This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft File: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft (raw, json) Hash identifier: 70/z8mgk1So9rSw60k9jGODmNi3HHtEbgQ51XAPgvXE= Subject key identifier: DF:F5:63:E0:63:DB:8E:FE:86:B5:FD:04:E4:3C:73:89:C6:9D:87:59 Authority key identifier: 0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E Certificate issuer: /CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e Certificate serial: 019B281BD4E09E9491DAAF423ACD25D9C961 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft Manifest number: 0504 Signing time: Tue 16 Dec 2025 17:01:11 +0000 Manifest this update: Tue 16 Dec 2025 17:01:11 +0000 Manifest next update: Wed 17 Dec 2025 17:01:11 +0000 Files and hashes: 1: 6BzrArwu58N5sBVvJVBthqND_N4.roa (hash: OfB+8pNfA8OgycXqKbk5L8hxFdJxQJhdYPo6qkN9fXA=) 2: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl (hash: 7mIqPig6eiKduhgw7GdR2sWKXbkBUlaWyR30ekQEEUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:d4:e0:9e:94:91:da:af:42:3a:cd:25:d9:c9:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e Validity Not Before: Dec 16 17:01:11 2025 GMT Not After : Dec 17 17:01:11 2025 GMT Subject: CN=dff563e063db8efe86b5fd04e43c7389c69d8759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:84:c2:e2:15:38:74:61:7f:7f:57:e2:ec:f2: 36:12:fc:8a:92:9c:e6:44:89:ed:26:1f:fb:e5:87: 07:ed:87:70:b2:52:92:1e:65:71:47:fa:ba:08:8e: 51:d2:9d:ee:97:15:42:cd:46:df:9d:5c:e6:db:58: ea:43:d5:0d:b6:91:b0:83:ad:e3:1c:79:6f:60:6c: e7:2d:bb:57:3c:1b:09:92:72:9d:b5:30:02:7d:0d: d9:30:00:85:86:a2:06:2c:8d:a6:19:45:8e:52:31: 01:4b:d7:2b:f1:22:f7:c9:a5:58:84:24:6f:36:ca: 38:4a:18:c0:38:df:a6:61:43:0f:c2:fa:a9:c3:ab: 74:7b:de:4e:4c:f3:36:9f:e8:98:9a:cb:4f:7a:78: 47:00:91:cc:24:98:c5:5f:ad:ef:d7:de:97:00:3c: 76:44:ff:c8:5c:ed:88:0d:1e:5d:cb:8e:8a:5b:ac: a8:f4:d3:c0:21:9f:70:25:de:b5:a6:57:a1:52:67: 86:dd:98:d4:26:47:ec:0d:3a:ce:3a:0c:a0:d9:e4: e1:17:70:03:34:68:9a:6c:96:b7:05:2a:c7:52:ee: bc:e0:4b:49:8d:15:ac:1e:ed:27:d3:75:36:2e:88: 80:17:ef:d9:ad:a2:b4:3a:83:1e:df:da:e0:87:b3: af:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F5:63:E0:63:DB:8E:FE:86:B5:FD:04:E4:3C:73:89:C6:9D:87:59 X509v3 Authority Key Identifier: keyid:0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:de:30:54:e6:41:45:db:7b:56:8f:fa:a4:90:14:0f:c3:e9: 4b:a5:4a:09:df:e5:35:d6:8b:9a:3a:d7:f7:32:a2:5e:bf:5e: 00:17:88:da:29:78:bf:9b:a3:ad:de:52:df:5a:f6:7e:78:ba: dd:1e:ea:26:c7:30:b7:c7:92:d5:f1:d1:3e:7c:f5:ac:e4:52: 5e:97:2b:73:d9:83:5c:98:26:3d:7d:7d:9c:f6:0e:cf:5f:72: 3a:8e:fb:fb:45:33:17:da:0e:74:df:ad:13:d8:a3:fc:c7:aa: 76:6b:91:9f:2b:a0:0b:af:63:0e:25:b3:e6:e3:2e:05:10:56: ed:b3:bb:cc:ab:c7:27:c5:d7:1d:8e:20:4f:7e:d3:92:56:52: b9:65:3a:71:2d:3e:02:8b:d8:59:58:9a:d1:86:5f:e7:0d:a1: 0a:e0:3c:af:24:cb:01:65:17:8d:4d:9a:bf:3c:a8:5e:3b:0f: d4:89:11:fb:11:ba:93:45:66:0d:97:32:90:ae:9d:c9:42:87: 15:5f:ce:64:fe:c8:69:9a:c8:34:4f:70:69:98:bd:8e:2a:4e: d1:ec:82:e5:0d:aa:bb:4e:3a:12:03:d0:4b:66:99:b9:b5:b6: f1:71:71:2c:66:f1:af:7c:df:69:5b:27:80:3b:9b:c8:8f:73: 59:ce:c6:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG9TgnpSR2q9COs0l2clhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOWM1YWU5NGNhZGVkODc1YzhkYjJmNTgzM2NhODhkMmY2 OGVkMGUwHhcNMjUxMjE2MTcwMTExWhcNMjUxMjE3MTcwMTExWjAzMTEwLwYDVQQD EyhkZmY1NjNlMDYzZGI4ZWZlODZiNWZkMDRlNDNjNzM4OWM2OWQ4NzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoTC4hU4dGF/f1fi7PI2EvyKkpzm RIntJh/75YcH7YdwslKSHmVxR/q6CI5R0p3ulxVCzUbfnVzm21jqQ9UNtpGwg63j HHlvYGznLbtXPBsJknKdtTACfQ3ZMACFhqIGLI2mGUWOUjEBS9cr8SL3yaVYhCRv Nso4ShjAON+mYUMPwvqpw6t0e95OTPM2n+iYmstPenhHAJHMJJjFX63v196XADx2 RP/IXO2IDR5dy46KW6yo9NPAIZ9wJd61plehUmeG3ZjUJkfsDTrOOgyg2eThF3AD NGiabJa3BSrHUu684EtJjRWsHu0n03U2LoiAF+/ZraK0OoMe39rgh7Ov4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/1Y+Bj247+hrX9BOQ8c4nGnYdZMB8GA1UdIwQY MBaAFA+cWulMre2HXI2y9YM8qI0vaO0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mZDFkZDUtMzI5NC00NTUwLWEzZTYt OWFhYmI5OWZhMTBjLzEvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9mZDFkZDUtMzI5NC00NTUwLWEzZTYtOWFhYmI5OWZhMTBj LzEvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZd4wVOZB Rdt7Vo/6pJAUD8PpS6VKCd/lNdaLmjrX9zKiXr9eABeI2il4v5ujrd5S31r2fni6 3R7qJscwt8eS1fHRPnz1rORSXpcrc9mDXJgmPX19nPYOz19yOo77+0UzF9oOdN+t E9ij/MeqdmuRnyugC69jDiWz5uMuBRBW7bO7zKvHJ8XXHY4gT37TklZSuWU6cS0+ AovYWVia0YZf5w2hCuA8ryTLAWUXjU2avzyoXjsP1IkR+xG6k0VmDZcykK6dyUKH FV/OZP7IaZrINE9waZi9jipO0eyC5Q2qu046EgPQS2aZubW28XFxLGbxr3zfaVsn gDubyI9zWc7Gsw== -----END CERTIFICATE-----Generated at Tue Dec 16 21:33:03 2025 by rpki-client