This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft File: D5_AEbXohjvPO7cq12ldMZdCuEQ.mft (raw, json) Hash identifier: fWD6zFw51ao49WvMaDnQWDV1TrfBSdsD8ZPhokJtstE= Subject key identifier: 18:2A:33:5F:3C:17:BE:95:3F:8D:C1:3B:6F:1B:08:40:C7:2A:F1:7D Authority key identifier: 0F:9F:C0:11:B5:E8:86:3B:CF:3B:B7:2A:D7:69:5D:31:97:42:B8:44 Certificate issuer: /CN=0f9fc011b5e8863bcf3bb72ad7695d319742b844 Certificate serial: 019B48141B17A447FB23B522F14A05D7729C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft Manifest number: 34 Signing time: Mon 22 Dec 2025 22:00:35 +0000 Manifest this update: Mon 22 Dec 2025 22:00:35 +0000 Manifest next update: Tue 23 Dec 2025 22:00:35 +0000 Files and hashes: 1: D5_AEbXohjvPO7cq12ldMZdCuEQ.crl (hash: hGIEILb/eWqlpCx0zapTOf0vSIPvGynuvvT33cbnF4c=) 2: NxLvMYol0olJ_a7M2jOjxwotMgE.roa (hash: gZMQTh5QGYR6z+uiDzdpi1iLsmG+EUbRWqft6dnE/nk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:1b:17:a4:47:fb:23:b5:22:f1:4a:05:d7:72:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9fc011b5e8863bcf3bb72ad7695d319742b844 Validity Not Before: Dec 22 22:00:35 2025 GMT Not After : Dec 23 22:00:35 2025 GMT Subject: CN=182a335f3c17be953f8dc13b6f1b0840c72af17d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a0:82:08:71:28:08:4e:ab:32:70:8c:ce:7b: 46:e2:ee:08:57:a2:28:1c:ac:9e:1c:18:95:5c:9e: 3d:67:7a:6a:84:67:4a:70:0f:88:de:55:80:b8:a1: 43:e6:e4:f7:72:04:3f:31:4a:ff:e3:5f:af:f5:4e: 51:fe:77:e4:8b:38:7b:49:43:1f:0c:fe:ec:f1:32: a6:87:79:15:de:9d:23:72:df:c5:19:3f:d1:6f:3c: d0:7b:50:d7:ea:e0:97:d2:ec:30:39:2a:7b:9d:90: bb:bf:c6:4a:e6:cd:ac:ce:f7:af:dc:af:6b:a6:e1: b5:31:7a:73:81:e4:b1:0f:69:17:38:e7:90:d5:df: de:24:0e:d0:26:b4:a5:a3:90:20:01:e3:08:85:30: 03:9a:b2:0d:b4:66:64:b5:0c:b1:ac:f4:3c:f4:00: 48:8a:5c:96:1b:7a:bc:98:75:c0:54:c3:d6:53:0d: 45:56:83:f4:68:3a:78:57:a3:20:1d:d4:3f:03:19: 25:0d:28:a5:38:65:9e:99:40:5e:f4:0d:02:e2:3a: 2f:12:7e:85:8f:2b:b4:71:98:ac:e9:77:30:9c:d9: 03:86:bb:23:27:df:c5:f8:16:00:00:71:a1:1c:cf: ea:5b:d0:11:70:d2:32:41:4d:8d:67:99:ce:74:5a: 00:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2A:33:5F:3C:17:BE:95:3F:8D:C1:3B:6F:1B:08:40:C7:2A:F1:7D X509v3 Authority Key Identifier: keyid:0F:9F:C0:11:B5:E8:86:3B:CF:3B:B7:2A:D7:69:5D:31:97:42:B8:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f0:38:20:24:fa:e4:cc:1f:f1:aa:6b:42:ac:25:48:c3:06: