This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft File: drTT6JcTIsZNegRYurdFqJreTeU.mft (raw, json) Hash identifier: A1/W7xr/NfXXZVz5vDLQuxj53s4oVB4V8z/EPtTBlgU= Subject key identifier: E0:4D:2D:B0:1B:5A:CA:B7:27:AB:52:56:F5:F7:5F:4D:95:D9:3C:AE Authority key identifier: 76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5 Certificate issuer: /CN=76b4d3e8971322c64d7a0458bab745a89ade4de5 Certificate serial: 019B1014CDE02F01848F79903273064BD29E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft Manifest number: 03F4 Signing time: Fri 12 Dec 2025 01:02:37 +0000 Manifest this update: Fri 12 Dec 2025 01:02:37 +0000 Manifest next update: Sat 13 Dec 2025 01:02:37 +0000 Files and hashes: 1: ZYX1Qhws2vdCl-u2QXbSsdG6zUs.roa (hash: 1Yas72g5IvT1A6G5CoyKopOr6adZNC8arOgG6BPNF2I=) 2: drTT6JcTIsZNegRYurdFqJreTeU.crl (hash: Oj+aWpxWdWMAheDwcYXhOJ/u1aovdPbTpwXSKeMAj4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:cd:e0:2f:01:84:8f:79:90:32:73:06:4b:d2:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76b4d3e8971322c64d7a0458bab745a89ade4de5 Validity Not Before: Dec 12 01:02:37 2025 GMT Not After : Dec 13 01:02:37 2025 GMT Subject: CN=e04d2db01b5acab727ab5256f5f75f4d95d93cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0d:56:cb:34:f8:fe:ce:c9:b3:94:b1:85:ff: ea:d1:77:4b:ec:75:aa:0a:6d:31:b4:a1:5a:ec:4b: b8:32:7f:45:09:98:3b:53:ec:0e:66:e9:0b:d1:e2: 21:df:44:6e:5a:77:d9:e2:cd:f8:e8:18:3c:70:b0: 1e:22:ce:72:5e:3f:86:f7:50:bb:e8:14:eb:3a:2f: f9:9b:2e:ea:0e:62:c6:3c:3f:84:73:46:2f:a4:20: 3e:99:71:1e:6a:6f:59:d6:1e:e1:5c:8f:33:f4:17: 01:0f:5b:a9:cf:18:ba:19:77:06:11:1b:46:bb:41: 48:a6:54:9a:1b:49:ea:05:38:a0:2b:6f:05:ed:05: 82:7a:d9:f2:b2:a8:19:71:8b:ab:0c:e3:34:e6:65: a3:58:00:60:18:12:b4:ab:80:27:49:58:f6:66:21: 31:d6:88:54:75:b1:d8:7e:fe:38:b6:98:87:e2:06: aa:3c:18:3f:f7:8e:c1:b7:9a:95:df:21:af:aa:f9: 6d:72:e2:e3:c6:ec:12:be:19:68:de:0d:c0:bf:b6: 4e:29:d1:31:c1:9b:7e:61:9d:fc:cf:fb:27:be:3c: 2c:60:f6:f5:86:db:3c:bc:87:ae:3f:e8:af:95:19: 8a:75:db:af:87:69:57:41:2b:8c:9e:df:75:60:8d: 0e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4D:2D:B0:1B:5A:CA:B7:27:AB:52:56:F5:F7:5F:4D:95:D9:3C:AE X509v3 Authority Key Identifier: keyid:76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:f4:c0:24:1e:c9:db:ab:3a:38:75:0b:31:83:e9:23:5c:da: 22:6a:24:d8:95:29:6a:2e:fc:7a:c9:1f:a0:23:3a:fc:44:dd: