This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft File: dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json) Hash identifier: LIlePhSXXtzs/CK7BLHgDedDzrUIp3lQWGmJfzEMmo4= Subject key identifier: 0F:6B:7F:0C:73:93:38:C9:7B:7B:0E:FA:C4:57:AC:7E:38:2A:BF:99 Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce Certificate serial: 019AF31B72B43BD6421AB97E5A980A59E304 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft Manifest number: 0B16 Signing time: Sat 06 Dec 2025 10:00:53 +0000 Manifest this update: Sat 06 Dec 2025 10:00:53 +0000 Manifest next update: Sun 07 Dec 2025 10:00:53 +0000 Files and hashes: 1: TP6kkH0vZwohnuu8LaNGGzK2bx4.roa (hash: 5TOk/KFa4qvBJB1w3rUK12jUjLhZzxVEKo+9hT469YM=) 2: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: RQSq6OcgwUIqddqtl03F47Ud6Y/9thMUWYW+vu+tViY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:72:b4:3b:d6:42:1a:b9:7e:5a:98:0a:59:e3:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce Validity Not Before: Dec 6 10:00:53 2025 GMT Not After : Dec 7 10:00:53 2025 GMT Subject: CN=0f6b7f0c739338c97b7b0efac457ac7e382abf99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:79:1a:d8:e4:8f:7a:86:e2:29:d3:f2:8d:c7: 0c:9c:ba:18:c8:9d:44:fd:c4:7e:c5:ac:69:13:90: 40:db:8c:a0:6c:7c:c8:b1:f9:f2:6f:6b:29:6d:9a: 8d:81:c1:45:a8:e4:bc:bc:a9:e9:44:ce:94:c9:dd: 4d:20:3c:90:32:55:bd:bf:df:17:63:f1:fd:ea:8a: ed:1c:82:c3:d7:35:b3:a5:d8:c9:9d:f6:a4:cf:70: 67:75:59:2a:27:77:df:94:46:22:b4:2c:c3:7f:9c: 57:a7:ac:ba:76:c9:52:92:e7:66:df:00:91:4b:85: 85:39:36:bc:28:7e:42:bd:e6:37:74:95:c4:a2:b5: 82:e9:bf:84:79:7e:08:8a:76:72:5c:32:9e:c5:73: f5:47:13:52:b6:bb:af:39:17:50:e1:5e:ba:63:4a: 56:a0:c4:97:0a:64:39:58:97:2f:ef:66:70:6a:5b: 7f:ba:ba:1a:fc:21:1a:eb:8b:5b:22:81:61:bc:82: 3b:08:85:bd:2a:d9:52:09:36:61:a0:6b:40:3b:f8: f9:77:60:75:7f:ac:e4:71:e5:f5:88:ad:d5:d3:a3: 2b:3e:56:37:c8:11:c4:da:43:6b:f5:95:29:10:9b: 1c:15:21:37:28:07:dc:44:79:4a:f9:78:d8:9f:da: 25:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6B:7F:0C:73:93:38:C9:7B:7B:0E:FA:C4:57:AC:7E:38:2A:BF:99 X509v3 Authority Key Identifier: keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:01:20:0a:2d:55:78:dd:14:01:cd:7e:86:a7:9c:f6:51:82: 07:c2:23:53:b7:8c:f2:c2:d8:b9:9f:71:c9:02:de:ce:c5:0c: cf:1d:a1:20:bb:6c:e1:8a:48:68:60:b7:73:ab:4e:93:9a:74: 24:56:b4:58:be:45:59:a8:a8:e7:db:eb:53:b7:6c:a0:f3:38: 2e:4f:62:c1:dc:62:38:d9:64:69:7e:c0:6e:f8:07:59:5d:50: 99:10:a6:fd:d1:72:9a:4a:ac:8e:f4:67:cb:ba:25:66:d0:06: b0:60:a5:1c:41:83:6d:b5:84:4b:b5:24:2e:5b:0b:54:80:eb: 99:5a:ab:40:e4:f3:b7:57:aa:ec:6c:5a:66:20:69:92:95:b8: d2:60:bf:f6:28:63:5b:56:f0:1c:e6:3d:d0:e3:d9:30:be:71: 07:fb:27:f2:f7:2f:22:31:2f:02:1f:fd:05:10:7b:9d:0f:e8: 37:39:5b:f9:ad:cd:74:07:22:70:28:e9:1e:1b:0e:7b:d3:e7: 7f:71:4f:86:f2:bc:08:3e:a1:82:de:9e:61:cb:eb:7e:bf:59: 99:cb:06:aa:a5:dc:96:be:15:4e:4d:ae:c8:fa:e4:94:ef:09: 4c:5a:9c:ea:07:73:2a:df:e0:9a:a5:10:21:c8:18:c7:e5:55: d2:ec:c8:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3K0O9ZCGrl+WpgKWeMEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NGUxMzNjYTBjYWQ5ZjFmZDE2MTU4MDU5MGIyOTZkYjIy MzA4Y2UwHhcNMjUxMjA2MTAwMDUzWhcNMjUxMjA3MTAwMDUzWjAzMTEwLwYDVQQD EygwZjZiN2YwYzczOTMzOGM5N2I3YjBlZmFjNDU3YWM3ZTM4MmFiZjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXka2OSPeobiKdPyjccMnLoYyJ1E /cR+xaxpE5BA24ygbHzIsfnyb2spbZqNgcFFqOS8vKnpRM6Uyd1NIDyQMlW9v98X Y/H96ortHILD1zWzpdjJnfakz3BndVkqJ3fflEYitCzDf5xXp6y6dslSkudm3wCR S4WFOTa8KH5CveY3dJXEorWC6b+EeX4IinZyXDKexXP1RxNStruvORdQ4V66Y0pW oMSXCmQ5WJcv72Zwalt/uroa/CEa64tbIoFhvII7CIW9KtlSCTZhoGtAO/j5d2B1 f6zkceX1iK3V06MrPlY3yBHE2kNr9ZUpEJscFSE3KAfcRHlK+XjYn9oloQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9rfwxzkzjJe3sO+sRXrH44Kr+ZMB8GA1UdIwQY MBaAFHROEzygytnx/RYVgFkLKW2yIwjOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEU0VFBLREsyZkg5RmhXQVdRc3BiYklqQ000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iNDExOTAtZGEyOC00MzAxLTkwYzUt OTVhNGVmNDNjMjE1LzEvZEU0VFBLREsyZkg5RmhXQVdRc3BiYklqQ000Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9iNDExOTAtZGEyOC00MzAxLTkwYzUtOTVhNGVmNDNjMjE1 LzEvZEU0VFBLREsyZkg5RmhXQVdRc3BiYklqQ000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAEgCi1V eN0UAc1+hqec9lGCB8IjU7eM8sLYuZ9xyQLezsUMzx2hILts4YpIaGC3c6tOk5p0 JFa0WL5FWaio59vrU7dsoPM4Lk9iwdxiONlkaX7AbvgHWV1QmRCm/dFymkqsjvRn y7olZtAGsGClHEGDbbWES7UkLlsLVIDrmVqrQOTzt1eq7GxaZiBpkpW40mC/9ihj W1bwHOY90OPZML5xB/sn8vcvIjEvAh/9BRB7nQ/oNzlb+a3NdAcicCjpHhsOe9Pn f3FPhvK8CD6hgt6eYcvrfr9ZmcsGqqXclr4VTk2uyPrklO8JTFqc6gdzKt/gmqUQ IcgYx+VV0uzI+g== -----END CERTIFICATE-----Generated at Sat Dec 6 18:21:27 2025 by rpki-client