This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft File: d5pKQpXGOP3nYPPNpHbYv8JxErI.mft (raw, json) Hash identifier: tcEooeinj6Kab+8hfAtpXvnyuQoCCcNkhJFgw3VGQ94= Subject key identifier: 6A:64:77:64:30:09:E1:33:57:60:49:CE:50:77:61:E1:AF:43:DC:DF Authority key identifier: 77:9A:4A:42:95:C6:38:FD:E7:60:F3:CD:A4:76:D8:BF:C2:71:12:B2 Certificate issuer: /CN=779a4a4295c638fde760f3cda476d8bfc27112b2 Certificate serial: 019AF0BF828A263E6522AF01AB838B552E31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft Manifest number: 0216 Signing time: Fri 05 Dec 2025 23:01:13 +0000 Manifest this update: Fri 05 Dec 2025 23:01:13 +0000 Manifest next update: Sat 06 Dec 2025 23:01:13 +0000 Files and hashes: 1: 9YQA36vAku85UbE81d8YCXXLJnY.roa (hash: Aeb9cL8NYmy9yNSDJcp65b2WQtEKFZt794slbkjrbPk=) 2: d5pKQpXGOP3nYPPNpHbYv8JxErI.crl (hash: CS2P8ktRo5ul4oMRxH7A3JETTCU5fce9H9JUUqyI8b0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:82:8a:26:3e:65:22:af:01:ab:83:8b:55:2e:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=779a4a4295c638fde760f3cda476d8bfc27112b2 Validity Not Before: Dec 5 23:01:13 2025 GMT Not After : Dec 6 23:01:13 2025 GMT Subject: CN=6a6477643009e133576049ce507761e1af43dcdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:f6:51:c6:18:ba:90:51:38:f7:64:c3:2d: a3:2f:83:39:b0:ca:0a:b1:63:61:94:9e:04:2c:91: a9:0c:6b:8e:7f:4e:5e:8c:a0:ff:a6:45:44:a6:95: 83:3b:de:b3:a1:d0:bc:9a:5b:4d:d7:48:b7:77:ec: 71:c2:1f:40:dc:4b:3e:7e:5e:ed:89:d5:cb:dd:8f: ac:86:ea:45:d8:8f:11:53:65:bc:fb:aa:a1:97:6a: 57:5a:bc:d1:73:90:81:1b:62:fd:73:c2:08:1a:8a: e6:0c:3e:eb:b2:42:8b:c8:86:40:36:c5:ff:0b:b5: 5e:23:f4:60:b5:97:41:95:70:5e:49:b7:a2:be:dd: 2c:f5:73:d0:e2:b8:47:09:6c:fd:8d:53:5a:17:99: 8c:79:2c:7d:bc:16:ef:72:62:17:75:a4:5a:5a:6a: e6:09:2b:e6:84:f1:a7:a3:e0:6b:fe:db:92:04:b6: d1:c4:3e:50:f9:5b:91:9b:7e:07:ae:a4:e4:13:8e: 67:4d:c7:0a:e0:bb:ac:78:35:24:f9:e0:a4:73:43: 20:3c:2d:7f:ab:90:f2:9e:00:88:0d:17:81:4c:ed: ae:8a:b2:90:95:a2:78:bd:d1:f1:5a:64:69:05:67: 38:6c:62:e7:80:5e:39:35:09:a8:6a:0a:1b:a3:12: 79:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:64:77:64:30:09:E1:33:57:60:49:CE:50:77:61:E1:AF:43:DC:DF X509v3 Authority Key Identifier: keyid:77:9A:4A:42:95:C6:38:FD:E7:60:F3:CD:A4:76:D8:BF:C2:71:12:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:97:53:28:fe:69:68:d2:09:0e:48:cb:46:8c:99:f5:d9:70: 