This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft File: cDE3TrlnkQnpGjjiixe_Jgq506s.mft (raw, json) Hash identifier: nHUX7hS615ozgSvLX58w7dChj4MYPUv1v+ecAHeIphc= Subject key identifier: 57:65:7F:CB:74:2B:67:05:46:1F:3E:F6:FF:44:D3:57:FC:71:1E:E2 Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB Certificate issuer: /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab Certificate serial: 019B3A58740428E8BE7DA6EDA6E3036DD6B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft Manifest number: 0505 Signing time: Sat 20 Dec 2025 06:00:33 +0000 Manifest this update: Sat 20 Dec 2025 06:00:33 +0000 Manifest next update: Sun 21 Dec 2025 06:00:33 +0000 Files and hashes: 1: Q3DzC8Xezd_wUJe_qmHOdRY16z8.roa (hash: UbPlIZy2nFY/zJS4B8sCeti8RZE/Rxf0ELKnlfBMfvg=) 2: cDE3TrlnkQnpGjjiixe_Jgq506s.crl (hash: lwCBj+P9UaM+avhdc6Ync85SikdzFBWXqzg7R0ZZi6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:74:04:28:e8:be:7d:a6:ed:a6:e3:03:6d:d6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab Validity Not Before: Dec 20 06:00:33 2025 GMT Not After : Dec 21 06:00:33 2025 GMT Subject: CN=57657fcb742b6705461f3ef6ff44d357fc711ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8d:12:76:a4:ba:a0:f2:df:ca:9c:7b:9d:eb: 49:35:d2:07:78:c3:fd:62:08:b1:97:fb:b4:9e:33: 82:81:a3:81:97:9d:2c:a7:23:41:04:58:d8:b6:90: b6:ea:bf:9d:96:3a:7e:e5:85:08:c5:9a:8d:17:12: bd:06:a0:19:ac:54:4d:d7:d5:94:dc:5e:bf:1f:e8: 96:21:b8:79:8e:b3:7d:7c:2b:26:72:50:9a:b0:12: c0:19:29:22:e1:2f:a6:87:f9:dd:f8:df:20:3b:6a: bc:5f:6e:f1:aa:c4:ab:36:01:dc:b5:37:6f:8a:01: f6:42:1a:c2:d6:36:e8:22:39:fb:55:c6:f3:97:ae: 47:fc:f3:92:30:12:cb:f5:69:75:19:16:cb:72:e7: a0:38:b8:23:db:cf:83:6b:cc:fd:c9:02:82:3a:37: 48:5e:86:ae:c8:cc:95:cc:44:17:da:91:78:a9:a9: be:3a:70:d5:1b:37:79:86:37:7d:17:7b:e0:dc:73: 83:44:e1:4f:59:7f:08:2d:65:62:92:1b:ca:47:49: c6:8b:71:f5:1b:02:52:40:6b:fb:c3:19:9d:de:16: 88:72:64:56:3b:f2:f9:c6:c1:c0:24:c1:2f:85:c0: 3f:2f:f4:7c:e3:87:da:15:50:8a:15:15:55:4e:1f: 62:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:65:7F:CB:74:2B:67:05:46:1F:3E:F6:FF:44:D3:57:FC:71:1E:E2 X509v3 Authority Key Identifier: keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:4e:46:8c:25:10:2e:79:3d:58:aa:50:7d:e6:27:08:fa:26: f3:a2:e0:e9:0f:de:03:b5:1e:44:b0:2c:23:b0:c0:c2:39:7e: 