This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft File: diI4ozxVDMXfAkTz_G49vZHkw54.mft (raw, json) Hash identifier: Piuh+kqj4H/3hUL/OzsmVBMC8SlN576iypggRql3QcQ= Subject key identifier: 6C:2C:04:63:CA:EA:A4:96:8F:8A:D7:E5:07:23:11:87:23:78:E7:3F Authority key identifier: 76:22:38:A3:3C:55:0C:C5:DF:02:44:F3:FC:6E:3D:BD:91:E4:C3:9E Certificate issuer: /CN=762238a33c550cc5df0244f3fc6e3dbd91e4c39e Certificate serial: 019AF3F70BF6FB7D8A344FEC3B5DE7EF0420 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft Manifest number: 0BCD Signing time: Sat 06 Dec 2025 14:00:45 +0000 Manifest this update: Sat 06 Dec 2025 14:00:45 +0000 Manifest next update: Sun 07 Dec 2025 14:00:45 +0000 Files and hashes: 1: diI4ozxVDMXfAkTz_G49vZHkw54.crl (hash: 6gRf3RlXDSV2DNffKC34n4Uv4W/GCxQfpfdjMXmYW2k=) 2: wJoEv1cTcMs89DVqbv88rXmkjBs.roa (hash: dwNiZrwk++xFBCbnEtCywNysmHqCMLzFmgUxU3OD8L4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:0b:f6:fb:7d:8a:34:4f:ec:3b:5d:e7:ef:04:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=762238a33c550cc5df0244f3fc6e3dbd91e4c39e Validity Not Before: Dec 6 14:00:45 2025 GMT Not After : Dec 7 14:00:45 2025 GMT Subject: CN=6c2c0463caeaa4968f8ad7e5072311872378e73f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:59:9e:66:8c:78:13:e7:85:23:f5:a7:0f: 67:82:ce:8d:80:46:dd:64:e3:2e:8e:d4:7d:0b:04: e4:e9:f9:99:4b:6a:f9:12:45:bb:a3:6a:ec:a9:24: c1:b9:53:83:68:92:2d:e7:f8:77:71:84:57:7f:6a: f3:96:43:51:f2:e6:99:a1:d3:4a:0a:a7:91:f1:1a: 56:a2:23:ae:3d:3a:85:87:a3:67:d1:26:f7:82:4b: 08:80:d6:6c:4a:1e:d1:bf:fc:33:f0:b7:ec:b9:70: e3:c6:d9:13:b9:33:ec:69:19:c5:53:b3:35:7a:02: e4:87:25:4b:17:65:c3:0c:ee:a2:9a:fd:4e:f9:c6: 9e:28:bd:cb:87:5d:f9:6b:39:40:e2:ba:d5:b2:f2: c9:fb:6d:a4:eb:0b:ee:14:cc:6b:19:d3:c8:9a:8d: f0:ef:d4:79:2e:49:c9:2e:da:fa:fc:b7:c1:68:00: 82:d6:76:77:7c:0f:72:d8:ed:3d:8e:f7:f1:60:7c: 2f:68:08:61:cb:b5:e2:00:d7:bb:10:96:f5:f1:9a: 39:c6:c4:41:e6:3f:0a:eb:48:f4:01:eb:e8:7b:00: 46:11:06:8f:56:64:f9:fd:c7:2a:ec:48:47:16:f8: 85:80:41:e7:3a:da:9f:bb:ef:bd:2c:fe:0e:0e:50: 92:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2C:04:63:CA:EA:A4:96:8F:8A:D7:E5:07:23:11:87:23:78:E7:3F X509v3 Authority Key Identifier: keyid:76:22:38:A3:3C:55:0C:C5:DF:02:44:F3:FC:6E:3D:BD:91:E4:C3:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ab:43:a1:bd:ec:ae:ee:75:5f:2a:b5:a0:c3:95:90:b7:a0: 