This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft File: DETz4ku_xgSOX_pQw9zjZP_AErA.mft (raw, json) Hash identifier: bt40i/Kv8V2/gxQFR3ox+FJvSwtpEWJkrxdGS74Ndls= Subject key identifier: E5:51:7B:CA:14:30:B8:E8:66:D2:E4:DD:CB:4B:41:53:A4:DB:F8:B5 Authority key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0 Certificate issuer: /CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0 Certificate serial: 019AF23FB68B73CB071AF52C242AEFD76C6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft Manifest number: 1428 Signing time: Sat 06 Dec 2025 06:00:53 +0000 Manifest this update: Sat 06 Dec 2025 06:00:53 +0000 Manifest next update: Sun 07 Dec 2025 06:00:53 +0000 Files and hashes: 1: DETz4ku_xgSOX_pQw9zjZP_AErA.crl (hash: UAlEXBAe5KOghkHWkYeimC8UacWYO178FbvgostvW6w=) 2: ZWVOs3WDW-rx5m7taQu6I2WYx7Q.roa (hash: yPh81fsK4TJM83HFw4j8d9BB5tZUMJFngOFcn+J9UgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b6:8b:73:cb:07:1a:f5:2c:24:2a:ef:d7:6c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0 Validity Not Before: Dec 6 06:00:53 2025 GMT Not After : Dec 7 06:00:53 2025 GMT Subject: CN=e5517bca1430b8e866d2e4ddcb4b4153a4dbf8b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:02:be:2a:b5:d3:1c:08:8e:dc:7a:44:c6:7f: 08:c1:b9:3d:60:72:5c:b6:4e:be:d5:61:5d:a0:a5: 84:b9:21:ed:38:af:aa:0c:6b:4f:58:ae:3b:42:e8: 3c:35:68:8a:2a:90:ea:a7:2d:a0:37:d9:2a:f9:f0: ac:1f:46:ee:31:9c:f3:6c:2c:4c:5e:dc:67:37:87: 02:46:6d:63:7f:c6:ae:5a:b5:c4:53:0a:0d:af:0c: 1b:43:9f:7e:c0:d5:9f:aa:1b:15:89:5c:dc:fc:af: 21:1b:e3:d6:ef:d8:7c:8d:65:eb:e6:a5:f7:00:e9: e7:ad:69:f0:62:77:fa:bd:7a:d3:ee:f3:8a:83:1b: da:19:32:fd:c1:99:5a:45:01:47:15:83:7c:27:af: c7:54:94:2b:ad:c3:22:c3:7f:eb:ce:ba:2d:f7:33: 19:03:3d:a2:76:1b:be:79:83:43:78:7f:0e:19:65: 83:93:d7:c5:52:ed:c5:8f:c7:f2:13:14:7a:93:45: c4:af:17:50:c8:9f:d0:9b:f5:12:26:fd:1b:ba:55: 4b:c5:66:b1:c6:28:64:67:2e:de:b6:19:cf:65:f8: 8c:f8:05:53:82:ec:62:b8:b6:1a:78:db:21:5c:4a: ab:8a:78:bb:01:03:cf:88:93:c3:42:67:58:dd:97: 50:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:51:7B:CA:14:30:B8:E8:66:D2:E4:DD:CB:4B:41:53:A4:DB:F8:B5 X509v3 Authority Key Identifier: keyid:0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:10:04:2f:ab:f5:42:54:e7:14:d4:12:9f:a4:fe:86:10:1c: 11:14:f0:6b:94:e2:0e:9f:94:94:97:48:01:7f:99:f0:fa:12: 