This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft File: D5uga20iZz9_ez0PiJ9HIEQbbgw.mft (raw, json) Hash identifier: ujCopvBXJqEAoqPDS9Jy5unjY3I1ycIG3KfhLYSRYo4= Subject key identifier: C3:98:FC:5D:2B:2D:B0:A2:97:9D:28:DC:33:3E:B1:65:79:88:75:DB Authority key identifier: 0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C Certificate issuer: /CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c Certificate serial: 019B3CEC33B77663A6835A3DC9C294EAA588 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft Manifest number: 0739 Signing time: Sat 20 Dec 2025 18:01:11 +0000 Manifest this update: Sat 20 Dec 2025 18:01:11 +0000 Manifest next update: Sun 21 Dec 2025 18:01:11 +0000 Files and hashes: 1: D5uga20iZz9_ez0PiJ9HIEQbbgw.crl (hash: BLDqvzJFPYvlHwr+d32yMZSpArTjCEO1ALJK+MQIMTM=) 2: dpEQqFiEzcBminPXKwfV-PABopw.roa (hash: aNr5tdVzzBcZX6IXpoVPaBnNNk42qKTnrWG6P7E7Joo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:33:b7:76:63:a6:83:5a:3d:c9:c2:94:ea:a5:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c Validity Not Before: Dec 20 18:01:11 2025 GMT Not After : Dec 21 18:01:11 2025 GMT Subject: CN=c398fc5d2b2db0a2979d28dc333eb165798875db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:51:3c:7a:fa:67:89:f9:7c:ad:cb:fa:22: fa:ef:7c:df:af:82:49:da:f9:6b:5a:c7:16:1a:0e: 33:ff:c9:64:ea:0d:73:04:4d:ba:8e:c1:07:7f:65: 0a:42:fd:0f:7a:a8:3b:a9:e1:f2:ba:81:67:5f:ff: 20:3f:c7:76:2c:4b:aa:6b:9f:f6:45:7e:c2:67:fd: dd:fc:4d:8c:a9:a9:74:55:a6:2d:68:d9:ac:ba:95: 13:dc:f9:b5:b9:57:f8:7f:63:4a:f0:9f:56:6a:19: 2c:b9:38:c8:88:04:46:e2:50:66:73:33:ae:20:4d: 20:6a:80:24:16:7d:34:05:5e:d3:88:cb:85:c2:14: b9:24:b0:23:c2:6c:44:43:5a:3e:de:89:fc:ee:24: 79:47:91:c2:15:96:a1:3b:a6:95:53:a0:4e:bd:bf: 3f:ed:6a:fd:af:c8:6d:4a:80:9b:60:d6:5c:f6:84: 6e:24:27:e1:15:ad:16:08:08:e4:4d:c1:91:42:44: c8:f8:3d:eb:2d:9b:9b:54:9a:fb:86:0b:c7:7d:9a: 5e:ac:cb:a8:9b:ce:16:82:1e:7e:32:ed:d0:ef:9b: 0e:67:99:90:78:64:cf:2c:fb:37:f6:87:fc:ff:a3: 0a:00:61:fb:da:7b:2c:22:78:fa:e1:b5:73:5b:19: 74:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:98:FC:5D:2B:2D:B0:A2:97:9D:28:DC:33:3E:B1:65:79:88:75:DB X509v3 Authority Key Identifier: keyid:0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:33:e7:3d:5c:ef:7f:96:20:09:0d:b9:e7:48:0e:0c:79:0a: ae:5b:c5:60:bd:1e:c0:b5:12:c0:bf:76:be:e4:42:0a:d7:d5: b4:26:e5:1d:7c:ce:8d:dd:c9:46:97:b5:e9:b8:1d:b5:fa:92: 43:79:69:09:7f:b2:cf:3e:23:db:66:51:50:61:56:ea:0d:c5: f0:53:bc:52:66:33:ed:63:b7:77:9c:67:e5:d4:43:05:f8:2e: f0:70:4d:3a:2f:a9:62:ab:c9:30:0d:89:c8:af:68:97:8d:07: 90:62:6d:f9:ab:8f:82:94:32:16:99:aa:cd:1c:e3:00:de:88: de:79:5e:2c:bf:00:3d:08:fc:13:51:95:00:f4:2f:1a:96:2e: 48:74:88:44:80:8c:59:ee:57:f7:05:b6:50:80:ed:8d:3d:50: 73:b9:80:bd:c8:0d:a3:67:2a:5b:87:31:90:f6:77:e9:0e:57: d3:0c:26:ae:0e:63:53:20:38:fc:59:83:3d:f9:cc:6e:0e:00: ac:f7:87:07:58:ea:ff:41:3b:57:a3:5b:a9:e1:e1:b2:e5:cd: f2:7f:7e:89:c3:ad:ae:a0:98:70:38:d1:9a:10:fb:47:36:4c: 82:c5:e7:71:63:40:29:71:f5:1e:3b:60:8d:36:82:ac:a9:e0: 76:47:e6:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87DO3dmOmg1o9ycKU6qWIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOWJhMDZiNmQyMjY3M2Y3ZjdiM2QwZjg4OWY0NzIwNDQx YjZlMGMwHhcNMjUxMjIwMTgwMTExWhcNMjUxMjIxMTgwMTExWjAzMTEwLwYDVQQD EyhjMzk4ZmM1ZDJiMmRiMGEyOTc5ZDI4ZGMzMzNlYjE2NTc5ODg3NWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLpRPHr6Z4n5fK3L+iL673zfr4JJ 2vlrWscWGg4z/8lk6g1zBE26jsEHf2UKQv0Peqg7qeHyuoFnX/8gP8d2LEuqa5/2 RX7CZ/3d/E2Mqal0VaYtaNmsupUT3Pm1uVf4f2NK8J9WahksuTjIiARG4lBmczOu IE0gaoAkFn00BV7TiMuFwhS5JLAjwmxEQ1o+3on87iR5R5HCFZahO6aVU6BOvb8/ 7Wr9r8htSoCbYNZc9oRuJCfhFa0WCAjkTcGRQkTI+D3rLZubVJr7hgvHfZperMuo m84Wgh5+Mu3Q75sOZ5mQeGTPLPs39of8/6MKAGH72nssInj64bVzWxl0sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOY/F0rLbCil50o3DM+sWV5iHXbMB8GA1UdIwQY MBaAFA+boGttImc/f3s9D4ifRyBEG24MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zN2M4ZmYtMTg3Zi00ZDkxLWI0ZDYt MTM2NjU2YTNlZGU3LzEvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zN2M4ZmYtMTg3Zi00ZDkxLWI0ZDYtMTM2NjU2YTNlZGU3 LzEvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjPnPVzv f5YgCQ2550gODHkKrlvFYL0ewLUSwL92vuRCCtfVtCblHXzOjd3JRpe16bgdtfqS Q3lpCX+yzz4j22ZRUGFW6g3F8FO8UmYz7WO3d5xn5dRDBfgu8HBNOi+pYqvJMA2J yK9ol40HkGJt+auPgpQyFpmqzRzjAN6I3nleLL8APQj8E1GVAPQvGpYuSHSIRICM We5X9wW2UIDtjT1Qc7mAvcgNo2cqW4cxkPZ36Q5X0wwmrg5jUyA4/FmDPfnMbg4A rPeHB1jq/0E7V6NbqeHhsuXN8n9+icOtrqCYcDjRmhD7RzZMgsXncWNAKXH1Hjtg jTaCrKngdkfm/g== -----END CERTIFICATE-----Generated at Sat Dec 20 21:56:02 2025 by rpki-client