This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft File: DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json) Hash identifier: gj3v9ZhgeUc3CTHf1uD31kIUVNXu6v9SSAgTTpCzRF4= Subject key identifier: 9C:82:4D:AD:6D:74:31:37:54:BA:1F:67:02:15:0F:FE:23:74:31:A2 Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E Certificate issuer: /CN=0e2283e6e6af991422743711f7a723137680e69e Certificate serial: 019B35A03586853A191D6A3C170B32CB06F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft Manifest number: 059F Signing time: Fri 19 Dec 2025 08:00:50 +0000 Manifest this update: Fri 19 Dec 2025 08:00:50 +0000 Manifest next update: Sat 20 Dec 2025 08:00:50 +0000 Files and hashes: 1: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: EfC2EnK4BtMxOKfcF+n6YhcxUHcDvCyav7NKjdzYAeg=) 2: H09sImQpPd7oxswyyMfYCrHeDVg.roa (hash: F88ZTfKzhXNpAdlmJ7zmMSZP6dr7sViXeL2PLZiWpvA=) 3: Xy-GvzWZoQ4DZimCZXffSq7urSs.roa (hash: ueXh7ktY0jc26A3LbRVHrwaonrcTqoMtDjp0hV9hqJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:35:86:85:3a:19:1d:6a:3c:17:0b:32:cb:06:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e Validity Not Before: Dec 19 08:00:50 2025 GMT Not After : Dec 20 08:00:50 2025 GMT Subject: CN=9c824dad6d74313754ba1f6702150ffe237431a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4e:f9:4e:df:e4:9e:9f:bf:58:51:82:99:40: 63:32:70:e4:02:61:be:5c:b9:cd:21:f3:3d:ee:4b: 6d:f1:0b:f6:9b:e2:99:cf:0e:32:90:3e:ec:8b:04: 30:6a:6d:6a:d8:7d:90:c6:9f:f7:91:f5:a2:46:2f: 92:49:08:fd:3a:ab:78:44:6d:f9:e1:37:8a:3d:0f: f5:02:0c:e3:3c:f4:78:86:1f:4a:21:01:37:e8:44: 28:76:62:ab:b9:98:69:3d:7c:1d:59:6f:76:0d:b4: 3c:33:60:c6:1b:d4:67:3b:5e:1a:60:24:a4:b8:d4: e3:eb:2b:26:26:af:04:f5:1f:84:c8:3f:a8:8b:6a: 10:72:10:2b:cc:38:00:2c:c9:7b:14:76:47:c4:c4: f9:f9:fd:38:b0:03:84:30:fe:21:db:5a:a7:35:20: ff:2a:d5:73:59:05:23:9e:06:12:4e:0d:15:9d:ef: d5:9b:03:ad:05:19:f7:7f:67:28:f0:8d:d6:ca:6b: af:37:bb:e1:e1:bf:11:1f:2c:5d:a0:0b:26:54:7a: 13:85:fb:fb:f3:ef:d8:97:5b:bc:ba:47:7f:3b:ae: e7:7e:78:45:5e:99:86:3c:fc:8e:55:8d:81:c7:10: 45:c5:98:19:8d:bb:2c:66:9b:e2:01:15:96:18:b5: 9a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:82:4D:AD:6D:74:31:37:54:BA:1F:67:02:15:0F:FE:23:74:31:A2 X509v3 Authority Key Identifier: keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:d1:5e:7d:50:b3:9a:04:f1:ee:e6:83:78:b6:4a:6d:07:26: 