This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft File: dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft (raw, json) Hash identifier: kgJw5J0L1W1zR7XZV3OyHSf/Tmj2vj+cnp15894YuzE= Subject key identifier: A8:8C:75:6F:A5:3F:DF:CD:A7:99:6E:87:F6:D5:2E:89:FF:06:1A:9D Authority key identifier: 74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E Certificate issuer: /CN=74309aa0148cc90fced9943eb1a81946e9adae5e Certificate serial: 019B5ABFCE278473E0E61E9E212ADEEB4F9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft Manifest number: 0D5F Signing time: Fri 26 Dec 2025 13:01:17 +0000 Manifest this update: Fri 26 Dec 2025 13:01:17 +0000 Manifest next update: Sat 27 Dec 2025 13:01:17 +0000 Files and hashes: 1: 3P59Feb1jpoB_hwUGftROdmja6Q.roa (hash: vgAncWwhtK3WJUrN8441tfi4l7WNzadgnCcv6cDRfOQ=) 2: 8pYmn7TAGaMCMkGbuhyzK9IB1Gw.roa (hash: MiQ9nf6ClXhcte8AL3HSxhfAjgaZoJoXSOwTUDNQ6GU=) 3: dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl (hash: 87jTCzrpYM5YVJgjvYTlC6TkmLQbTPlq3h/XcLsWCZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:ce:27:84:73:e0:e6:1e:9e:21:2a:de:eb:4f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74309aa0148cc90fced9943eb1a81946e9adae5e Validity Not Before: Dec 26 13:01:17 2025 GMT Not After : Dec 27 13:01:17 2025 GMT Subject: CN=a88c756fa53fdfcda7996e87f6d52e89ff061a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:97:7c:3c:9a:cf:e7:42:e2:14:08:0c:9b:7b: 67:e1:1e:d8:1f:2d:20:41:d9:03:3a:ab:0e:ba:c6: 4b:a0:1b:3b:b8:ba:49:4d:3c:03:02:78:c6:bb:c0: 71:98:46:a3:bc:8d:82:de:ae:ac:06:8e:8b:cb:59: 8e:a4:fe:46:8a:bf:f5:00:43:33:8e:4f:21:f1:f7: f4:62:25:44:f8:55:a3:64:17:f1:2a:a2:62:b0:1d: 41:47:cf:b9:6f:64:48:b9:d6:4e:66:f9:22:57:fb: 91:78:2b:1a:9c:74:c3:78:f9:9e:34:c2:f0:7d:96: 9b:2c:61:1b:b5:cd:e6:86:d8:c0:ce:a6:90:77:a3: 20:e6:99:f7:da:5f:8b:4b:e5:cd:7e:a0:c9:c9:01: 9e:1d:23:77:c5:cf:36:97:59:c1:0f:5e:c5:f8:1e: 27:09:1e:59:77:01:32:7a:08:3a:24:04:46:97:05: ad:d2:55:29:ca:d4:b8:fe:20:9e:63:1a:ee:80:75: b6:c8:e3:bf:09:61:bf:98:af:76:6c:e7:3f:0c:6d: f4:92:dd:80:ae:ed:ff:f6:f3:fb:9e:9f:7b:cc:30: 42:d9:e6:e4:a6:bc:eb:47:a7:25:3f:d3:b1:94:22: ee:8d:4a:e2:06:4b:2b:8e:a5:11:6d:da:ca:3f:84: 00:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8C:75:6F:A5:3F:DF:CD:A7:99:6E:87:F6:D5:2E:89:FF:06:1A:9D X509v3 Authority Key Identifier: keyid:74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:20:72:af:b3:32:e1:fc:95:23:e7:22:50:f9:36:c4:91:82: 