26:bd:8d:b4:50:a8:1d:96:ff:a6:6d:7f:31:13:52:56:ff:57: be:1f:9b:18:2c:7c:7b:14:53:e7:22:d1:41:39:9e:4f:a6:a2: 7a:6f:36:5e:14:42:21:9a:7f:d7:d1:08:2c:bb:ad:07:1c:69: 9a:d2:60:88:e6:1e:7e:b2:bf:e5:f4:3f:a0:f5:61:7a:ae:83: a0:b8:0c:bd:b0:4e:44:cc:8a:6e:d9:f9:2f:a1:e0:57:50:54: d6:a4:9d:42:fa:42:e3:af:36:4f:27:43:2d:cb:d6:4d:a3:91: ff:51:13:f9:e8:3c:2f:ea:82:3b:59:13:a5:0e:d1:d8:a2:87: 07:4a:9b:6f:b9:39:c3:03:f3:bf:86:d7:79:2e:c1:d2:de:41: d9:75:e5:93:45:da:14:b5:9e:5c:71:d7:60:13:91:51:27:2e: 0d:9c:f3:35:9d:eb:01:be:49:38:bf:8c:36:8c:38:4c:2c:1a: 2e:2d:33:bf:c7:6b:41:fa:da:ce:54:2a:88:bf:8a:93:e0:2e: c0:2e:6d:59:a1:f7:2b:91:cc:bd:85:47:86:93:90:b6:4b:b6: 6b:6d:8a:c0:99:1b:06:8e:de:04:e1:4f:f9:e5:56:b3:a5:80: 87:a2:74:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4KKJj5lIq8Bq4OLVS4xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OWE0YTQyOTVjNjM4ZmRlNzYwZjNjZGE0NzZkOGJmYzI3 MTEyYjIwHhcNMjUxMjA1MjMwMTEzWhcNMjUxMjA2MjMwMTEzWjAzMTEwLwYDVQQD Eyg2YTY0Nzc2NDMwMDllMTMzNTc2MDQ5Y2U1MDc3NjFlMWFmNDNkY2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYD2UcYYupBROPdkwy2jL4M5sMoK sWNhlJ4ELJGpDGuOf05ejKD/pkVEppWDO96zodC8mltN10i3d+xxwh9A3Es+fl7t idXL3Y+shupF2I8RU2W8+6qhl2pXWrzRc5CBG2L9c8IIGormDD7rskKLyIZANsX/ C7VeI/RgtZdBlXBeSbeivt0s9XPQ4rhHCWz9jVNaF5mMeSx9vBbvcmIXdaRaWmrm CSvmhPGno+Br/tuSBLbRxD5Q+VuRm34HrqTkE45nTccK4LuseDUk+eCkc0MgPC1/ q5DyngCIDReBTO2uirKQlaJ4vdHxWmRpBWc4bGLngF45NQmoagoboxJ5iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpkd2QwCeEzV2BJzlB3YeGvQ9zfMB8GA1UdIwQY MBaAFHeaSkKVxjj952DzzaR22L/CcRKyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDVwS1FwWEdPUDNuWVBQTnBIYll2OEp4RXJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mZDg5ZjktOThiNi00MjE3LWJjY2Qt NjJjNjdkNGJjNTQ2LzEvZDVwS1FwWEdPUDNuWVBQTnBIYll2OEp4RXJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mZDg5ZjktOThiNi00MjE3LWJjY2QtNjJjNjdkNGJjNTQ2 LzEvZDVwS1FwWEdPUDNuWVBQTnBIYll2OEp4RXJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5dTKP5p aNIJDkjLRoyZ9dlwJr2NtFCoHZb/pm1/MRNSVv9Xvh+bGCx8exRT5yLRQTmeT6ai em82XhRCIZp/19EILLutBxxpmtJgiOYefrK/5fQ/oPVheq6DoLgMvbBORMyKbtn5 L6HgV1BU1qSdQvpC4682TydDLcvWTaOR/1ET+eg8L+qCO1kTpQ7R2KKHB0qbb7k5 wwPzv4bXeS7B0t5B2XXlk0XaFLWeXHHXYBORUScuDZzzNZ3rAb5JOL+MNow4TCwa Li0zv8drQfrazlQqiL+Kk+AuwC5tWaH3K5HMvYVHhpOQtku2a22KwJkbBo7eBOFP +eVWs6WAh6J0Bw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:33 2025 by rpki-client