04:81:72:74:94:91:77:f2:df:1d:09:d2:2e:e1:10:18:12:8c: 00:9d:d5:a6:54:65:b3:cc:d5:a3:c5:07:7c:01:de:94:81:b0: 49:e2:e3:8e:8d:b4:26:f0:2f:17:a6:05:96:f6:26:0c:ca:47: c8:3f:cf:26:e2:42:f5:c2:68:87:44:7a:ae:2a:93:3e:1d:7c: 2a:13:9c:79:13:db:b7:83:d7:71:e7:7b:20:72:4b:2a:3f:81: eb:c2:1d:5a:92:70:e5:97:d4:9e:4f:a1:45:33:53:48:1c:a9: e3:c6:f7:60:20:1a:73:76:f7:ab:20:37:ff:de:a7:38:ca:7e: f9:f8:78:a3:33:b7:ae:50:23:78:76:f4:87:8a:63:32:45:76: 8d:a2:24:b9:3e:5c:33:51:2f:81:d8:a1:88:82:b6:f6:ad:41: c3:c3:0b:1e:60:bf:9e:54:e9:ec:d0:b1:6e:e5:13:70:20:a8: f5:3e:6b:55:48:30:19:5a:a0:92:e3:8e:61:c7:51:92:08:3c: eb:a9:1e:3d:fa:14:3a:fc:c7:48:43:85:2d:6c:a7:8a:85:15: 6e:a3:81:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WHQEKOi+fabtpuMDbdawMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMzEzNzRlYjk2NzkxMDllOTFhMzhlMjhiMTdiZjI2MGFi OWQzYWIwHhcNMjUxMjIwMDYwMDMzWhcNMjUxMjIxMDYwMDMzWjAzMTEwLwYDVQQD Eyg1NzY1N2ZjYjc0MmI2NzA1NDYxZjNlZjZmZjQ0ZDM1N2ZjNzExZWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY0SdqS6oPLfypx7netJNdIHeMP9 Ygixl/u0njOCgaOBl50spyNBBFjYtpC26r+dljp+5YUIxZqNFxK9BqAZrFRN19WU 3F6/H+iWIbh5jrN9fCsmclCasBLAGSki4S+mh/nd+N8gO2q8X27xqsSrNgHctTdv igH2QhrC1jboIjn7Vcbzl65H/POSMBLL9Wl1GRbLcuegOLgj28+Da8z9yQKCOjdI XoauyMyVzEQX2pF4qam+OnDVGzd5hjd9F3vg3HODROFPWX8ILWVikhvKR0nGi3H1 GwJSQGv7wxmd3haIcmRWO/L5xsHAJMEvhcA/L/R844faFVCKFRVVTh9irQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdlf8t0K2cFRh8+9v9E01f8cR7iMB8GA1UdIwQY MBaAFHAxN065Z5EJ6Ro44osXvyYKudOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0RFM1RybG5rUW5wR2pqaWl4ZV9KZ3E1MDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kOGI3M2ItNTAxMy00M2NkLWJhMmIt MmMyMTgwNzE0ZTcxLzEvY0RFM1RybG5rUW5wR2pqaWl4ZV9KZ3E1MDZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9kOGI3M2ItNTAxMy00M2NkLWJhMmItMmMyMTgwNzE0ZTcx LzEvY0RFM1RybG5rUW5wR2pqaWl4ZV9KZ3E1MDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU05GjCUQ Lnk9WKpQfeYnCPom86Lg6Q/eA7UeRLAsI7DAwjl+BIFydJSRd/LfHQnSLuEQGBKM AJ3VplRls8zVo8UHfAHelIGwSeLjjo20JvAvF6YFlvYmDMpHyD/PJuJC9cJoh0R6 riqTPh18KhOceRPbt4PXced7IHJLKj+B68IdWpJw5ZfUnk+hRTNTSByp48b3YCAa c3b3qyA3/96nOMp++fh4ozO3rlAjeHb0h4pjMkV2jaIkuT5cM1EvgdihiIK29q1B w8MLHmC/nlTp7NCxbuUTcCCo9T5rVUgwGVqgkuOOYcdRkgg866kePfoUOvzHSEOF LWynioUVbqOBfA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:20:52 2025 by rpki-client