This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft File: D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft (raw, json) Hash identifier: 8p03juBt5u1xz/NrFT74N1NZblJkPIua+dLxMgVd2Ko= Subject key identifier: B1:F7:DF:98:1F:A8:7F:08:80:F7:D0:11:93:EA:09:32:37:AA:DC:FA Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB Certificate issuer: /CN=0f92c52f86009879c177092f7cd83418b4df8cab Certificate serial: 019AF12D271F2129F8851A6852386EFAF1AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 01:00:59 +0000 Manifest this update: Sat 06 Dec 2025 01:00:59 +0000 Manifest next update: Sun 07 Dec 2025 01:00:59 +0000 Files and hashes: 1: D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl (hash: Qp5Dv9aE5u6QKNq4qIbT7vEHG02e+U3+mmxfP5Vwmyk=) 2: HUHlNiQYgJ4Q8Qh3sAD_OVXJBhA.roa (hash: OPxk8KCEOkzaDriX+1Y8hLRMwmqx3zDs8p9mPqnsEt0=) 3: PajWCIMvcFk4AhOAYqjPPCoKGSM.roa (hash: YLRXPcoHiAKu8WSdD1lhP04YPthD74gG0Yhmp7yGgeI=) 4: wkRan0gCCPqjhSya1MCejtYVUwQ.roa (hash: CcC9CLeeg2oAb+UFqiFxA3SwU8cWbyT2GAOTTlHtPbo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:27:1f:21:29:f8:85:1a:68:52:38:6e:fa:f1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab Validity Not Before: Dec 6 01:00:59 2025 GMT Not After : Dec 7 01:00:59 2025 GMT Subject: CN=b1f7df981fa87f0880f7d01193ea093237aadcfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f7:24:bd:e6:4f:63:7c:3b:52:25:58:50:92: d9:f4:6d:b3:90:b3:11:53:cc:c7:30:6d:40:3a:12: 15:35:1d:4d:02:31:27:9e:da:3a:9c:16:c3:b9:f5: d3:3f:ad:39:b0:d9:12:2c:85:aa:78:d8:b3:c7:fb: 1d:2d:2b:7a:b9:e2:84:b2:06:49:df:dd:f7:7b:b6: 96:6a:78:78:60:78:0b:fa:d8:de:05:71:1d:af:59: 7a:2d:28:2a:ca:39:b5:82:c2:9a:6e:e3:17:c0:8f: 82:74:8c:45:d0:94:b2:9b:50:9c:63:29:38:70:82: 01:7b:d7:55:c4:12:2c:40:21:c9:60:23:3c:f9:8f: ae:1b:22:a0:f7:57:aa:12:2f:02:d0:99:7d:f7:55: 00:25:28:e6:3d:58:49:6b:44:a3:a6:d7:a0:c9:db: 94:d4:91:8c:5f:ab:65:71:c6:07:36:f7:2e:8d:ef: 80:c6:bf:8f:fc:ab:ad:1e:5d:52:87:ca:7b:27:d8: 38:ce:2c:c4:01:c5:cc:f0:af:fa:f7:68:d8:5d:f3: 8b:c3:37:18:13:0d:db:e9:70:aa:1f:b1:97:70:08: de:a0:13:49:e8:f5:c6:ce:05:bf:76:eb:d8:d1:82: 6d:dd:ab:b9:42:24:65:9f:f6:aa:46:22:82:12:5c: 27:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F7:DF:98:1F:A8:7F:08:80:F7:D0:11:93:EA:09:32:37:AA:DC:FA X509v3 Authority Key Identifier: keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:7b:07:09:91:d6:45:79:1f:6e:e6:40:18:05:e6:c5:5c:b6: 