51:a2:c9:25:60:1b:d7:14:73:21:14:7d:73:55:21:1c:06:3f: 99:40:22:59:33:30:ca:d6:f9:c9:76:44:f3:2b:ef:39:b1:ec: 35:d5:42:68:f6:74:26:78:2f:a0:53:42:44:94:f4:6f:27:67: 92:a5:55:f5:dd:51:0b:fb:a6:ad:5e:ae:e5:a1:45:f9:2e:91: 9a:fb:10:16:ce:7f:67:34:63:a7:ab:33:69:7a:70:84:4a:b1: 07:cc:24:4b:95:96:c0:ed:0a:47:98:66:b6:85:af:01:fc:63: db:83:5d:5c:a6:48:b0:97:92:da:66:a7:ba:d4:c8:59:5c:3d: 9c:13:6f:a4:93:dc:f4:fb:b9:cd:07:75:c4:30:37:09:f0:11: a2:e3:1d:12:f3:c6:8f:21:54:6f:ce:e5:32:94:f6:7c:79:97: 6f:8b:4e:9f:e0:e0:ef:07:e9:b9:08:73:4f:39:78:77:60:79: 37:9f:a6:ba:c8:8e:ec:63:94:77:a4:e2:a5:89:14:3e:ee:38: ee:c9:a2:fa:d5:52:6e:e2:69:9d:74:53:73:47:0f:81:52:71: 68:50:f4:a1:cc:ec:84:6c:9c:2c:70:76:5c:e7:1d:53:a9:5f: d3:a0:9d:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav84nhHPg5h6eISre60+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MzA5YWEwMTQ4Y2M5MGZjZWQ5OTQzZWIxYTgxOTQ2ZTlh ZGFlNWUwHhcNMjUxMjI2MTMwMTE3WhcNMjUxMjI3MTMwMTE3WjAzMTEwLwYDVQQD EyhhODhjNzU2ZmE1M2ZkZmNkYTc5OTZlODdmNmQ1MmU4OWZmMDYxYTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05d8PJrP50LiFAgMm3tn4R7YHy0g QdkDOqsOusZLoBs7uLpJTTwDAnjGu8BxmEajvI2C3q6sBo6Ly1mOpP5Gir/1AEMz jk8h8ff0YiVE+FWjZBfxKqJisB1BR8+5b2RIudZOZvkiV/uReCsanHTDePmeNMLw fZabLGEbtc3mhtjAzqaQd6Mg5pn32l+LS+XNfqDJyQGeHSN3xc82l1nBD17F+B4n CR5ZdwEyegg6JARGlwWt0lUpytS4/iCeYxrugHW2yOO/CWG/mK92bOc/DG30kt2A ru3/9vP7np97zDBC2ebkprzrR6clP9OxlCLujUriBksrjqURbdrKP4QAEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKiMdW+lP9/Np5luh/bVLon/BhqdMB8GA1UdIwQY MBaAFHQwmqAUjMkPztmUPrGoGUbpra5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZERDYW9CU015UV9PMlpRLXNhZ1pSdW10cmw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lZGFmNjktYmM1ZC00OTRlLTlkODct N2M3NDBlZjhhYTk1LzEvZERDYW9CU015UV9PMlpRLXNhZ1pSdW10cmw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9lZGFmNjktYmM1ZC00OTRlLTlkODctN2M3NDBlZjhhYTk1 LzEvZERDYW9CU015UV9PMlpRLXNhZ1pSdW10cmw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyByr7My 4fyVI+ciUPk2xJGCUaLJJWAb1xRzIRR9c1UhHAY/mUAiWTMwytb5yXZE8yvvObHs NdVCaPZ0JngvoFNCRJT0bydnkqVV9d1RC/umrV6u5aFF+S6RmvsQFs5/ZzRjp6sz aXpwhEqxB8wkS5WWwO0KR5hmtoWvAfxj24NdXKZIsJeS2manutTIWVw9nBNvpJPc 9Pu5zQd1xDA3CfARouMdEvPGjyFUb87lMpT2fHmXb4tOn+Dg7wfpuQhzTzl4d2B5 N5+musiO7GOUd6TipYkUPu447smi+tVSbuJpnXRTc0cPgVJxaFD0oczshGycLHB2 XOcdU6lf06CdHQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:11 2025 by rpki-client