This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft File: d0972iMD4D6ANP52MfUEi5mF9n4.mft (raw, json) Hash identifier: Qm0ZqXk2wvJmMZHFwFHejrd8bhTt+89YmOSRSghTdxI= Subject key identifier: 70:CB:95:AD:D3:F4:68:74:CB:42:F6:F7:7C:D0:C8:CB:DB:DA:CD:AD Authority key identifier: 77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E Certificate issuer: /CN=774f7bda2303e03e8034fe7631f5048b9985f67e Certificate serial: 019B2F66F3F0209EE825F3D9A21562C7CC66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft Manifest number: DB Signing time: Thu 18 Dec 2025 03:00:34 +0000 Manifest this update: Thu 18 Dec 2025 03:00:34 +0000 Manifest next update: Fri 19 Dec 2025 03:00:34 +0000 Files and hashes: 1: F8wvoV2Msd-SeHr6PBjzhXHOGKU.roa (hash: GfnGToHeyWjARTLRd2eGQHQuQH+P8p0dtRcm2xvmJe4=) 2: d0972iMD4D6ANP52MfUEi5mF9n4.crl (hash: HrabMWey9nILiS3QDtFg7NaTMON9BXiMG8tdbqtB2bQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:66:f3:f0:20:9e:e8:25:f3:d9:a2:15:62:c7:cc:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=774f7bda2303e03e8034fe7631f5048b9985f67e Validity Not Before: Dec 18 03:00:34 2025 GMT Not After : Dec 19 03:00:34 2025 GMT Subject: CN=70cb95add3f46874cb42f6f77cd0c8cbdbdacdad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:45:9d:73:14:af:50:72:8a:c1:f2:50:44:d6: 0c:a7:62:26:da:30:ca:6d:0c:46:40:33:e5:eb:7a: 57:70:b2:89:53:f0:53:96:40:d8:0e:a4:c0:89:ec: cd:64:ea:87:04:21:af:c7:82:07:f3:48:10:41:0e: 5b:2b:31:03:9a:55:6a:3a:a4:dd:8f:9b:75:40:79: 4a:71:0b:66:0f:8d:2e:cb:b8:b4:69:99:e9:ab:0e: 8e:a7:3c:d9:3e:08:32:cb:6a:87:11:51:af:b6:d8: 61:6d:c5:4f:52:ef:ba:ab:8e:7c:e5:02:7b:38:75: 40:95:cd:ce:02:08:b1:66:b7:ce:4f:89:7b:11:a9: 56:d5:8d:c4:cb:f2:64:d9:91:92:17:3d:88:fb:24: 09:13:92:75:8e:c5:ce:00:36:6e:51:14:ae:fb:a7: bb:6e:36:b8:f9:f2:f3:9d:7b:93:6b:65:07:a7:92: 18:95:ee:51:6c:cd:ad:e2:d6:a3:f6:87:2f:43:ac: 96:88:ca:cf:ec:97:54:35:6d:fa:f7:5a:ac:57:f3: f8:48:e7:50:22:4e:7a:77:04:15:d6:e2:a5:ce:05: bd:7f:53:74:28:bd:dd:ac:d8:2f:b8:cb:d3:95:7a: b7:ea:91:25:c8:26:42:a4:50:d6:d5:bb:0c:6b:9b: 31:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CB:95:AD:D3:F4:68:74:CB:42:F6:F7:7C:D0:C8:CB:DB:DA:CD:AD X509v3 Authority Key Identifier: keyid:77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:25:d9:bd:33:09:b9:82:2f:2c:34:44:00:18:09:59:3b:13: 8c:ee:4c:3d:7d:ae:0e:0e:21:1c:54:40:6b:d9:39:e0:bd:90: 