This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft File: DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json) Hash identifier: Nxs+xRSstbQSWxTp0NXZrCigkpsIugyGMl5Tt99hVSo= Subject key identifier: 95:86:59:5F:5E:5D:43:FF:4E:EC:C5:42:BA:DB:BC:73:9D:9F:AB:7D Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E Certificate issuer: /CN=0e2283e6e6af991422743711f7a723137680e69e Certificate serial: 019AF20929443918DEFF1021269441E8056C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft Manifest number: 057C Signing time: Sat 06 Dec 2025 05:01:17 +0000 Manifest this update: Sat 06 Dec 2025 05:01:17 +0000 Manifest next update: Sun 07 Dec 2025 05:01:17 +0000 Files and hashes: 1: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: BmzuP+xk1DmpW1CrLhM6XbXVJunq8NQML3gT8nyFUFg=) 2: H09sImQpPd7oxswyyMfYCrHeDVg.roa (hash: F88ZTfKzhXNpAdlmJ7zmMSZP6dr7sViXeL2PLZiWpvA=) 3: Xy-GvzWZoQ4DZimCZXffSq7urSs.roa (hash: ueXh7ktY0jc26A3LbRVHrwaonrcTqoMtDjp0hV9hqJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:29:44:39:18:de:ff:10:21:26:94:41:e8:05:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e Validity Not Before: Dec 6 05:01:17 2025 GMT Not After : Dec 7 05:01:17 2025 GMT Subject: CN=9586595f5e5d43ff4eecc542badbbc739d9fab7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9e:59:37:98:b9:b2:5f:80:0b:15:6a:bf:da: 4c:c5:f9:44:17:85:96:bf:e1:9a:d8:f1:c0:95:9e: db:97:39:d6:49:ac:ea:6c:b2:fc:e8:90:61:fd:30: ee:fd:3d:04:9c:19:d0:fd:5d:cc:28:0c:57:b5:d7: ba:30:6f:be:51:a2:87:c3:82:ca:b0:83:23:74:df: 08:71:c9:9e:9e:d4:6c:6d:e1:f0:52:75:5e:b6:91: fe:f9:51:cb:56:70:a0:46:33:cc:72:be:c3:75:20: 99:dd:4c:0a:9f:64:58:b6:31:4b:b5:87:6f:91:18: 9a:3a:7e:1b:f8:21:c7:03:a9:77:78:d9:0a:a4:8f: b5:3f:ea:91:49:81:1d:fb:99:fd:44:df:1e:93:12: 02:b6:7d:14:84:5a:35:6b:5b:08:c7:42:9f:1a:90: 7b:07:13:29:06:ac:c5:2f:c7:96:6c:c2:b9:fe:08: c6:03:9a:ea:7f:db:dc:1b:b2:c5:f0:33:dc:12:46: ef:16:c9:2d:0a:c0:8c:8c:72:43:cd:eb:36:3b:41: f1:58:e1:c8:c1:67:d1:39:c8:4f:f1:24:a4:6e:4d: b6:27:6a:4f:5f:a1:eb:a7:68:97:30:b7:de:e8:d2: 8f:9c:32:21:40:ac:ac:d1:fe:02:20:4c:a7:fa:64: 26:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:86:59:5F:5E:5D:43:FF:4E:EC:C5:42:BA:DB:BC:73:9D:9F:AB:7D X509v3 Authority Key Identifier: keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:9c:85:6f:4a:bb:46:16:0a:fa:10:e9:dc:9f:37:32:15:88: 