This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft File: D97nlErE2jERKV2B4p3roAwWOpY.mft (raw, json) Hash identifier: PS3U2tGbouMRlypCXRXdndBIjgKndFcVmFjLlc7uE18= Subject key identifier: 1C:B9:F7:AE:52:06:DD:6B:5A:A1:77:20:90:82:D8:06:4F:EB:21:54 Authority key identifier: 0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96 Certificate issuer: /CN=0fdee7944ac4da3111295d81e29deba00c163a96 Certificate serial: 019AF19B5F374B7E99331D3AD6616C09F078 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft Manifest number: 115C Signing time: Sat 06 Dec 2025 03:01:22 +0000 Manifest this update: Sat 06 Dec 2025 03:01:22 +0000 Manifest next update: Sun 07 Dec 2025 03:01:22 +0000 Files and hashes: 1: D97nlErE2jERKV2B4p3roAwWOpY.crl (hash: DLr1uCexMhZ0TLoDe+4i+RjriYBB2vmjaSL2x92rDNQ=) 2: Fe73gwKx3TfChZQCePRdIEAemH0.roa (hash: qBzf7ILpA60OZzhZbHEoimpJXoZWWGpm51oGlU43AdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:5f:37:4b:7e:99:33:1d:3a:d6:61:6c:09:f0:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fdee7944ac4da3111295d81e29deba00c163a96 Validity Not Before: Dec 6 03:01:22 2025 GMT Not After : Dec 7 03:01:22 2025 GMT Subject: CN=1cb9f7ae5206dd6b5aa177209082d8064feb2154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f0:29:a0:28:08:c2:a4:25:c3:02:80:e5:03: e9:b8:e6:ad:2c:fd:57:54:ac:a9:94:07:63:75:c8: bc:f0:1d:31:82:6e:44:a4:82:9b:73:e1:45:49:70: 68:90:10:e2:34:65:73:c0:55:d7:cf:0c:02:2d:83: 07:32:52:38:48:b4:2a:53:6d:47:08:a7:16:b0:68: 7f:9f:4c:4c:b8:27:67:c0:33:a0:2a:0f:25:48:c0: 8b:05:43:bb:3c:a3:88:5e:da:d3:6e:66:64:2e:1c: bc:27:77:9c:d8:6f:49:8d:76:89:b8:5f:8a:67:7e: 3f:71:f0:fc:ae:ac:bb:cb:0c:4c:d0:69:a1:5f:80: d5:57:29:56:c8:a5:29:b9:e5:bc:57:8e:69:21:a8: b5:ad:c9:5b:b7:ee:e0:ba:12:8a:a8:fa:ee:4e:bc: 3a:75:42:c9:42:30:de:88:31:59:cb:7d:91:92:a5: e3:cb:69:b3:b6:b4:de:cc:60:74:83:b0:3f:1e:55: 8e:04:1e:4a:2b:a6:3d:79:32:ad:45:f3:89:04:f7: 3a:9c:b0:94:00:57:ac:2f:db:d1:11:46:8c:a5:87: 13:1d:8f:ad:18:4b:ba:3a:6c:00:ba:53:8f:ff:2c: 15:8c:9e:ee:aa:cc:ed:e8:1c:fd:3d:fc:1c:9e:f7: 19:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B9:F7:AE:52:06:DD:6B:5A:A1:77:20:90:82:D8:06:4F:EB:21:54 X509v3 Authority Key Identifier: keyid:0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:87:74:c7:1f:7e:a6:6b:d5:1f:ef:c4:b8:da:87:79:d2:97: c5:80:65:5f:34:09:e9:d0:ee:d1:41:50:68:a6:dd:4b:8c:ec: 