5c:3c:77:b9:b7:b1:e1:2d:b8:8b:9d:cd:7c:90:b0:e5:91:6b: e4:3b:a1:2a:fd:d9:29:fa:7b:ea:52:53:e5:6d:b5:d1:56:b7: 25:f6:3c:76:e0:f1:f9:a6:d9:de:c9:e1:5a:3b:9b:39:0d:1b: 59:87:61:b2:c4:2a:36:00:d3:5d:24:06:59:03:92:32:dd:59: 2a:de:1d:08:da:9b:53:f4:15:d5:a4:8f:6f:62:da:4a:85:f3: 34:bb:fe:28:3a:dc:6e:e8:46:9a:1e:04:da:e4:f7:21:f6:e8: ff:10:92:51:29:5c:97:02:a1:f6:1c:78:5f:e7:c8:a7:1b:e5: ae:f1:6c:7e:03:4a:1d:01:ea:8f:78:97:22:dc:2a:f9:9e:f9: 31:04:5a:d2:76:a0:77:e4:8f:3e:1b:10:92:b9:6d:fd:89:c4: a7:b0:c2:1b:96:3b:91:27:e4:98:05:09:90:b6:7d:bb:0f:d1: e9:04:a4:a6:e0:64:c9:71:6a:2f:76:5e:3e:3a:fd:c5:06:23: 7f:ea:ec:92:1e:5a:19:f1:32:ab:f7:ec:cc:76:09:92:56:c6: 8b:6a:f6:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZvPwIJ7oJfPZohVix8xmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NGY3YmRhMjMwM2UwM2U4MDM0ZmU3NjMxZjUwNDhiOTk4 NWY2N2UwHhcNMjUxMjE4MDMwMDM0WhcNMjUxMjE5MDMwMDM0WjAzMTEwLwYDVQQD Eyg3MGNiOTVhZGQzZjQ2ODc0Y2I0MmY2Zjc3Y2QwYzhjYmRiZGFjZGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUWdcxSvUHKKwfJQRNYMp2Im2jDK bQxGQDPl63pXcLKJU/BTlkDYDqTAiezNZOqHBCGvx4IH80gQQQ5bKzEDmlVqOqTd j5t1QHlKcQtmD40uy7i0aZnpqw6OpzzZPggyy2qHEVGvtthhbcVPUu+6q4585QJ7 OHVAlc3OAgixZrfOT4l7EalW1Y3Ey/Jk2ZGSFz2I+yQJE5J1jsXOADZuURSu+6e7 bja4+fLznXuTa2UHp5IYle5RbM2t4taj9ocvQ6yWiMrP7JdUNW3691qsV/P4SOdQ Ik56dwQV1uKlzgW9f1N0KL3drNgvuMvTlXq36pElyCZCpFDW1bsMa5sxAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDLla3T9Gh0y0L293zQyMvb2s2tMB8GA1UdIwQY MBaAFHdPe9ojA+A+gDT+djH1BIuZhfZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDA5NzJpTUQ0RDZBTlA1Mk1mVUVpNW1GOW40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85ZjQ5MGQtOWMwMS00ZDJmLWE5ZWQt MzgxNzA0MDEyY2UyLzEvZDA5NzJpTUQ0RDZBTlA1Mk1mVUVpNW1GOW40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi85ZjQ5MGQtOWMwMS00ZDJmLWE5ZWQtMzgxNzA0MDEyY2Uy LzEvZDA5NzJpTUQ0RDZBTlA1Mk1mVUVpNW1GOW40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMiXZvTMJ uYIvLDREABgJWTsTjO5MPX2uDg4hHFRAa9k54L2QXDx3ubex4S24i53NfJCw5ZFr 5DuhKv3ZKfp76lJT5W210Va3JfY8duDx+abZ3snhWjubOQ0bWYdhssQqNgDTXSQG WQOSMt1ZKt4dCNqbU/QV1aSPb2LaSoXzNLv+KDrcbuhGmh4E2uT3Ifbo/xCSUSlc lwKh9hx4X+fIpxvlrvFsfgNKHQHqj3iXItwq+Z75MQRa0nagd+SPPhsQkrlt/YnE p7DCG5Y7kSfkmAUJkLZ9uw/R6QSkpuBkyXFqL3ZePjr9xQYjf+rskh5aGfEyq/fs zHYJklbGi2r2lg== -----END CERTIFICATE-----Generated at Thu Dec 18 04:05:36 2025 by rpki-client