This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft File: sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json) Hash identifier: MFWHvyLR4cZTMzNqXHoCytvAzHYtWzs1vkYd6iReQ2w= Subject key identifier: C2:F5:41:24:67:9A:A2:19:66:5F:9C:FF:7D:A0:05:BA:83:CC:9C:3D Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e Certificate serial: 019B435C375258EA0BE7CD751EFD6D1B98C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft Manifest number: 05EC Signing time: Mon 22 Dec 2025 00:01:15 +0000 Manifest this update: Mon 22 Dec 2025 00:01:15 +0000 Manifest next update: Tue 23 Dec 2025 00:01:15 +0000 Files and hashes: 1: mMP3R6Y_E5t6fees10l8AYe8F8o.roa (hash: GVxHnVRZ4k3nHcgJKtEX5VgjvPdVGaTcdXcLRvNp8IM=) 2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: iAMA0/7CkfWTTIhK+EMDS0NGUu0DTwX1aDKnA6GtU58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:37:52:58:ea:0b:e7:cd:75:1e:fd:6d:1b:98:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e Validity Not Before: Dec 22 00:01:15 2025 GMT Not After : Dec 23 00:01:15 2025 GMT Subject: CN=c2f54124679aa219665f9cff7da005ba83cc9c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:60:c8:ac:e8:bd:74:7e:e2:a4:bc:36:20:d4: 95:f5:5e:09:23:e3:b1:9f:8f:77:74:1a:2e:c5:dc: 4b:12:6d:bc:e3:57:27:bd:7c:01:e2:38:33:e9:ca: 18:5d:19:2e:ea:05:2b:2e:de:aa:11:cd:a8:5c:6f: 6a:08:6c:ac:4f:1f:11:53:6d:26:f9:0e:25:aa:b3: 13:45:4f:d6:85:28:a1:67:a5:e9:0e:93:fb:94:34: 47:4a:da:71:26:ec:22:15:9b:f2:1e:60:72:88:70: 9c:6d:69:0d:e9:43:f8:18:f1:b8:cc:60:be:5d:e3: 47:69:a1:97:cb:cc:68:aa:9a:29:77:33:2c:9b:df: bb:da:ca:d4:03:4b:96:f9:ef:58:29:60:92:0c:18: 46:a8:12:a0:7d:d7:8b:ca:28:75:91:aa:bb:5f:20: 74:3d:01:e1:ee:06:4c:fd:38:bf:2e:2f:a0:90:51: 66:20:0c:10:67:a6:1f:cc:75:6c:75:38:86:0d:ff: 97:65:36:cb:d4:d8:fd:81:2e:35:b8:e4:99:40:47: 91:6a:cb:49:5b:bd:07:ba:d8:50:cf:70:4e:95:52: 46:9b:34:0b:f7:9c:e8:72:f2:70:9c:70:34:76:e1: 38:47:b8:a8:70:89:5f:ce:e2:3d:9a:28:11:26:2e: 41:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F5:41:24:67:9A:A2:19:66:5F:9C:FF:7D:A0:05:BA:83:CC:9C:3D X509v3 Authority Key Identifier: keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:1a:ca:20:26:00:af:14:27:7b:31:f3:fb:ae:c0:48:cb:d1: b9:2c:7e:8c:af:3e:eb:5e:53:49:aa:7c:1b:89:0a:77:c0:97: 1d:9b:af:f9:d3:ec:d5:21:a5:f1:23:fa:1f:24:cd:f4:dc:2b: 3f:1d:01:ec:ee:eb:42:7f:ab:d4:af:44:0e:78:fc:9a:2a:5b: 1c:ce:c1:72:47:b6:d4:84:43:c9:64:8f:3f:b2:08:86:0c:31: 23:6d:01:26:6f:fd:3f:9c:b8:ce:46:2f:66:22:de:c3:0f:b3: a7:aa:c9:a4:11:b1:ff:2e:a8:ef:f8:4c:12:4b:d5:98:8c:35: f1:a9:48:f6:ae:92:f4:5e:c8:bf:91:48:14:eb:2d:6c:96:fa: 34:6d:40:7e:6e:2c:19:c6:a1:46:62:d9:b3:02:a7:81:01:19: 02:ad:ac:e7:20:4a:cf:56:bd:16:ac:6c:15:0f:df:17:9c:37: 19:b9:38:77:94:a2:eb:04:40:d3:94:36:9d:7e:5c:b9:ad:73: cb:d2:90:1e:6c:6f:b7:d4:54:4e:90:31:9b:41:f3:e3:ad:8e: 47:0e:87:6a:35:e1:83:2e:f1:42:05:4d:b5:e6:49:13:cd:02: 87:14:f7:68:84:78:bf:91:df:6d:19:6c:de:c4:f2:bd:bc:f4: 55:bd:6f:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXDdSWOoL5811Hv1tG5jJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMzlhYjgyOThmYTM2M2FlODM3ZTUzMDAyODk2OWNjNWNi ZjEwNGUwHhcNMjUxMjIyMDAwMTE1WhcNMjUxMjIzMDAwMTE1WjAzMTEwLwYDVQQD EyhjMmY1NDEyNDY3OWFhMjE5NjY1ZjljZmY3ZGEwMDViYTgzY2M5YzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmDIrOi9dH7ipLw2INSV9V4JI+Ox n493dBouxdxLEm2841cnvXwB4jgz6coYXRku6gUrLt6qEc2oXG9qCGysTx8RU20m +Q4lqrMTRU/WhSihZ6XpDpP7lDRHStpxJuwiFZvyHmByiHCcbWkN6UP4GPG4zGC+ XeNHaaGXy8xoqpopdzMsm9+72srUA0uW+e9YKWCSDBhGqBKgfdeLyih1kaq7XyB0 PQHh7gZM/Ti/Li+gkFFmIAwQZ6YfzHVsdTiGDf+XZTbL1Nj9gS41uOSZQEeRastJ W70HuthQz3BOlVJGmzQL95zocvJwnHA0duE4R7iocIlfzuI9migRJi5ByQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFML1QSRnmqIZZl+c/32gBbqDzJw9MB8GA1UdIwQY MBaAFLA5q4KY+jY66DflMAKJacxcvxBOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZmQ3MmYtZWY3Ny00NTM3LTg5ZTkt OWZiZDk2M2E1MTNjLzEvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZmQ3MmYtZWY3Ny00NTM3LTg5ZTktOWZiZDk2M2E1MTNj LzEvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRrKICYA rxQnezHz+67ASMvRuSx+jK8+615TSap8G4kKd8CXHZuv+dPs1SGl8SP6HyTN9Nwr Px0B7O7rQn+r1K9EDnj8mipbHM7Bcke21IRDyWSPP7IIhgwxI20BJm/9P5y4zkYv ZiLeww+zp6rJpBGx/y6o7/hMEkvVmIw18alI9q6S9F7Iv5FIFOstbJb6NG1Afm4s GcahRmLZswKngQEZAq2s5yBKz1a9FqxsFQ/fF5w3Gbk4d5Si6wRA05Q2nX5cua1z y9KQHmxvt9RUTpAxm0Hz462ORw6HajXhgy7xQgVNteZJE80ChxT3aIR4v5HfbRls 3sTyvbz0Vb1v3g== -----END CERTIFICATE-----Generated at Mon Dec 22 05:32:51 2025 by rpki-client