91:e2:ca:3e:e7:b4:61:1a:e2:3e:74:5b:cf:24:a4:fa:48:09: ea:49:a9:cf:57:77:b5:36:bf:06:0b:89:b7:3d:13:85:30:33: e5:b4:f2:0a:f0:48:1c:31:79:e6:cc:df:ac:a3:e0:35:97:b0: 42:40:49:22:d8:d7:5f:4d:34:01:2e:f3:8a:a0:a3:51:f4:fc: d9:83:da:2c:6d:6e:bd:7f:40:5e:86:c9:70:f5:33:48:82:21: 19:64:94:89:a0:6d:eb:c4:b2:fe:aa:35:c7:2e:e0:c6:87:7a: 7c:46:bd:06:d8:32:29:65:32:35:d3:e5:41:09:ca:f4:48:d8: 6a:46:d7:67:e2:e9:cb:10:50:10:b5:dd:18:48:c7:83:e7:d7: 8f:94:30:90:8c:bc:f2:1d:46:f6:0f:d9:ae:65:99:61:4e:09: 9f:eb:62:d9:51:ea:31:be:8e:70:af:04:d5:dd:56:f5:e2:99: 89:42:de:51:4b:7e:fd:3c:e8:af:e5:cb:4d:b7:a4:e0:29:8b: 1f:41:35:88:45:67:d9:d1:fa:15:37:26:4f:e9:87:42:f8:b2: 33:46:bb:7f:3d:1d:38:fc:19:7a:bf:0c:66:e3:4a:4f:af:fb: 69:f6:40:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oDWGhToZHWo8Fwsyywb4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjI4M2U2ZTZhZjk5MTQyMjc0MzcxMWY3YTcyMzEzNzY4 MGU2OWUwHhcNMjUxMjE5MDgwMDUwWhcNMjUxMjIwMDgwMDUwWjAzMTEwLwYDVQQD Eyg5YzgyNGRhZDZkNzQzMTM3NTRiYTFmNjcwMjE1MGZmZTIzNzQzMWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk75Tt/knp+/WFGCmUBjMnDkAmG+ XLnNIfM97ktt8Qv2m+KZzw4ykD7siwQwam1q2H2Qxp/3kfWiRi+SSQj9Oqt4RG35 4TeKPQ/1AgzjPPR4hh9KIQE36EQodmKruZhpPXwdWW92DbQ8M2DGG9RnO14aYCSk uNTj6ysmJq8E9R+EyD+oi2oQchArzDgALMl7FHZHxMT5+f04sAOEMP4h21qnNSD/ KtVzWQUjngYSTg0Vne/VmwOtBRn3f2co8I3WymuvN7vh4b8RHyxdoAsmVHoThfv7 8+/Yl1u8ukd/O67nfnhFXpmGPPyOVY2BxxBFxZgZjbssZpviARWWGLWaSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyCTa1tdDE3VLofZwIVD/4jdDGiMB8GA1UdIwQY MBaAFA4ig+bmr5kUInQ3EfenIxN2gOaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGlLRDV1YXZtUlFpZERjUjk2Y2pFM2FBNXA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84NDc1MGYtNzZjNC00MWVlLTg1MTct ZTBhZGFiN2YxMTEyLzEvRGlLRDV1YXZtUlFpZERjUjk2Y2pFM2FBNXA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi84NDc1MGYtNzZjNC00MWVlLTg1MTctZTBhZGFiN2YxMTEy LzEvRGlLRDV1YXZtUlFpZERjUjk2Y2pFM2FBNXA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktFefVCz mgTx7uaDeLZKbQcmkeLKPue0YRriPnRbzySk+kgJ6kmpz1d3tTa/BguJtz0ThTAz 5bTyCvBIHDF55szfrKPgNZewQkBJItjXX000AS7ziqCjUfT82YPaLG1uvX9AXobJ cPUzSIIhGWSUiaBt68Sy/qo1xy7gxod6fEa9BtgyKWUyNdPlQQnK9EjYakbXZ+Lp yxBQELXdGEjHg+fXj5QwkIy88h1G9g/ZrmWZYU4Jn+ti2VHqMb6OcK8E1d1W9eKZ iULeUUt+/Tzor+XLTbek4CmLH0E1iEVn2dH6FTcmT+mHQviyM0a7fz0dOPwZer8M ZuNKT6/7afZA9w== -----END CERTIFICATE-----Generated at Fri Dec 19 10:40:09 2025 by rpki-client