This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft File: D5x3odzbju1izTyoClFE3E4kP04.mft (raw, json) Hash identifier: O35i79p/UPDvOtCdoUHUxjMtfVRn65YHxoJaAUWLxZo= Subject key identifier: 2C:11:81:38:55:0F:A0:32:B8:71:8B:98:29:A2:31:5B:74:D2:D1:77 Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e Certificate serial: 019B066BA49F690ECF65DF14173D39D17FAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft Manifest number: 1777 Signing time: Wed 10 Dec 2025 04:01:16 +0000 Manifest this update: Wed 10 Dec 2025 04:01:16 +0000 Manifest next update: Thu 11 Dec 2025 04:01:16 +0000 Files and hashes: 1: D5x3odzbju1izTyoClFE3E4kP04.crl (hash: r1F4KYz9DC+fn1HHaNcjm6wKuIynqT5E1J9/21nGBUo=) 2: EU9ZI9FwGK9Je2LIHv8oyryDbQ0.roa (hash: lg1hblUtV5bfdjAsYpP/FKql2pfxKFHlS2JkI4euny0=) 3: UttiV2rZhXbpiEroK90NOoWzeyo.roa (hash: clJAUfrgzlJXm2cn+fD7HIKwQaoQPkMOMFf6DpqSgo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 04:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:6b:a4:9f:69:0e:cf:65:df:14:17:3d:39:d1:7f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e Validity Not Before: Dec 10 04:01:16 2025 GMT Not After : Dec 11 04:01:16 2025 GMT Subject: CN=2c118138550fa032b8718b9829a2315b74d2d177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:27:96:4e:28:bc:2a:4b:56:98:cb:e2:0d:c0: f1:c1:87:43:4a:d6:e5:a8:93:c5:e3:c8:be:8b:15: ff:c8:ca:9b:c8:fb:ed:c7:a9:8c:66:41:47:bd:f8: 08:6f:01:56:93:e8:44:e8:16:d9:36:ad:7c:c5:77: 3a:c3:1e:34:f9:b7:d8:3a:fb:ac:da:e8:5c:b8:cf: c9:e2:50:b1:9d:ac:e8:78:dd:92:16:12:b4:be:c3: cf:0c:94:99:30:c7:4e:fc:03:84:1b:db:6d:b5:c0: 95:bc:d1:c4:10:ad:b8:ed:e0:ec:c2:c8:41:8a:bc: 64:32:0c:e8:c5:89:35:3d:ee:6d:20:73:70:10:1b: c7:2f:91:8a:99:7f:84:51:35:a7:ef:4a:62:2a:a8: d5:b1:8a:e5:b4:53:dd:27:1b:ac:37:92:6b:5a:ea: d7:22:c5:a6:bb:53:78:95:84:7b:53:8e:56:5c:4c: a6:46:38:fa:01:44:ca:a1:79:7b:d6:58:92:38:f6: 8e:df:30:9f:e7:ba:af:b2:cc:07:7a:bb:48:96:60: d9:90:27:87:4b:cb:52:2a:e3:76:21:44:af:b8:95: 94:71:11:e2:d9:1c:61:19:22:26:aa:a2:cf:92:d4: 0c:85:8d:e6:67:fe:1e:d3:9e:86:10:41:ce:13:56: aa:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:11:81:38:55:0F:A0:32:B8:71:8B:98:29:A2:31:5B:74:D2:D1:77 X509v3 Authority Key Identifier: keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:36:b4:54:6b:8b:54:7b:31:7a:aa:0b:b4:13:ed:13:4a:87: 