07:c1:f2:76:ca:61:58:15:fa:db:26:6b:73:6f:6a:ee:02:ff: db:62:e9:62:b8:bd:14:a5:4b:64:b8:9f:70:fa:4a:b1:eb:94: d2:df:8d:5f:25:03:f0:22:dc:57:ef:95:cb:e6:2c:0b:69:12: 72:16:5a:b3:f2:6f:c9:9a:bb:ec:36:e1:32:10:4d:2f:fa:dd: a8:5d:46:cd:11:16:18:4d:b2:09:70:4f:20:a5:3a:93:38:33: c1:d4:ea:2d:74:2b:3e:54:37:b8:c6:c1:85:06:cd:19:ec:17: 48:85:fe:6b:a1:20:35:eb:b4:34:a1:c4:af:f8:4d:7a:17:78: 7e:0d:f1:f8:fe:a4:ac:f7:97:6f:2d:d3:75:3a:af:28:88:94: 70:be:8c:31:4b:bc:20:55:34:2f:db:f1:53:c2:2c:38:98:b4: bf:63:e2:32:f2:82:03:0a:b4:d1:0e:5c:f0:7a:85:3f:14:74: 8a:26:ee:ca:81:a0:ab:c3:44:96:a3:39:df:57:81:4d:ba:83: 4f:d9:82:9c:75:3b:5f:86:94:ff:42:f7:c1:c1:98:ad:2a:cc: 35:61:3e:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm183S36ZMx061mFsCfB4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZGVlNzk0NGFjNGRhMzExMTI5NWQ4MWUyOWRlYmEwMGMx NjNhOTYwHhcNMjUxMjA2MDMwMTIyWhcNMjUxMjA3MDMwMTIyWjAzMTEwLwYDVQQD EygxY2I5ZjdhZTUyMDZkZDZiNWFhMTc3MjA5MDgyZDgwNjRmZWIyMTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/ApoCgIwqQlwwKA5QPpuOatLP1X VKyplAdjdci88B0xgm5EpIKbc+FFSXBokBDiNGVzwFXXzwwCLYMHMlI4SLQqU21H CKcWsGh/n0xMuCdnwDOgKg8lSMCLBUO7PKOIXtrTbmZkLhy8J3ec2G9JjXaJuF+K Z34/cfD8rqy7ywxM0GmhX4DVVylWyKUpueW8V45pIai1rclbt+7guhKKqPruTrw6 dULJQjDeiDFZy32RkqXjy2mztrTezGB0g7A/HlWOBB5KK6Y9eTKtRfOJBPc6nLCU AFesL9vREUaMpYcTHY+tGEu6OmwAulOP/ywVjJ7uqszt6Bz9PfwcnvcZ/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBy5965SBt1rWqF3IJCC2AZP6yFUMB8GA1UdIwQY MBaAFA/e55RKxNoxESldgeKd66AMFjqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDk3bmxFckUyakVSS1YyQjRwM3JvQXdXT3BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS81NDRiZWEtZjFlYy00NjY2LTgxYzAt NzhhNGQ2NTY5M2ZlLzEvRDk3bmxFckUyakVSS1YyQjRwM3JvQXdXT3BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS81NDRiZWEtZjFlYy00NjY2LTgxYzAtNzhhNGQ2NTY5M2Zl LzEvRDk3bmxFckUyakVSS1YyQjRwM3JvQXdXT3BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl4d0xx9+ pmvVH+/EuNqHedKXxYBlXzQJ6dDu0UFQaKbdS4zsB8HydsphWBX62yZrc29q7gL/ 22LpYri9FKVLZLifcPpKseuU0t+NXyUD8CLcV++Vy+YsC2kSchZas/JvyZq77Dbh MhBNL/rdqF1GzREWGE2yCXBPIKU6kzgzwdTqLXQrPlQ3uMbBhQbNGewXSIX+a6Eg Neu0NKHEr/hNehd4fg3x+P6krPeXby3TdTqvKIiUcL6MMUu8IFU0L9vxU8IsOJi0 v2PiMvKCAwq00Q5c8HqFPxR0iibuyoGgq8NElqM531eBTbqDT9mCnHU7X4aU/0L3 wcGYrSrMNWE+sQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:26 2025 by rpki-client