12:2d:66:cc:21:14:35:3e:ba:db:2a:70:e9:6d:fd:4f:5d:cc: 5b:1a:9e:9f:aa:72:ba:11:6a:c7:18:d1:68:10:8a:a8:25:dc: 5c:79:32:4a:b6:fe:c2:00:c3:e7:44:de:60:b0:5f:ce:29:34: f8:73:86:18:86:d4:6d:fc:e2:04:02:31:7c:30:de:40:3e:41: ef:ea:53:54:22:6c:44:6d:b0:f9:fb:be:2f:a8:74:d4:5a:b0: 3e:16:6c:f8:bb:91:8a:2c:00:78:74:1f:ea:01:d6:11:f7:c0: 52:d2:d2:f6:c8:fe:ed:05:ec:36:ef:b6:9b:20:4f:81:62:cb: ba:dc:7d:f1:f6:cd:e1:e6:db:66:d2:e2:f0:d3:e3:ba:d8:b5: 6d:6c:43:c7:4e:98:06:fc:98:f5:07:15:c9:41:c6:bd:2c:cd: f8:89:68:c5:5a:1b:63:be:b7:5c:f3:97:f4:3c:24:d7:a7:82: 73:00:f5:a1:0b:e8:38:f6:4a:77:c4:8c:4f:0e:0d:a8:61:3c: 56:ff:ca:b6:ff:04:9e:5e:f0:af:dd:75:e5:9b:b4:cb:77:7f: 74:78:1d:78:d0:70:6f:24:fb:d1:a5:1f:8a:69:73:5b:ae:ca: b4:df:5c:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSlEORje/xAhJpRB6AVsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjI4M2U2ZTZhZjk5MTQyMjc0MzcxMWY3YTcyMzEzNzY4 MGU2OWUwHhcNMjUxMjA2MDUwMTE3WhcNMjUxMjA3MDUwMTE3WjAzMTEwLwYDVQQD Eyg5NTg2NTk1ZjVlNWQ0M2ZmNGVlY2M1NDJiYWRiYmM3MzlkOWZhYjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ5ZN5i5sl+ACxVqv9pMxflEF4WW v+Ga2PHAlZ7blznWSazqbLL86JBh/TDu/T0EnBnQ/V3MKAxXtde6MG++UaKHw4LK sIMjdN8IccmentRsbeHwUnVetpH++VHLVnCgRjPMcr7DdSCZ3UwKn2RYtjFLtYdv kRiaOn4b+CHHA6l3eNkKpI+1P+qRSYEd+5n9RN8ekxICtn0UhFo1a1sIx0KfGpB7 BxMpBqzFL8eWbMK5/gjGA5rqf9vcG7LF8DPcEkbvFsktCsCMjHJDzes2O0HxWOHI wWfROchP8SSkbk22J2pPX6Hrp2iXMLfe6NKPnDIhQKys0f4CIEyn+mQmEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWGWV9eXUP/TuzFQrrbvHOdn6t9MB8GA1UdIwQY MBaAFA4ig+bmr5kUInQ3EfenIxN2gOaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGlLRDV1YXZtUlFpZERjUjk2Y2pFM2FBNXA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84NDc1MGYtNzZjNC00MWVlLTg1MTct ZTBhZGFiN2YxMTEyLzEvRGlLRDV1YXZtUlFpZERjUjk2Y2pFM2FBNXA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi84NDc1MGYtNzZjNC00MWVlLTg1MTctZTBhZGFiN2YxMTEy LzEvRGlLRDV1YXZtUlFpZERjUjk2Y2pFM2FBNXA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJyFb0q7 RhYK+hDp3J83MhWIEi1mzCEUNT662ypw6W39T13MWxqen6pyuhFqxxjRaBCKqCXc XHkySrb+wgDD50TeYLBfzik0+HOGGIbUbfziBAIxfDDeQD5B7+pTVCJsRG2w+fu+ L6h01FqwPhZs+LuRiiwAeHQf6gHWEffAUtLS9sj+7QXsNu+2myBPgWLLutx98fbN 4ebbZtLi8NPjuti1bWxDx06YBvyY9QcVyUHGvSzN+IloxVobY763XPOX9Dwk16eC cwD1oQvoOPZKd8SMTw4NqGE8Vv/Ktv8Enl7wr9115Zu0y3d/dHgdeNBwbyT70aUf imlzW67KtN9clw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:10:10 2025 by rpki-client