This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft File: dr5GHrn3AE8poX_d3-8uLqBeua8.mft (raw, json) Hash identifier: z4FxUZI2SsTEyGP5mkRY24lN/PAau8C/zitZg5N9Nes= Subject key identifier: 8B:A4:BC:A7:AD:B7:D2:BD:EF:40:80:83:97:2F:21:F4:25:44:09:3C Authority key identifier: 76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF Certificate issuer: /CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af Certificate serial: 019B2852B57D8303BF850EBC0A3C7371B165 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft Manifest number: 1712 Signing time: Tue 16 Dec 2025 18:01:07 +0000 Manifest this update: Tue 16 Dec 2025 18:01:07 +0000 Manifest next update: Wed 17 Dec 2025 18:01:07 +0000 Files and hashes: 1: SmenFq2eO29wVInO8xQQnEozH4M.roa (hash: NLqfCsW+19ubwmofae6n/UEN1RfOh4ZI/s4/YAFk4k4=) 2: dr5GHrn3AE8poX_d3-8uLqBeua8.crl (hash: ZRSU9fevMAmSDy11KmyKNs+gZExaZMsBb19e/rZWqW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:b5:7d:83:03:bf:85:0e:bc:0a:3c:73:71:b1:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af Validity Not Before: Dec 16 18:01:07 2025 GMT Not After : Dec 17 18:01:07 2025 GMT Subject: CN=8ba4bca7adb7d2bdef408083972f21f42544093c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a5:a0:b5:02:1a:ef:c9:f0:f6:2b:24:50:1c: 06:27:00:f3:c2:1f:cb:1e:43:98:ee:46:39:f8:c9: 90:13:80:5e:fe:df:f2:de:98:7a:2d:57:5d:79:f7: e3:d8:82:ac:6f:8a:b5:18:55:66:b1:46:f2:48:f7: f7:63:de:64:7a:58:2c:56:a9:fb:95:5d:5a:8c:b8: b2:f0:07:07:70:16:90:5f:ed:7c:32:66:2a:4d:3c: 30:58:18:43:26:6e:12:97:db:40:66:17:cd:8a:d5: da:7d:fe:09:a4:46:a2:61:bf:1b:16:e9:1a:ea:57: 71:26:7b:18:6b:26:9d:81:1e:16:35:53:08:8b:1c: 55:e5:db:25:64:9d:41:ae:57:ec:8a:63:7f:aa:c3: e0:c8:74:59:8a:c3:e0:12:0a:00:1a:4f:a5:e6:1b: 20:55:49:f3:2c:b7:22:8f:5c:d9:43:c6:63:78:15: d9:e8:8c:97:3b:0b:9a:dd:fc:ea:ef:fc:27:59:2c: de:f2:ea:46:72:4b:2a:e8:8a:0b:27:27:9d:9f:b5: 41:42:cf:a0:21:2e:d4:4b:3f:42:e0:59:51:86:86: d1:bb:f8:49:39:a8:84:e8:7b:a5:b4:7c:c8:1d:4c: 09:d3:dd:90:9a:11:d2:84:8e:22:96:e7:12:f9:78: 23:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A4:BC:A7:AD:B7:D2:BD:EF:40:80:83:97:2F:21:F4:25:44:09:3C X509v3 Authority Key Identifier: keyid:76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:49:85:9b:8a:97:85:69:b1:90:6a:21:e3:c8:62:3f:09:35: 09:05:a2:e4:5e:67:0f:e0:da:a3:8c:a5:ff:54:41:ea:db:d3: c3:31:01:5f:9f:66:cf:c6:7a:96:28:e9:b7:20:c9:cd:30:af: b1:08:fd:35:ee:16:6d:d1:53:35:98:d8:aa:86:00:62:c4:05: a0:72:fa:71:2b:f8:d1:92:31:e6:ca:56:8e:65:1c:1c:68:b8: 60:6f:22:3b:0b:2d:4b:f5:a9:06:a7:e4:43:fb:f5:ad:f7:85: 89:ae:0c:78:bc:a3:ec:19:a7:08:2a:20:d5:5f:8c:38:96:f2: 36:a6:ac:71:1c:fe:7b:dc:25:c0:ce:28:db:3a:9a:b0:7d:53: 53:fb:2b:c3:ff:24:20:31:30:97:99:b8:d7:7a:aa:68:45:b0: 56:17:f2:b4:14:96:56:e3:bc:7f:13:b7:76:c6:71:0e:4a:89: 87:e5:f8:32:cc:73:a2:fc:9b:25:fd:85:43:d8:28:d2:b3:d9: ec:1e:45:51:40:4e:2a:a3:0b:04:95:15:62:50:77:17:d1:2d: 71:57:0c:30:0a:26:bf:a0:44:a0:3b:b5:4f:b1:e2:00:d9:75: 8c:a9:f9:24:dd:25:de:37:28:fc:5a:34:c0:d9:e7:28:02:2f: 38:57:32:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoUrV9gwO/hQ68CjxzcbFlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YmU0NjFlYjlmNzAwNGYyOWExN2ZkZGRmZWYyZTJlYTA1 ZWI5YWYwHhcNMjUxMjE2MTgwMTA3WhcNMjUxMjE3MTgwMTA3WjAzMTEwLwYDVQQD Eyg4YmE0YmNhN2FkYjdkMmJkZWY0MDgwODM5NzJmMjFmNDI1NDQwOTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKWgtQIa78nw9iskUBwGJwDzwh/L HkOY7kY5+MmQE4Be/t/y3ph6LVddeffj2IKsb4q1GFVmsUbySPf3Y95kelgsVqn7 lV1ajLiy8AcHcBaQX+18MmYqTTwwWBhDJm4Sl9tAZhfNitXaff4JpEaiYb8bFuka 6ldxJnsYayadgR4WNVMIixxV5dslZJ1BrlfsimN/qsPgyHRZisPgEgoAGk+l5hsg VUnzLLcij1zZQ8ZjeBXZ6IyXOwua3fzq7/wnWSze8upGcksq6IoLJyedn7VBQs+g IS7USz9C4FlRhobRu/hJOaiE6HultHzIHUwJ092QmhHShI4ilucS+XgjzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIukvKett9K970CAg5cvIfQlRAk8MB8GA1UdIwQY MBaAFHa+Rh659wBPKaF/3d/vLi6gXrmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHI1R0hybjNBRThwb1hfZDMtOHVMcUJldWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jNjgwYmYtOWI2Yy00NGQzLTgzN2Yt ODhjZmEzZGNhNmRlLzEvZHI1R0hybjNBRThwb1hfZDMtOHVMcUJldWE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9jNjgwYmYtOWI2Yy00NGQzLTgzN2YtODhjZmEzZGNhNmRl LzEvZHI1R0hybjNBRThwb1hfZDMtOHVMcUJldWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUmFm4qX hWmxkGoh48hiPwk1CQWi5F5nD+Dao4yl/1RB6tvTwzEBX59mz8Z6lijptyDJzTCv sQj9Ne4WbdFTNZjYqoYAYsQFoHL6cSv40ZIx5spWjmUcHGi4YG8iOwstS/WpBqfk Q/v1rfeFia4MeLyj7BmnCCog1V+MOJbyNqascRz+e9wlwM4o2zqasH1TU/srw/8k IDEwl5m413qqaEWwVhfytBSWVuO8fxO3dsZxDkqJh+X4MsxzovybJf2FQ9go0rPZ 7B5FUUBOKqMLBJUVYlB3F9EtcVcMMAomv6BEoDu1T7HiANl1jKn5JN0l3jco/Fo0 wNnnKAIvOFcy8g== -----END CERTIFICATE-----Generated at Tue Dec 16 21:32:24 2025 by rpki-client