This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft File: dOEz6h5A_BPgdOMncQpTRKlgtcA.mft (raw, json) Hash identifier: 9Mhgb8eoFNjWnQm4sE3W0aP/yOx28VbikERWXzvaiQA= Subject key identifier: D4:92:4A:23:7B:7E:FC:C3:96:0D:52:4C:96:BE:27:B5:01:65:85:96 Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0 Certificate issuer: /CN=74e133ea1e40fc13e074e327710a5344a960b5c0 Certificate serial: 019B04EAC4D0DC8EB0A067DE8A9815F12576 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft Manifest number: 0E1A Signing time: Tue 09 Dec 2025 21:00:53 +0000 Manifest this update: Tue 09 Dec 2025 21:00:53 +0000 Manifest next update: Wed 10 Dec 2025 21:00:53 +0000 Files and hashes: 1: XXhZSJTw-3dSmsRY9bvXQqHBaIs.roa (hash: mmW0AxSNYmhmTbAA4XApc0Tjpzzlw3yy/NM/Jy4hxuI=) 2: dOEz6h5A_BPgdOMncQpTRKlgtcA.crl (hash: t/Ok+dkpHMf1nuttc2Z56bYANvwDAOuA67WanMqjNyk=) 3: lQpPjj9gpOYnRRV52S0ec3Spick.roa (hash: 2/R15nQqw+pyTSeVtt80lTdeScEa1kOW3xe+Ueb0Hdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:ea:c4:d0:dc:8e:b0:a0:67:de:8a:98:15:f1:25:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0 Validity Not Before: Dec 9 21:00:53 2025 GMT Not After : Dec 10 21:00:53 2025 GMT Subject: CN=d4924a237b7efcc3960d524c96be27b501658596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e3:b5:88:2c:a8:c5:df:4b:88:66:89:87:51: c0:43:21:60:85:a1:ca:9a:cc:1d:f2:b7:2b:5e:66: 51:c6:78:32:64:d1:91:85:cb:8c:c3:5b:dd:f9:4b: 39:8a:d8:50:b3:8c:a5:bf:75:02:cd:b4:ab:46:1c: 0e:65:8a:e7:b9:b3:90:d9:8e:72:f7:94:fc:6a:97: 75:dc:cf:b3:e0:bb:eb:78:6d:20:85:af:93:10:96: 01:40:25:31:e0:6b:dc:3d:e7:00:27:cc:79:c9:9e: 4b:2a:9a:d0:fc:28:18:c1:7e:c3:f8:08:da:3b:ee: 40:52:c5:87:89:e0:99:6d:5c:82:66:02:43:a0:d9: 67:fe:09:10:fe:23:19:b1:63:fe:8b:ee:8c:fe:03: a1:eb:32:5f:f1:f8:6e:36:1e:70:94:0b:47:8e:d4: 37:ed:f9:dd:e8:22:97:a7:7b:94:a2:df:25:a0:44: 4a:3c:99:56:34:39:fe:9c:6d:a9:35:77:3f:ae:b6: b4:00:83:3f:6f:72:90:27:df:23:65:86:02:a2:df: d6:3f:8f:1b:af:ca:67:71:cb:11:c7:a3:6b:ed:17: ac:ea:db:ff:99:b5:12:80:0a:8a:33:7a:75:31:b4: 80:55:0f:0c:ee:1e:2e:1e:1a:c7:de:08:ab:c5:1f: f8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:92:4A:23:7B:7E:FC:C3:96:0D:52:4C:96:BE:27:B5:01:65:85:96 X509v3 Authority Key Identifier: keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:46:b3:53:99:bc:6c:f1:17:0d:b7:de:ea:6a:01:c6:a6:17: be:21:00:6c:13:39:dd:e0:e0:57:15:c0:13:7e:2f:ad:52:23: e3:82:b1:de:2b:4f:22:cb:4c:6a:0c:4a:da:48:27:0e:6e:d6: 18:4f:31:91:ee:b7:87:c2:41:af:1f:ac:e8:4a:9f:1a:ad:e8: 47:3f:cf:04:6d:2b:e1:92:64:2e:25:ac:13:bc:53:b6:23:36: 0e:56:f7:04:9f:1f:10:a5:a8:a9:cb:da:59:9a:f1:ee:6f:1c: ba:c2:14:81:5f:ea:55:8a:3d:42:42:b2:a7:2a:29:4d:1f:69: a8:ec:11:bf:6e:77:41:ff:76:2f:46:8e:b3:6b:20:db:24:ce: 8c:e2:ac:d7:42:06:cd:27:ee:5a:d2:bf:6a:fe:fb:3c:5f:6d: 63:5a:6d:c4:9c:4f:f7:f7:d7:4e:8d:83:40:a7:ac:6e:31:fb: 20:12:20:e4:e9:35:66:65:4e:dd:d2:3e:2e:67:d7:58:1c:fd: 93:72:ed:20:0b:1d:d9:ab:b9:c8:aa:43:da:4d:a6:24:d0:31: 5a:b4:18:78:01:64:94:e5:2f:c0:7a:8e:ef:78:87:8e:51:93: d0:b1:1d:d9:b2:73:db:88:3b:c4:86:2f:12:3e:39:70:cb:5b: 8a:ab:07:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsE6sTQ3I6woGfeipgV8SV2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTEzM2VhMWU0MGZjMTNlMDc0ZTMyNzcxMGE1MzQ0YTk2 MGI1YzAwHhcNMjUxMjA5MjEwMDUzWhcNMjUxMjEwMjEwMDUzWjAzMTEwLwYDVQQD EyhkNDkyNGEyMzdiN2VmY2MzOTYwZDUyNGM5NmJlMjdiNTAxNjU4NTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneO1iCyoxd9LiGaJh1HAQyFghaHK mswd8rcrXmZRxngyZNGRhcuMw1vd+Us5ithQs4ylv3UCzbSrRhwOZYrnubOQ2Y5y 95T8apd13M+z4LvreG0gha+TEJYBQCUx4GvcPecAJ8x5yZ5LKprQ/CgYwX7D+Aja O+5AUsWHieCZbVyCZgJDoNln/gkQ/iMZsWP+i+6M/gOh6zJf8fhuNh5wlAtHjtQ3 7fnd6CKXp3uUot8loERKPJlWNDn+nG2pNXc/rra0AIM/b3KQJ98jZYYCot/WP48b r8pnccsRx6Nr7Res6tv/mbUSgAqKM3p1MbSAVQ8M7h4uHhrH3girxR/4oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSSSiN7fvzDlg1STJa+J7UBZYWWMB8GA1UdIwQY MBaAFHThM+oeQPwT4HTjJ3EKU0SpYLXAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9FejZoNUFfQlBnZE9NbmNRcFRSS2xndGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xZjU1ODctY2I5Mi00OTE3LThjZjMt MmNiOWUyMTcyZjk3LzEvZE9FejZoNUFfQlBnZE9NbmNRcFRSS2xndGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8xZjU1ODctY2I5Mi00OTE3LThjZjMtMmNiOWUyMTcyZjk3 LzEvZE9FejZoNUFfQlBnZE9NbmNRcFRSS2xndGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUazU5m8 bPEXDbfe6moBxqYXviEAbBM53eDgVxXAE34vrVIj44Kx3itPIstMagxK2kgnDm7W GE8xke63h8JBrx+s6EqfGq3oRz/PBG0r4ZJkLiWsE7xTtiM2Dlb3BJ8fEKWoqcva WZrx7m8cusIUgV/qVYo9QkKypyopTR9pqOwRv253Qf92L0aOs2sg2yTOjOKs10IG zSfuWtK/av77PF9tY1ptxJxP9/fXTo2DQKesbjH7IBIg5Ok1ZmVO3dI+LmfXWBz9 k3LtIAsd2au5yKpD2k2mJNAxWrQYeAFklOUvwHqO73iHjlGT0LEd2bJz24g7xIYv Ej45cMtbiqsHQQ== -----END CERTIFICATE-----Generated at Wed Dec 10 01:25:35 2025 by rpki-client