This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json) Hash identifier: M0f+E2nw5Y4m0tn6Dd+gMI1NMRn3+XrfoyhQMkyAIiI= Subject key identifier: 55:75:4B:FB:66:98:D3:89:72:95:11:B4:42:AC:22:72:AF:6D:29:16 Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be Certificate serial: 019B5975F0D08B28DE03A1DC56D3CD2E7EF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft Manifest number: 0E52 Signing time: Fri 26 Dec 2025 07:01:00 +0000 Manifest this update: Fri 26 Dec 2025 07:01:00 +0000 Manifest next update: Sat 27 Dec 2025 07:01:00 +0000 Files and hashes: 1: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: +qGS7PECuXeyAQllKBqKsjssx5IvJBBnf2OMXDwhxBk=) 2: KKoVkt36UzhB8KBbFPImmZW73vA.roa (hash: GhpkIl47GYlGJw2nWrVttpHKLmkRE0ZfoRg/RpNRI/I=) 3: fMybGYR-8tzcLwLk9F7xQBZ6-N4.roa (hash: Y2XsWw7qdiuLK4RPieRUDih+9enRniyBYvTmKwdcDsA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:f0:d0:8b:28:de:03:a1:dc:56:d3:cd:2e:7e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f91e5b58da326e654e994fef2195276759579be Validity Not Before: Dec 26 07:01:00 2025 GMT Not After : Dec 27 07:01:00 2025 GMT Subject: CN=55754bfb6698d389729511b442ac2272af6d2916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c8:5c:04:c8:5d:90:78:d6:8c:3b:c6:5a:a7: b1:5b:bd:6b:37:c9:9f:fb:ac:94:bd:09:bd:3b:a3: 4d:21:40:1f:50:ae:f0:d7:e1:20:65:30:ad:4b:44: 87:62:64:bc:70:5d:7b:0c:e9:6b:d5:97:97:2a:02: 95:88:35:e4:22:cd:50:42:d2:d0:ed:37:ee:1d:08: af:aa:07:d3:76:d7:3c:13:c2:7f:d1:55:2d:17:b9: f3:de:50:fc:37:0e:24:7a:91:23:e8:62:d5:1f:3e: 9f:f5:8f:5d:76:aa:ff:5e:65:9a:42:32:bd:04:5a: 57:42:56:00:06:28:7c:ad:4a:54:35:d9:22:66:10: 06:53:b4:20:5f:de:cf:12:c6:80:85:0b:8e:cb:3d: d3:fc:51:e0:7f:91:07:40:c9:07:fa:c9:26:27:34: 8c:82:dd:ec:8e:a7:a5:34:1e:6a:eb:3b:0c:d7:11: 79:11:bb:ee:47:eb:1b:1d:d6:1a:5d:f2:c9:a9:e1: 24:35:14:e9:5c:c4:aa:63:0d:c2:16:ec:78:04:95: 02:61:14:33:ed:68:4f:8f:a0:7d:57:52:4e:4d:4d: 81:b5:08:89:e2:29:66:f8:f9:0e:24:5f:7e:e1:26: 2b:6d:86:28:88:55:31:63:8f:6c:44:af:5c:62:94: 2c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:75:4B:FB:66:98:D3:89:72:95:11:B4:42:AC:22:72:AF:6D:29:16 X509v3 Authority Key Identifier: keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:87:d6:de:5b:19:37:27:b6:75:ed:7e:aa:e9:1e:aa:cb:6d: 99:4e:17:06:26:cc:50:d7:2e:62:63:a4:66:f7:74:30:80:7d: 