This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft File: aDjbfmmRJ9pMHFpek_RPMCtihjs.mft (raw, json) Hash identifier: ZmT6vBfneSMj0KZEge3mnw6hAD3juttK54Mj7TjngKs= Subject key identifier: 59:5C:63:B7:EA:7E:9F:84:4A:CB:EF:A0:2F:38:70:0A:58:00:FF:46 Authority key identifier: 68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B Certificate issuer: /CN=6838db7e699127da4c1c5a5e93f44f302b62863b Certificate serial: 019AEFAC74A5657D95193485CDFEEBCCFF42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft Manifest number: 175F Signing time: Fri 05 Dec 2025 18:00:47 +0000 Manifest this update: Fri 05 Dec 2025 18:00:47 +0000 Manifest next update: Sat 06 Dec 2025 18:00:47 +0000 Files and hashes: 1: aDjbfmmRJ9pMHFpek_RPMCtihjs.crl (hash: mdnXDACyoigHxKIfavFiJBWMC0TDv+/H9k1bNY+HKDc=) 2: ndozZxXsqqvoYlnvn2R8eG6q9WM.roa (hash: J/bxB2F1VD9ABMhf1I4cZo/1cjeHrt4Cto7ZdYkPM28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.crl rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:ac:74:a5:65:7d:95:19:34:85:cd:fe:eb:cc:ff:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6838db7e699127da4c1c5a5e93f44f302b62863b Validity Not Before: Dec 5 18:00:47 2025 GMT Not After : Dec 6 18:00:47 2025 GMT Subject: CN=595c63b7ea7e9f844acbefa02f38700a5800ff46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:be:1c:df:89:7e:d6:87:61:ed:14:d8:35:f5: 08:b2:63:ad:5e:b1:81:a8:1a:a2:09:d4:46:54:2b: 13:55:d2:67:86:3d:66:ce:a0:96:41:b3:0d:e5:47: b1:fa:f8:f0:de:7c:2a:59:4d:4d:df:97:f3:b4:51: 18:e3:e2:35:2f:e2:01:ac:5e:92:ad:74:39:7f:9f: ee:4a:fe:15:e1:e9:2a:f5:e1:18:ee:8a:6d:4f:90: 7f:fc:ff:4c:00:63:d1:50:3a:22:7a:6c:32:a7:ed: 56:f1:c9:2e:73:0b:f2:3b:74:c6:85:1a:b0:b9:74: 23:e8:69:84:c1:bb:a8:46:e3:96:ec:ab:81:7e:2c: 00:b4:83:02:4e:17:56:6a:e8:10:4a:34:0d:19:57: a2:63:3d:c2:4e:3c:e4:16:db:43:9d:05:39:08:23: f4:38:13:a3:38:52:0c:5e:a6:0d:c4:ed:8f:f6:e0: 46:7e:9a:0e:15:73:2b:96:f1:de:2c:61:83:97:6c: 99:4a:ca:c8:9f:bd:df:a1:49:b8:ea:c3:aa:ea:83: 6d:a6:84:5c:03:fb:3a:73:91:54:85:38:a0:6f:5f: c1:e7:71:17:12:60:20:11:f8:2c:96:6a:42:92:7d: ca:a5:d2:75:94:cf:77:3a:37:fb:f3:44:17:96:50: fb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5C:63:B7:EA:7E:9F:84:4A:CB:EF:A0:2F:38:70:0A:58:00:FF:46 X509v3 Authority Key Identifier: keyid:68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e1:d8:d2:6c:5f:e1:d9:d9:d1:1e:9b:35:99:59:4c:4d:29: f7:03:12:41:72:1f:aa:c0:e6:9d:7a:72:b6:0f:ed:e0:60:34: 19:69:df:24:f3:1c:f2:a2:e3:d6:56:1e:b3:cb:14:aa:8b:5b: 98:fb:ea:15:2f:e9:f6:2f:9d:8a:95:1f:22:93:62:9e:0b:8b: fe:2f:30:86:50:cb:45:31:dd:f3:52:03:d3:50:5e:3d:d6:d6: 85:7e:f3:cc:c8:2c:7a:ea:e6:e2:56:14:e4:a6:c1:b8:05:a4: c9:86:34:36:29:35:77:93:48:f9:22:42:e2:3e:2a:30:53:a8: b8:9a:44:bb:ee:97:55:90:3b:5f:15:f9:9b:bd:40:cf:2a:1d: f9:89:1a:01:f7:ff:f9:18:b8:dd:61:8a:81:fc:b0:a4:6e:e9: f4:ab:87:4a:5b:e1:60:2b:22:8f:65:4f:a1:50:b3:4c:b9:83: fd:02:b4:35:97:bc:eb:3d:02:41:1a:ae:da:a5:ae:56:5a:81: 13:eb:ef:db:df:15:42:a6:b7:cb:a1:77:e9:1f:41:ee:8c:68: bd:5d:72:e3:d8:51:55:13:fe:93:86:c7:6f:09:40:af:22:b7: 26:95:40:81:44:79:88:fb:2d:e3:3e:a0:ca:d5:92:a8:4b:c7: 03:66:96:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrvrHSlZX2VGTSFzf7rzP9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MzhkYjdlNjk5MTI3ZGE0YzFjNWE1ZTkzZjQ0ZjMwMmI2 Mjg2M2IwHhcNMjUxMjA1MTgwMDQ3WhcNMjUxMjA2MTgwMDQ3WjAzMTEwLwYDVQQD Eyg1OTVjNjNiN2VhN2U5Zjg0NGFjYmVmYTAyZjM4NzAwYTU4MDBmZjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb4c34l+1odh7RTYNfUIsmOtXrGB qBqiCdRGVCsTVdJnhj1mzqCWQbMN5Uex+vjw3nwqWU1N35fztFEY4+I1L+IBrF6S rXQ5f5/uSv4V4ekq9eEY7optT5B//P9MAGPRUDoiemwyp+1W8ckucwvyO3TGhRqw uXQj6GmEwbuoRuOW7KuBfiwAtIMCThdWaugQSjQNGVeiYz3CTjzkFttDnQU5CCP0 OBOjOFIMXqYNxO2P9uBGfpoOFXMrlvHeLGGDl2yZSsrIn73foUm46sOq6oNtpoRc A/s6c5FUhTigb1/B53EXEmAgEfgslmpCkn3KpdJ1lM93Ojf780QXllD7CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFlcY7fqfp+ESsvvoC84cApYAP9GMB8GA1UdIwQY MBaAFGg4235pkSfaTBxaXpP0TzArYoY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYURqYmZtbVJKOXBNSEZwZWtfUlBNQ3RpaGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iMjQ3MWMtYmViYy00NDEyLWE2YTQt MmY5Y2FjNzAwZmE1LzEvYURqYmZtbVJKOXBNSEZwZWtfUlBNQ3RpaGpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9iMjQ3MWMtYmViYy00NDEyLWE2YTQtMmY5Y2FjNzAwZmE1 LzEvYURqYmZtbVJKOXBNSEZwZWtfUlBNQ3RpaGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXuHY0mxf 4dnZ0R6bNZlZTE0p9wMSQXIfqsDmnXpytg/t4GA0GWnfJPMc8qLj1lYes8sUqotb mPvqFS/p9i+dipUfIpNinguL/i8whlDLRTHd81ID01BePdbWhX7zzMgseurm4lYU 5KbBuAWkyYY0Nik1d5NI+SJC4j4qMFOouJpEu+6XVZA7XxX5m71Azyod+YkaAff/ +Ri43WGKgfywpG7p9KuHSlvhYCsij2VPoVCzTLmD/QK0NZe86z0CQRqu2qWuVlqB E+vv298VQqa3y6F36R9B7oxovV1y49hRVRP+k4bHbwlAryK3JpVAgUR5iPst4z6g ytWSqEvHA2aWdA== -----END CERTIFICATE-----Generated at Fri Dec 5 19:22:57 2025 by rpki-client