This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json) Hash identifier: M2sOM/Al9GvfBnZjGlInTDYenUWRbizRU/18/55af88= Subject key identifier: 20:43:B7:C8:E9:96:01:F4:DF:B5:D0:CC:DE:6B:4D:6E:87:A5:0B:EF Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af Certificate serial: 019B0E92679BCAFBF87606A9F81F102CB443 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft Manifest number: 0803 Signing time: Thu 11 Dec 2025 18:00:34 +0000 Manifest this update: Thu 11 Dec 2025 18:00:34 +0000 Manifest next update: Fri 12 Dec 2025 18:00:34 +0000 Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: OKfvSsiU3sKFY7HakWAtupklMu+4qtPYL4UF+jQ5sXk=) 2: FUn2t9ppYu0Wn0pkoCRZ-HiUy7U.roa (hash: IgKhBAHaInAK8D+wEDHgOoVh2qEqWhDFRzWVOdnNaSE=) 3: H4hpUNA2nrrRur4Tk2W8HjJVqu4.roa (hash: oa7awxP7blKcpEGQ8hgbpBoX6kUOq34Ta41x1XECaFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:67:9b:ca:fb:f8:76:06:a9:f8:1f:10:2c:b4:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af Validity Not Before: Dec 11 18:00:34 2025 GMT Not After : Dec 12 18:00:34 2025 GMT Subject: CN=2043b7c8e99601f4dfb5d0ccde6b4d6e87a50bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a3:d3:47:5c:6e:26:e1:65:8b:e5:0e:22:f3: b3:ff:49:e8:46:00:eb:65:76:62:5d:91:25:fa:d7: cb:9d:7d:4d:2e:d1:02:37:60:4b:0d:89:97:0c:11: 43:f7:e0:f8:83:23:80:11:43:d3:01:50:da:6e:9a: 2e:9c:0d:9c:bf:e4:6f:cd:14:c2:37:9c:d3:e3:53: 10:5d:d4:9f:89:82:59:43:9e:87:25:bc:ab:23:b3: c1:1f:14:0a:7c:7a:b0:e2:17:8a:d9:0d:69:d7:08: c9:6f:6f:4d:0c:4e:0e:55:90:0a:0e:e5:62:8a:cd: e6:f4:d2:8d:4c:9e:19:4e:bc:48:08:be:d3:e4:00: 86:7b:e7:15:b4:25:8c:cd:c2:75:b6:8e:10:56:05: ae:34:92:35:76:d6:2f:8c:2c:1f:21:74:1b:af:89: 78:78:bc:75:fa:50:b5:19:69:e4:0c:64:ff:af:d6: 80:2b:dc:27:21:d2:d6:61:53:77:b8:2d:0a:99:e3: 86:cc:82:91:c5:82:9d:2a:b8:67:c6:22:82:56:9f: 04:9b:41:21:2b:e1:51:96:38:3c:c2:f4:17:cd:38: 69:33:08:7c:52:e2:3d:77:a8:20:0f:1f:90:6c:67: bf:d2:9a:7b:3d:ef:b5:95:f5:38:bc:3d:d8:44:c9: 50:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:43:B7:C8:E9:96:01:F4:DF:B5:D0:CC:DE:6B:4D:6E:87:A5:0B:EF X509v3 Authority Key Identifier: keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:3a:68:5d:0a:23:27:f1:7e:8c:6f:44:58:9d:f8:29:b6:6c: 2b:f9:bb:e8:74:64:44:dc:16:ee:c5:83:c4:d3:59:32:69:6c: 1a:92:7e:81:54:69:1f:13:5b:10:44:30:6b:7a:13:ce:64:f0: 54:22:d2:c4:47:be:17:9b:49:11:f6:a8:5f:f0:9d:f6:4d:b9: 36:dd:ca:fc:4f:48:d3:69:be:c6:cd:9a:2f:39:ce:05:85:bb: 9c:9e:ab:ef:c6:f2:fc:5f:4d:f6:9e:b0:0c:e3:67:d5:bd:be: d2:68:75:06:96:e5:e3:0b:1b:06:a1:54:d4:07:fc:6a:3b:3b: 6f:65:89:1a:db:33:5e:46:ae:f7:a5:42:d5:1a:bb:5c:87:a8: ee:25:22:a0:db:8c:d2:34:9e:e9:ac:b5:60:8f:72:03:8b:a8: 95:a5:dc:df:ac:ae:1b:2d:8f:21:1b:ab:87:13:22:3e:bc:9e: d8:dc:a4:03:30:e1:89:68:87:47:28:36:73:53:45:ff:57:5e: c8:57:2d:62:52:31:ce:c0:0c:9d:02:44:9b:28:9e:51:d8:17: ca:90:e7:ea:8c:eb:73:20:86:18:e4:fd:42:db:4b:26:9e:d4: e1:08:de:8a:e1:13:52:ce:8e:84:4f:69:9b:1c:22:0e:91:6a: ce:d6:79:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkmebyvv4dgap+B8QLLRDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0M2JhYWZjNjRiMzNlNDNkYjc4ZGM3YWVkNjA1ZWY3MDQw NmQ5YWYwHhcNMjUxMjExMTgwMDM0WhcNMjUxMjEyMTgwMDM0WjAzMTEwLwYDVQQD EygyMDQzYjdjOGU5OTYwMWY0ZGZiNWQwY2NkZTZiNGQ2ZTg3YTUwYmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaPTR1xuJuFli+UOIvOz/0noRgDr ZXZiXZEl+tfLnX1NLtECN2BLDYmXDBFD9+D4gyOAEUPTAVDabpounA2cv+RvzRTC N5zT41MQXdSfiYJZQ56HJbyrI7PBHxQKfHqw4heK2Q1p1wjJb29NDE4OVZAKDuVi is3m9NKNTJ4ZTrxICL7T5ACGe+cVtCWMzcJ1to4QVgWuNJI1dtYvjCwfIXQbr4l4 eLx1+lC1GWnkDGT/r9aAK9wnIdLWYVN3uC0KmeOGzIKRxYKdKrhnxiKCVp8Em0Eh K+FRljg8wvQXzThpMwh8UuI9d6ggDx+QbGe/0pp7Pe+1lfU4vD3YRMlQnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBDt8jplgH037XQzN5rTW6HpQvvMB8GA1UdIwQY MBaAFOQ7qvxksz5D23jceu1gXvcEBtmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTIt ZTY4MTJkYWI2OTk5LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTItZTY4MTJkYWI2OTk5 LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTpoXQoj J/F+jG9EWJ34KbZsK/m76HRkRNwW7sWDxNNZMmlsGpJ+gVRpHxNbEEQwa3oTzmTw VCLSxEe+F5tJEfaoX/Cd9k25Nt3K/E9I02m+xs2aLznOBYW7nJ6r78by/F9N9p6w DONn1b2+0mh1Bpbl4wsbBqFU1Af8ajs7b2WJGtszXkau96VC1Rq7XIeo7iUioNuM 0jSe6ay1YI9yA4uolaXc36yuGy2PIRurhxMiPrye2NykAzDhiWiHRyg2c1NF/1de yFctYlIxzsAMnQJEmyieUdgXypDn6ozrcyCGGOT9QttLJp7U4QjeiuETUs6OhE9p mxwiDpFqztZ5hw== -----END CERTIFICATE-----Generated at Fri Dec 12 02:32:07 2025 by rpki-client