0d:f4:27:a0:85:c0:b9:10:7c:40:28:2d:3c:f9:02:43:1d:a4: 20:67:53:19:5e:76:9d:ed:57:9e:2e:62:38:b4:8b:64:2a:74: 2a:b7:e5:47:cc:61:33:f3:bb:54:56:30:e2:5f:52:44:df:de: 4f:71:8c:d1:23:e4:e1:65:25:73:44:6e:32:eb:66:a9:d4:a1: 48:28:2c:54:9d:71:33:f6:3d:48:86:96:b2:02:77:de:7d:41: cb:b4:da:61:a1:c5:35:9b:8f:b7:5b:83:68:c3:42:d8:b4:59: 63:6c:6d:53:6f:f4:9e:35:40:03:2b:a7:2f:83:f0:08:8f:7a: 32:52:46:b7:fd:9d:55:b4:70:4d:4c:03:9a:f5:19:e7:0b:60: e7:ab:28:87:42:0d:16:6d:5b:05:0b:48:0b:61:a3:c0:35:4d: a3:d1:99:55:ae:32:eb:eb:75:8a:51:7c:ec:af:06:ca:60:3f: 8b:d4:50:75:c0:2d:f7:3f:87:2c:a4:e1:fe:9d:0f:6b:65:76: db:a6:86:a3:57:66:30:d2:e5:fd:f3:02:48:38:ba:28:a4:df: c4:65:b4:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7aLc8sHGvUsJCrv12xrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNDRmM2UyNGJiZmM2MDQ4ZTVmZmE1MGMzZGNlMzY0ZmZj MDEyYjAwHhcNMjUxMjA2MDYwMDUzWhcNMjUxMjA3MDYwMDUzWjAzMTEwLwYDVQQD EyhlNTUxN2JjYTE0MzBiOGU4NjZkMmU0ZGRjYjRiNDE1M2E0ZGJmOGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQK+KrXTHAiO3HpExn8Iwbk9YHJc tk6+1WFdoKWEuSHtOK+qDGtPWK47Qug8NWiKKpDqpy2gN9kq+fCsH0buMZzzbCxM XtxnN4cCRm1jf8auWrXEUwoNrwwbQ59+wNWfqhsViVzc/K8hG+PW79h8jWXr5qX3 AOnnrWnwYnf6vXrT7vOKgxvaGTL9wZlaRQFHFYN8J6/HVJQrrcMiw3/rzrot9zMZ Az2idhu+eYNDeH8OGWWDk9fFUu3Fj8fyExR6k0XErxdQyJ/Qm/USJv0bulVLxWax xihkZy7ethnPZfiM+AVTguxiuLYaeNshXEqrini7AQPPiJPDQmdY3ZdQTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVRe8oUMLjoZtLk3ctLQVOk2/i1MB8GA1UdIwQY MBaAFAxE8+JLv8YEjl/6UMPc42T/wBKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREVUejRrdV94Z1NPWF9wUXc5empaUF9BRXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85OTE4YWEtMzQ3ZC00ODc4LWExNmIt OGFjN2JlNDZjYzRiLzEvREVUejRrdV94Z1NPWF9wUXc5empaUF9BRXJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS85OTE4YWEtMzQ3ZC00ODc4LWExNmItOGFjN2JlNDZjYzRi LzEvREVUejRrdV94Z1NPWF9wUXc5empaUF9BRXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxAEL6v1 QlTnFNQSn6T+hhAcERTwa5TiDp+UlJdIAX+Z8PoSDfQnoIXAuRB8QCgtPPkCQx2k IGdTGV52ne1Xni5iOLSLZCp0KrflR8xhM/O7VFYw4l9SRN/eT3GM0SPk4WUlc0Ru MutmqdShSCgsVJ1xM/Y9SIaWsgJ33n1By7TaYaHFNZuPt1uDaMNC2LRZY2xtU2/0 njVAAyunL4PwCI96MlJGt/2dVbRwTUwDmvUZ5wtg56soh0INFm1bBQtIC2GjwDVN o9GZVa4y6+t1ilF87K8GymA/i9RQdcAt9z+HLKTh/p0Pa2V226aGo1dmMNLl/fMC SDi6KKTfxGW0/g== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:29 2025 by rpki-client