This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json) Hash identifier: /C1AELWkZfgDXEnDYNllwPFlPHAaAPI9+o++vqvjSyc= Subject key identifier: 6F:67:8D:2D:01:BD:8A:63:7F:38:3C:E2:16:DB:FD:89:84:53:5B:A1 Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be Certificate serial: 019AF12DEADBBF8C70FE0329DA4D64F5AEBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft Manifest number: 0E1C Signing time: Sat 06 Dec 2025 01:01:49 +0000 Manifest this update: Sat 06 Dec 2025 01:01:49 +0000 Manifest next update: Sun 07 Dec 2025 01:01:49 +0000 Files and hashes: 1: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: ZEKOCypS56InOqHvGsZNQ9U2YMxfH/Ft/3Lsrtx1PC8=) 2: KKoVkt36UzhB8KBbFPImmZW73vA.roa (hash: GhpkIl47GYlGJw2nWrVttpHKLmkRE0ZfoRg/RpNRI/I=) 3: fMybGYR-8tzcLwLk9F7xQBZ6-N4.roa (hash: Y2XsWw7qdiuLK4RPieRUDih+9enRniyBYvTmKwdcDsA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ea:db:bf:8c:70:fe:03:29:da:4d:64:f5:ae:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f91e5b58da326e654e994fef2195276759579be Validity Not Before: Dec 6 01:01:49 2025 GMT Not After : Dec 7 01:01:49 2025 GMT Subject: CN=6f678d2d01bd8a637f383ce216dbfd8984535ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c0:8d:04:08:a4:34:30:f8:75:79:63:f0:5d: 7a:97:60:6c:e8:ea:50:d6:e6:80:5f:9e:ef:24:16: 32:a4:eb:aa:93:ea:08:cb:08:18:2a:ac:51:2f:75: 81:af:b2:64:ca:a0:5c:7a:af:22:a4:8a:a3:d2:f7: 3a:60:e3:06:b9:aa:7d:cc:52:06:38:80:34:06:f4: 00:a1:60:13:40:e1:2f:a9:d9:13:5b:fe:81:1e:f5: ae:3c:20:53:e6:c9:92:75:4c:c1:19:d1:f7:66:50: 14:1d:84:63:5e:54:0c:b4:93:75:23:72:66:3c:f3: f3:7f:19:6f:ba:55:74:37:fe:f8:9e:8a:22:d7:51: 48:7a:83:21:b6:4c:21:57:a9:a1:8e:5c:b1:e1:21: 91:ad:8f:38:78:d1:1a:9d:2a:02:f6:08:ab:62:08: fd:06:85:b3:01:86:1f:15:b2:c0:e5:22:26:c4:84: d3:8c:c5:95:d9:5c:df:8d:7d:a7:e0:68:70:bb:1a: 5b:76:cf:3a:1f:d0:e7:43:92:af:6e:c6:42:14:ae: be:3d:0f:f6:42:57:b0:87:4d:eb:a7:d5:f9:87:6d: 11:dd:d4:e5:48:94:cb:46:23:b9:db:db:d4:2d:49: db:a0:03:98:c2:a9:65:d6:5d:d1:2c:f1:b2:13:03: 5c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:67:8D:2D:01:BD:8A:63:7F:38:3C:E2:16:DB:FD:89:84:53:5B:A1 X509v3 Authority Key Identifier: keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:1d:05:8a:e4:4e:23:4a:d5:d5:55:a7:79:20:77:9c:e1:5d: 39:6f:ce:0e:0f:38:85:c2:73:99:13:a7:11:05:9d:b5:0b:f7: a9:ef:82:f0:f3:88:62:2c:2a:e5:4a:ab:5d:54:a5:e1:22:19: 7c:20:8b:e9:33:6b:a5:bf:cb:58:3b:4e:16:c8:14:8e:e5:e8: 7f:a8:b8:e7:36:18:90:22:48:6a:da:52:c0:3c:82:e8:8c:a8: 29:9b:b3:4d:fd:35:db:81:56:cc:91:11:73:85:4d:73:08:1e: 43:5b:c0:72:88:72:42:bb:8e:4f:c1:95:5f:2c:fc:f7:e2:8d: e6:5e:24:63:93:03:a9:cd:65:4a:78:54:d9:60:53:d2:b6:e7: 48:30:2c:9e:89:5c:7c:5a:6b:43:ab:26:72:e1:38:5e:16:e7: 82:a6:4d:aa:d6:bf:57:8a:5c:d8:16:f1:ab:05:20:66:ee:d8: c9:92:4c:36:28:47:dc:1a:89:8a:5d:cd:c3:48:66:ce:5f:e2: 63:5c:df:0f:08:46:8d:9b:d9:ff:48:6f:d8:08:03:4e:0e:0f: 42:65:8f:0a:3e:46:b4:4f:da:b2:96:67:4a:c0:22:5a:59:e0: b0:e6:74:6e:c5:8c:4a:87:e6:8d:57:28:30:f7:bf:47:1a:c6: 99:8d:88:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLerbv4xw/gMp2k1k9a6/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOTFlNWI1OGRhMzI2ZTY1NGU5OTRmZWYyMTk1Mjc2NzU5 NTc5YmUwHhcNMjUxMjA2MDEwMTQ5WhcNMjUxMjA3MDEwMTQ5WjAzMTEwLwYDVQQD Eyg2ZjY3OGQyZDAxYmQ4YTYzN2YzODNjZTIxNmRiZmQ4OTg0NTM1YmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MCNBAikNDD4dXlj8F16l2Bs6OpQ 1uaAX57vJBYypOuqk+oIywgYKqxRL3WBr7JkyqBceq8ipIqj0vc6YOMGuap9zFIG OIA0BvQAoWATQOEvqdkTW/6BHvWuPCBT5smSdUzBGdH3ZlAUHYRjXlQMtJN1I3Jm PPPzfxlvulV0N/74nooi11FIeoMhtkwhV6mhjlyx4SGRrY84eNEanSoC9girYgj9 BoWzAYYfFbLA5SImxITTjMWV2VzfjX2n4Ghwuxpbds86H9DnQ5KvbsZCFK6+PQ/2 Qlewh03rp9X5h20R3dTlSJTLRiO529vULUnboAOYwqll1l3RLPGyEwNcLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9njS0BvYpjfzg84hbb/YmEU1uhMB8GA1UdIwQY MBaAFA+R5bWNoybmVOmU/vIZUnZ1lXm+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDVIbHRZMmpKdVpVNlpULThobFNkbldWZWI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yNjVlZmEtZjA0OS00NjQ3LThjZjEt ODI0Y2NlZmQ5YzgxLzEvRDVIbHRZMmpKdVpVNlpULThobFNkbldWZWI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yNjVlZmEtZjA0OS00NjQ3LThjZjEtODI0Y2NlZmQ5Yzgx LzEvRDVIbHRZMmpKdVpVNlpULThobFNkbldWZWI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVB0FiuRO I0rV1VWneSB3nOFdOW/ODg84hcJzmROnEQWdtQv3qe+C8POIYiwq5UqrXVSl4SIZ fCCL6TNrpb/LWDtOFsgUjuXof6i45zYYkCJIatpSwDyC6IyoKZuzTf0124FWzJER c4VNcwgeQ1vAcohyQruOT8GVXyz89+KN5l4kY5MDqc1lSnhU2WBT0rbnSDAsnolc fFprQ6smcuE4XhbngqZNqta/V4pc2BbxqwUgZu7YyZJMNihH3BqJil3Nw0hmzl/i Y1zfDwhGjZvZ/0hv2AgDTg4PQmWPCj5GtE/aspZnSsAiWlngsOZ0bsWMSofmjVco MPe/RxrGmY2IIw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:58 2025 by rpki-client