This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft File: D4nIaX93ksqvWZZk6JrOZSRPiug.mft (raw, json) Hash identifier: 33oasU3xV0OanoMuvNCPrICHgdJdS6GfUPIkbdULJSM= Subject key identifier: 20:1A:27:2F:66:C9:DB:A9:9D:2B:C6:79:AD:A6:FC:C2:C1:2A:7C:2A Authority key identifier: 0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8 Certificate issuer: /CN=0f89c8697f7792caaf599664e89ace65244f8ae8 Certificate serial: 019AF12E00CE31045E5F3EFCDDABDEB34F2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:01:55 +0000 Manifest this update: Sat 06 Dec 2025 01:01:55 +0000 Manifest next update: Sun 07 Dec 2025 01:01:55 +0000 Files and hashes: 1: D4nIaX93ksqvWZZk6JrOZSRPiug.crl (hash: ADCXbRBl7Ohsjrflk4LSaf3HnucuoNQ45D6xDSZjvLM=) 2: M1fWkBIHAuVSUFxtDGIthqqmrJE.roa (hash: +6gCxjSejI/as6boiaKhDkfwSxB7S4u8Oz//yZsKkyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:00:ce:31:04:5e:5f:3e:fc:dd:ab:de:b3:4f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f89c8697f7792caaf599664e89ace65244f8ae8 Validity Not Before: Dec 6 01:01:55 2025 GMT Not After : Dec 7 01:01:55 2025 GMT Subject: CN=201a272f66c9dba99d2bc679ada6fcc2c12a7c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:11:2b:03:f8:fe:df:77:71:a0:c2:1b:92:b1: 38:4c:7b:92:93:8c:01:a9:9f:e5:4d:21:c3:49:03: bd:e5:a3:45:ad:e9:5f:78:d5:43:4a:3d:c0:0d:9a: 94:ab:cd:62:a6:48:e5:67:a9:72:2c:00:b6:bd:c1: e7:10:e4:8a:f7:dd:b8:e1:10:94:a1:ae:1b:36:5c: b2:57:f9:72:0a:1d:41:13:e0:8b:c8:f1:60:20:e4: 9d:c1:3a:7d:ab:68:89:43:95:6c:82:19:5a:c6:bd: d2:5c:4e:15:67:3e:bf:2f:f4:f9:7a:cd:ef:1f:24: 96:ae:2f:7b:aa:54:30:f1:ff:c9:e6:35:03:ff:29: e4:40:bb:06:c6:d7:2c:95:49:c4:60:53:48:49:9a: 17:23:8f:00:6d:f5:19:f2:31:11:7b:a3:ca:93:23: 38:b3:38:fd:5a:8f:ee:1e:bf:f0:21:11:d6:72:80: 01:35:9a:1e:5c:51:df:bd:72:c8:90:69:ef:c8:d2: ba:ec:33:31:7b:62:c7:37:2f:a0:03:f9:1e:1d:fb: 85:b0:7e:01:23:2b:49:2e:e8:a0:bc:b6:56:78:90: d4:cd:99:cf:ad:cf:69:29:99:d6:64:3e:53:6f:84: bb:f8:79:94:5d:7c:77:fb:64:b3:27:9b:34:6c:8b: 7e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1A:27:2F:66:C9:DB:A9:9D:2B:C6:79:AD:A6:FC:C2:C1:2A:7C:2A X509v3 Authority Key Identifier: keyid:0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:a7:f2:9f:aa:36:81:02:60:c6:f8:3d:c6:97:d2:27:39:26: 39:40:80:a0:46:88:29:42:11:75:72:f9:96:7c:7a:3c:95:fe: a0:f5:e3:7e:57:d3:9a:f8:da:24:88:32:ed:09:7f:27:3a:c5: ac:30:f4:0c:2f:3f:89:d7:20:0e:1a:81:7b:e2:33:c5:9e:c5: c6:a0:4f:e5:18:90:99:f1:d5:fe:3c:1a:d5:48:f1:06:0b:14: d9:63:0b:43:99:2c:b0:9e:78:6f:c7:a6:3d:26:12:13:3b:99: 07:88:f0:c4:1d:e2:e2:2e:07:1b:0e:12:4c:74:49:42:b0:83: 96:49:01:03:5d:03:da:70:9c:18:09:69:fd:86:e9:c6:35:1d: 7e:9b:f9:03:fd:e1:e1:8a:8f:79:54:9c:e3:e8:3d:f6:11:b8: 50:37:f0:fb:d8:aa:63:79:a4:c0:68:9c:23:b3:9b:e4:22:86: e3:a0:98:81:41:28:d0:ee:a3:f3:38:dd:3a:40:51:64:af:42: 5b:d3:3f:2e:2f:62:06:bb:d6:d3:74:79:a0:39:0a:7b:63:38: 08:e8:9c:bc:90:05:fd:72:89:f4:39:00:b5:04:85:ed:57:6b: d2:77:2e:61:41:63:8b:87:f6:77:b4:fc:ed:a7:b7:62:c4:35: bc:04:f6:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgDOMQReXz783aves08tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmODljODY5N2Y3NzkyY2FhZjU5OTY2NGU4OWFjZTY1MjQ0 ZjhhZTgwHhcNMjUxMjA2MDEwMTU1WhcNMjUxMjA3MDEwMTU1WjAzMTEwLwYDVQQD EygyMDFhMjcyZjY2YzlkYmE5OWQyYmM2NzlhZGE2ZmNjMmMxMmE3YzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxErA/j+33dxoMIbkrE4THuSk4wB qZ/lTSHDSQO95aNFrelfeNVDSj3ADZqUq81ipkjlZ6lyLAC2vcHnEOSK99244RCU oa4bNlyyV/lyCh1BE+CLyPFgIOSdwTp9q2iJQ5Vsghlaxr3SXE4VZz6/L/T5es3v HySWri97qlQw8f/J5jUD/ynkQLsGxtcslUnEYFNISZoXI48AbfUZ8jERe6PKkyM4 szj9Wo/uHr/wIRHWcoABNZoeXFHfvXLIkGnvyNK67DMxe2LHNy+gA/keHfuFsH4B IytJLuigvLZWeJDUzZnPrc9pKZnWZD5Tb4S7+HmUXXx3+2SzJ5s0bIt+qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAaJy9mydupnSvGea2m/MLBKnwqMB8GA1UdIwQY MBaAFA+JyGl/d5LKr1mWZOiazmUkT4roMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDRuSWFYOTNrc3F2V1paazZKck9aU1JQaXVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZjMxODctM2JlYi00YzRiLTlhNDQt ZDZiZDU1YTllMzZkLzEvRDRuSWFYOTNrc3F2V1paazZKck9aU1JQaXVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81ZjMxODctM2JlYi00YzRiLTlhNDQtZDZiZDU1YTllMzZk LzEvRDRuSWFYOTNrc3F2V1paazZKck9aU1JQaXVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANafyn6o2 gQJgxvg9xpfSJzkmOUCAoEaIKUIRdXL5lnx6PJX+oPXjflfTmvjaJIgy7Ql/JzrF rDD0DC8/idcgDhqBe+IzxZ7FxqBP5RiQmfHV/jwa1UjxBgsU2WMLQ5kssJ54b8em PSYSEzuZB4jwxB3i4i4HGw4STHRJQrCDlkkBA10D2nCcGAlp/YbpxjUdfpv5A/3h 4YqPeVSc4+g99hG4UDfw+9iqY3mkwGicI7Ob5CKG46CYgUEo0O6j8zjdOkBRZK9C W9M/Li9iBrvW03R5oDkKe2M4COicvJAF/XKJ9DkAtQSF7Vdr0ncuYUFji4f2d7T8 7ae3YsQ1vAT2YA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:52 2025 by rpki-client