This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft File: D01Q85DPlFxvpbkAkFtNUX67CRo.mft (raw, json) Hash identifier: FzjLh4BQ/vnu/j82wabDnpBXfP10gNsJq39Eq1J5mCM= Subject key identifier: DB:70:A7:24:17:95:9D:2D:1D:5B:41:F9:42:37:F1:FA:D9:E7:DA:A5 Authority key identifier: 0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A Certificate issuer: /CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a Certificate serial: 019B1B3B8192C437938B7BC79E227676BA9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft Manifest number: 04C5 Signing time: Sun 14 Dec 2025 05:00:42 +0000 Manifest this update: Sun 14 Dec 2025 05:00:42 +0000 Manifest next update: Mon 15 Dec 2025 05:00:42 +0000 Files and hashes: 1: 6t_nnlmTXWp3OzIKRqSj0hcN4no.roa (hash: W90ueV41Ar0nzHXhwJLVE6WKCjLM7hges3g+HZc2lOE=) 2: D01Q85DPlFxvpbkAkFtNUX67CRo.crl (hash: Co7oFf6u4H9U/sxWlkZGJ31azX7aSh+m1a0HOae0S50=) 3: vkoeIYHKBiHw3JW2EwGeByZF2OI.roa (hash: 0gHlaMAsvnnPjNWVDTFa0UhQf6R/7xyb1Ul2Br7gTg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:81:92:c4:37:93:8b:7b:c7:9e:22:76:76:ba:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a Validity Not Before: Dec 14 05:00:42 2025 GMT Not After : Dec 15 05:00:42 2025 GMT Subject: CN=db70a72417959d2d1d5b41f94237f1fad9e7daa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:33:c3:77:ae:1a:e0:39:98:3b:03:de:b1:48: 21:5c:d4:1f:3f:c8:bf:76:15:e9:f4:e8:75:8f:73: a5:a7:c6:9a:30:92:0b:92:19:aa:35:e9:ec:91:ed: 52:6b:11:47:37:e4:75:e2:7d:23:d6:4f:7c:03:4b: 58:84:a5:e9:cc:0a:88:0d:00:32:71:e5:d5:74:b6: c7:c0:76:85:99:b6:42:d9:d5:0f:16:ed:d5:5c:02: e6:08:2b:c1:d7:78:7b:a8:54:96:ac:5a:53:c4:f6: e3:02:04:72:39:11:02:36:a1:96:99:52:3b:0b:fc: 98:38:0f:de:a6:f1:2d:c8:df:c1:d4:ed:d8:b4:6d: 0c:a1:87:0a:ad:2c:07:fa:04:ab:21:e0:bf:3e:6f: 62:09:70:90:60:b8:35:78:00:42:4e:ab:30:78:e5: 83:37:e3:df:98:cf:7a:7f:de:f5:dc:7b:65:c8:1d: 0b:48:bb:c2:43:f4:1b:67:69:24:4d:75:00:cb:03: e1:87:ee:5c:0b:3a:01:b7:27:a1:7a:92:1e:f1:da: ea:87:68:c7:49:5e:57:47:58:ca:63:9f:eb:3e:26: 73:91:ce:5b:1f:cf:b2:79:6e:01:c9:dc:de:80:0e: 2c:97:f5:b5:48:be:61:7b:20:06:38:02:dd:a1:de: 50:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:70:A7:24:17:95:9D:2D:1D:5B:41:F9:42:37:F1:FA:D9:E7:DA:A5 X509v3 Authority Key Identifier: keyid:0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:4a:d3:32:95:15:0e:78:17:6b:17:b0:f1:22:88:66:1f:c4: af:eb:5b:41:b9:15:e9:c5:dd:62:de:37:f9:4a:73:ee:1f:6f: d0:c3:bf:f6:8b:4d:21:ca:73:1d:d8:0c:70:6c:94:81:76:ed: 79:e3:88:8c:6d:9c:72:f3:69:2c:7d:4c:0e:f8:a4:fd:34:e7: c4:40:97:97:2b:b5:64:df:44:10:ec:a7:48:5a:1d:db:15:1f: 36:9b:1a:1f:40:34:37:e7:86:51:48:52:c0:de:f5:a5:85:b8: a8:b1:14:8f:21:01:3f:a0:03:83:54:21:88:39:23:c5:1c:d3: 39:17:2b:af:38:9a:f4:5a:37:b9:a1:9a:25:25:39:44:27:ce: f3:37:b7:cc:81:07:82:4d:40:2b:08:11:59:cc:5a:c3:86:0c: 96:95:5f:f3:70:a4:75:db:3a:4f:5b:ea:aa:77:b1:4e:38:27: 9b:82:c8:6a:6b:3f:06:67:54:44:8c:ff:49:43:e5:11:5b:3b: 7c:78:c5:b6:fa:31:28:d9:bb:da:37:93:ee:be:6b:aa:ec:7b: 4a:8c:35:1e:b2:a2:3b:9b:a0:ed:23:4d:61:d1:ba:03:7e:fc: b9:5b:9d:34:6f:fd:32:b4:41:5e:43:32:78:92:b9:db:02:87: f9:56:7a:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO4GSxDeTi3vHniJ2drqcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNGQ1MGYzOTBjZjk0NWM2ZmE1YjkwMDkwNWI0ZDUxN2Vi YjA5MWEwHhcNMjUxMjE0MDUwMDQyWhcNMjUxMjE1MDUwMDQyWjAzMTEwLwYDVQQD EyhkYjcwYTcyNDE3OTU5ZDJkMWQ1YjQxZjk0MjM3ZjFmYWQ5ZTdkYWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TPDd64a4DmYOwPesUghXNQfP8i/ dhXp9Oh1j3Olp8aaMJILkhmqNenske1SaxFHN+R14n0j1k98A0tYhKXpzAqIDQAy ceXVdLbHwHaFmbZC2dUPFu3VXALmCCvB13h7qFSWrFpTxPbjAgRyORECNqGWmVI7 C/yYOA/epvEtyN/B1O3YtG0MoYcKrSwH+gSrIeC/Pm9iCXCQYLg1eABCTqsweOWD N+PfmM96f9713HtlyB0LSLvCQ/QbZ2kkTXUAywPhh+5cCzoBtyehepIe8drqh2jH SV5XR1jKY5/rPiZzkc5bH8+yeW4BydzegA4sl/W1SL5heyAGOALdod5Q0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtwpyQXlZ0tHVtB+UI38frZ59qlMB8GA1UdIwQY MBaAFA9NUPOQz5Rcb6W5AJBbTVF+uwkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDAxUTg1RFBsRnh2cGJrQWtGdE5VWDY3Q1JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zMmQ0OWMtZmJiOS00NjY0LTlhYjgt ZjJiZGMyMjc1YjZlLzEvRDAxUTg1RFBsRnh2cGJrQWtGdE5VWDY3Q1JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8zMmQ0OWMtZmJiOS00NjY0LTlhYjgtZjJiZGMyMjc1YjZl LzEvRDAxUTg1RFBsRnh2cGJrQWtGdE5VWDY3Q1JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUrTMpUV DngXaxew8SKIZh/Er+tbQbkV6cXdYt43+Upz7h9v0MO/9otNIcpzHdgMcGyUgXbt eeOIjG2ccvNpLH1MDvik/TTnxECXlyu1ZN9EEOynSFod2xUfNpsaH0A0N+eGUUhS wN71pYW4qLEUjyEBP6ADg1QhiDkjxRzTORcrrzia9Fo3uaGaJSU5RCfO8ze3zIEH gk1AKwgRWcxaw4YMlpVf83Ckdds6T1vqqnexTjgnm4LIams/BmdURIz/SUPlEVs7 fHjFtvoxKNm72jeT7r5rqux7Sow1HrKiO5ug7SNNYdG6A378uVudNG/9MrRBXkMy eJK52wKH+VZ65w== -----END CERTIFICATE-----Generated at Sun Dec 14 08:38:56 2025 by rpki-client