47:d0:df:c8:8a:7c:2f:c7:a3:b0:12:0b:0c:6a:a1:16:a9:7b: 23:8e:5b:55:43:65:dd:9f:b7:ea:77:a9:d8:e6:ad:40:68:28: c0:81:8e:fa:b3:15:0f:49:5b:57:1b:fc:3b:c8:1b:bf:2e:49: 5b:d0:45:8d:9f:2c:b9:a3:a7:a1:48:4a:97:0f:de:36:a8:14: 49:98:46:29:0f:a5:05:ad:73:75:bd:ab:b7:81:d4:94:ff:d9: 8f:ec:b5:68:e0:35:c9:48:5f:08:06:24:83:e0:c5:17:f3:6a: e0:33:2d:f4:1a:cb:cc:15:16:6a:88:f7:55:41:f9:fa:01:10: 66:d6:37:b0:24:f1:f4:be:2b:a4:d5:c4:89:a0:18:67:96:99: 76:91:d7:75:9c:92:9c:87:8f:3a:51:fe:b5:ca:10:89:4a:7e: 79:df:86:fe:7a:17:a5:12:f3:89:f5:2e:c0:fe:2f:03:b7:b7: 87:49:e4:96:06:6d:1c:98:2c:f9:37:d8:31:79:9c:7c:93:90: 54:b8:5a:54:fb:89:da:57:c4:e8:a3:6f:44:a0:f2:0e:23:8e: 2b:32:d2:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdfDQiyjeA6HcVtPNLn75MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOTFlNWI1OGRhMzI2ZTY1NGU5OTRmZWYyMTk1Mjc2NzU5 NTc5YmUwHhcNMjUxMjI2MDcwMTAwWhcNMjUxMjI3MDcwMTAwWjAzMTEwLwYDVQQD Eyg1NTc1NGJmYjY2OThkMzg5NzI5NTExYjQ0MmFjMjI3MmFmNmQyOTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkshcBMhdkHjWjDvGWqexW71rN8mf +6yUvQm9O6NNIUAfUK7w1+EgZTCtS0SHYmS8cF17DOlr1ZeXKgKViDXkIs1QQtLQ 7TfuHQivqgfTdtc8E8J/0VUtF7nz3lD8Nw4kepEj6GLVHz6f9Y9ddqr/XmWaQjK9 BFpXQlYABih8rUpUNdkiZhAGU7QgX97PEsaAhQuOyz3T/FHgf5EHQMkH+skmJzSM gt3sjqelNB5q6zsM1xF5EbvuR+sbHdYaXfLJqeEkNRTpXMSqYw3CFux4BJUCYRQz 7WhPj6B9V1JOTU2BtQiJ4ilm+PkOJF9+4SYrbYYoiFUxY49sRK9cYpQs7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFV1S/tmmNOJcpURtEKsInKvbSkWMB8GA1UdIwQY MBaAFA+R5bWNoybmVOmU/vIZUnZ1lXm+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDVIbHRZMmpKdVpVNlpULThobFNkbldWZWI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yNjVlZmEtZjA0OS00NjQ3LThjZjEt ODI0Y2NlZmQ5YzgxLzEvRDVIbHRZMmpKdVpVNlpULThobFNkbldWZWI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yNjVlZmEtZjA0OS00NjQ3LThjZjEtODI0Y2NlZmQ5Yzgx LzEvRDVIbHRZMmpKdVpVNlpULThobFNkbldWZWI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIfW3lsZ Nye2de1+qukeqsttmU4XBibMUNcuYmOkZvd0MIB9R9DfyIp8L8ejsBILDGqhFql7 I45bVUNl3Z+36nep2OatQGgowIGO+rMVD0lbVxv8O8gbvy5JW9BFjZ8suaOnoUhK lw/eNqgUSZhGKQ+lBa1zdb2rt4HUlP/Zj+y1aOA1yUhfCAYkg+DFF/Nq4DMt9BrL zBUWaoj3VUH5+gEQZtY3sCTx9L4rpNXEiaAYZ5aZdpHXdZySnIePOlH+tcoQiUp+ ed+G/noXpRLzifUuwP4vA7e3h0nklgZtHJgs+TfYMXmcfJOQVLhaVPuJ2lfE6KNv RKDyDiOOKzLSaQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:47 2025 by rpki-client