31:cd:73:b1:11:a4:7a:c1:a6:65:7a:91:db:a4:5e:29:05:90: 98:2e:e4:8f:21:5a:f5:ee:39:a4:86:7a:13:64:b7:92:0b:b0: 68:0f:31:c2:97:f9:ab:54:95:5b:e9:f2:ae:8c:3a:f3:53:0f: 2f:58:ff:0a:4e:f0:0c:2e:fa:33:51:2b:88:e6:07:ca:df:83: a8:a9:7d:95:2c:9e:26:ff:a5:09:d5:5b:e8:4b:dd:58:b2:b3: 98:be:59:c2:da:e0:6c:58:1d:43:1c:65:7e:e2:f6:73:64:bb: 6d:a1:75:6e:33:91:f6:db:80:1b:65:5c:d5:eb:81:41:fd:21: 08:8f:f2:69:2f:6d:74:84:02:f9:84:25:36:7e:40:97:e2:58: 20:b9:ea:ff:1c:3c:6a:80:73:0b:a4:cc:27:4b:9f:04:d2:ef: 19:29:4a:64:83:a9:cb:e0:1b:57:45:5b:6f:ff:58:e1:98:c9: 9a:7a:d2:78:a6:62:85:bc:3b:15:45:37:a1:ef:db:e8:87:d2: d5:3b:18:59:34:d6:a8:1f:00:a6:3e:4b:97:0c:e4:96:20:5b: 1c:bc:0a:f4:2f:89:ed:8b:cb:4f:62:57:01:38:2a:e6:29:c0: aa:b0:ec:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGa6SfaQ7PZd8UFz050X+uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOWM3N2ExZGNkYjhlZWQ2MmNkM2NhODBhNTE0NGRjNGUy NDNmNGUwHhcNMjUxMjEwMDQwMTE2WhcNMjUxMjExMDQwMTE2WjAzMTEwLwYDVQQD EygyYzExODEzODU1MGZhMDMyYjg3MThiOTgyOWEyMzE1Yjc0ZDJkMTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCeWTii8KktWmMviDcDxwYdDStbl qJPF48i+ixX/yMqbyPvtx6mMZkFHvfgIbwFWk+hE6BbZNq18xXc6wx40+bfYOvus 2uhcuM/J4lCxnazoeN2SFhK0vsPPDJSZMMdO/AOEG9tttcCVvNHEEK247eDswshB irxkMgzoxYk1Pe5tIHNwEBvHL5GKmX+EUTWn70piKqjVsYrltFPdJxusN5JrWurX IsWmu1N4lYR7U45WXEymRjj6AUTKoXl71liSOPaO3zCf57qvsswHertIlmDZkCeH S8tSKuN2IUSvuJWUcRHi2RxhGSImqqLPktQMhY3mZ/4e056GEEHOE1aqOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwRgThVD6AyuHGLmCmiMVt00tF3MB8GA1UdIwQY MBaAFA+cd6Hc247tYs08qApRRNxOJD9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85ZDBlMTQtMTEzYi00Y2JhLTgzMDgt YWNjNTY5NzdiNmY0LzEvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85ZDBlMTQtMTEzYi00Y2JhLTgzMDgtYWNjNTY5NzdiNmY0 LzEvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDa0VGuL VHsxeqoLtBPtE0qHMc1zsRGkesGmZXqR26ReKQWQmC7kjyFa9e45pIZ6E2S3kguw aA8xwpf5q1SVW+nyrow681MPL1j/Ck7wDC76M1EriOYHyt+DqKl9lSyeJv+lCdVb 6EvdWLKzmL5ZwtrgbFgdQxxlfuL2c2S7baF1bjOR9tuAG2Vc1euBQf0hCI/yaS9t dIQC+YQlNn5Al+JYILnq/xw8aoBzC6TMJ0ufBNLvGSlKZIOpy+AbV0Vbb/9Y4ZjJ mnrSeKZihbw7FUU3oe/b6IfS1TsYWTTWqB8Apj5LlwzkliBbHLwK9C+J7YvLT2JX ATgq5inAqrDsgw== -----END CERTIFICATE-----Generated at Wed Dec 10 12:24:03 2025 by rpki-client