This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft File: daWp6O8n4wJyk--E-4-NMPq25tY.mft (raw, json) Hash identifier: GgbViJ3rlyUjomFu4RVJcHTmVJ8owrJ6qCzEcgg7Wp4= Subject key identifier: E0:20:B8:A3:C3:66:A4:81:36:1F:04:11:F7:FF:2D:3D:ED:6B:47:7A Authority key identifier: 75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6 Certificate issuer: /CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6 Certificate serial: 019B134BBDF132BA28291382E794CD89E3F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft Manifest number: 1772 Signing time: Fri 12 Dec 2025 16:01:29 +0000 Manifest this update: Fri 12 Dec 2025 16:01:29 +0000 Manifest next update: Sat 13 Dec 2025 16:01:29 +0000 Files and hashes: 1: SR9wQfEl4hsimVx-_CLVSWn9NLA.roa (hash: 9+X16EqRYxx0KZ3SyD6WKcNWmq57GkzdE/2ZqmRpGZI=) 2: daWp6O8n4wJyk--E-4-NMPq25tY.crl (hash: WRXHQHZK3fYN0ny1/oyWhj7/EkZmV2e9LhRSIcGELKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 16:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:4b:bd:f1:32:ba:28:29:13:82:e7:94:cd:89:e3:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6 Validity Not Before: Dec 12 16:01:29 2025 GMT Not After : Dec 13 16:01:29 2025 GMT Subject: CN=e020b8a3c366a481361f0411f7ff2d3ded6b477a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:cc:89:20:d8:ce:c5:bc:a3:9b:6f:6c:a6:18: 04:fb:d8:ae:77:cb:c3:1c:8e:55:3b:3d:e5:4b:6b: 98:52:2c:10:9b:60:64:dc:e8:6e:58:ab:bc:8e:10: e6:80:3f:5d:47:93:66:ee:06:70:38:6c:c1:f3:19: 9c:6f:58:10:46:d4:ab:1c:e7:1b:9c:d2:f9:16:4a: 23:d2:c2:09:95:2c:de:51:df:99:0c:64:66:f7:10: 14:97:8d:44:41:2b:d8:68:d1:d4:cf:9d:bf:14:3c: a5:4e:0c:02:3c:d3:92:bd:ed:44:f1:36:40:18:61: 63:83:39:e7:b7:34:59:a2:a4:63:83:19:c1:f6:be: 53:3a:bd:7b:25:76:fc:a8:cc:a0:da:af:f6:e2:06: 55:fa:69:10:93:e2:3a:54:41:b0:a7:6a:42:d0:09: 37:5f:18:30:27:73:93:74:aa:e2:9d:35:e6:b7:44: d2:98:1d:96:7d:3a:ff:29:c7:0e:35:81:0d:15:ca: 0b:a4:4f:64:d6:8d:af:9c:4f:e7:2c:b6:09:b6:33: 4e:4a:a1:1a:3e:aa:85:17:74:9e:e9:c8:29:0f:8d: 52:92:9a:f4:9d:43:76:71:38:4a:f4:56:18:2a:cb: 73:fa:6d:51:1f:bc:e1:16:6f:18:55:d5:91:2c:21: ff:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:20:B8:A3:C3:66:A4:81:36:1F:04:11:F7:FF:2D:3D:ED:6B:47:7A X509v3 Authority Key Identifier: keyid:75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:eb:27:95:38:35:48:91:98:5c:13:1f:0c:56:af:4b:fd:08: 67:33:26:b5:9d:32:73:05:35:ab:46:9b:4e:d0:f8:13:38:90: 