This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft File: D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft (raw, json) Hash identifier: xT+8LA3SSvQS9vEoxVe14eqhMmRU0aLQJpFIaAWdAVg= Subject key identifier: 66:BB:47:2F:5D:AF:38:97:B7:47:BC:B3:99:CA:CD:1A:1D:BD:9E:0E Authority key identifier: 0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5 Certificate issuer: /CN=0f65bd21c683207da0c39fb3798535af49e0bff5 Certificate serial: 019AF389D0A8DEB7F667A7C489266103214B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft Manifest number: 1540 Signing time: Sat 06 Dec 2025 12:01:26 +0000 Manifest this update: Sat 06 Dec 2025 12:01:26 +0000 Manifest next update: Sun 07 Dec 2025 12:01:26 +0000 Files and hashes: 1: D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl (hash: hUalMc/vMXXm/NNTANeFgxuFq6WF4fPE0zD+H9EMPmI=) 2: O_uEU5a5hFxcQ9cF5vOgcBailtI.roa (hash: am+LoRbwPcUWGmyLF541pRdLLSbuzmsIRCZ85z19J6M=) 3: _MZl5mAk0VStSl6-Iutzl1XZEmc.roa (hash: GAxNehsNlSM4VBui+WLkl0ufFvlsHnC2diPLD2P3m8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:d0:a8:de:b7:f6:67:a7:c4:89:26:61:03:21:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f65bd21c683207da0c39fb3798535af49e0bff5 Validity Not Before: Dec 6 12:01:26 2025 GMT Not After : Dec 7 12:01:26 2025 GMT Subject: CN=66bb472f5daf3897b747bcb399cacd1a1dbd9e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b8:91:37:97:df:b9:28:a5:1f:b5:a7:68:cb: ef:1c:1d:8d:64:de:9f:e3:bf:2b:6c:30:5c:b0:b2: 21:eb:ee:e5:55:3a:fc:07:fe:ae:5b:52:04:93:ce: 53:6a:ab:8a:21:b9:95:43:74:24:cc:93:55:f8:13: 14:ca:2b:e0:26:92:05:e9:f6:cd:35:da:ed:3a:70: 7a:13:e8:34:11:47:2c:f2:f7:c9:8d:fc:b6:9b:6b: e0:af:05:bf:f4:c2:d4:40:58:10:0d:3b:e0:2a:ed: 94:42:fe:62:3a:c9:e1:5c:83:d6:af:a9:5c:ac:0c: 9a:12:bf:6b:03:c2:0b:91:19:55:30:39:2b:16:42: ec:5a:2c:ab:a4:82:ee:e6:82:4e:ba:48:5e:04:c1: c2:45:77:7a:8a:f0:25:69:ae:f9:f4:77:ab:01:0d: c4:18:46:1e:23:ce:c6:d0:d5:37:34:20:2e:f7:2d: ef:b5:6e:b5:a5:6d:c7:08:2e:32:5c:72:f8:28:11: 7e:8c:7f:e6:f9:0c:e7:95:8e:5b:01:80:97:6b:b7: a1:95:37:e7:b1:b5:bf:63:25:6e:45:5c:e9:93:29: e4:66:d3:7c:3c:84:a3:2e:ce:5e:92:33:ed:19:0e: 13:19:14:06:7e:5b:57:86:68:de:d1:3a:7e:d8:43: 23:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BB:47:2F:5D:AF:38:97:B7:47:BC:B3:99:CA:CD:1A:1D:BD:9E:0E X509v3 Authority Key Identifier: keyid:0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a9:eb:3c:91:9f:e5:1a:4a:45:ca:59:a6:86:47:c2:78:c1: 