This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft File: da9OLDR4Dz2fUegKU7rDvm8yWUM.mft (raw, json) Hash identifier: 5Dn07hitDXoqkTEtgFW/l0fRwQR6259uGivQ+nfNQhk= Subject key identifier: 04:1D:DC:6C:CA:41:05:C8:9A:B2:3A:37:FD:58:69:B9:F3:96:38:DA Authority key identifier: 75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43 Certificate issuer: /CN=75af4e2c34780f3d9f51e80a53bac3be6f325943 Certificate serial: 019AF276599478A7AEBDE303F41B7CC1D098 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft Manifest number: 104B Signing time: Sat 06 Dec 2025 07:00:33 +0000 Manifest this update: Sat 06 Dec 2025 07:00:33 +0000 Manifest next update: Sun 07 Dec 2025 07:00:33 +0000 Files and hashes: 1: 4FCKqar0XtnEKUi3gFfvOiKskUg.roa (hash: n0va6MokXLOyx5Mouds6xLFs3obz/ZHN/b5YuHxhU6k=) 2: da9OLDR4Dz2fUegKU7rDvm8yWUM.crl (hash: MegK25QoMKrYbASmvRFKzIetvkzv3PYjzMx7FbAzzZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:59:94:78:a7:ae:bd:e3:03:f4:1b:7c:c1:d0:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75af4e2c34780f3d9f51e80a53bac3be6f325943 Validity Not Before: Dec 6 07:00:33 2025 GMT Not After : Dec 7 07:00:33 2025 GMT Subject: CN=041ddc6cca4105c89ab23a37fd5869b9f39638da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ec:49:46:b6:8c:6e:36:4e:40:f1:02:41:4e: 98:f8:2a:95:a6:dc:15:c1:4a:a5:de:50:cf:24:87: 43:df:0f:59:f7:82:ba:64:44:e0:38:22:17:61:1e: 6f:53:82:31:7f:92:3f:62:84:bd:70:ad:55:c8:bb: 80:9f:18:9f:68:89:f8:a5:00:41:65:69:71:d4:b6: 3f:63:63:6a:86:7e:f8:d9:73:f1:94:fa:c4:12:6f: 02:3f:c8:6d:58:f9:f2:39:95:59:52:39:5e:8a:f2: 5b:8f:0f:f8:0d:b9:be:7f:c0:db:f5:7d:77:05:b2: ce:0c:55:51:ee:bd:88:97:56:f2:e8:22:e5:cb:9a: 5b:5d:b2:b9:40:4c:30:8a:a9:9e:7a:26:59:09:7e: a5:4c:aa:00:2e:d4:cf:65:68:e1:e9:7d:31:72:5f: 14:32:df:66:72:12:d4:99:ad:b9:26:fc:04:d3:a9: 74:ab:cf:8f:23:3a:28:d0:ff:bc:0c:04:82:c6:a2: e1:2f:f2:97:c1:3b:f5:76:29:72:45:45:6b:6f:5d: c9:00:c0:80:d4:ad:a8:e7:90:23:04:48:36:ee:b0: 91:1e:04:b0:99:6a:61:f8:2a:ab:85:c6:51:40:8e: 61:bd:d9:d9:83:75:1a:96:60:21:36:22:5f:bc:ef: 4e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1D:DC:6C:CA:41:05:C8:9A:B2:3A:37:FD:58:69:B9:F3:96:38:DA X509v3 Authority Key Identifier: keyid:75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:57:fd:b3:09:2b:fd:dc:08:24:9d:3f:44:fd:5e:ac:a8:52: 5c:d0:d2:df:66:5d:ce:ac:9a:c7:87:41:44:04:f1:a6:52:f8: d1:c8:de:df:23:56:b4:d7:c0:ac:01:26:29:bf:e8:5b:11:35: 44:56:75:04:7d:7e:7e:48:cf:85:66:87:ce:a3:80:1f:e4:da: 80:c0:f0:35:be:8c:53:99:cb:5c:d5:e2:73:02:a2:60:f2:a0: 11:a8:c1:66:86:c1:32:0a:85:de:17:a7:d4:b5:b8:f4:a6:16: cf:78:f4:c2:56:7c:23:ed:99:1b:32:bd:d2:6c:76:42:18:3a: 7a:f1:a2:a9:4e:6a:93:85:be:c6:7d:48:9b:1a:16:25:3b:17: e5:87:05:e7:27:d2:89:1b:8d:ff:31:05:b6:e9:37:3e:d1:7f: c1:c8:34:b3:10:23:5e:9d:a6:c4:83:81:b2:92:6f:c3:0c:99: c1:1d:2b:56:88:b4:1e:45:7f:7d:da:18:55:69:64:bc:b8:c7: 9a:b1:1a:76:fb:f4:c4:6e:9c:5a:28:3f:bf:a5:a6:b1:91:c9: d9:29:3d:ee:b3:41:d6:cb:6a:85:27:4e:0f:f0:e8:10:c5:a5: 18:c4:48:f6:b1:91:38:08:5f:15:f0:87:64:27:07:74:b0:58: 43:23:87:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlmUeKeuveMD9Bt8wdCYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YWY0ZTJjMzQ3ODBmM2Q5ZjUxZTgwYTUzYmFjM2JlNmYz MjU5NDMwHhcNMjUxMjA2MDcwMDMzWhcNMjUxMjA3MDcwMDMzWjAzMTEwLwYDVQQD EygwNDFkZGM2Y2NhNDEwNWM4OWFiMjNhMzdmZDU4NjliOWYzOTYzOGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+xJRraMbjZOQPECQU6Y+CqVptwV wUql3lDPJIdD3w9Z94K6ZETgOCIXYR5vU4Ixf5I/YoS9cK1VyLuAnxifaIn4pQBB ZWlx1LY/Y2Nqhn742XPxlPrEEm8CP8htWPnyOZVZUjleivJbjw/4Dbm+f8Db9X13 BbLODFVR7r2Il1by6CLly5pbXbK5QEwwiqmeeiZZCX6lTKoALtTPZWjh6X0xcl8U Mt9mchLUma25JvwE06l0q8+PIzoo0P+8DASCxqLhL/KXwTv1dilyRUVrb13JAMCA 1K2o55AjBEg27rCRHgSwmWph+CqrhcZRQI5hvdnZg3UalmAhNiJfvO9OAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQd3GzKQQXImrI6N/1YabnzljjaMB8GA1UdIwQY MBaAFHWvTiw0eA89n1HoClO6w75vMllDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGE5T0xEUjREejJmVWVnS1U3ckR2bTh5V1VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wOTIzOWEtNGY4OC00MDliLWE3ODEt NzUzMzBkNGNlODZlLzEvZGE5T0xEUjREejJmVWVnS1U3ckR2bTh5V1VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wOTIzOWEtNGY4OC00MDliLWE3ODEtNzUzMzBkNGNlODZl LzEvZGE5T0xEUjREejJmVWVnS1U3ckR2bTh5V1VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFf9swkr /dwIJJ0/RP1erKhSXNDS32Zdzqyax4dBRATxplL40cje3yNWtNfArAEmKb/oWxE1 RFZ1BH1+fkjPhWaHzqOAH+TagMDwNb6MU5nLXNXicwKiYPKgEajBZobBMgqF3hen 1LW49KYWz3j0wlZ8I+2ZGzK90mx2Qhg6evGiqU5qk4W+xn1ImxoWJTsX5YcF5yfS iRuN/zEFtuk3PtF/wcg0sxAjXp2mxIOBspJvwwyZwR0rVoi0HkV/fdoYVWlkvLjH mrEadvv0xG6cWig/v6WmsZHJ2Sk97rNB1stqhSdOD/DoEMWlGMRI9rGROAhfFfCH ZCcHdLBYQyOHnA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:11:54 2025 by rpki-client