a3:bf:05:e5:e5:a4:25:79:90:02:c9:8a:fb:d1:b3:ee:59:08: 8a:27:f1:94:bd:55:85:a6:5a:e1:f6:da:77:91:6d:69:76:09: 60:e0:30:72:51:4b:11:44:b8:fc:e0:36:b9:2f:4b:fd:34:8c: 40:1e:80:35:2d:7d:76:3d:80:88:db:72:91:73:2c:45:18:bc: 9f:5d:2a:07:09:b5:4a:8f:48:0f:fc:d5:66:a5:6b:3b:3e:d2: fb:41:6d:35:94:23:45:f9:05:69:52:92:5d:ed:ec:0d:51:e4: 19:52:26:d9:ae:67:7e:f5:85:25:02:4b:49:40:dd:5f:73:94: d2:6b:15:c5:af:4d:ce:95:4f:f6:7f:86:8f:72:37:55:6b:84: 32:ab:f0:4b:29:c5:4b:16:ed:5d:39:76:ec:45:98:02:53:0d: 5e:d3:0f:d1:85:c2:f3:02:12:45:e3:ed:7c:21:bc:6b:54:e9: ad:c5:24:e6:2f:a2:27:6d:14:ab:0b:ba:f6:f0:1f:24:ed:7e: 53:1c:9d:e2:6a:cc:c5:2c:9d:13:3f:ea:51:75:7d:92:de:d3: f4:ba:e9:a3:af:c8:07:ff:f5:3b:e0:65:0d:5b:7d:c0:92:be: a3:a1:d1:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFBsXpEf7I7Ui8UoF13KcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOWZjMDExYjVlODg2M2JjZjNiYjcyYWQ3Njk1ZDMxOTc0 MmI4NDQwHhcNMjUxMjIyMjIwMDM1WhcNMjUxMjIzMjIwMDM1WjAzMTEwLwYDVQQD EygxODJhMzM1ZjNjMTdiZTk1M2Y4ZGMxM2I2ZjFiMDg0MGM3MmFmMTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6CCCHEoCE6rMnCMzntG4u4IV6Io HKyeHBiVXJ49Z3pqhGdKcA+I3lWAuKFD5uT3cgQ/MUr/41+v9U5R/nfkizh7SUMf DP7s8TKmh3kV3p0jct/FGT/RbzzQe1DX6uCX0uwwOSp7nZC7v8ZK5s2szvev3K9r puG1MXpzgeSxD2kXOOeQ1d/eJA7QJrSlo5AgAeMIhTADmrINtGZktQyxrPQ89ABI ilyWG3q8mHXAVMPWUw1FVoP0aDp4V6MgHdQ/AxklDSilOGWemUBe9A0C4jovEn6F jyu0cZis6XcwnNkDhrsjJ9/F+BYAAHGhHM/qW9ARcNIyQU2NZ5nOdFoA3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgqM188F76VP43BO28bCEDHKvF9MB8GA1UdIwQY MBaAFA+fwBG16IY7zzu3KtdpXTGXQrhEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDVfQUViWG9oanZQTzdjcTEybGRNWmRDdUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zYWJjNzQtYTg0Zi00YzZjLWFmMGQt NzBjNTg5ZGQyMTcxLzEvRDVfQUViWG9oanZQTzdjcTEybGRNWmRDdUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zYWJjNzQtYTg0Zi00YzZjLWFmMGQtNzBjNTg5ZGQyMTcx LzEvRDVfQUViWG9oanZQTzdjcTEybGRNWmRDdUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/A4ICT6 5Mwf8aprQqwlSMMGo78F5eWkJXmQAsmK+9Gz7lkIiifxlL1VhaZa4fbad5FtaXYJ YOAwclFLEUS4/OA2uS9L/TSMQB6ANS19dj2AiNtykXMsRRi8n10qBwm1So9ID/zV ZqVrOz7S+0FtNZQjRfkFaVKSXe3sDVHkGVIm2a5nfvWFJQJLSUDdX3OU0msVxa9N zpVP9n+Gj3I3VWuEMqvwSynFSxbtXTl27EWYAlMNXtMP0YXC8wISRePtfCG8a1Tp rcUk5i+iJ20Uqwu69vAfJO1+Uxyd4mrMxSydEz/qUXV9kt7T9Lrpo6/IB//1O+Bl DVt9wJK+o6HR2g== -----END CERTIFICATE-----Generated at Tue Dec 23 04:07:48 2025 by rpki-client