This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft File: d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft (raw, json) Hash identifier: 57JwqcaSCuXbVUW3xa41PNU1/XpTDxKO92mDiGewe1g= Subject key identifier: 5D:5C:95:DD:BE:54:1E:0C:CB:2E:14:6E:5D:68:EE:5F:54:1B:A9:F4 Authority key identifier: 77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D Certificate issuer: /CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d Certificate serial: 019B5A1A5FF3F1B9F09C4E32FB111C8682A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 10:00:36 +0000 Manifest this update: Fri 26 Dec 2025 10:00:36 +0000 Manifest next update: Sat 27 Dec 2025 10:00:36 +0000 Files and hashes: 1: 9RiEw_mWI329p00ygK6PV3zCib8.roa (hash: 76xZV8riwU1FZRHFqIOaKnZ1x4iN7Apxati5A/6/dRc=) 2: d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl (hash: AgAOjWAyNhXPdiezJZY2erq+bm+jnf+Ewufv8ML8I2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:5f:f3:f1:b9:f0:9c:4e:32:fb:11:1c:86:82:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d Validity Not Before: Dec 26 10:00:36 2025 GMT Not After : Dec 27 10:00:36 2025 GMT Subject: CN=5d5c95ddbe541e0ccb2e146e5d68ee5f541ba9f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:95:0c:e5:4c:f6:88:22:56:b5:21:7b:e7:b6: 74:0f:ad:3e:e8:93:fa:96:6d:fd:83:9f:63:e5:b3: 6d:25:1c:3e:1a:dc:1a:47:eb:5f:f9:f8:32:ee:e6: 42:a9:95:21:63:18:a3:61:fb:65:30:06:06:65:7e: d4:04:6a:ba:f9:79:f0:46:a1:65:54:2a:74:d7:c0: 93:e5:f7:e5:9b:29:3f:77:18:05:50:b6:78:65:3c: b7:33:16:77:1e:94:08:af:93:55:b6:77:b0:6a:fd: a4:63:54:54:20:2b:68:7c:46:44:0c:68:fa:0c:5d: 8c:cc:5d:36:98:76:ec:60:20:6d:d3:fc:81:a5:c8: 0b:bd:0e:5a:0f:5d:f0:45:9c:f4:8e:52:0a:ad:c3: f6:cd:a7:9b:a9:d3:91:97:a9:47:b5:ce:9a:23:7f: ab:2d:2f:ed:0c:60:6f:77:3e:08:ad:50:4e:f1:2e: 4f:f5:ce:21:47:e8:a6:25:ab:a6:b9:0c:23:24:b9: 7a:a8:e2:07:32:dc:75:41:fd:91:35:90:91:0c:1b: d4:e7:fd:83:13:10:d4:88:52:a2:d0:20:c0:ab:e3: 05:23:67:2d:69:65:f1:bc:95:8d:d2:3c:53:14:58: 10:dc:5f:03:fc:d0:c6:e5:16:22:e5:08:bc:e6:34: 1d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5C:95:DD:BE:54:1E:0C:CB:2E:14:6E:5D:68:EE:5F:54:1B:A9:F4 X509v3 Authority Key Identifier: keyid:77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:d1:de:41:eb:84:a8:55:13:c3:bb:df:8b:ea:ee:6f:8f:76: 94:fc:99:7e:4a:f0:e9:57:a7:a9:e3:66:98:5a:60:8d:d3:d9: e3:7a:31:1f:b7:28:8f:63:0a:ef:3a:28:b9:9a:8f:a7:05:33: de:f0:97:e7:8c:f0:6f:75:cf:df:fb:d8:e8:b6:74:0e:0e:7d: 52:dd:a5:4d:b0:03:ea:a5:fd:90:ee:90:6b:0e:3d:73:fb:86: 62:b8:8d:72:99:ac:2f:4c:46:dc:e8:4f:c9:23:94:b3:f1:57: ec:28:aa:9d:e2:2d:b4:d5:e0:b4:ec:1b:11:34:c1:2c:90:14: 63:5b:d3:6f:68:eb:93:f7:a9:20:91:7e:8d:ee:17:b2:0d:56: 79:e2:67:e8:9c:ae:65:fa:b7:ce:46:27:f7:a1:ad:0d:1e:26: 83:ef:3a:a4:63:95:25:7d:c2:cb:10:72:2a:28:6e:9b:99:13: 61:ab:c8:33:6f:d1:4c:a6:83:28:73:5b:48:5f:a6:7a:23:52: 43:b3:03:eb:60:98:9d:d7:c1:53:90:e8:8e:b9:89:b8:2e:55: 51:6d:77:34:90:02:ae:25:f3:61:61:14:52:22:97:43:5c:31: 9a:32:ea:d5:03:bf:12:e7:6b:09:c8:77:4d:6e:0c:6b:3d:2f: c3:9b:91:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGl/z8bnwnE4y+xEchoKkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OGEyZjM2NjAyYzc2ZmE3Mjk3YjRlNTlmNThkZGEwZDUw MWVhMGQwHhcNMjUxMjI2MTAwMDM2WhcNMjUxMjI3MTAwMDM2WjAzMTEwLwYDVQQD Eyg1ZDVjOTVkZGJlNTQxZTBjY2IyZTE0NmU1ZDY4ZWU1ZjU0MWJhOWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pUM5Uz2iCJWtSF757Z0D60+6JP6 lm39g59j5bNtJRw+GtwaR+tf+fgy7uZCqZUhYxijYftlMAYGZX7UBGq6+XnwRqFl VCp018CT5fflmyk/dxgFULZ4ZTy3MxZ3HpQIr5NVtnewav2kY1RUICtofEZEDGj6 DF2MzF02mHbsYCBt0/yBpcgLvQ5aD13wRZz0jlIKrcP2zaebqdORl6lHtc6aI3+r LS/tDGBvdz4IrVBO8S5P9c4hR+imJaumuQwjJLl6qOIHMtx1Qf2RNZCRDBvU5/2D ExDUiFKi0CDAq+MFI2ctaWXxvJWN0jxTFFgQ3F8D/NDG5RYi5Qi85jQdRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1cld2+VB4Myy4Ubl1o7l9UG6n0MB8GA1UdIwQY MBaAFHeKLzZgLHb6cpe05Z9Y3aDVAeoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDRvdk5tQXNkdnB5bDdUbG4xamRvTlVCNmcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9iZWRlOTAtOTM5Yi00OTJjLWIwYzgt NzNiYmQwMmNiZDM3LzEvZDRvdk5tQXNkdnB5bDdUbG4xamRvTlVCNmcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9iZWRlOTAtOTM5Yi00OTJjLWIwYzgtNzNiYmQwMmNiZDM3 LzEvZDRvdk5tQXNkdnB5bDdUbG4xamRvTlVCNmcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadHeQeuE qFUTw7vfi+rub492lPyZfkrw6VenqeNmmFpgjdPZ43oxH7coj2MK7zoouZqPpwUz 3vCX54zwb3XP3/vY6LZ0Dg59Ut2lTbAD6qX9kO6Qaw49c/uGYriNcpmsL0xG3OhP ySOUs/FX7CiqneIttNXgtOwbETTBLJAUY1vTb2jrk/epIJF+je4Xsg1WeeJn6Jyu Zfq3zkYn96GtDR4mg+86pGOVJX3CyxByKihum5kTYavIM2/RTKaDKHNbSF+meiNS Q7MD62CYndfBU5DojrmJuC5VUW13NJACriXzYWEUUiKXQ1wxmjLq1QO/EudrCch3 TW4Maz0vw5uR9A== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:00 2025 by rpki-client