This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft File: DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft (raw, json) Hash identifier: isEJ0QUC3Pgb4RWV8qTdI1H/7JTBjiEFtHnGFcExS+g= Subject key identifier: 50:08:D9:B9:AB:94:E2:2A:22:89:26:3A:2B:A6:68:ED:71:F1:25:08 Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E Certificate issuer: /CN=0c4579a4028829d37acac65f66c056063251e57e Certificate serial: 019B1F87D806EF20CEFA1C87C342F79C6873 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft Manifest number: 0EA8 Signing time: Mon 15 Dec 2025 01:02:34 +0000 Manifest this update: Mon 15 Dec 2025 01:02:34 +0000 Manifest next update: Tue 16 Dec 2025 01:02:34 +0000 Files and hashes: 1: DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl (hash: JaacNSOHuSCyPkE6IeHOXyAb0rQjL5Ivf0N5uirJ0Lg=) 2: fzCVh6B_DKQwB3K_lMMIaHfyrF8.roa (hash: ywjvOQhNwUvuKUliKOgNli6M3ye5boySGrRRcKij+48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:d8:06:ef:20:ce:fa:1c:87:c3:42:f7:9c:68:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e Validity Not Before: Dec 15 01:02:34 2025 GMT Not After : Dec 16 01:02:34 2025 GMT Subject: CN=5008d9b9ab94e22a2289263a2ba668ed71f12508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c3:fe:b5:bd:59:90:71:9c:83:48:8f:ca:56: c2:e1:b6:7e:da:d3:54:4a:e5:47:2f:49:c7:7f:09: 50:f4:6e:e0:67:ca:36:cc:71:75:ed:c8:3e:c2:be: 71:22:3a:d0:80:02:4b:45:64:9a:5c:80:bb:1a:6e: 48:6e:f0:a1:1e:a1:27:d1:d0:12:d8:81:d4:c9:03: eb:7f:d7:4f:75:55:87:7e:c6:55:b0:39:23:73:e8: c4:9f:81:e8:2b:5e:46:22:6c:cf:a9:14:e2:f4:9f: c1:6b:9f:d2:e7:fa:92:34:49:b9:e9:69:e4:5b:e8: 2c:d9:d0:f9:8d:de:ec:82:a5:fc:41:bf:2e:3b:10: 8c:3a:00:a9:17:8f:68:e9:91:44:ee:91:a0:d1:23: 9d:d8:02:03:9d:de:e9:fd:2a:1c:7a:9e:d9:0e:8b: 65:8f:22:2b:48:3c:66:cd:13:43:b1:b7:10:b6:3c: 64:9e:b0:46:19:f6:d2:6e:52:9a:29:fd:2d:b7:fb: 65:a3:23:aa:56:dd:9f:d1:fd:13:b7:25:cc:20:5e: d1:26:ed:43:13:b9:f1:8b:78:dd:ef:0e:07:be:ce: 7c:51:04:cb:94:3b:fa:a0:49:b9:91:18:96:38:63: 9b:e0:04:eb:e9:c7:69:95:02:9a:a2:fb:08:c1:db: f2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:08:D9:B9:AB:94:E2:2A:22:89:26:3A:2B:A6:68:ED:71:F1:25:08 X509v3 Authority Key Identifier: keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:4b:16:14:38:29:79:6a:4d:08:2f:62:87:ff:9f:3a:a7:9e: 73:95:41:d6:0c:e9:83:45:84:3b:fb:24:39:87:c8:2d:b0:39: 39:0b:18:8f:af:bf:6a:ef:74:04:da:89:72:e1:fa:5e:4d:ce: c3:43:92:a8:2e:3f:4c:cb:b3:52:25:25:0b:7e:08:7a:1a:43: ea:74:69:05:b5:ab:3d:0d:b7:66:4a:a3:da:8d:ff:9b:7b:8e: d5:5c:0a:72:22:38:a5:8a:9f:66:99:15:24:80:d0:9d:01:60: 0e:9c:78:c6:d7:25:58:c0:f1:9e:74:3b:8a:21:ca:54:a2:3e: ba:2b:32:06:03:46:1b:e0:8d:d8:bf:43:0c:20:ca:df:0c:d6: c5:2c:75:6c:36:fa:4a:34:34:1c:95:19:5e:e3:ee:78:cc:11: fd:36:bb:16:fe:7c:dc:fc:82:ab:4b:ca:36:45:8e:ca:17:2e: 78:1c:a4:c0:67:07:07:33:42:ed:11:a0:dc:2d:f2:1b:ba:ec: 0e:67:45:e0:1f:70:4d:68:43:ca:d6:72:7b:72:0f:23:79:fe: 6d:75:9d:9e:7d:b9:43:9e:fd:94:ea:ab:f2:55:71:b9:c3:76: 97:45:b3:60:fe:c2:2b:57:0d:2e:29:1a:cb:64:49:2f:ac:0e: 1b:df:49:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfh9gG7yDO+hyHw0L3nGhzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNDU3OWE0MDI4ODI5ZDM3YWNhYzY1ZjY2YzA1NjA2MzI1 MWU1N2UwHhcNMjUxMjE1MDEwMjM0WhcNMjUxMjE2MDEwMjM0WjAzMTEwLwYDVQQD Eyg1MDA4ZDliOWFiOTRlMjJhMjI4OTI2M2EyYmE2NjhlZDcxZjEyNTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssP+tb1ZkHGcg0iPylbC4bZ+2tNU SuVHL0nHfwlQ9G7gZ8o2zHF17cg+wr5xIjrQgAJLRWSaXIC7Gm5IbvChHqEn0dAS 2IHUyQPrf9dPdVWHfsZVsDkjc+jEn4HoK15GImzPqRTi9J/Ba5/S5/qSNEm56Wnk W+gs2dD5jd7sgqX8Qb8uOxCMOgCpF49o6ZFE7pGg0SOd2AIDnd7p/Socep7ZDotl jyIrSDxmzRNDsbcQtjxknrBGGfbSblKaKf0tt/tloyOqVt2f0f0TtyXMIF7RJu1D E7nxi3jd7w4Hvs58UQTLlDv6oEm5kRiWOGOb4ATr6cdplQKaovsIwdvydwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAI2bmrlOIqIokmOiumaO1x8SUIMB8GA1UdIwQY MBaAFAxFeaQCiCnTesrGX2bAVgYyUeV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lZGFlYjUtNWU2ZS00MTFiLTk5Y2It M2M1MDE4MDc4MGIwLzEvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9lZGFlYjUtNWU2ZS00MTFiLTk5Y2ItM2M1MDE4MDc4MGIw LzEvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0sWFDgp eWpNCC9ih/+fOqeec5VB1gzpg0WEO/skOYfILbA5OQsYj6+/au90BNqJcuH6Xk3O w0OSqC4/TMuzUiUlC34IehpD6nRpBbWrPQ23Zkqj2o3/m3uO1VwKciI4pYqfZpkV JIDQnQFgDpx4xtclWMDxnnQ7iiHKVKI+uisyBgNGG+CN2L9DDCDK3wzWxSx1bDb6 SjQ0HJUZXuPueMwR/Ta7Fv583PyCq0vKNkWOyhcueBykwGcHBzNC7RGg3C3yG7rs DmdF4B9wTWhDytZye3IPI3n+bXWdnn25Q579lOqr8lVxucN2l0WzYP7CK1cNLika y2RJL6wOG99JpQ== -----END CERTIFICATE-----Generated at Mon Dec 15 09:38:15 2025 by rpki-client