This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft File: d-L_RonUITUPdqNzvBGT5FG4HvU.mft (raw, json) Hash identifier: l6K9e4+oS7m9eFB6js303b2YIrOx1w727cyM9LzPBCM= Subject key identifier: 99:85:0F:E0:29:CD:F3:A8:ED:EB:51:81:E3:7A:C6:F6:B2:89:1E:63 Authority key identifier: 77:E2:FF:46:89:D4:21:35:0F:76:A3:73:BC:11:93:E4:51:B8:1E:F5 Certificate issuer: /CN=77e2ff4689d421350f76a373bc1193e451b81ef5 Certificate serial: 019AF3F7658872BD90B942CE49FA549171DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft Manifest number: 014A Signing time: Sat 06 Dec 2025 14:01:08 +0000 Manifest this update: Sat 06 Dec 2025 14:01:08 +0000 Manifest next update: Sun 07 Dec 2025 14:01:08 +0000 Files and hashes: 1: _jCuY0H7p6bIiBFSZYJo7QRa2GM.roa (hash: TpMghtYoXA8sj9zv0aUbBiasB0uWw4MufaB/nWeBcDs=) 2: d-L_RonUITUPdqNzvBGT5FG4HvU.crl (hash: 0qNF9jPH82yOozN31W1fMzfiZIeKihX6lG6V2z4JaMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:65:88:72:bd:90:b9:42:ce:49:fa:54:91:71:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77e2ff4689d421350f76a373bc1193e451b81ef5 Validity Not Before: Dec 6 14:01:08 2025 GMT Not After : Dec 7 14:01:08 2025 GMT Subject: CN=99850fe029cdf3a8edeb5181e37ac6f6b2891e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:46:7b:89:06:67:8b:eb:a8:8c:7f:59:d4:0a: 5b:db:3f:82:e8:57:ce:03:86:9c:23:d4:2b:a2:93: 72:2f:d7:97:8e:1e:ff:a2:27:ab:9e:67:26:08:7a: 7c:2c:5f:3f:1f:9c:49:ae:9d:a0:1d:3f:a0:f3:5b: 22:4b:4b:73:bf:6b:0c:41:c1:df:27:d0:9c:36:4d: 74:94:6a:c9:73:1c:ed:2d:f6:94:73:82:84:6d:7e: a3:a4:2e:08:ac:a0:e5:dc:86:82:ba:25:0d:73:d3: 14:cc:39:2e:a9:d0:74:0f:23:fe:59:79:e4:48:21: df:5a:d6:44:ee:cc:63:49:c5:f8:50:7c:ab:31:d8: b9:49:3e:e8:bb:c4:d1:ca:55:15:20:5a:74:6c:3c: a6:23:18:9a:86:01:63:65:33:fe:dc:f2:ec:d4:a3: cc:db:a5:1e:eb:0b:8f:b3:92:e5:40:1f:37:7f:2a: c8:c8:f0:cf:5b:d6:ac:19:9f:bf:3c:63:24:20:71: b5:6c:fd:36:c7:77:a5:29:f9:cb:9a:5a:a8:8a:db: ad:02:6c:17:47:65:50:d9:29:df:0b:bf:9d:48:75: bc:cf:c8:84:c8:94:a3:5b:0f:73:fd:93:38:cd:48: 87:f0:ef:db:37:55:59:38:13:5c:34:c1:35:19:bd: cd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:85:0F:E0:29:CD:F3:A8:ED:EB:51:81:E3:7A:C6:F6:B2:89:1E:63 X509v3 Authority Key Identifier: keyid:77:E2:FF:46:89:D4:21:35:0F:76:A3:73:BC:11:93:E4:51:B8:1E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c1:39:8e:99:eb:ce:0f:ea:5b:2a:7f:f8:47:a2:f4:11:0e: 