This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft File: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json) Hash identifier: PlMtnh19H0bR/qAxYAjcpzu6YXZTUfN0be6KW/CB5hA= Subject key identifier: 93:46:9C:0C:4E:C0:31:96:23:39:ED:2A:3B:76:E1:ED:95:34:5D:72 Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D Certificate issuer: /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d Certificate serial: 019B34FB4E1F7E1B2AE804C2A0A1510B6923 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft Manifest number: 1662 Signing time: Fri 19 Dec 2025 05:00:43 +0000 Manifest this update: Fri 19 Dec 2025 05:00:43 +0000 Manifest next update: Sat 20 Dec 2025 05:00:43 +0000 Files and hashes: 1: 1tRI1NAS620irGWcDu4y9Qfw5Oc.roa (hash: cB16kbTr6A/atusEQcb+v3J61xx/lkSsq3ehr1/v5HA=) 2: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: fPLovN5uCIyAnxX+XIbvyMGUMwtt4MddKGYoYWG6exg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:4e:1f:7e:1b:2a:e8:04:c2:a0:a1:51:0b:69:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d Validity Not Before: Dec 19 05:00:43 2025 GMT Not After : Dec 20 05:00:43 2025 GMT Subject: CN=93469c0c4ec031962339ed2a3b76e1ed95345d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e0:de:25:43:f6:86:9f:aa:58:16:1d:ea:c7: c8:05:3b:8d:12:d8:5a:48:97:e4:fb:39:60:d3:8b: e4:7b:f5:00:69:84:70:58:d0:84:d3:fc:f9:ee:68: 53:ce:73:e5:59:81:94:e4:ba:71:35:dd:53:b8:c4: 53:cb:68:61:e8:11:30:8d:b0:8f:68:a6:00:81:03: 80:06:af:18:b1:f1:1b:75:6f:17:d6:e3:0a:e2:cf: 15:57:9e:92:b9:b1:78:4c:0c:79:30:d9:5b:be:34: cc:0a:fb:93:83:b0:90:ed:e8:4f:1a:00:d3:37:d1: 58:c4:f3:a3:c6:90:b0:77:89:af:61:00:f1:46:70: 13:01:fd:14:c7:3f:d0:f6:c5:18:98:37:3f:64:36: 25:32:c2:ed:1b:1e:85:54:42:49:e7:81:7d:d0:1d: dc:92:2a:90:2f:66:20:3c:de:9a:be:e4:2d:7a:c1: 67:f4:6a:a7:9e:bc:7f:9d:42:6a:93:e8:fe:db:eb: 35:4c:30:76:5b:d2:3b:fb:5a:05:70:c7:73:36:18: 0f:50:f9:d8:19:79:24:45:cc:0c:8d:fb:f4:d6:8f: 51:80:0c:22:1a:ba:8a:e7:7f:fd:89:b7:70:47:42: 12:a4:a5:99:4c:9f:26:ae:5c:9b:c4:61:21:1c:12: 71:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:46:9C:0C:4E:C0:31:96:23:39:ED:2A:3B:76:E1:ED:95:34:5D:72 X509v3 Authority Key Identifier: keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a8:d3:cc:1b:b4:8b:21:72:5d:c6:76:23:be:17:f0:ac:50: 8d:ee:e9:85:7f:71:bf:99:0b:ad:9c:1c:87:4b:42:69:57:df: ee:db:eb:55:df:86:0e:8c:98:2c:01:fe:3b:4b:46:84:bb:a5: 51:8e:65:37:c2:70:b2:fa:21:f4:11:e1:e3:d2:f8:59:18:32: 96:cf:ee:54:60:74:af:ee:f6:73:20:5e:02:ce:8e:9b:e0:0c: 1f:57:53:ec:59:a6:8e:9a:6b:4a:18:cf:fd:eb:f3:b1:2b:e3: 79:a1:38:cd:70:35:1c:a4:62:e4:8b:3b:da:7b:e8:1f:6c:8a: 28:06:15:31:c4:ac:cd:3f:33:4d:29:b5:6e:bf:c9:ba:e7:cc: 29:6b:88:54:35:7e:ab:92:c6:3c:9b:97:44:d4:72:80:c9:c9: 47:36:29:80:d2:e3:e1:e6:1e:2c:98:f1:dd:98:c8:b5:53:31: d1:e1:59:44:01:f3:ee:0d:da:6b:7c:44:9f:f3:b1:76:d2:70: c5:46:e1:09:b4:49:b9:eb:ed:16:1e:80:eb:fd:87:d1:2b:04: 49:66:ae:0c:f2:d3:0b:6e:17:ba:fa:48:75:4a:b4:5b:fa:1d: 83:d2:07:48:cf:a6:02:51:c0:55:5c:bd:05:4b:ef:53:d1:06: 78:11:40:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+04ffhsq6ATCoKFRC2kjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOTBiODBiM2Q0ODkzYzljMWVjN2QwMWMyOWJmM2I0NTBi Yjg1MWQwHhcNMjUxMjE5MDUwMDQzWhcNMjUxMjIwMDUwMDQzWjAzMTEwLwYDVQQD Eyg5MzQ2OWMwYzRlYzAzMTk2MjMzOWVkMmEzYjc2ZTFlZDk1MzQ1ZDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueDeJUP2hp+qWBYd6sfIBTuNEtha SJfk+zlg04vke/UAaYRwWNCE0/z57mhTznPlWYGU5LpxNd1TuMRTy2hh6BEwjbCP aKYAgQOABq8YsfEbdW8X1uMK4s8VV56SubF4TAx5MNlbvjTMCvuTg7CQ7ehPGgDT N9FYxPOjxpCwd4mvYQDxRnATAf0Uxz/Q9sUYmDc/ZDYlMsLtGx6FVEJJ54F90B3c kiqQL2YgPN6avuQtesFn9Gqnnrx/nUJqk+j+2+s1TDB2W9I7+1oFcMdzNhgPUPnY GXkkRcwMjfv01o9RgAwiGrqK53/9ibdwR0ISpKWZTJ8mrlybxGEhHBJxqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNGnAxOwDGWIzntKjt24e2VNF1yMB8GA1UdIwQY MBaAFA+QuAs9SJPJwex9AcKb87RQu4UdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDVDNEN6MUlrOG5CN0gwQndwdnp0RkM3aFIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85OWEyYjEtMTE0NC00ZjljLThmZGYt NDNlNGQ1NmQ0MDQzLzEvRDVDNEN6MUlrOG5CN0gwQndwdnp0RkM3aFIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy85OWEyYjEtMTE0NC00ZjljLThmZGYtNDNlNGQ1NmQ0MDQz LzEvRDVDNEN6MUlrOG5CN0gwQndwdnp0RkM3aFIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPajTzBu0 iyFyXcZ2I74X8KxQje7phX9xv5kLrZwch0tCaVff7tvrVd+GDoyYLAH+O0tGhLul UY5lN8Jwsvoh9BHh49L4WRgyls/uVGB0r+72cyBeAs6Om+AMH1dT7FmmjpprShjP /evzsSvjeaE4zXA1HKRi5Is72nvoH2yKKAYVMcSszT8zTSm1br/JuufMKWuIVDV+ q5LGPJuXRNRygMnJRzYpgNLj4eYeLJjx3ZjItVMx0eFZRAHz7g3aa3xEn/OxdtJw xUbhCbRJuevtFh6A6/2H0SsESWauDPLTC24XuvpIdUq0W/odg9IHSM+mAlHAVVy9 BUvvU9EGeBFAKA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:36:08 2025 by rpki-client