This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft File: DefybbQ61DIFvrBn_Qqz4wAnhl0.mft (raw, json) Hash identifier: eMwTWmK7NsJbtHtWW7h2APAuSNdh/MVUkYVVJo8tWac= Subject key identifier: 4F:3B:FB:7F:19:29:32:5C:45:80:20:23:18:87:43:40:EA:17:A7:1D Authority key identifier: 0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D Certificate issuer: /CN=0de7f26db43ad43205beb067fd0ab3e30027865d Certificate serial: 019AF163FCEF613E93804D66A4268531D6ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft Manifest number: 148F Signing time: Sat 06 Dec 2025 02:00:53 +0000 Manifest this update: Sat 06 Dec 2025 02:00:53 +0000 Manifest next update: Sun 07 Dec 2025 02:00:53 +0000 Files and hashes: 1: 69ehIxwfed5HZyZV9c2Bvvjf_kA.roa (hash: ZxU5cKBsS8xLFH6sctBsWlQRFFqOiJR2279n4TmOSw4=) 2: DefybbQ61DIFvrBn_Qqz4wAnhl0.crl (hash: byNyL+k2PSnUYlxj0kB1RZgcW8tQrs4AT4T6CKg714Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:fc:ef:61:3e:93:80:4d:66:a4:26:85:31:d6:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0de7f26db43ad43205beb067fd0ab3e30027865d Validity Not Before: Dec 6 02:00:53 2025 GMT Not After : Dec 7 02:00:53 2025 GMT Subject: CN=4f3bfb7f1929325c4580202318874340ea17a71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8f:b4:3a:9e:bd:00:75:da:74:6a:45:99:13: 08:68:b5:43:ef:8b:39:3b:c2:44:e3:5b:54:a1:fc: a2:a8:5e:44:b9:fe:52:ef:11:f9:46:9b:f8:f0:6f: bf:7e:e5:b3:af:4a:82:c5:a2:c4:3b:f5:c2:1e:68: 24:3a:2f:19:cd:d7:71:44:b3:ae:22:16:3f:ed:75: a4:08:8b:21:7c:30:e1:ac:66:32:1b:53:2a:a1:2d: 68:6c:38:68:8c:7c:6b:ee:16:12:3e:a6:a1:5c:9d: e3:16:5f:80:b1:14:db:38:79:fa:14:e2:da:0f:7c: 25:37:1d:d5:8e:72:85:8d:33:01:fd:ca:28:c4:bf: 5e:df:3a:1f:a4:4e:02:89:50:02:51:b8:68:f3:d6: c3:16:87:1e:1e:94:51:d0:1c:5b:68:8f:1c:eb:0c: 9c:f1:0a:1c:1a:6f:29:b5:ea:9d:69:bf:fb:99:8e: bd:d6:81:b0:48:99:d1:b1:56:8b:42:d9:2b:b8:16: 45:7f:cd:4e:e6:a3:16:39:36:ef:69:ef:9e:23:fc: 32:c6:c0:93:88:f1:86:0d:d8:9a:bb:4c:71:a2:14: f2:fc:d7:f7:92:74:d1:ca:53:0f:37:af:eb:04:ce: 43:81:41:46:1e:37:61:d9:49:d2:b2:45:a7:42:2e: 03:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3B:FB:7F:19:29:32:5C:45:80:20:23:18:87:43:40:EA:17:A7:1D X509v3 Authority Key Identifier: keyid:0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:38:b4:c0:77:84:b4:0d:a9:37:c7:ca:ea:ba:3b:0f:2f:42: 0a:83:8e:18:c3:81:76:b7:0b:b5:0f:95:27:73:12:66:4a:84: f8:8d:f9:8a:76:9f:2b:59:c2:96:04:6f:f2:8e:c2:e5:88:8f: 5a:71:fa:39:7a:96:ec:07:87:23:0a:88:7f:10:f4:ff:e5:bd: 2e:7f:e4:f6:f7:79:bb:42:19:03:ea:a9:37:8e:ba:7a:4b:f4: 09:69:26:db:18:23:1b:d9:39:3a:56:ee:9c:df:b2:67:58:6e: ed:b1:a4:62:d8:28:78:dc:81:46:ca:a3:8e:20:62:47:2f:ec: f5:1e:aa:eb:10:a1:19:a2:a5:02:39:a2:0f:3a:3d:f8:f8:e4: ba:7e:46:e9:cd:05:d0:e2:1e:de:94:34:d3:6b:7b:35:32:78: eb:66:ef:bc:44:da:80:3b:cd:cd:14:e2:9d:d0:4f:e8:e6:9d: c2:7c:83:c5:d3:c3:4a:7a:2b:44:59:b6:b1:a9:e4:dc:e6:c1: 98:1a:09:64:cd:80:04:29:cf:c8:4c:ff:47:c7:ca:8e:54:1c: 43:96:7d:b1:53:e5:62:e4:3b:47:fc:45:d8:33:69:ee:97:e8: 20:14:2b:fa:e4:b4:2c:0a:c7:23:e3:81:b6:19:30:74:b9:e3: 12:64:15:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/zvYT6TgE1mpCaFMdbtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZTdmMjZkYjQzYWQ0MzIwNWJlYjA2N2ZkMGFiM2UzMDAy Nzg2NWQwHhcNMjUxMjA2MDIwMDUzWhcNMjUxMjA3MDIwMDUzWjAzMTEwLwYDVQQD Eyg0ZjNiZmI3ZjE5MjkzMjVjNDU4MDIwMjMxODg3NDM0MGVhMTdhNzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4+0Op69AHXadGpFmRMIaLVD74s5 O8JE41tUofyiqF5Euf5S7xH5Rpv48G+/fuWzr0qCxaLEO/XCHmgkOi8ZzddxRLOu IhY/7XWkCIshfDDhrGYyG1MqoS1obDhojHxr7hYSPqahXJ3jFl+AsRTbOHn6FOLa D3wlNx3VjnKFjTMB/cooxL9e3zofpE4CiVACUbho89bDFoceHpRR0BxbaI8c6wyc 8QocGm8pteqdab/7mY691oGwSJnRsVaLQtkruBZFf81O5qMWOTbvae+eI/wyxsCT iPGGDdiau0xxohTy/Nf3knTRylMPN6/rBM5DgUFGHjdh2UnSskWnQi4DbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE87+38ZKTJcRYAgIxiHQ0DqF6cdMB8GA1UdIwQY MBaAFA3n8m20OtQyBb6wZ/0Ks+MAJ4ZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGVmeWJiUTYxRElGdnJCbl9RcXo0d0FuaGwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZTMyYjktNWM5ZC00ZWYwLTliOTIt ZDIyMTIzMzk3YjUwLzEvRGVmeWJiUTYxRElGdnJCbl9RcXo0d0FuaGwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hZTMyYjktNWM5ZC00ZWYwLTliOTItZDIyMTIzMzk3YjUw LzEvRGVmeWJiUTYxRElGdnJCbl9RcXo0d0FuaGwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTi0wHeE tA2pN8fK6ro7Dy9CCoOOGMOBdrcLtQ+VJ3MSZkqE+I35inafK1nClgRv8o7C5YiP WnH6OXqW7AeHIwqIfxD0/+W9Ln/k9vd5u0IZA+qpN466ekv0CWkm2xgjG9k5Olbu nN+yZ1hu7bGkYtgoeNyBRsqjjiBiRy/s9R6q6xChGaKlAjmiDzo9+Pjkun5G6c0F 0OIe3pQ002t7NTJ462bvvETagDvNzRTindBP6OadwnyDxdPDSnorRFm2sank3ObB mBoJZM2ABCnPyEz/R8fKjlQcQ5Z9sVPlYuQ7R/xF2DNp7pfoIBQr+uS0LArHI+OB thkwdLnjEmQVRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:49 2025 by rpki-client