This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft File: d0TGtvujc4EeAL7khOIkxrbiP9I.mft (raw, json) Hash identifier: hWPYJ0wgvwWclVaOcpq0mC7noUPPCN6pGbeJ9K/Z5DU= Subject key identifier: 49:9D:4D:A7:58:9A:42:68:33:B5:C1:3B:9E:5B:5F:E7:1C:7E:20:E9 Authority key identifier: 77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2 Certificate issuer: /CN=7744c6b6fba373811e00bee484e224c6b6e23fd2 Certificate serial: 019B36B47DABFF2A0B603C50A15A3A045AE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 13:02:36 +0000 Manifest this update: Fri 19 Dec 2025 13:02:36 +0000 Manifest next update: Sat 20 Dec 2025 13:02:36 +0000 Files and hashes: 1: MPxrAGmlXi-R_-aAmj075zLDNVQ.roa (hash: u+cdaGdIb9sz6WUdHND28+hGiYkwyguJ2P/NJZ6f3PE=) 2: d0TGtvujc4EeAL7khOIkxrbiP9I.crl (hash: 2FHv3E3LRzWzMO1cUE3pkCN6T2WB4qGXBKllUY2PZ/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:7d:ab:ff:2a:0b:60:3c:50:a1:5a:3a:04:5a:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7744c6b6fba373811e00bee484e224c6b6e23fd2 Validity Not Before: Dec 19 13:02:36 2025 GMT Not After : Dec 20 13:02:36 2025 GMT Subject: CN=499d4da7589a426833b5c13b9e5b5fe71c7e20e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1b:07:8a:f1:16:6d:49:cc:9b:f4:de:51:eb: 49:0f:e1:20:94:18:6c:f4:77:ac:16:07:05:14:6a: 39:d6:39:51:d2:10:93:90:b4:01:bb:69:6e:0e:50: 91:cf:da:4a:7c:7d:ef:f5:c1:fa:1b:2c:f2:34:64: e9:b2:f0:a3:81:8a:f1:56:cf:bb:9f:10:79:c1:b0: ce:79:93:66:c2:a0:1f:d6:e8:a3:de:d3:bc:11:da: 2a:2b:86:b3:fe:04:84:a1:da:a0:e8:10:c4:62:b1: 2e:0c:02:63:2b:3d:13:b9:5c:d8:1c:93:c6:ca:02: 36:a4:bf:1e:0f:cc:d7:db:ba:a6:c2:d6:11:b1:85: ac:d1:4b:05:43:0b:86:75:b6:80:52:01:b7:05:ee: 14:d1:a8:c8:6b:bf:ca:3a:e7:fb:70:8d:d1:25:45: 5b:64:41:7d:29:16:7b:ef:38:36:ed:32:93:68:81: c0:5a:48:60:52:6b:59:dc:7a:ef:c8:fa:a9:ea:98: 22:60:2d:15:94:b6:6b:d4:07:13:2d:cc:fd:26:f0: c3:65:37:c9:e4:38:d0:90:6e:6a:42:f8:81:d7:05: a2:0d:59:63:ad:28:1e:42:fa:0a:81:e0:03:c8:83: 44:1d:2b:d7:ce:49:98:53:6b:33:62:cc:a4:80:1f: ff:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9D:4D:A7:58:9A:42:68:33:B5:C1:3B:9E:5B:5F:E7:1C:7E:20:E9 X509v3 Authority Key Identifier: keyid:77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:24:6c:b6:85:e7:cd:2b:b7:5a:6d:71:ee:54:8e:51:7f:fd: 07:ee:69:0d:6f:8b:71:08:35:10:1f:e0:08:3f:4f:33:36:c4: 