This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json) Hash identifier: Lwsq5laR62atTPyitAvSGNzeYiLJgnDvIip6r6TvA7k= Subject key identifier: 1E:C0:9A:51:D8:5D:9D:DF:10:02:2F:8C:0A:D7:6B:BF:48:EA:4F:0C Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32 Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632 Certificate serial: 019ACC7D6ADFD062C98E0DD494E37CADC80E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft Manifest number: 0CA9 Signing time: Fri 28 Nov 2025 22:02:42 +0000 Manifest this update: Fri 28 Nov 2025 22:02:42 +0000 Manifest next update: Sat 29 Nov 2025 22:02:42 +0000 Files and hashes: 1: YmdDnE-Vn1310ZEVyUeueCTQcs4.roa (hash: NlHhFYGZnQdX8LSnZttscO3Rwl4+d4S2jrYpL4VTU9k=) 2: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: I/EfpxCn3TEsvIe2/8wT9zTw+IjO5lrPcG1StERkK8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cc:7d:6a:df:d0:62:c9:8e:0d:d4:94:e3:7c:ad:c8:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632 Validity Not Before: Nov 28 22:02:42 2025 GMT Not After : Nov 29 22:02:42 2025 GMT Subject: CN=1ec09a51d85d9ddf10022f8c0ad76bbf48ea4f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e8:47:fc:f1:e7:ff:4d:22:b9:30:e7:dc:e0: 38:bb:b6:1c:e3:26:42:60:76:89:55:4d:c4:49:99: dc:04:25:85:27:4d:0e:76:0a:d1:61:23:8a:78:49: 66:0a:20:fa:82:80:2a:fe:15:4c:ea:e3:0a:ce:6d: 15:8c:d3:95:fd:9b:ac:f7:b9:0f:b7:8a:eb:3f:c1: be:63:eb:66:c9:b9:df:a1:7b:22:35:d2:f3:4c:fd: 14:9d:e1:cb:b7:99:26:a5:03:54:92:9d:e3:ad:14: 4b:90:64:3a:ac:ac:08:50:56:22:3d:d7:11:54:18: 29:b5:bd:8f:54:c1:b1:27:3e:2d:e6:d1:fc:75:e1: 67:bf:11:e1:7b:86:3f:0f:6c:4c:85:5e:79:a9:e3: 2c:dd:77:59:4a:c9:ac:97:6c:88:7b:41:46:9b:33: 23:6c:d7:cd:ff:b7:e6:20:d4:b8:10:2a:c8:dc:d6: 36:de:06:be:18:96:d1:08:8d:e7:6b:43:f5:12:69: db:c9:68:9d:c4:ff:f6:21:b9:a5:26:4a:14:15:54: 88:e4:ed:ff:4f:02:58:4f:2a:be:62:ad:a4:8d:4e: 64:d2:74:25:bd:1a:33:b3:37:e9:9c:b4:94:8f:2a: 04:da:bb:1e:4d:20:8a:82:2c:81:89:c5:dc:61:b1: 02:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C0:9A:51:D8:5D:9D:DF:10:02:2F:8C:0A:D7:6B:BF:48:EA:4F:0C X509v3 Authority Key Identifier: keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a1:67:d0:a3:be:da:02:c4:81:9f:af:09:87:e0:64:a7:0f: 5d:08:0b:d5:08:79:75:2e:29:78:ff:91:f9:bd:88:dd:db:8b: 66:6d:c6:a5:6f:28:f7:52:7c:d2:55:c2:05:41:9f:17:ae:f2: 1c:b0:58:4a:49:8e:d2:e6:8b:cf:5f:f0:c2:90:7b:07:dc:c4: 1f:23:4b:cd:2d:62:5e:64:84:37:ba:8f:c4:00:5b:70:01:cf: 57:07:a6:81:bc:4d:d0:c4:9d:26:fa:90:dc:8a:1e:f1:9b:1a: ad:5f:13:f4:23:2e:6d:b5:dc:f0:97:94:ed:86:05:0d:7a:49: b5:78:c3:95:22:e5:e8:48:b5:4d:3a:c0:3b:5d:fc:f3:19:aa: 72:6a:7c:fb:32:9e:db:30:45:40:1d:41:98:af:d4:e5:e9:8c: ed:52:e9:ff:7d:14:74:e4:6f:12:88:81:77:68:b2:d3:56:98: 69:ea:4e:c2:e7:12:bf:eb:12:96:17:2b:21:1c:26:27:1d:82: 3a:38:4a:77:1d:47:8d:25:a7:e8:a6:5c:bf:2e:e4:c3:9f:d4: f9:fc:a4:c7:f6:aa:6a:94:2b:1d:98:d8:0f:b1:87:08:a6:19: 15:68:38:bf:ca:38:db:9a:f1:84:b9:b0:16:c3:cd:99:2b:cd: 48:c4:90:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrMfWrf0GLJjg3UlON8rcgOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OGUxMzRlNGZmYjVmYjEzYWMyODRmZTk0ODgyNzY4MjYx NTY2MzIwHhcNMjUxMTI4MjIwMjQyWhcNMjUxMTI5MjIwMjQyWjAzMTEwLwYDVQQD EygxZWMwOWE1MWQ4NWQ5ZGRmMTAwMjJmOGMwYWQ3NmJiZjQ4ZWE0ZjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuhH/PHn/00iuTDn3OA4u7Yc4yZC YHaJVU3ESZncBCWFJ00OdgrRYSOKeElmCiD6goAq/hVM6uMKzm0VjNOV/Zus97kP t4rrP8G+Y+tmybnfoXsiNdLzTP0UneHLt5kmpQNUkp3jrRRLkGQ6rKwIUFYiPdcR VBgptb2PVMGxJz4t5tH8deFnvxHhe4Y/D2xMhV55qeMs3XdZSsmsl2yIe0FGmzMj bNfN/7fmINS4ECrI3NY23ga+GJbRCI3na0P1EmnbyWidxP/2IbmlJkoUFVSI5O3/ TwJYTyq+Yq2kjU5k0nQlvRozszfpnLSUjyoE2rseTSCKgiyBicXcYbEC7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7AmlHYXZ3fEAIvjArXa79I6k8MMB8GA1UdIwQY MBaAFHeOE05P+1+xOsKE/pSIJ2gmFWYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUt MDk5YmFkMDM3NjhlLzEvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUtMDk5YmFkMDM3Njhl LzEvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6Fn0KO+ 2gLEgZ+vCYfgZKcPXQgL1Qh5dS4peP+R+b2I3duLZm3GpW8o91J80lXCBUGfF67y HLBYSkmO0uaLz1/wwpB7B9zEHyNLzS1iXmSEN7qPxABbcAHPVwemgbxN0MSdJvqQ 3Ioe8ZsarV8T9CMubbXc8JeU7YYFDXpJtXjDlSLl6Ei1TTrAO1388xmqcmp8+zKe 2zBFQB1BmK/U5emM7VLp/30UdORvEoiBd2iy01aYaepOwucSv+sSlhcrIRwmJx2C OjhKdx1HjSWn6KZcvy7kw5/U+fykx/aqapQrHZjYD7GHCKYZFWg4v8o425rxhLmw FsPNmSvNSMSQIA== -----END CERTIFICATE-----Generated at Fri Nov 28 23:40:12 2025 by rpki-client