1f:24:63:ca:64:65:97:f5:e2:68:dd:8e:8e:de:4e:8e:15:29: ce:b4:3b:b1:67:24:31:50:6e:4f:d7:f1:20:8a:d2:3b:2e:b8: 92:27:3f:e4:c6:bd:cd:76:13:5c:6f:81:11:0c:0a:8d:65:bb: f6:7c:3f:b8:3e:16:d3:bf:46:17:34:6c:19:3b:4e:6a:5a:09: f6:c6:23:d1:12:24:b7:2c:bc:e0:34:89:f8:91:e7:7f:65:37: ad:cc:e7:90:ab:e0:2f:a2:a6:9f:18:b2:00:da:dd:33:b4:f7: e8:0e:d2:d9:cf:5f:ab:9c:5d:d3:1f:16:e1:ce:2e:bb:36:a5: 0a:15:ae:f6:db:4b:b9:55:64:8b:a4:7f:37:43:ab:2f:12:95: 21:1a:56:aa:cf:d6:12:cd:e2:1c:91:11:d7:8c:7b:ae:e9:36: 28:8f:97:ca:ef:67:f5:32:b9:35:06:89:ef:40:dd:1a:70:08: 49:40:61:20:42:a8:87:4e:bf:e8:6a:8d:ea:48:ec:18:d6:19: 9e:0e:73:42:83:6b:a7:4f:40:d9:9b:48:82:7b:6c:84:aa:46: ff:30:fe:15:2d:b4:a8:83:04:11:3a:28:07:f6:a3:19:d2:16: dc:b3:52:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz92WIcr2QuULOSfpUkXHfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZTJmZjQ2ODlkNDIxMzUwZjc2YTM3M2JjMTE5M2U0NTFi ODFlZjUwHhcNMjUxMjA2MTQwMTA4WhcNMjUxMjA3MTQwMTA4WjAzMTEwLwYDVQQD Eyg5OTg1MGZlMDI5Y2RmM2E4ZWRlYjUxODFlMzdhYzZmNmIyODkxZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUZ7iQZni+uojH9Z1Apb2z+C6FfO A4acI9QropNyL9eXjh7/oiernmcmCHp8LF8/H5xJrp2gHT+g81siS0tzv2sMQcHf J9CcNk10lGrJcxztLfaUc4KEbX6jpC4IrKDl3IaCuiUNc9MUzDkuqdB0DyP+WXnk SCHfWtZE7sxjScX4UHyrMdi5ST7ou8TRylUVIFp0bDymIxiahgFjZTP+3PLs1KPM 26Ue6wuPs5LlQB83fyrIyPDPW9asGZ+/PGMkIHG1bP02x3elKfnLmlqoitutAmwX R2VQ2SnfC7+dSHW8z8iEyJSjWw9z/ZM4zUiH8O/bN1VZOBNcNME1Gb3NhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmFD+ApzfOo7etRgeN6xvayiR5jMB8GA1UdIwQY MBaAFHfi/0aJ1CE1D3ajc7wRk+RRuB71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZC1MX1JvblVJVFVQZHFOenZCR1Q1Rkc0SHZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jNTk2ZDktOWQ5YS00MDgxLWEyZjAt NTQ0NmQ4NmJjZmM2LzEvZC1MX1JvblVJVFVQZHFOenZCR1Q1Rkc0SHZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9jNTk2ZDktOWQ5YS00MDgxLWEyZjAtNTQ0NmQ4NmJjZmM2 LzEvZC1MX1JvblVJVFVQZHFOenZCR1Q1Rkc0SHZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8E5jpnr zg/qWyp/+Eei9BEOHyRjymRll/XiaN2Ojt5OjhUpzrQ7sWckMVBuT9fxIIrSOy64 kic/5Ma9zXYTXG+BEQwKjWW79nw/uD4W079GFzRsGTtOaloJ9sYj0RIktyy84DSJ +JHnf2U3rcznkKvgL6KmnxiyANrdM7T36A7S2c9fq5xd0x8W4c4uuzalChWu9ttL uVVki6R/N0OrLxKVIRpWqs/WEs3iHJER14x7ruk2KI+Xyu9n9TK5NQaJ70DdGnAI SUBhIEKoh06/6GqN6kjsGNYZng5zQoNrp09A2ZtIgntshKpG/zD+FS20qIMEEToo B/ajGdIW3LNSDg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:00:40 2025 by rpki-client