This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft File: dAId0eJ80ed44tu9YKoYSxY7zv4.mft (raw, json) Hash identifier: dmKke6emKzVh+G8pYsNuE073VKnNwlyMfV65rk0Dy2E= Subject key identifier: 8B:EF:2D:8B:AA:C2:BA:93:42:DA:96:EA:CA:72:7D:6C:CB:14:47:C0 Authority key identifier: 74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE Certificate issuer: /CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe Certificate serial: 019B5A517861A6F4CF7FDC1A975F1ADCF53F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft Manifest number: 02ED Signing time: Fri 26 Dec 2025 11:00:47 +0000 Manifest this update: Fri 26 Dec 2025 11:00:47 +0000 Manifest next update: Sat 27 Dec 2025 11:00:47 +0000 Files and hashes: 1: SFufe6GxPr18jUulsobsVcJNabA.roa (hash: BS7brnhU1ziQ1RkRsO80taFEBA/xtbs+mzY1lj67wlg=) 2: dAId0eJ80ed44tu9YKoYSxY7zv4.crl (hash: umF6MjtweU5Hp4nMNDdaiMPNIJWGSAPEXdqsnia9xC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:78:61:a6:f4:cf:7f:dc:1a:97:5f:1a:dc:f5:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe Validity Not Before: Dec 26 11:00:47 2025 GMT Not After : Dec 27 11:00:47 2025 GMT Subject: CN=8bef2d8baac2ba9342da96eaca727d6ccb1447c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e3:31:ed:dc:49:2c:53:6d:ec:9a:71:01:b9: f2:77:a1:70:f5:0d:3e:46:31:b6:cb:6e:07:9c:4e: 14:86:6e:9f:42:05:52:e8:a8:a1:db:46:ce:5f:5a: 78:3f:0b:14:c3:3f:9f:df:d8:95:4e:d7:cc:01:a2: a2:e3:7e:2c:42:bf:0b:91:73:69:a2:d6:28:c7:ee: 19:54:69:c9:21:52:52:42:58:c4:39:8d:17:73:2c: 77:71:d6:21:a5:ee:45:44:ea:f9:65:e9:7b:17:78: 4d:3c:06:53:28:cd:61:91:d7:7b:cc:f5:1b:e5:66: cd:dc:ef:c3:54:80:57:e7:58:ab:51:bf:d7:38:9c: 00:0a:ac:86:22:d0:44:c8:7e:3a:0d:87:b5:16:f8: ad:ae:89:18:52:2e:d3:8a:b3:83:56:7d:63:41:54: c8:42:e9:1c:93:a7:35:6f:d5:1f:1c:f6:6c:2c:75: 3c:a2:7b:cb:1f:71:4a:b6:5d:97:0b:01:c2:c7:d9: 7a:28:0e:99:59:0b:03:58:51:f1:14:21:2d:5d:eb: 3e:bf:e6:ab:20:d3:8a:52:89:50:91:85:0a:1b:4f: 58:d0:f1:e2:ba:c2:2c:e9:e5:ff:0c:6c:fd:fa:97: 35:2f:21:80:85:bc:75:09:42:91:80:fb:64:26:7c: e3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EF:2D:8B:AA:C2:BA:93:42:DA:96:EA:CA:72:7D:6C:CB:14:47:C0 X509v3 Authority Key Identifier: keyid:74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0a:a9:bd:44:65:9c:6d:55:c3:e5:25:93:c3:91:e9:d4:3e: 76:86:56:75:a1:f9:fb:fc:5d:f1:7b:17:76:07:56:b5:fd:f2: f2:63:3b:1d:77:7e:0a:66:7d:3e:04:a3:7f:1b:54:13:ae:82: da:66:f4:0c:18:42:1a:b3:21:b3:5e:c9:91:08:24:ea:6a:b3: 49:de:0c:84:69:ba:7f:56:71:8e:54:57:3d:bb:d5:45:20:5f: 8a:ed:40:c3:a0:0f:08:d5:71:c9:b3:9d:52:30:dd:29:7f:4f: 51:c6:03:59:15:3b:b3:49:e2:0f:9d:17:8f:44:05:6b:1c:54: c1:96:4e:56:c3:5e:db:2a:d4:42:9c:48:79:16:6e:83:14:25: ea:0f:59:d0:7d:2e:3d:41:aa:fe:f7:a7:ee:7c:90:4e:e7:f0: 55:bc:96:1d:e7:ab:9e:21:96:b2:33:54:40:60:84:35:1e:8f: 46:1f:f6:78:9c:13:64:35:bc:91:4b:54:1a:f4:21:a8:b2:48: 62:fb:82:7b:02:70:31:3c:9e:d3:39:56:76:b0:09:e2:8e:18: d6:76:55:71:a2:94:d9:11:38:7d:0e:6a:66:1b:1c:a8:e9:43: d7:11:ab:53:76:07:9e:cc:29:03:cf:e6:f1:bc:8b:26:59:11: e4:d6:09:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUXhhpvTPf9wal18a3PU/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MDIxZGQxZTI3Y2QxZTc3OGUyZGJiZDYwYWExODRiMTYz YmNlZmUwHhcNMjUxMjI2MTEwMDQ3WhcNMjUxMjI3MTEwMDQ3WjAzMTEwLwYDVQQD Eyg4YmVmMmQ4YmFhYzJiYTkzNDJkYTk2ZWFjYTcyN2Q2Y2NiMTQ0N2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOMx7dxJLFNt7JpxAbnyd6Fw9Q0+ RjG2y24HnE4Uhm6fQgVS6Kih20bOX1p4PwsUwz+f39iVTtfMAaKi434sQr8LkXNp otYox+4ZVGnJIVJSQljEOY0Xcyx3cdYhpe5FROr5Zel7F3hNPAZTKM1hkdd7zPUb 5WbN3O/DVIBX51irUb/XOJwACqyGItBEyH46DYe1FvitrokYUi7TirODVn1jQVTI Qukck6c1b9UfHPZsLHU8onvLH3FKtl2XCwHCx9l6KA6ZWQsDWFHxFCEtXes+v+ar INOKUolQkYUKG09Y0PHiusIs6eX/DGz9+pc1LyGAhbx1CUKRgPtkJnzjgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvvLYuqwrqTQtqW6spyfWzLFEfAMB8GA1UdIwQY MBaAFHQCHdHifNHneOLbvWCqGEsWO87+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEFJZDBlSjgwZWQ0NHR1OVlLb1lTeFk3enY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84OTQxZjgtOWZiNi00ZDBmLWI0OTUt OTMzODVmODA1NjU1LzEvZEFJZDBlSjgwZWQ0NHR1OVlLb1lTeFk3enY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC84OTQxZjgtOWZiNi00ZDBmLWI0OTUtOTMzODVmODA1NjU1 LzEvZEFJZDBlSjgwZWQ0NHR1OVlLb1lTeFk3enY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwqpvURl nG1Vw+Ulk8OR6dQ+doZWdaH5+/xd8XsXdgdWtf3y8mM7HXd+CmZ9PgSjfxtUE66C 2mb0DBhCGrMhs17JkQgk6mqzSd4MhGm6f1ZxjlRXPbvVRSBfiu1Aw6APCNVxybOd UjDdKX9PUcYDWRU7s0niD50Xj0QFaxxUwZZOVsNe2yrUQpxIeRZugxQl6g9Z0H0u PUGq/ven7nyQTufwVbyWHeerniGWsjNUQGCENR6PRh/2eJwTZDW8kUtUGvQhqLJI YvuCewJwMTye0zlWdrAJ4o4Y1nZVcaKU2RE4fQ5qZhscqOlD1xGrU3YHnswpA8/m 8byLJlkR5NYJqA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:17 2025 by rpki-client