This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft File: d5LD_GkVSsfVFbysnaoH54vCKcw.mft (raw, json) Hash identifier: QTbrQUsUP/F4LXA7fAiaU9mAstZZrJ5y6ZQOqG9t5LQ= Subject key identifier: DB:4C:4E:DC:9F:BE:9B:44:A7:2D:C0:11:02:0A:78:7A:E5:55:9C:0D Authority key identifier: 77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC Certificate issuer: /CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc Certificate serial: 019AF2AD3F78BECF8C5F2019A1EFB01D6BAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 08:00:31 +0000 Manifest this update: Sat 06 Dec 2025 08:00:31 +0000 Manifest next update: Sun 07 Dec 2025 08:00:31 +0000 Files and hashes: 1: XufdK4JaU0kijhaCZqp6MWC7lI8.roa (hash: tAIQSyAZo/oGjmfexz3lVWcMQblwf+06mjxANWC5dis=) 2: d5LD_GkVSsfVFbysnaoH54vCKcw.crl (hash: hDOIjELZSySjXW0Fwi2hCFQNBRKjrpnuR7jlvHi8PYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:3f:78:be:cf:8c:5f:20:19:a1:ef:b0:1d:6b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc Validity Not Before: Dec 6 08:00:31 2025 GMT Not After : Dec 7 08:00:31 2025 GMT Subject: CN=db4c4edc9fbe9b44a72dc011020a787ae5559c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:32:f3:65:93:9f:b4:c9:10:e0:7d:b4:d3:84: 7e:c4:48:1d:aa:c4:7b:03:fe:ea:bb:00:56:27:82: 73:b8:a0:f1:dd:87:50:6d:b6:3e:60:e9:cd:9a:a9: fe:5c:b5:f9:46:2d:74:c9:1f:65:8d:71:c6:85:f5: c7:f4:4f:91:27:35:b1:85:7d:ed:17:e3:41:6e:c1: 5c:45:c9:3c:95:37:a7:7c:99:00:eb:96:a8:26:20: 5e:24:cb:da:52:4c:40:9b:e1:ed:3b:4c:b1:4b:46: ed:83:54:b1:e1:3c:0a:44:a8:9d:bd:e5:60:03:65: 30:83:ce:da:1e:05:c8:16:99:f7:de:6f:35:02:cb: 9c:43:b0:4b:ab:28:de:b8:df:02:f8:a9:cd:40:da: ee:45:10:5a:f2:f4:76:2e:99:8c:cd:d8:8e:8d:e9: 80:08:d0:a0:bc:e7:f7:ad:c0:d6:03:1c:6c:a9:af: 75:27:b1:d0:b0:47:bc:ef:ed:e4:a4:70:e8:10:8f: 32:a8:75:27:33:06:a8:cb:09:9e:a6:80:8d:85:e1: 59:72:77:a4:9a:40:e7:7b:40:4e:6f:2e:b6:0e:6c: 97:55:13:5a:b7:26:c4:71:05:3b:51:a4:1c:e0:ba: 7b:f8:31:cc:35:9d:9b:3d:03:eb:6d:92:d3:95:17: d5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4C:4E:DC:9F:BE:9B:44:A7:2D:C0:11:02:0A:78:7A:E5:55:9C:0D X509v3 Authority Key Identifier: keyid:77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:df:30:6d:fb:67:dd:aa:ef:f1:7d:4c:e3:fd:d9:da:de:4c: 54:cf:97:9b:d0:4e:95:a4:d9:04:55:f2:af:f6:d0:b3:6f:1c: 0d:0b:13:91:c8:95:06:48:b0:1a:10:8c:25:79:da:4f:f4:f2: a5:c5:b2:ce:22:dd:ec:e4:93:7e:3e:4c:3e:e4:83:14:b7:96: aa:32:84:d9:5d:b2:3d:a4:5e:20:7c:ff:d9:93:d6:1e:99:3e: 81:9d:bf:7f:6b:06:d6:c3:e3:8a:78:e3:db:c5:06:b6:f8:f6: 55:f9:77:c4:67:56:eb:92:c1:59:df:f9:3a:67:20:77:f5:d4: 8e:65:e3:2b:f5:f1:ed:32:e1:45:98:c6:e5:07:88:f7:cf:56: e7:c0:67:e0:40:cc:0e:b9:d8:f3:7e:fb:ff:3d:16:8c:94:7d: 43:32:b7:11:02:ed:3a:d0:0f:40:db:c5:52:36:18:99:5b:16: 46:5d:8e:29:95:49:b3:ad:62:38:34:2c:07:18:c1:80:d1:05: 50:f9:29:cb:f5:58:45:b7:ba:46:91:45:06:f2:5d:19:94:7b: 85:0a:7a:0f:93:b3:d6:1e:e0:37:29:9b:57:d7:86:f8:20:ac: 5c:99:b4:6f:21:7d:25:0b:90:5d:fb:8d:34:8a:d3:c0:1e:17: 13:44:d4:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrT94vs+MXyAZoe+wHWutMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OTJjM2ZjNjkxNTRhYzdkNTE1YmNhYzlkYWEwN2U3OGJj MjI5Y2MwHhcNMjUxMjA2MDgwMDMxWhcNMjUxMjA3MDgwMDMxWjAzMTEwLwYDVQQD EyhkYjRjNGVkYzlmYmU5YjQ0YTcyZGMwMTEwMjBhNzg3YWU1NTU5YzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjLzZZOftMkQ4H2004R+xEgdqsR7 A/7quwBWJ4JzuKDx3YdQbbY+YOnNmqn+XLX5Ri10yR9ljXHGhfXH9E+RJzWxhX3t F+NBbsFcRck8lTenfJkA65aoJiBeJMvaUkxAm+HtO0yxS0btg1Sx4TwKRKidveVg A2Uwg87aHgXIFpn33m81AsucQ7BLqyjeuN8C+KnNQNruRRBa8vR2LpmMzdiOjemA CNCgvOf3rcDWAxxsqa91J7HQsEe87+3kpHDoEI8yqHUnMwaoywmepoCNheFZcnek mkDne0BOby62DmyXVRNatybEcQU7UaQc4Lp7+DHMNZ2bPQPrbZLTlRfVBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtMTtyfvptEpy3AEQIKeHrlVZwNMB8GA1UdIwQY MBaAFHeSw/xpFUrH1RW8rJ2qB+eLwinMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC81MmI0OGQtMjhhOC00OGY1LWE0ZGYt NGRiNDBhMzY1NjNlLzEvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC81MmI0OGQtMjhhOC00OGY1LWE0ZGYtNGRiNDBhMzY1NjNl LzEvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANt8wbftn 3arv8X1M4/3Z2t5MVM+Xm9BOlaTZBFXyr/bQs28cDQsTkciVBkiwGhCMJXnaT/Ty pcWyziLd7OSTfj5MPuSDFLeWqjKE2V2yPaReIHz/2ZPWHpk+gZ2/f2sG1sPjinjj 28UGtvj2Vfl3xGdW65LBWd/5Omcgd/XUjmXjK/Xx7TLhRZjG5QeI989W58Bn4EDM DrnY8377/z0WjJR9QzK3EQLtOtAPQNvFUjYYmVsWRl2OKZVJs61iODQsBxjBgNEF UPkpy/VYRbe6RpFFBvJdGZR7hQp6D5Oz1h7gNymbV9eG+CCsXJm0byF9JQuQXfuN NIrTwB4XE0TUMA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:17:13 2025 by rpki-client