88:ae:f7:c4:e7:8c:79:65:f0:69:65:38: b7:c2:4a:32:47:14:aa:c8:21:7c:a9:28:50:2e:23: bc:54:8f:4c:45:ee:47:49:79:d1:54:a4:6e:23:59: b4:84:a8:45:5e:46:f8:72:55:9b:f6:bf:c0:94:c8: b3:45:fb:13:65:ee:34:10:ea:03:fb:f2:51:2e:e9: 8b:34:db:8f:37:32:d6:18:9f:ab:85:cc:ff:64:7d: 44:09:4c:03:b2:45:ba:fb:52:05:db:3f:d5:87:7b: d2:75:7b:72:0e:73:ba:36:d7:da:97:10:a8:a0:d2: f4:70:97:c9:04:69:42:04:b6:8e:18:68:12:6f:e8: 45:d2:64:10:b4:9d:c3:97:f9:40:34:0a:93:33:95: 68:e0:90:d1:a1:a4:5c:c6:31:13:ac:6c:17:36:cf: ee:78:e3:88:78:69:93:93:86:89:0c:52:a0:bd:3c: 74:63:23:50:43:29:d6:7d:59:22:96:82:a2:74:da: f8:a0:bb:01:0e:38:0e:ae:5c:84:94:ba:2d:28:fe: 86:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4A:79:78:DC:3B:70:09:4D:CE:9E:AD:1D:53:95:E0:9D:51:D7:41 X509v3 Authority Key Identifier: keyid:75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:18:98:06:47:82:d3:84:8c:51:c3:65:aa:3c:71:a1:ac:bc: 10:8a:8a:d2:97:3c:30:fe:eb:4b:6f:4a:3e:97:00:be:f8:d3: e7:09:1d:9d:50:54:e4:e4:fa:be:39:1a:d1:e8:c8:b5:fa:bd: 6b:9b:04:1f:08:d2:18:f7:55:ea:d3:04:cc:d4:b6:11:70:52: 3d:2a:e9:1d:ba:c3:33:59:c0:68:e0:2f:3f:a0:b1:45:f7:53: 3d:f3:c3:09:e3:8b:82:c4:e8:8a:46:20:01:ad:cb:2c:93:b2: d4:c7:56:ec:8b:06:82:e4:44:5a:af:38:61:57:88:98:ce:be: a4:a2:a3:b6:e6:e0:ed:33:5a:43:2d:02:5e:d4:c4:2b:20:6a: 2c:2e:20:05:5a:23:9c:a2:8c:34:59:2e:84:7a:2d:13:2b:2d: cf:bf:b4:98:3d:80:26:cb:c8:00:7c:f5:cd:03:b1:2e:96:79: de:25:f9:0b:b6:fe:f6:e0:45:28:f6:20:d6:19:0e:38:d4:66: eb:ec:09:05:08:79:18:81:12:ef:e7:0c:6d:f9:0f:9a:94:11: 47:15:e7:6b:b0:4d:de:79:e8:73:aa:c3:1f:c4:89:91:b2:1b: 40:31:47:b7:1b:b1:1a:38:20:09:14:13:27:f2:a2:8a:fd:8d: b9:ec:0b:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZXrwI1FSGLlV1qDbeOwPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YTVhOWU4ZWYyN2UzMDI3MjkzZWY4NGZiOGY4ZDMwZmFi NmU2ZDYwHhcNMjUxMjA2MTYwMTIyWhcNMjUxMjA3MTYwMTIyWjAzMTEwLwYDVQQD EygzZTRhNzk3OGRjM2I3MDA5NGRjZTllYWQxZDUzOTVlMDlkNTFkNzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pybhiMdNMWhjCgbIb0DmSjIQ0Zz 4W5AZ2SHxs9G03q0oYiqNvJI4mZUTUva/GmIrvfE54x5ZfBpZTi3wkoyRxSqyCF8 qShQLiO8VI9MRe5HSXnRVKRuI1m0hKhFXkb4clWb9r/AlMizRfsTZe40EOoD+/JR LumLNNuPNzLWGJ+rhcz/ZH1ECUwDskW6+1IF2z/Vh3vSdXtyDnO6NtfalxCooNL0 cJfJBGlCBLaOGGgSb+hF0mQQtJ3Dl/lANAqTM5Vo4JDRoaRcxjETrGwXNs/ueOOI eGmTk4aJDFKgvTx0YyNQQynWfVkiloKidNr4oLsBDjgOrlyElLotKP6GMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5KeXjcO3AJTc6erR1TleCdUddBMB8GA1UdIwQY MBaAFHWlqejvJ+MCcpPvhPuPjTD6tubWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGFXcDZPOG40d0p5ay0tRS00LU5NUHEyNXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jYTZmNjktNmZlYy00NzUzLWFkNzct ZWI2ZjlkZjA0NWIyLzEvZGFXcDZPOG40d0p5ay0tRS00LU5NUHEyNXRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9jYTZmNjktNmZlYy00NzUzLWFkNzctZWI2ZjlkZjA0NWIy LzEvZGFXcDZPOG40d0p5ay0tRS00LU5NUHEyNXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBiYBkeC 04SMUcNlqjxxoay8EIqK0pc8MP7rS29KPpcAvvjT5wkdnVBU5OT6vjka0ejItfq9 a5sEHwjSGPdV6tMEzNS2EXBSPSrpHbrDM1nAaOAvP6CxRfdTPfPDCeOLgsToikYg Aa3LLJOy1MdW7IsGguREWq84YVeImM6+pKKjtubg7TNaQy0CXtTEKyBqLC4gBVoj nKKMNFkuhHotEystz7+0mD2AJsvIAHz1zQOxLpZ53iX5C7b+9uBFKPYg1hkOONRm 6+wJBQh5GIES7+cMbfkPmpQRRxXna7BN3nnoc6rDH8SJkbIbQDFHtxuxGjggCRQT J/Kiiv2NuewLhw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:12 2025 by rpki-client