32:f4:26:93:3c:09:73:02:05:71:0f:5e:26:76:73:65:8d:5b: 06:e4:95:a4:58:11:f0:f8:b7:d8:62:10:97:95:58:a5:4e:6f: d3:74:5b:bc:93:9e:93:a4:94:45:2f:ad:2a:64:55:35:05:ac: dd:3c:6f:90:99:e4:0b:d2:42:80:a4:4c:ab:ee:be:02:18:28: ef:36:85:2a:55:8f:be:61:d0:bb:02:04:cf:d4:17:b6:33:7c: 05:59:bc:28:d4:33:36:a7:6a:71:ed:0c:0f:97:24:d3:d1:a7: 0b:0f:4f:73:59:b6:61:d9:87:50:8e:ec:bb:38:50:cb:54:e0: 27:f3:7e:fb:99:44:6a:1a:5c:79:52:26:5f:f4:d2:a2:ab:b8: f5:0d:de:e4:7c:ee:cc:14:2c:fb:5b:75:02:58:f7:8e:f9:00: c7:2c:58:b0:04:5f:8a:5e:97:9a:68:d7:3a:89:f2:d8:7d:b5: 7d:e9:ee:dd:48:b2:32:a0:8d:c3:73:e7:28:1e:56:d8:d0:b5: 77:4b:9c:1a:bd:c3:25:30:0d:38:37:11:0d:75:c4:92:66:a0: 51:c5:88:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tH2r/yoLYDxQoVo6BFrkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NDRjNmI2ZmJhMzczODExZTAwYmVlNDg0ZTIyNGM2YjZl MjNmZDIwHhcNMjUxMjE5MTMwMjM2WhcNMjUxMjIwMTMwMjM2WjAzMTEwLwYDVQQD Eyg0OTlkNGRhNzU4OWE0MjY4MzNiNWMxM2I5ZTViNWZlNzFjN2UyMGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohsHivEWbUnMm/TeUetJD+EglBhs 9HesFgcFFGo51jlR0hCTkLQBu2luDlCRz9pKfH3v9cH6GyzyNGTpsvCjgYrxVs+7 nxB5wbDOeZNmwqAf1uij3tO8EdoqK4az/gSEodqg6BDEYrEuDAJjKz0TuVzYHJPG ygI2pL8eD8zX27qmwtYRsYWs0UsFQwuGdbaAUgG3Be4U0ajIa7/KOuf7cI3RJUVb ZEF9KRZ77zg27TKTaIHAWkhgUmtZ3HrvyPqp6pgiYC0VlLZr1AcTLcz9JvDDZTfJ 5DjQkG5qQviB1wWiDVljrSgeQvoKgeADyINEHSvXzkmYU2szYsykgB//UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmdTadYmkJoM7XBO55bX+ccfiDpMB8GA1UdIwQY MBaAFHdExrb7o3OBHgC+5ITiJMa24j/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDBUR3R2dWpjNEVlQUw3a2hPSWt4cmJpUDlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83NDRkZjMtOGUyOS00NThiLWE0NTkt OGY4Yzg5MjI2ZTNlLzEvZDBUR3R2dWpjNEVlQUw3a2hPSWt4cmJpUDlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83NDRkZjMtOGUyOS00NThiLWE0NTktOGY4Yzg5MjI2ZTNl LzEvZDBUR3R2dWpjNEVlQUw3a2hPSWt4cmJpUDlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUiRstoXn zSu3Wm1x7lSOUX/9B+5pDW+LcQg1EB/gCD9PMzbEMvQmkzwJcwIFcQ9eJnZzZY1b BuSVpFgR8Pi32GIQl5VYpU5v03RbvJOek6SURS+tKmRVNQWs3TxvkJnkC9JCgKRM q+6+Ahgo7zaFKlWPvmHQuwIEz9QXtjN8BVm8KNQzNqdqce0MD5ck09GnCw9Pc1m2 YdmHUI7suzhQy1TgJ/N++5lEahpceVImX/TSoqu49Q3e5HzuzBQs+1t1Alj3jvkA xyxYsARfil6XmmjXOony2H21fenu3UiyMqCNw3PnKB5W2NC1d0ucGr3DJTANODcR DXXEkmagUcWI6Q== -----END CERTIFICATE-----Generated at Fri Dec 19 17:55:55 2025 by rpki-client