This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft File: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft (raw, json) Hash identifier: 1frstL+N4K+BFiz1QNriDLc98w7cPw+udeub/U1dYtw= Subject key identifier: DE:10:0C:63:82:CE:E5:30:7E:13:6E:34:D5:75:C2:DA:22:7E:A1:B7 Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4 Certificate issuer: /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4 Certificate serial: 019B5975E373C910232AA26DDE63AA98F4C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft Manifest number: 0B84 Signing time: Fri 26 Dec 2025 07:00:56 +0000 Manifest this update: Fri 26 Dec 2025 07:00:56 +0000 Manifest next update: Sat 27 Dec 2025 07:00:56 +0000 Files and hashes: 1: 7XdSGfevcJJsevy7fOceWvja7nc.roa (hash: 738FMMf7Atyvq/JMYg2GIhaCbgWHQKUbxrDxkyANCA8=) 2: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl (hash: NtL2/QXaPW9A0RfKLMUJG8a4i7zHhSsLCP2iiasUUTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:e3:73:c9:10:23:2a:a2:6d:de:63:aa:98:f4:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4 Validity Not Before: Dec 26 07:00:56 2025 GMT Not After : Dec 27 07:00:56 2025 GMT Subject: CN=de100c6382cee5307e136e34d575c2da227ea1b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:13:2e:b8:1e:de:75:4e:d5:9c:1f:9d:bb:d1: 94:e2:e8:68:04:6e:b6:1e:8e:66:f9:a2:05:4e:ba: 4d:de:e4:61:a3:9b:77:cf:e9:8c:f1:98:3e:34:8a: a6:07:6f:a4:06:e2:80:8a:eb:35:60:59:7b:c3:c2: 32:8e:57:a9:e5:9b:b3:d1:e8:f5:32:18:67:6e:9a: 6d:36:86:38:44:82:b7:03:d8:ef:ef:27:6e:99:90: 2a:d0:ff:31:08:4a:4c:36:1d:ab:a7:3f:c0:2e:d4: ef:e0:99:3a:7c:99:7a:30:d9:79:11:00:2e:1f:9f: 6f:06:c9:20:6d:87:05:0d:c1:9e:e3:32:8f:cb:5b: 71:e2:9d:f6:f4:71:34:93:6a:2b:89:44:88:cb:54: 41:29:c8:c8:82:95:51:16:52:10:78:59:89:c6:f9: eb:9c:13:4b:74:14:c9:93:4d:60:5c:a8:4a:b0:e9: 2a:43:e1:7f:f3:8e:7c:64:41:d2:10:5e:4a:fa:d0: d7:ab:84:82:94:cd:38:44:d2:9e:0e:ce:a6:43:46: 56:fd:d1:b6:39:31:29:21:db:f1:3b:72:89:b1:61: 87:05:90:6f:bb:89:28:17:c3:d5:ee:c6:0b:b6:f9: 15:85:d3:91:21:96:5c:1f:d5:cb:06:d9:11:a5:bc: df:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:10:0C:63:82:CE:E5:30:7E:13:6E:34:D5:75:C2:DA:22:7E:A1:B7 X509v3 Authority Key Identifier: keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:6c:32:65:d9:bc:f5:bc:c7:04:be:79:6f:65:21:4a:8c:96: 8c:65:73:c2:28:0a:4e:fa:ff:51:33:3d:d2:c7:a4:78:ea:74: 9a:20:fc:1e:66:49:50:91:a9:5d:5d:73:7c:15:dc:b5:7a:22: b2:f4:08:29:ba:7c:85:6c:53:3c:b1:4e:b4:65:7c:39:a5:e4: 66:b8:b4:93:d8:9d:67:25:f7:80:48:73:ce:49:22:8b:a6:fc: cd:e3:ec:58:96:e7:27:8f:d7:a0:4c:4b:ab:6c:94:25:cc:60: 63:8f:c9:ec:d2:0f:d2:0f:0c:63:df:ac:f0:f5:d7:75:6b:77: 23:a8:b3:a4:d0:ba:6b:a0:be:6f:85:80:cd:25:50:a3:3c:90: 67:4d:79:68:e6:d2:75:b6:3b:42:39:b5:b3:d7:32:17:d9:af: dd:94:d2:41:b5:ac:00:cf:a1:5a:15:9e:da:06:a1:ab:7c:aa: 3f:66:4f:a3:ff:9f:e9:21:29:e2:d8:ec:33:16:8e:21:ca:7f: 7c:9f:f1:3e:16:61:d2:7c:01:28:f1:5c:22:63:3d:f5:6e:82: 26:18:ac:d9:a1:0e:ea:99:18:da:2d:ba:47:08:b5:7f:ff:73: 9f:c6:f3:72:21:21:21:1d:a6:b0:07:e5:5a:e3:43:8c:e8:8f: ba:4a:c0:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdeNzyRAjKqJt3mOqmPTFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZWQ2NmQyYzVhNDkzYTA5NTM0MzU3ZTVjYTI2ZjAzZDFh NGRkZDQwHhcNMjUxMjI2MDcwMDU2WhcNMjUxMjI3MDcwMDU2WjAzMTEwLwYDVQQD EyhkZTEwMGM2MzgyY2VlNTMwN2UxMzZlMzRkNTc1YzJkYTIyN2VhMWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRMuuB7edU7VnB+du9GU4uhoBG62 Ho5m+aIFTrpN3uRho5t3z+mM8Zg+NIqmB2+kBuKAius1YFl7w8Iyjlep5Zuz0ej1 MhhnbpptNoY4RIK3A9jv7ydumZAq0P8xCEpMNh2rpz/ALtTv4Jk6fJl6MNl5EQAu H59vBskgbYcFDcGe4zKPy1tx4p329HE0k2oriUSIy1RBKcjIgpVRFlIQeFmJxvnr nBNLdBTJk01gXKhKsOkqQ+F/8458ZEHSEF5K+tDXq4SClM04RNKeDs6mQ0ZW/dG2 OTEpIdvxO3KJsWGHBZBvu4koF8PV7sYLtvkVhdORIZZcH9XLBtkRpbzfQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4QDGOCzuUwfhNuNNV1wtoifqG3MB8GA1UdIwQY MBaAFA3tZtLFpJOglTQ1flyibwPRpN3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGUxbTBzV2trNkNWTkRWLVhLSnZBOUdrM2RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kOWNjNWItZjg2OC00M2ZlLTljNWMt MzdiOTZmZmJhNzZhLzEvRGUxbTBzV2trNkNWTkRWLVhLSnZBOUdrM2RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kOWNjNWItZjg2OC00M2ZlLTljNWMtMzdiOTZmZmJhNzZh LzEvRGUxbTBzV2trNkNWTkRWLVhLSnZBOUdrM2RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWwyZdm8 9bzHBL55b2UhSoyWjGVzwigKTvr/UTM90sekeOp0miD8HmZJUJGpXV1zfBXctXoi svQIKbp8hWxTPLFOtGV8OaXkZri0k9idZyX3gEhzzkkii6b8zePsWJbnJ4/XoExL q2yUJcxgY4/J7NIP0g8MY9+s8PXXdWt3I6izpNC6a6C+b4WAzSVQozyQZ015aObS dbY7Qjm1s9cyF9mv3ZTSQbWsAM+hWhWe2gahq3yqP2ZPo/+f6SEp4tjsMxaOIcp/ fJ/xPhZh0nwBKPFcImM99W6CJhis2aEO6pkY2i26Rwi1f/9zn8bzciEhIR2msAfl WuNDjOiPukrA3A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:17 2025 by rpki-client