9a:52:3f:1e:8a:b4:5e:3a:dd:90:41:00:3b:11:68:03:bb:20: 63:ee:7d:39:2f:b6:1f:91:10:32:33:14:6d:ab:b6:3d:ef:1a: 15:35:fd:09:03:65:1d:b9:72:be:6b:0b:dd:a3:0f:09:51:fa: 58:ce:04:63:51:a4:17:38:07:05:2e:c2:90:d5:e8:bd:71:89: d0:a4:59:3b:55:9f:2b:51:9c:ea:68:d5:5a:12:b1:f8:68:8f: 8e:6e:8b:43:cd:99:fe:a9:bf:6f:f4:49:72:63:ef:7b:22:cb: 5d:de:fd:48:97:b4:dc:d5:52:d3:31:1c:1a:88:f6:81:7e:da: 52:ab:52:06:db:fd:e6:99:0c:66:62:1d:3f:27:57:10:ff:56: 91:3b:83:84:3c:f1:16:67:91:af:72:a9:d1:e1:f9:44:bd:57: 94:c9:ba:0e:7b:d2:c2:94:b5:ea:54:e4:5f:cb:21:a9:84:c1: 57:95:c2:79:cc:c1:1c:fa:6a:5a:35:27:a1:87:e8:c3:07:c1: 61:a1:ae:6d:e5:5b:05:b2:71:51:d9:66:fa:c4:d5:2c:cc:e6: 11:0f:e7:06:e9:6b:32:49:52:3a:cb:2d:72:32:43:52:48:7e: a4:11:f3:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLScfISn4hRpoUjhu+vGuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOTJjNTJmODYwMDk4NzljMTc3MDkyZjdjZDgzNDE4YjRk ZjhjYWIwHhcNMjUxMjA2MDEwMDU5WhcNMjUxMjA3MDEwMDU5WjAzMTEwLwYDVQQD EyhiMWY3ZGY5ODFmYTg3ZjA4ODBmN2QwMTE5M2VhMDkzMjM3YWFkY2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/ckveZPY3w7UiVYUJLZ9G2zkLMR U8zHMG1AOhIVNR1NAjEnnto6nBbDufXTP605sNkSLIWqeNizx/sdLSt6ueKEsgZJ 3933e7aWanh4YHgL+tjeBXEdr1l6LSgqyjm1gsKabuMXwI+CdIxF0JSym1CcYyk4 cIIBe9dVxBIsQCHJYCM8+Y+uGyKg91eqEi8C0Jl991UAJSjmPVhJa0SjptegyduU 1JGMX6tlccYHNvcuje+Axr+P/KutHl1Sh8p7J9g4zizEAcXM8K/692jYXfOLwzcY Ew3b6XCqH7GXcAjeoBNJ6PXGzgW/duvY0YJt3au5QiRln/aqRiKCElwn3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLH335gfqH8IgPfQEZPqCTI3qtz6MB8GA1UdIwQY MBaAFA+SxS+GAJh5wXcJL3zYNBi034yrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDVMRkw0WUFtSG5CZHdrdmZOZzBHTFRmaktzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lOGMyODctZjA0OS00NTk1LTg2ZWIt MGJlMjA5ZmZiYWVjLzEvRDVMRkw0WUFtSG5CZHdrdmZOZzBHTFRmaktzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lOGMyODctZjA0OS00NTk1LTg2ZWItMGJlMjA5ZmZiYWVj LzEvRDVMRkw0WUFtSG5CZHdrdmZOZzBHTFRmaktzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXsHCZHW RXkfbuZAGAXmxVy2mlI/Hoq0XjrdkEEAOxFoA7sgY+59OS+2H5EQMjMUbau2Pe8a FTX9CQNlHblyvmsL3aMPCVH6WM4EY1GkFzgHBS7CkNXovXGJ0KRZO1WfK1Gc6mjV WhKx+GiPjm6LQ82Z/qm/b/RJcmPveyLLXd79SJe03NVS0zEcGoj2gX7aUqtSBtv9 5pkMZmIdPydXEP9WkTuDhDzxFmeRr3Kp0eH5RL1XlMm6DnvSwpS16lTkX8shqYTB V5XCeczBHPpqWjUnoYfowwfBYaGubeVbBbJxUdlm+sTVLMzmEQ/nBulrMklSOsst cjJDUkh+pBHzFw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:53 2025 by rpki-client