e1:19:58:dc:0d:2b:fc:3a:f1:36:d3:61:ac:29:d6:1c:1b:5f: 59:ba:4a:a6:6c:02:0e:0d:1b:d2:c9:7b:f7:40:93:2c:7f:79: dc:c0:38:b0:67:dd:b0:df:0c:3e:f4:01:d9:10:31:9d:b9:19: b0:f6:d3:5c:a7:c8:67:28:f1:54:6e:9a:22:d0:fb:de:85:33: 06:92:9d:91:29:07:1f:3e:8d:dc:72:d7:10:9e:5f:7f:98:49: 69:8f:3b:5b:65:72:cc:06:97:07:a4:43:55:f0:2b:42:3d:7c: 10:83:c8:fe:6f:aa:9c:1f:86:82:7c:95:0e:7d:06:87:49:69: 2d:4f:4a:4d:67:45:7c:73:8e:24:07:01:e5:97:38:4c:16:27: 20:78:04:71:ff:33:fc:b2:75:37:47:2a:43:dd:3a:88:1a:31: b4:22:c1:5e:49:d1:6c:ac:cb:cf:eb:a0:9b:ec:7b:d7:fe:59: dd:7a:e4:b9:06:41:32:24:8c:39:e4:61:d6:4d:2d:0f:f0:2e: 35:8c:b2:e8:1b:7b:25:6a:c2:41:44:6d:c4:31:fb:65:aa:24: c9:e6:cc:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFM3gLwGEj3mQMnMGS9KeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YjRkM2U4OTcxMzIyYzY0ZDdhMDQ1OGJhYjc0NWE4OWFk ZTRkZTUwHhcNMjUxMjEyMDEwMjM3WhcNMjUxMjEzMDEwMjM3WjAzMTEwLwYDVQQD EyhlMDRkMmRiMDFiNWFjYWI3MjdhYjUyNTZmNWY3NWY0ZDk1ZDkzY2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg1WyzT4/s7Js5Sxhf/q0XdL7HWq Cm0xtKFa7Eu4Mn9FCZg7U+wOZukL0eIh30RuWnfZ4s346Bg8cLAeIs5yXj+G91C7 6BTrOi/5my7qDmLGPD+Ec0YvpCA+mXEeam9Z1h7hXI8z9BcBD1upzxi6GXcGERtG u0FIplSaG0nqBTigK28F7QWCetnysqgZcYurDOM05mWjWABgGBK0q4AnSVj2ZiEx 1ohUdbHYfv44tpiH4gaqPBg/947Bt5qV3yGvqvltcuLjxuwSvhlo3g3Av7ZOKdEx wZt+YZ38z/snvjwsYPb1hts8vIeuP+ivlRmKdduvh2lXQSuMnt91YI0O5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBNLbAbWsq3J6tSVvX3X02V2TyuMB8GA1UdIwQY MBaAFHa00+iXEyLGTXoEWLq3Raia3k3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHJUVDZKY1RJc1pOZWdSWXVyZEZxSnJlVGVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84OTU3ZWItZjQ5Mi00M2NiLWE2MDMt YjYyNmYzMzE0OTJmLzEvZHJUVDZKY1RJc1pOZWdSWXVyZEZxSnJlVGVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi84OTU3ZWItZjQ5Mi00M2NiLWE2MDMtYjYyNmYzMzE0OTJm LzEvZHJUVDZKY1RJc1pOZWdSWXVyZEZxSnJlVGVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANvTAJB7J 26s6OHULMYPpI1zaImok2JUpai78eskfoCM6/ETd4RlY3A0r/DrxNtNhrCnWHBtf WbpKpmwCDg0b0sl790CTLH953MA4sGfdsN8MPvQB2RAxnbkZsPbTXKfIZyjxVG6a ItD73oUzBpKdkSkHHz6N3HLXEJ5ff5hJaY87W2VyzAaXB6RDVfArQj18EIPI/m+q nB+GgnyVDn0Gh0lpLU9KTWdFfHOOJAcB5Zc4TBYnIHgEcf8z/LJ1N0cqQ906iBox tCLBXknRbKzLz+ugm+x71/5Z3XrkuQZBMiSMOeRh1k0tD/AuNYyy6Bt7JWrCQURt xDH7ZaokyebMmQ== -----END CERTIFICATE-----Generated at Fri Dec 12 09:08:55 2025 by rpki-client