71:f5:60:96:70:f5:4d:09:eb:a5:62:dd:5c:a8:5c:e8:df:3c: e4:fb:74:a5:7e:92:d8:75:ff:38:ce:30:31:fc:be:fd:b0:08: e4:c8:d7:cf:77:ca:ca:63:66:2e:03:42:8f:78:54:93:cc:34: db:63:7a:6b:82:a4:db:7c:a5:be:4a:9e:e8:43:fa:2e:16:63: 80:44:cc:fc:de:6e:67:8e:01:14:3e:c2:7b:82:9b:47:24:f0: 49:5a:41:92:33:04:3f:a2:f4:81:de:5e:b4:7e:33:7c:d3:89: dc:0a:e2:2d:da:ec:32:d0:12:e3:03:d7:70:63:45:dd:d9:99: 7e:7e:fc:12:6b:14:e7:66:dd:25:eb:92:46:6c:e7:c6:96:57: 3b:5c:a6:24:b9:2d:06:ad:b2:8b:2f:04:5b:46:ce:12:d7:bb: 64:3e:09:72:27:02:0f:2c:f7:10:91:08:5c:9c:36:e7:77:61: bc:96:a2:54:25:51:57:0d:07:34:aa:98:aa:c9:db:05:76:76: 79:45:87:f7:48:43:d4:79:95:87:01:b4:35:3a:6a:97:78:d7: 79:8d:11:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsTS73xMrooKROC55TNiePzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YTVhOWU4ZWYyN2UzMDI3MjkzZWY4NGZiOGY4ZDMwZmFi NmU2ZDYwHhcNMjUxMjEyMTYwMTI5WhcNMjUxMjEzMTYwMTI5WjAzMTEwLwYDVQQD EyhlMDIwYjhhM2MzNjZhNDgxMzYxZjA0MTFmN2ZmMmQzZGVkNmI0NzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MyJINjOxbyjm29sphgE+9iud8vD HI5VOz3lS2uYUiwQm2Bk3OhuWKu8jhDmgD9dR5Nm7gZwOGzB8xmcb1gQRtSrHOcb nNL5Fkoj0sIJlSzeUd+ZDGRm9xAUl41EQSvYaNHUz52/FDylTgwCPNOSve1E8TZA GGFjgznntzRZoqRjgxnB9r5TOr17JXb8qMyg2q/24gZV+mkQk+I6VEGwp2pC0Ak3 XxgwJ3OTdKrinTXmt0TSmB2WfTr/KccONYENFcoLpE9k1o2vnE/nLLYJtjNOSqEa PqqFF3Se6cgpD41Skpr0nUN2cThK9FYYKstz+m1RH7zhFm8YVdWRLCH/+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAguKPDZqSBNh8EEff/LT3ta0d6MB8GA1UdIwQY MBaAFHWlqejvJ+MCcpPvhPuPjTD6tubWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGFXcDZPOG40d0p5ay0tRS00LU5NUHEyNXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jYTZmNjktNmZlYy00NzUzLWFkNzct ZWI2ZjlkZjA0NWIyLzEvZGFXcDZPOG40d0p5ay0tRS00LU5NUHEyNXRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9jYTZmNjktNmZlYy00NzUzLWFkNzctZWI2ZjlkZjA0NWIy LzEvZGFXcDZPOG40d0p5ay0tRS00LU5NUHEyNXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKesnlTg1 SJGYXBMfDFavS/0IZzMmtZ0ycwU1q0abTtD4EziQcfVglnD1TQnrpWLdXKhc6N88 5Pt0pX6S2HX/OM4wMfy+/bAI5MjXz3fKymNmLgNCj3hUk8w022N6a4Kk23ylvkqe 6EP6LhZjgETM/N5uZ44BFD7Ce4KbRyTwSVpBkjMEP6L0gd5etH4zfNOJ3AriLdrs MtAS4wPXcGNF3dmZfn78EmsU52bdJeuSRmznxpZXO1ymJLktBq2yiy8EW0bOEte7 ZD4JcicCDyz3EJEIXJw253dhvJaiVCVRVw0HNKqYqsnbBXZ2eUWH90hD1HmVhwG0 NTpql3jXeY0RZw== -----END CERTIFICATE-----Generated at Fri Dec 12 21:00:48 2025 by rpki-client