This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json) Hash identifier: i8thD2OHU7yD+JsWIV8MW6t2NkWW68W5aWcEuNgtRdU= Subject key identifier: 19:BB:8C:DF:79:25:22:4D:4E:83:3F:AD:15:49:70:AA:3B:8E:8D:D7 Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83 Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83 Certificate serial: 019AF2401597608B92A24F0F478DD6C0F246 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft Manifest number: 0570 Signing time: Sat 06 Dec 2025 06:01:17 +0000 Manifest this update: Sat 06 Dec 2025 06:01:17 +0000 Manifest next update: Sun 07 Dec 2025 06:01:17 +0000 Files and hashes: 1: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: mzqQdlzzZn9XSkU4SVloZHBagmLRkkZHejXqV2qAh2A=) 2: yErW5kNKHDcTg-fzTjTLkaeTdfs.roa (hash: kizhklattplgXfiOmItfgbUnFHeiT1NCHm8Wv3r0lL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:15:97:60:8b:92:a2:4f:0f:47:8d:d6:c0:f2:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83 Validity Not Before: Dec 6 06:01:17 2025 GMT Not After : Dec 7 06:01:17 2025 GMT Subject: CN=19bb8cdf7925224d4e833fad154970aa3b8e8dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:43:22:60:3e:6d:bc:4c:64:b5:11:a9:aa:3e: 8f:26:28:95:4e:fe:33:84:5a:ad:6f:a3:0d:5c:1c: b7:09:3b:68:c0:3e:1b:aa:b7:e0:97:af:9a:f5:51: 5b:65:cd:d5:f5:19:b8:fa:01:d2:9d:cd:1e:46:04: 20:d1:a2:44:e7:8f:ea:44:70:bd:13:ed:9b:5c:f5: 43:46:20:0f:b2:5d:a8:47:73:05:c6:8c:ea:77:c7: 67:97:32:c0:82:1f:4b:46:53:aa:8c:75:38:ce:7e: 74:1c:9e:b5:b6:17:71:05:ab:0e:54:47:78:88:54: 61:a1:2a:2b:b1:fc:08:61:57:6a:6e:07:8a:10:70: d4:42:8d:9e:45:1e:ff:18:47:ca:04:31:d6:ed:79: 6f:ea:6f:39:d6:e5:6b:c8:19:15:98:92:77:01:bd: 55:76:67:99:41:dc:41:f5:6a:77:1f:09:83:56:ba: 71:80:a8:74:62:90:a3:6c:2c:a3:17:c5:df:85:c0: 2e:ed:7e:5e:99:03:3b:4d:70:2c:25:32:8c:5b:5c: 73:34:ae:41:2d:be:a2:68:c3:d5:97:e9:b3:ef:d2: 02:e4:4c:49:e8:1a:e0:41:ec:24:cf:26:4e:c4:a2: 4a:39:ad:d7:b8:db:85:c9:7c:d4:35:d8:02:21:18: 86:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BB:8C:DF:79:25:22:4D:4E:83:3F:AD:15:49:70:AA:3B:8E:8D:D7 X509v3 Authority Key Identifier: keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:9d:ca:56:dc:04:9f:48:cb:1d:f6:47:20:a3:f8:fb:67:19: d7:ea:56:d6:c0:48:56:54:f8:04:01:c7:4d:02:30:8e:10:3e: 8c:53:75:8f:5d:e1:c4:81:fc:f0:d0:4b:04:08:75:61:56:05: 21:65:2d:69:52:f8:c4:b5:b6:18:51:07:43:03:52:28:d8:f6: 8b:b2:41:4c:ce:ab:b1:3d:7b:bd:cf:ba:e4:6b:b4:8b:7e:03: 71:c4:b4:bc:2b:da:ec:38:44:63:e5:d4:81:6c:47:3a:a6:f6: fe:3d:4d:c3:32:c9:39:d4:e8:7f:07:4e:c4:40:cb:83:51:54: 23:1d:40:ed:fe:3a:e7:e7:72:c9:6c:0c:f4:7f:18:ea:3f:07: 2b:ea:ca:09:fd:4e:39:dc:26:c9:8d:89:b0:59:79:7d:25:e5: 2a:a5:18:77:43:86:99:18:11:28:2b:d9:e5:13:be:32:19:0f: 71:ea:b1:e1:96:57:38:3d:dd:be:6c:02:5b:4a:30:02:58:1a: 4d:fc:43:8b:d5:30:7e:a2:67:10:fd:88:c8:26:cc:b1:e3:80: 55:38:1a:7a:d3:51:86:5a:73:90:a0:cd:4d:02:d6:10:c4:af: 2c:f7:0f:2d:62:14:14:24:74:9e:f5:1e:4d:2d:ef:bf:27:67: ee:0a:79:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBWXYIuSok8PR43WwPJGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOTI1NjkxNjAzOTAzZWYyNDQ4NWNiNGJmMzVlMjgzMDc4 NjdiODMwHhcNMjUxMjA2MDYwMTE3WhcNMjUxMjA3MDYwMTE3WjAzMTEwLwYDVQQD EygxOWJiOGNkZjc5MjUyMjRkNGU4MzNmYWQxNTQ5NzBhYTNiOGU4ZGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUMiYD5tvExktRGpqj6PJiiVTv4z hFqtb6MNXBy3CTtowD4bqrfgl6+a9VFbZc3V9Rm4+gHSnc0eRgQg0aJE54/qRHC9 E+2bXPVDRiAPsl2oR3MFxozqd8dnlzLAgh9LRlOqjHU4zn50HJ61thdxBasOVEd4 iFRhoSorsfwIYVdqbgeKEHDUQo2eRR7/GEfKBDHW7Xlv6m851uVryBkVmJJ3Ab1V dmeZQdxB9Wp3HwmDVrpxgKh0YpCjbCyjF8XfhcAu7X5emQM7TXAsJTKMW1xzNK5B Lb6iaMPVl+mz79IC5ExJ6BrgQewkzyZOxKJKOa3XuNuFyXzUNdgCIRiGBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBm7jN95JSJNToM/rRVJcKo7jo3XMB8GA1UdIwQY MBaAFA+SVpFgOQPvJEhctL814oMHhnuDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDVKV2tXQTVBLThrU0Z5MHZ6WGlnd2VHZTRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mZjkyNTItM2RiNC00NTVmLWIyMGYt ZTNlMzAyMDA1ZDhmLzEvRDVKV2tXQTVBLThrU0Z5MHZ6WGlnd2VHZTRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9mZjkyNTItM2RiNC00NTVmLWIyMGYtZTNlMzAyMDA1ZDhm LzEvRDVKV2tXQTVBLThrU0Z5MHZ6WGlnd2VHZTRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAep3KVtwE n0jLHfZHIKP4+2cZ1+pW1sBIVlT4BAHHTQIwjhA+jFN1j13hxIH88NBLBAh1YVYF IWUtaVL4xLW2GFEHQwNSKNj2i7JBTM6rsT17vc+65Gu0i34DccS0vCva7DhEY+XU gWxHOqb2/j1NwzLJOdTofwdOxEDLg1FUIx1A7f465+dyyWwM9H8Y6j8HK+rKCf1O OdwmyY2JsFl5fSXlKqUYd0OGmRgRKCvZ5RO+MhkPceqx4ZZXOD3dvmwCW0owAlga TfxDi9UwfqJnEP2IyCbMseOAVTgaetNRhlpzkKDNTQLWEMSvLPcPLWIUFCR0nvUe TS3vvydn7gp5xA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:11 2025 by rpki-client