29:71:eb:59:61:97:fd:ed:05:03:97:4c:ef:5b:d1:a4:46:d4: 7b:c2:79:82:6e:cc:0c:e7:09:70:de:86:54:28:ea:55:c6:8f: ba:89:7e:b2:34:96:ae:47:63:11:ba:3e:ff:25:7d:b6:c7:5e: cf:13:19:4a:24:8e:2f:1b:2a:0c:81:86:d8:0d:4c:3c:00:68: 43:1f:a2:3b:eb:d1:e1:13:b4:d5:51:52:c2:1a:98:84:93:60: a0:ed:59:5e:80:fe:04:15:25:92:af:93:39:1c:40:36:c3:76: 8a:90:e9:41:f3:4e:bf:b7:8d:fc:96:34:87:fd:d9:9b:58:16: e8:1a:90:a0:f7:67:f4:f1:d0:61:90:1b:22:4f:a0:e9:b9:bf: 00:e7:46:00:ed:d9:0d:49:12:99:fc:c4:55:96:5a:df:f8:98: 39:dd:ae:32:e6:97:ef:2b:1b:34:c1:c6:59:e0:a5:35:5c:55: a6:4b:ac:18:4a:b1:7f:f9:91:7f:ba:54:6c:1a:61:10:1e:f8: 52:36:e0:4c:b2:42:ef:d2:2c:94:43:11:4a:a1:96:45:2e:36: c0:e5:84:a8:5b:10:71:a1:5a:a0:60:02:ed:3e:2c:78:14:2b: 7b:7f:2b:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9wv2+32KNE/sO13n7wQgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MjIzOGEzM2M1NTBjYzVkZjAyNDRmM2ZjNmUzZGJkOTFl NGMzOWUwHhcNMjUxMjA2MTQwMDQ1WhcNMjUxMjA3MTQwMDQ1WjAzMTEwLwYDVQQD Eyg2YzJjMDQ2M2NhZWFhNDk2OGY4YWQ3ZTUwNzIzMTE4NzIzNzhlNzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvFZnmaMeBPnhSP1pw9ngs6NgEbd ZOMujtR9CwTk6fmZS2r5EkW7o2rsqSTBuVODaJIt5/h3cYRXf2rzlkNR8uaZodNK CqeR8RpWoiOuPTqFh6Nn0Sb3gksIgNZsSh7Rv/wz8LfsuXDjxtkTuTPsaRnFU7M1 egLkhyVLF2XDDO6imv1O+caeKL3Lh135azlA4rrVsvLJ+22k6wvuFMxrGdPImo3w 79R5LknJLtr6/LfBaACC1nZ3fA9y2O09jvfxYHwvaAhhy7XiANe7EJb18Zo5xsRB 5j8K60j0AevoewBGEQaPVmT5/ccq7EhHFviFgEHnOtqfu++9LP4ODlCSVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwsBGPK6qSWj4rX5QcjEYcjeOc/MB8GA1UdIwQY MBaAFHYiOKM8VQzF3wJE8/xuPb2R5MOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGlJNG96eFZETVhmQWtUel9HNDl2WkhrdzU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS81ZTMyNDktYmViZi00MDcwLTlmY2Qt MWIxZmM3OWQwNTUxLzEvZGlJNG96eFZETVhmQWtUel9HNDl2WkhrdzU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS81ZTMyNDktYmViZi00MDcwLTlmY2QtMWIxZmM3OWQwNTUx LzEvZGlJNG96eFZETVhmQWtUel9HNDl2WkhrdzU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqtDob3s ru51Xyq1oMOVkLegKXHrWWGX/e0FA5dM71vRpEbUe8J5gm7MDOcJcN6GVCjqVcaP uol+sjSWrkdjEbo+/yV9tsdezxMZSiSOLxsqDIGG2A1MPABoQx+iO+vR4RO01VFS whqYhJNgoO1ZXoD+BBUlkq+TORxANsN2ipDpQfNOv7eN/JY0h/3Zm1gW6BqQoPdn 9PHQYZAbIk+g6bm/AOdGAO3ZDUkSmfzEVZZa3/iYOd2uMuaX7ysbNMHGWeClNVxV pkusGEqxf/mRf7pUbBphEB74UjbgTLJC79IslEMRSqGWRS42wOWEqFsQcaFaoGAC 7T4seBQre38rrw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:16:48 2025 by rpki-client