This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft File: d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft (raw, json) Hash identifier: 91NOcJ/u0fH6eCfkU1JHz4SocDK8pR24de/eMrgbeIk= Subject key identifier: DE:3D:99:93:36:89:9D:F2:14:F0:14:B7:F4:69:F5:E2:98:D4:C9:D5 Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1 Certificate issuer: /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1 Certificate serial: 019B0FA561CE4CBDFBCBA7574A20E64E1FCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft Manifest number: 0E56 Signing time: Thu 11 Dec 2025 23:00:55 +0000 Manifest this update: Thu 11 Dec 2025 23:00:55 +0000 Manifest next update: Fri 12 Dec 2025 23:00:55 +0000 Files and hashes: 1: 3fVp55RM8WJ-CAkYXQzPen4QsPU.roa (hash: GhSbT3tbIT6J4s8weD/xKmKS+sqFk4JjUnduge7t9L0=) 2: d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl (hash: 595p3A2UKJF5dVm7ayHmd5t1LcWPuxr9kvBi9KdsDqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:61:ce:4c:bd:fb:cb:a7:57:4a:20:e6:4e:1f:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1 Validity Not Before: Dec 11 23:00:55 2025 GMT Not After : Dec 12 23:00:55 2025 GMT Subject: CN=de3d999336899df214f014b7f469f5e298d4c9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:96:45:ce:37:4e:38:7d:ac:2f:a5:74:af:da: 5d:d1:41:a2:e7:04:f9:0e:76:29:91:41:1e:ca:07: 79:5c:e1:81:22:72:f8:16:bd:26:fb:05:60:46:01: 61:41:77:b0:22:4d:75:da:6d:bc:b9:07:b2:07:95: c9:1e:3a:15:84:83:d0:10:7e:f0:4f:b3:4c:40:ef: 0c:5e:4b:28:a6:0f:8f:01:87:17:dd:5b:dc:c1:65: 25:3a:1c:cc:54:6b:e7:8d:b3:10:c3:37:e4:93:25: e9:12:fb:c5:8f:22:53:1a:98:c6:c1:06:21:fd:03: 26:71:e2:84:95:44:b2:af:ac:ae:13:53:a7:a0:3c: 98:89:92:d0:6e:ab:51:04:cd:f4:0c:85:50:9a:b1: 47:d5:69:02:6f:b2:48:79:0a:37:48:66:de:38:6e: a3:c6:ac:48:0e:e9:7c:c0:6a:a4:a9:8f:14:2b:5e: 8f:b5:80:50:b4:df:12:f6:93:99:ef:d7:54:06:b6: b2:6c:18:07:bc:1d:c3:c2:e3:c2:58:b2:f5:ad:30: cc:ed:15:d2:6d:c4:94:84:a5:6e:ab:ab:49:38:8b: 42:d0:c1:49:14:e6:7a:30:30:ec:53:83:b1:0e:36: 3e:ad:47:37:88:ac:7e:52:bb:07:90:82:f4:da:9f: 79:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3D:99:93:36:89:9D:F2:14:F0:14:B7:F4:69:F5:E2:98:D4:C9:D5 X509v3 Authority Key Identifier: keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d9:bd:ee:2d:fc:57:0b:9e:b7:2a:cc:c2:bd:4e:db:7a:89: 65:29:7c:2a:9a:6b:21:9b:e3:e3:8c:e0:a1:41:27:e0:76:c1: f1:11:36:d9:8d:d6:a9:a8:d6:4e:79:92:4c:93:37:0f:bd:89: 2a:36:b5:44:60:4f:e1:e7:9a:1d:ad:43:d5:f6:c4:90:1d:e2: 37:ed:76:14:61:dc:58:f1:00:d1:05:86:dc:7e:ee:9c:e0:7b: 74:6c:60:01:df:be:90:6a:fc:63:b3:8b:d0:46:5e:4c:56:61: d3:d0:38:c3:6b:ac:a2:d9:17:0a:13:8d:59:e8:e7:0c:f3:0f: a9:da:af:d2:f9:de:99:74:3d:14:87:15:69:11:7c:24:61:3f: a5:39:1e:94:91:f9:cf:87:7d:17:bd:da:6d:ea:34:5d:5a:c9: 1c:53:db:1b:9b:9d:57:8f:68:1b:61:08:0b:bc:c8:96:00:15: b2:32:72:3d:dd:51:31:5a:95:d4:d7:94:4d:d7:a2:c5:ee:9a: 01:80:cd:a9:40:ed:d0:36:1f:08:87:15:02:c2:76:89:ba:08: de:c0:0b:fe:8e:e3:36:e6:08:f2:21:fa:06:36:65:2a:60:ca: a6:02:92:c2:5c:68:8a:0c:ee:a0:97:56:70:ef:57:f0:b1:5f: ea:d4:d4:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpWHOTL37y6dXSiDmTh/PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YTM1MGQ5ZmU0ZTlmOTBmZjNlODRlMmY5NjBjYjVkYzNk NmNlZTEwHhcNMjUxMjExMjMwMDU1WhcNMjUxMjEyMjMwMDU1WjAzMTEwLwYDVQQD EyhkZTNkOTk5MzM2ODk5ZGYyMTRmMDE0YjdmNDY5ZjVlMjk4ZDRjOWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpZFzjdOOH2sL6V0r9pd0UGi5wT5 DnYpkUEeygd5XOGBInL4Fr0m+wVgRgFhQXewIk112m28uQeyB5XJHjoVhIPQEH7w T7NMQO8MXksopg+PAYcX3VvcwWUlOhzMVGvnjbMQwzfkkyXpEvvFjyJTGpjGwQYh /QMmceKElUSyr6yuE1OnoDyYiZLQbqtRBM30DIVQmrFH1WkCb7JIeQo3SGbeOG6j xqxIDul8wGqkqY8UK16PtYBQtN8S9pOZ79dUBraybBgHvB3DwuPCWLL1rTDM7RXS bcSUhKVuq6tJOItC0MFJFOZ6MDDsU4OxDjY+rUc3iKx+UrsHkIL02p95jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN49mZM2iZ3yFPAUt/Rp9eKY1MnVMB8GA1UdIwQY MBaAFHejUNn+Tp+Q/z6E4vlgy13D1s7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84YmM0NGItNWQ1YS00YjU0LWFiOTEt ZGExYzUxNWU1YjI5LzEvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84YmM0NGItNWQ1YS00YjU0LWFiOTEtZGExYzUxNWU1YjI5 LzEvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtm97i38 VwuetyrMwr1O23qJZSl8KpprIZvj44zgoUEn4HbB8RE22Y3WqajWTnmSTJM3D72J Kja1RGBP4eeaHa1D1fbEkB3iN+12FGHcWPEA0QWG3H7unOB7dGxgAd++kGr8Y7OL 0EZeTFZh09A4w2usotkXChONWejnDPMPqdqv0vnemXQ9FIcVaRF8JGE/pTkelJH5 z4d9F73abeo0XVrJHFPbG5udV49oG2EIC7zIlgAVsjJyPd1RMVqV1NeUTdeixe6a AYDNqUDt0DYfCIcVAsJ2iboI3sAL/o7jNuYI8iH6BjZlKmDKpgKSwlxoigzuoJdW cO9X8LFf6tTUYw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:27:10 2025 by rpki-client