This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft File: D5uga20iZz9_ez0PiJ9HIEQbbgw.mft (raw, json) Hash identifier: Fx8jvoODKjB3NOC/emFp7liP8YMu1beu2BglN5Rdk+Q= Subject key identifier: A8:36:AB:81:EF:06:48:92:AE:6C:E8:8E:23:47:7C:13:1B:46:5B:93 Authority key identifier: 0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C Certificate issuer: /CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c Certificate serial: 019B3AFDD01C3879ED9C96604B21A2F107F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft Manifest number: 0738 Signing time: Sat 20 Dec 2025 09:01:10 +0000 Manifest this update: Sat 20 Dec 2025 09:01:10 +0000 Manifest next update: Sun 21 Dec 2025 09:01:10 +0000 Files and hashes: 1: D5uga20iZz9_ez0PiJ9HIEQbbgw.crl (hash: OmTpmZcyaCycVwwQY/IRTBRGEGO5pipvzU5egFuRoMY=) 2: dpEQqFiEzcBminPXKwfV-PABopw.roa (hash: aNr5tdVzzBcZX6IXpoVPaBnNNk42qKTnrWG6P7E7Joo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:d0:1c:38:79:ed:9c:96:60:4b:21:a2:f1:07:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c Validity Not Before: Dec 20 09:01:10 2025 GMT Not After : Dec 21 09:01:10 2025 GMT Subject: CN=a836ab81ef064892ae6ce88e23477c131b465b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c0:e7:55:88:0d:dc:79:bf:25:cc:9e:f7:bc: d6:c6:88:6a:c5:11:e2:a7:5f:0c:57:35:fd:b2:97: f6:81:8f:1f:56:fd:63:03:01:a3:cf:a4:54:71:bd: 11:0f:25:f8:43:8e:62:dd:6f:e9:52:14:ee:2d:8d: fc:c7:3e:46:1f:a6:93:6c:f5:6f:9f:6e:fa:79:eb: fb:af:a7:36:df:2e:2c:1f:05:09:f9:ec:38:cb:49: 23:96:68:03:e7:ad:5b:ce:fa:62:bc:65:78:b8:35: f9:ca:6e:56:c4:b7:6f:e8:33:62:b4:08:9d:60:7e: c1:1a:e2:0e:48:ec:0e:44:88:83:96:f4:2b:d1:4d: 1d:09:3d:0b:8d:d8:99:ce:03:ae:f1:20:51:f1:21: 74:97:6a:ff:fa:ba:c8:a1:16:87:c0:5d:e3:80:90: 54:bd:3b:6b:7d:52:7b:2c:c9:81:f3:81:c5:f5:50: a8:67:39:73:84:12:07:35:f7:ab:db:4f:5c:0b:6a: f3:66:1b:45:7c:b1:1f:fc:02:f1:d4:15:ad:c8:8d: 81:ec:5e:13:b9:19:3c:67:a7:02:23:7f:d8:dd:c8: 84:cf:b3:d1:d3:df:3a:dc:84:56:d9:82:e1:6e:5e: 2e:b7:81:70:9a:a9:50:ff:51:1f:61:79:e3:54:83: 94:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:36:AB:81:EF:06:48:92:AE:6C:E8:8E:23:47:7C:13:1B:46:5B:93 X509v3 Authority Key Identifier: keyid:0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:df:49:d1:22:08:84:15:32:9e:64:f4:5e:62:ff:73:f7:e0: 36:b9:9c:bd:0d:4e:ec:13:47:8b:ea:70:75:df:2e:a4:b2:50: 1c:79:05:29:d9:95:43:03:27:a7:db:d4:f9:8c:ac:c9:fd:71: 79:e1:e8:81:3d:d5:34:6d:d9:36:76:15:47:f3:4d:e5:c6:0a: 3e:39:11:54:ee:dd:60:0d:cd:d4:0f:7b:60:2b:5b:05:6a:9b: 96:88:bb:d1:c7:00:01:37:13:67:d8:47:72:5d:e4:b5:90:bc: cf:19:8f:64:c1:6f:46:d2:69:c4:4d:81:18:78:8d:3f:0a:8b: 8c:b2:8c:30:d4:1a:3b:14:b4:1b:c8:a8:6c:83:54:fe:5e:98: 96:a1:c8:24:f4:56:37:18:97:a9:55:29:d8:da:15:28:69:17: b8:7b:6a:d4:6b:44:ab:bc:fa:e3:42:d6:8b:97:6d:90:a8:bb: 82:2d:1e:b9:4f:76:87:0a:be:8f:44:68:ca:d2:db:e1:52:af: 75:38:c2:2e:86:93:7a:a7:cf:a1:1c:ba:c5:1b:59:81:3c:fb: 6e:b3:08:53:81:d8:8c:44:09:31:ed:8c:6d:ca:2e:4f:a9:d0: 5a:c3:6e:18:1d:e9:d8:bb:55:ab:28:8c:eb:a5:82:25:6f:d9: bc:c5:99:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/dAcOHntnJZgSyGi8Qf4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOWJhMDZiNmQyMjY3M2Y3ZjdiM2QwZjg4OWY0NzIwNDQx YjZlMGMwHhcNMjUxMjIwMDkwMTEwWhcNMjUxMjIxMDkwMTEwWjAzMTEwLwYDVQQD EyhhODM2YWI4MWVmMDY0ODkyYWU2Y2U4OGUyMzQ3N2MxMzFiNDY1YjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8DnVYgN3Hm/Jcye97zWxohqxRHi p18MVzX9spf2gY8fVv1jAwGjz6RUcb0RDyX4Q45i3W/pUhTuLY38xz5GH6aTbPVv n276eev7r6c23y4sHwUJ+ew4y0kjlmgD561bzvpivGV4uDX5ym5WxLdv6DNitAid YH7BGuIOSOwORIiDlvQr0U0dCT0LjdiZzgOu8SBR8SF0l2r/+rrIoRaHwF3jgJBU vTtrfVJ7LMmB84HF9VCoZzlzhBIHNfer209cC2rzZhtFfLEf/ALx1BWtyI2B7F4T uRk8Z6cCI3/Y3ciEz7PR09863IRW2YLhbl4ut4FwmqlQ/1EfYXnjVIOU4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKg2q4HvBkiSrmzojiNHfBMbRluTMB8GA1UdIwQY MBaAFA+boGttImc/f3s9D4ifRyBEG24MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zN2M4ZmYtMTg3Zi00ZDkxLWI0ZDYt MTM2NjU2YTNlZGU3LzEvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zN2M4ZmYtMTg3Zi00ZDkxLWI0ZDYtMTM2NjU2YTNlZGU3 LzEvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj99J0SII hBUynmT0XmL/c/fgNrmcvQ1O7BNHi+pwdd8upLJQHHkFKdmVQwMnp9vU+Yysyf1x eeHogT3VNG3ZNnYVR/NN5cYKPjkRVO7dYA3N1A97YCtbBWqbloi70ccAATcTZ9hH cl3ktZC8zxmPZMFvRtJpxE2BGHiNPwqLjLKMMNQaOxS0G8iobINU/l6YlqHIJPRW NxiXqVUp2NoVKGkXuHtq1GtEq7z640LWi5dtkKi7gi0euU92hwq+j0RoytLb4VKv dTjCLoaTeqfPoRy6xRtZgTz7brMIU4HYjEQJMe2MbcouT6nQWsNuGB3p2LtVqyiM 66WCJW/ZvMWZKg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:26:20 2025 by rpki-client