This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft File: D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft (raw, json) Hash identifier: zUMU+xl4c7ScYq+KAOzoaCUTWHRWNhoNzvgSJ/XqDJ0= Subject key identifier: 48:D6:3C:55:E5:BC:A4:27:68:DC:0B:FB:16:72:CA:F8:32:AB:4B:99 Authority key identifier: 0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5 Certificate issuer: /CN=0f65bd21c683207da0c39fb3798535af49e0bff5 Certificate serial: 019B2B8B2C6AF190B6C0A4765A5B2A68EB44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft Manifest number: 155D Signing time: Wed 17 Dec 2025 09:01:39 +0000 Manifest this update: Wed 17 Dec 2025 09:01:39 +0000 Manifest next update: Thu 18 Dec 2025 09:01:39 +0000 Files and hashes: 1: D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl (hash: yY+sDlARvmU9scF6JYIII8zKhi/dC8e+6/fIWf1cDKg=) 2: O_uEU5a5hFxcQ9cF5vOgcBailtI.roa (hash: am+LoRbwPcUWGmyLF541pRdLLSbuzmsIRCZ85z19J6M=) 3: _MZl5mAk0VStSl6-Iutzl1XZEmc.roa (hash: GAxNehsNlSM4VBui+WLkl0ufFvlsHnC2diPLD2P3m8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8b:2c:6a:f1:90:b6:c0:a4:76:5a:5b:2a:68:eb:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f65bd21c683207da0c39fb3798535af49e0bff5 Validity Not Before: Dec 17 09:01:39 2025 GMT Not After : Dec 18 09:01:39 2025 GMT Subject: CN=48d63c55e5bca42768dc0bfb1672caf832ab4b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a1:0b:62:37:aa:e4:8b:32:ab:d1:f2:93:2d: e3:7f:05:2c:67:22:49:28:57:35:24:e4:f5:d1:b0: 96:a0:e6:c6:c2:ec:28:47:69:6e:f2:f3:a8:05:cf: 95:5d:12:94:38:ef:7b:be:09:5c:7d:34:fb:8f:ad: b1:40:7d:47:c0:4a:c4:ee:c5:0a:db:42:9e:4c:06: eb:be:e5:5b:00:40:5c:39:d6:5d:3d:4b:b7:35:4c: d9:b1:8e:22:08:de:c6:a1:44:b9:f1:e0:bf:44:ef: 32:c8:02:d5:b1:74:78:05:20:41:0a:05:a5:ad:98: 95:45:e4:b9:b7:ee:e2:61:c7:2b:c4:3d:12:4d:95: f7:bf:56:3d:b4:35:09:30:90:28:4c:84:6b:3b:26: 03:3d:64:45:5d:83:88:26:ef:dd:67:ee:36:6b:94: 40:a6:70:be:eb:b4:e1:08:c6:dc:bf:b2:6a:34:d2: 1a:00:d6:63:26:1c:c4:73:a9:9c:6c:46:d9:2a:ee: 5d:ff:46:4b:28:24:7a:7c:89:2d:b9:93:a4:7c:02: 40:6c:10:83:97:0d:20:7e:23:4c:4b:4a:e2:71:59: 8b:ba:91:9e:e8:30:6d:30:66:35:cc:73:9c:c9:d9: 9c:5f:e7:4c:83:cc:20:9a:5b:2a:3f:c9:a3:27:c0: 0d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D6:3C:55:E5:BC:A4:27:68:DC:0B:FB:16:72:CA:F8:32:AB:4B:99 X509v3 Authority Key Identifier: keyid:0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:28:0f:db:51:d6:19:23:6b:d3:4a:cc:44:bf:00:03:4d:94: 