This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json) Hash identifier: XO+6Cc097jldRC67ZJ0NE+vIKQsHx76Kno/XXmXFr5o= Subject key identifier: 80:A1:FF:36:6D:9E:09:D5:6E:32:37:CC:A2:DF:DB:A9:2A:A7:FE:D0 Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa Certificate serial: 019B5A1ADE6FA49F49218DB26AB5F2136AE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft Manifest number: 122E Signing time: Fri 26 Dec 2025 10:01:08 +0000 Manifest this update: Fri 26 Dec 2025 10:01:08 +0000 Manifest next update: Sat 27 Dec 2025 10:01:08 +0000 Files and hashes: 1: 1NP21bBcjBPyQEY2JxKMTy8KWnI.roa (hash: nEpG5QclJFuSzinXm1Th0RF7eqEVbPT7VUvAfBWJ6uw=) 2: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: DGSUbCjKG1lEZyWUoLrFM7ASbmT5m/4+8KAj3MgJWgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:de:6f:a4:9f:49:21:8d:b2:6a:b5:f2:13:6a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa Validity Not Before: Dec 26 10:01:08 2025 GMT Not After : Dec 27 10:01:08 2025 GMT Subject: CN=80a1ff366d9e09d56e3237cca2dfdba92aa7fed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:be:4d:38:67:51:a4:ff:3c:b0:0e:d6:0e:c3: e0:cd:bd:fe:f8:d4:f6:7f:99:5f:14:c6:e9:8b:8f: f5:f9:4b:f4:22:38:dd:50:fd:0f:cf:bc:47:26:ba: 86:7e:5f:9d:33:b1:c4:dd:ac:d7:92:49:fa:b2:b6: aa:04:8e:cb:e6:49:af:4f:96:f0:5f:6f:a1:86:be: 55:a3:cd:e7:01:cb:ca:99:90:0d:77:dd:09:5d:81: 00:21:ea:de:e1:2d:0e:d5:1b:c7:58:8e:39:a2:9f: 13:d8:07:3f:71:2e:b1:34:95:40:15:57:ad:f6:49: 63:e0:35:25:2e:b6:86:42:cf:61:aa:79:e1:e3:49: 0c:c1:9f:55:a1:44:2e:5c:32:6e:f1:77:ac:61:4c: 73:16:2a:00:e6:90:17:0d:37:d5:e1:75:4b:da:4d: 78:f5:42:cd:1b:dc:b7:8b:ca:fd:79:7a:23:34:ef: 9a:59:9a:cd:c3:5c:f1:9b:31:cb:20:77:6e:fc:47: e1:08:fc:e1:a0:06:5f:01:c1:66:89:93:98:8a:44: 67:80:7e:d8:01:d8:95:f0:c2:2b:c3:64:c3:3d:8f: ba:84:39:61:77:2f:d8:81:55:f4:8d:7d:87:8a:13: 04:6b:ac:af:64:70:84:43:54:dd:70:d4:00:a5:19: 54:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A1:FF:36:6D:9E:09:D5:6E:32:37:CC:A2:DF:DB:A9:2A:A7:FE:D0 X509v3 Authority Key Identifier: keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:0a:35:bf:85:88:27:47:7c:a8:42:39:ec:73:76:f5:ab:c6: 62:a1:2a:58:65:d1:cd:85:05:26:82:23:a3:79:18:5b:53:f4: a0:61:60:a7:eb:48:c9:6c:aa:15:0b:c8:0d:b4:6a:b9:61:76: 81:79:6f:c4:65:e8:d1:5e:e4:17:67:49:6c:c0:01:09:f9:75: ba:fd:04:bc:b7:fb:6b:0b:a0:6a:23:17:e8:be:7f:f9:25:96: 65:d9:1e:39:52:5c:3a:eb:c4:7a:35:84:c7:40:8e:01:fe:39: 9e:f0:c2:6c:c9:52:10:44:2a:f9:89:c7:5f:ca:27:61:96:f7: db:d5:4c:24:d2:5f:75:29:26:42:99:60:34:ec:83:7f:fa:fa: 77:8b:78:7d:8d:10:b5:86:de:9f:22:49:8f:0b:e2:64:cf:f3: ff:f5:d1:54:6d:30:b5:22:84:4c:ec:c9:84:81:cf:cf:10:1d: ba:84:4b:0a:42:13:dc:e9:59:c0:83:76:da:ca:39:d8:c8:ab: 32:f2:d9:32:39:9c:79:a8:ea:40:a4:59:29:31:f0:df:c8:08: f8:34:dc:ff:ca:7b:0f:e6:45:5d:c6:f8:4a:f8:82:c8:df:b3: fd:7e:d0:3c:77:ae:c9:76:07:56:22:47:14:13:9f:62:ab:8b: f3:6d:b5:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGt5vpJ9JIY2yarXyE2rlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZTczMmU2YjI0OTA5M2U3OWExYTUwN2NiY2Q4MTk2ZjAx ODE3ZmEwHhcNMjUxMjI2MTAwMTA4WhcNMjUxMjI3MTAwMTA4WjAzMTEwLwYDVQQD Eyg4MGExZmYzNjZkOWUwOWQ1NmUzMjM3Y2NhMmRmZGJhOTJhYTdmZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn75NOGdRpP88sA7WDsPgzb3++NT2 f5lfFMbpi4/1+Uv0IjjdUP0Pz7xHJrqGfl+dM7HE3azXkkn6sraqBI7L5kmvT5bw X2+hhr5Vo83nAcvKmZANd90JXYEAIere4S0O1RvHWI45op8T2Ac/cS6xNJVAFVet 9klj4DUlLraGQs9hqnnh40kMwZ9VoUQuXDJu8XesYUxzFioA5pAXDTfV4XVL2k14 9ULNG9y3i8r9eXojNO+aWZrNw1zxmzHLIHdu/EfhCPzhoAZfAcFmiZOYikRngH7Y AdiV8MIrw2TDPY+6hDlhdy/YgVX0jX2HihMEa6yvZHCEQ1TdcNQApRlUAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICh/zZtngnVbjI3zKLf26kqp/7QMB8GA1UdIwQY MBaAFA/nMuaySQk+eaGlB8vNgZbwGBf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUt YTI3Nzg5ODI5M2I5LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUtYTI3Nzg5ODI5M2I5 LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwo1v4WI J0d8qEI57HN29avGYqEqWGXRzYUFJoIjo3kYW1P0oGFgp+tIyWyqFQvIDbRquWF2 gXlvxGXo0V7kF2dJbMABCfl1uv0EvLf7awugaiMX6L5/+SWWZdkeOVJcOuvEejWE x0COAf45nvDCbMlSEEQq+YnHX8onYZb329VMJNJfdSkmQplgNOyDf/r6d4t4fY0Q tYbenyJJjwviZM/z//XRVG0wtSKETOzJhIHPzxAduoRLCkIT3OlZwIN22so52Mir MvLZMjmceajqQKRZKTHw38gI+DTc/8p7D+ZFXcb4SviCyN+z/X7QPHeuyXYHViJH FBOfYquL82217Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:14 2025 by rpki-client