7c:c5:ff:d9:49:31:3d:53:11:6b:b7:29:99:6e:f4:e3:f8:57: 22:3a:43:b1:2f:b9:c1:18:c7:da:50:ad:a7:b8:cb:71:00:21: 20:83:7a:ea:83:7f:3d:23:e2:51:d7:1e:15:d6:e7:e2:5d:72: a7:08:d5:fd:17:2b:6b:34:2a:98:06:cc:1d:98:45:f9:d0:e3: 56:52:e7:4f:c3:90:ff:09:a1:23:b0:6f:2f:1c:19:6e:67:44: da:3b:e9:fd:00:35:84:53:a4:b0:94:09:8e:9d:d3:7c:4a:0f: 63:7f:5c:2b:1a:71:7f:46:3a:39:cb:f4:55:50:ea:8e:49:ef: cd:20:96:a0:f0:f1:e6:02:0d:c3:e7:d4:19:b9:60:ba:59:e9: 58:d9:4a:58:a1:86:29:6c:3b:99:a6:b8:53:ca:80:bd:57:b9: 4f:2a:b9:c1:96:f6:61:52:1e:ed:fa:1f:f1:45:6b:d1:6e:74: 2f:f5:31:a3:fa:a1:46:f8:12:ce:ad:3b:96:b3:5a:7b:eb:ba: 14:36:03:28:96:73:af:33:8f:21:9f:65:3c:94:4a:dd:0b:7d: 04:2d:c3:7e:ff:a6:3e:43:eb:92:d4:2d:72:3a:e3:30:61:f7: cf:64:0a:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzidCo3rf2Z6fEiSZhAyFLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNjViZDIxYzY4MzIwN2RhMGMzOWZiMzc5ODUzNWFmNDll MGJmZjUwHhcNMjUxMjA2MTIwMTI2WhcNMjUxMjA3MTIwMTI2WjAzMTEwLwYDVQQD Eyg2NmJiNDcyZjVkYWYzODk3Yjc0N2JjYjM5OWNhY2QxYTFkYmQ5ZTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7iRN5ffuSilH7WnaMvvHB2NZN6f 478rbDBcsLIh6+7lVTr8B/6uW1IEk85TaquKIbmVQ3QkzJNV+BMUyivgJpIF6fbN NdrtOnB6E+g0EUcs8vfJjfy2m2vgrwW/9MLUQFgQDTvgKu2UQv5iOsnhXIPWr6lc rAyaEr9rA8ILkRlVMDkrFkLsWiyrpILu5oJOukheBMHCRXd6ivAlaa759HerAQ3E GEYeI87G0NU3NCAu9y3vtW61pW3HCC4yXHL4KBF+jH/m+QznlY5bAYCXa7ehlTfn sbW/YyVuRVzpkynkZtN8PISjLs5ekjPtGQ4TGRQGfltXhmje0Tp+2EMjhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGa7Ry9drziXt0e8s5nKzRodvZ4OMB8GA1UdIwQY MBaAFA9lvSHGgyB9oMOfs3mFNa9J4L/1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJXOUljYURJSDJndzUtemVZVTFyMG5ndl9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80YTk5OWYtZDFmYS00ODg3LWJhZTgt ZTIzZjEwZTRiOTFjLzEvRDJXOUljYURJSDJndzUtemVZVTFyMG5ndl9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80YTk5OWYtZDFmYS00ODg3LWJhZTgtZTIzZjEwZTRiOTFj LzEvRDJXOUljYURJSDJndzUtemVZVTFyMG5ndl9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK6nrPJGf 5RpKRcpZpoZHwnjBfMX/2UkxPVMRa7cpmW704/hXIjpDsS+5wRjH2lCtp7jLcQAh IIN66oN/PSPiUdceFdbn4l1ypwjV/RcrazQqmAbMHZhF+dDjVlLnT8OQ/wmhI7Bv LxwZbmdE2jvp/QA1hFOksJQJjp3TfEoPY39cKxpxf0Y6Ocv0VVDqjknvzSCWoPDx 5gINw+fUGblgulnpWNlKWKGGKWw7maa4U8qAvVe5Tyq5wZb2YVIe7fof8UVr0W50 L/Uxo/qhRvgSzq07lrNae+u6FDYDKJZzrzOPIZ9lPJRK3Qt9BC3Dfv+mPkPrktQt cjrjMGH3z2QK5A== -----END CERTIFICATE-----Generated at Sat Dec 6 18:25:55 2025 by rpki-client