This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft File: Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft (raw, json) Hash identifier: cdVMylm6fZQuELx/PqRSc6x80Vi4Nf/iBh9rr8iom5s= Subject key identifier: 4C:7D:BD:6A:A5:39:53:68:F0:B1:D5:35:B4:F4:42:45:F1:29:95:5B Authority key identifier: 0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E Certificate issuer: /CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e Certificate serial: 019AF0BF2C653A21DC4919B47700BC79078A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft Manifest number: 01D9 Signing time: Fri 05 Dec 2025 23:00:51 +0000 Manifest this update: Fri 05 Dec 2025 23:00:51 +0000 Manifest next update: Sat 06 Dec 2025 23:00:51 +0000 Files and hashes: 1: Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl (hash: IxT9FpMT7d7nHK6sNVC9zBIuYkhKynDr5FFtLQV33V4=) 2: paTtElWGmU9hAIEDu_IgYgPtAVs.roa (hash: gF5VuGVggwKtY1Dsuv7xJ4ySU2bi6uUiiENjoaY2rmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:2c:65:3a:21:dc:49:19:b4:77:00:bc:79:07:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e Validity Not Before: Dec 5 23:00:51 2025 GMT Not After : Dec 6 23:00:51 2025 GMT Subject: CN=4c7dbd6aa5395368f0b1d535b4f44245f129955b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:aa:67:31:ae:e3:ff:5e:23:cf:86:68:20:db: ad:13:78:6d:11:9b:96:d9:f7:df:42:8e:90:ff:2c: 49:d7:d7:a6:74:da:03:17:7b:cd:12:84:c8:3a:25: 66:c2:72:f2:89:eb:85:5d:37:9f:db:71:81:92:e1: b2:6c:7d:e9:39:a3:f1:55:ef:08:5a:08:81:1c:a0: a8:ac:90:dc:e3:06:be:06:97:ac:a1:fd:3d:d2:75: 7a:78:16:1a:1f:a7:98:fe:38:6b:e8:1e:58:85:18: c3:5a:7d:31:b1:6f:74:6e:b9:2b:97:52:b1:f3:be: 6b:f6:6a:23:fb:ed:4d:86:f8:ac:e4:79:c3:fc:dd: 44:29:d9:2e:85:3b:3d:2c:28:1c:6a:65:f5:8b:16: 14:ed:87:9d:23:6b:7f:04:4b:60:7d:8f:0a:fc:b8: 13:7f:06:f2:18:09:d2:23:d4:18:cd:60:e0:48:29: 2d:9c:72:b1:94:aa:84:15:3f:2a:80:19:59:95:19: 87:d0:ea:fb:1f:01:4a:b6:54:bd:14:ce:01:ab:38: bd:02:df:ec:5a:a3:38:95:bd:21:61:21:dc:70:53: cb:1d:a1:42:2f:42:3b:ef:5c:1e:5a:b9:80:77:ed: 2e:8d:4e:f1:97:2b:c0:50:da:6f:17:dc:19:64:37: 3f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7D:BD:6A:A5:39:53:68:F0:B1:D5:35:B4:F4:42:45:F1:29:95:5B X509v3 Authority Key Identifier: keyid:0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:05:ba:b9:0a:c1:11:cf:15:ee:42:e1:0d:39:3d:00:5f:18: 54:40:57:53:50:5e:1c:3d:0e:7a:56:63:4d:74:02:6e:ab:f9: c7:49:ea:bf:5d:d9:e7:72:85:fc:27:70:59:27:b9:15:5b:4d: 23:23:12:59:5e:13:ad:29:c1:30:6e:ef:ce:02:4a:6c:41:60: 5e:bf:49:2a:7c:a8:1a:0e:d9:25:52:09:bc:6c:53:1c:57:f6: 4d:86:a7:77:3c:28:92:47:20:d3:1b:ab:cc:e6:32:3e:b8:3a: 5c:9b:3b:bd:82:cb:b6:0f:bb:ec:12:35:30:b0:69:6e:59:dd: 0e:a6:74:6d:31:e8:68:12:e9:d0:d2:ca:bc:2a:97:a9:94:70: 02:49:80:5a:e8:5a:ae:98:2c:d5:11:aa:41:a9:04:15:9f:81: a4:ef:18:75:bc:7a:e5:e3:4d:6e:c6:4f:f9:b7:38:e4:f7:07: 9e:41:6a:2e:b7:b8:3b:df:c4:e0:ec:8e:41:7e:d5:c7:65:54: 7e:97:ba:da:d6:7e:2b:09:3e:f9:7d:1a:dd:a7:10:7c:a6:8d: 63:48:a0:d6:4c:a0:66:d4:fa:67:c5:9a:f9:94:31:93:59:60: 04:3b:31:71:e2:a9:b9:6b:93:6a:3d:c6:26:ae:ac:90:5c:ad: 44:62:9d:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyxlOiHcSRm0dwC8eQeKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNWUzMmZmMjA3YzMyZjVhNjk4OTRiYWVhYjU2YmY2MzNk YmFhMWUwHhcNMjUxMjA1MjMwMDUxWhcNMjUxMjA2MjMwMDUxWjAzMTEwLwYDVQQD Eyg0YzdkYmQ2YWE1Mzk1MzY4ZjBiMWQ1MzViNGY0NDI0NWYxMjk5NTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApapnMa7j/14jz4ZoINutE3htEZuW 2fffQo6Q/yxJ19emdNoDF3vNEoTIOiVmwnLyieuFXTef23GBkuGybH3pOaPxVe8I WgiBHKCorJDc4wa+Bpesof090nV6eBYaH6eY/jhr6B5YhRjDWn0xsW90brkrl1Kx 875r9moj++1Nhvis5HnD/N1EKdkuhTs9LCgcamX1ixYU7YedI2t/BEtgfY8K/LgT fwbyGAnSI9QYzWDgSCktnHKxlKqEFT8qgBlZlRmH0Or7HwFKtlS9FM4Bqzi9At/s WqM4lb0hYSHccFPLHaFCL0I771weWrmAd+0ujU7xlyvAUNpvF9wZZDc/ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEx9vWqlOVNo8LHVNbT0QkXxKZVbMB8GA1UdIwQY MBaAFA5eMv8gfDL1ppiUuuq1a/Yz26oeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGw0eV95QjhNdldtbUpTNjZyVnI5alBicWg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9iZTlmMjktMDAwNi00NjVlLTk0Mzct NGJhOGNiMTUwMWZkLzEvRGw0eV95QjhNdldtbUpTNjZyVnI5alBicWg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9iZTlmMjktMDAwNi00NjVlLTk0MzctNGJhOGNiMTUwMWZk LzEvRGw0eV95QjhNdldtbUpTNjZyVnI5alBicWg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQW6uQrB Ec8V7kLhDTk9AF8YVEBXU1BeHD0OelZjTXQCbqv5x0nqv13Z53KF/CdwWSe5FVtN IyMSWV4TrSnBMG7vzgJKbEFgXr9JKnyoGg7ZJVIJvGxTHFf2TYandzwokkcg0xur zOYyPrg6XJs7vYLLtg+77BI1MLBpblndDqZ0bTHoaBLp0NLKvCqXqZRwAkmAWuha rpgs1RGqQakEFZ+BpO8Ydbx65eNNbsZP+bc45PcHnkFqLre4O9/E4OyOQX7Vx2VU fpe62tZ+Kwk++X0a3acQfKaNY0ig1kygZtT6Z8Wa+ZQxk1lgBDsxceKpuWuTaj3G Jq6skFytRGKdpg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:55 2025 by rpki-client