70:3f:b7:7d:34:2a:51:68:56:03:77:e5:c2:89:7a:d4:b7:03: 67:4a:8c:a2:0f:63:6f:65:3f:4d:25:25:51:66:4c:a1:91:65: 31:be:9a:99:87:27:81:b6:36:d2:81:bb:6f:5e:44:c2:c3:91: 55:8d:6b:c8:11:89:62:7a:58:57:67:ec:10:ca:cf:15:9c:70: 43:65:4d:29:37:aa:ba:36:ea:1a:3d:7d:05:b7:0a:e0:8c:bf: 1f:06:28:27:43:a2:aa:3e:47:71:40:a8:cb:c5:60:0a:57:0d: c3:46:77:4e:4a:e1:ce:fb:45:68:a3:42:16:95:e8:64:d9:26: 1f:46:92:ea:2d:25:1d:68:29:74:ea:22:41:d1:37:28:9e:6e: 6d:26:09:1a:e9:49:42:87:76:c5:a8:31:c5:67:e2:1f:5a:d3: a1:18:38:6e:b6:9b:2b:4a:1a:e1:d0:f6:a2:00:54:0c:e1:32: 7b:34:29:41:e7:3a:15:30:3e:8b:c3:12:bd:44:f3:75:4a:ae: 3c:f3:2e:0d:b2:f3:95:fd:95:bc:f9:c4:b2:3f:bc:fb:25:79: 95:51:f4:d4:36:62:fb:17:1c:3d:7a:38:27:6c:39:81:8a:65: 34:80:13:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriyxq8ZC2wKR2WlsqaOtEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNjViZDIxYzY4MzIwN2RhMGMzOWZiMzc5ODUzNWFmNDll MGJmZjUwHhcNMjUxMjE3MDkwMTM5WhcNMjUxMjE4MDkwMTM5WjAzMTEwLwYDVQQD Eyg0OGQ2M2M1NWU1YmNhNDI3NjhkYzBiZmIxNjcyY2FmODMyYWI0Yjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKELYjeq5Isyq9Hyky3jfwUsZyJJ KFc1JOT10bCWoObGwuwoR2lu8vOoBc+VXRKUOO97vglcfTT7j62xQH1HwErE7sUK 20KeTAbrvuVbAEBcOdZdPUu3NUzZsY4iCN7GoUS58eC/RO8yyALVsXR4BSBBCgWl rZiVReS5t+7iYccrxD0STZX3v1Y9tDUJMJAoTIRrOyYDPWRFXYOIJu/dZ+42a5RA pnC+67ThCMbcv7JqNNIaANZjJhzEc6mcbEbZKu5d/0ZLKCR6fIktuZOkfAJAbBCD lw0gfiNMS0ricVmLupGe6DBtMGY1zHOcydmcX+dMg8wgmlsqP8mjJ8ANGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjWPFXlvKQnaNwL+xZyyvgyq0uZMB8GA1UdIwQY MBaAFA9lvSHGgyB9oMOfs3mFNa9J4L/1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJXOUljYURJSDJndzUtemVZVTFyMG5ndl9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80YTk5OWYtZDFmYS00ODg3LWJhZTgt ZTIzZjEwZTRiOTFjLzEvRDJXOUljYURJSDJndzUtemVZVTFyMG5ndl9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80YTk5OWYtZDFmYS00ODg3LWJhZTgtZTIzZjEwZTRiOTFj LzEvRDJXOUljYURJSDJndzUtemVZVTFyMG5ndl9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSgP21HW GSNr00rMRL8AA02UcD+3fTQqUWhWA3flwol61LcDZ0qMog9jb2U/TSUlUWZMoZFl Mb6amYcngbY20oG7b15EwsORVY1ryBGJYnpYV2fsEMrPFZxwQ2VNKTequjbqGj19 BbcK4Iy/HwYoJ0Oiqj5HcUCoy8VgClcNw0Z3TkrhzvtFaKNCFpXoZNkmH0aS6i0l HWgpdOoiQdE3KJ5ubSYJGulJQod2xagxxWfiH1rToRg4brabK0oa4dD2ogBUDOEy ezQpQec6FTA+i8MSvUTzdUquPPMuDbLzlf2VvPnEsj+8+yV5lVH01DZi+xccPXo4 J2w5gYplNIAT6A== -----END CERTIFICATE-----Generated at Wed Dec 17 16:43:27 2025 by rpki-client