This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft File: d5LD_GkVSsfVFbysnaoH54vCKcw.mft (raw, json) Hash identifier: aohoiJtTAMQnYoysXYLveVtRUyFxLj+PG/jF+3LV1yo= Subject key identifier: D9:2B:2E:F7:D5:E3:F8:4D:94:B4:BE:4B:38:F8:09:35:4B:43:1E:F8 Authority key identifier: 77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC Certificate issuer: /CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc Certificate serial: 019B1B3BED27BD0FEAC7BD2B782443B9CE64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 05:01:10 +0000 Manifest this update: Sun 14 Dec 2025 05:01:10 +0000 Manifest next update: Mon 15 Dec 2025 05:01:10 +0000 Files and hashes: 1: XufdK4JaU0kijhaCZqp6MWC7lI8.roa (hash: tAIQSyAZo/oGjmfexz3lVWcMQblwf+06mjxANWC5dis=) 2: d5LD_GkVSsfVFbysnaoH54vCKcw.crl (hash: Il1xS8Ib6+IgZN/Cf2NtT0VG3cTzkztVrUDBOvzqi70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:ed:27:bd:0f:ea:c7:bd:2b:78:24:43:b9:ce:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc Validity Not Before: Dec 14 05:01:10 2025 GMT Not After : Dec 15 05:01:10 2025 GMT Subject: CN=d92b2ef7d5e3f84d94b4be4b38f809354b431ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1b:d2:ee:84:a4:ad:2f:ef:64:7e:e7:21:67: f5:a4:f0:81:33:83:02:aa:bf:fa:90:cf:39:4a:24: 19:cc:a5:10:22:63:5e:82:96:f8:0e:65:b7:06:ed: d8:88:f5:5a:cc:14:68:3f:f4:e2:cd:3d:61:ae:76: b8:49:f6:39:2f:de:27:ee:78:cd:73:f0:8f:d9:f6: c2:b6:f0:61:65:46:ad:63:be:d2:e6:ba:da:b7:39: 77:ac:1e:2d:19:76:1c:07:ae:ab:70:fa:31:ac:3b: 12:fd:65:80:af:1e:42:cb:97:0b:18:6a:63:19:99: 62:85:54:1e:4f:a6:d3:f6:d9:f6:1a:8a:69:30:fa: d0:ee:3d:10:47:7d:f1:58:44:b9:84:b6:cb:b1:0b: cc:e8:cb:52:1d:fe:b1:b2:7c:8f:67:58:59:1f:46: 04:ff:58:94:8c:8f:77:14:43:ed:0f:3c:ab:40:21: 69:ce:0c:c8:4d:b2:48:9c:8f:da:60:91:74:f3:7b: ef:b6:c5:b8:59:40:8f:d8:42:0f:04:1b:09:f1:6c: 3b:d0:cd:ac:b8:5d:41:be:13:e1:e2:7f:32:f0:40: 7d:7e:24:63:73:b2:b6:3b:8a:61:fa:58:dd:e6:8e: 88:5d:e8:a2:f1:bb:12:f1:1a:65:ba:e2:e9:bd:70: ee:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2B:2E:F7:D5:E3:F8:4D:94:B4:BE:4B:38:F8:09:35:4B:43:1E:F8 X509v3 Authority Key Identifier: keyid:77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:46:65:4b:65:6c:d2:a9:8a:76:e1:b5:3b:96:1b:cc:a8:be: 4f:a0:52:38:81:d6:0a:47:0b:14:d9:7e:92:ee:22:39:8e:27: b0:ba:c6:5b:10:56:6a:9b:98:17:28:51:f9:0c:9d:5b:8a:06: 8c:28:ff:a0:d9:85:a7:79:dc:4f:67:06:5b:ce:6c:23:d7:d4: 21:22:59:09:03:99:b0:db:6a:6b:6c:d5:d0:7f:17:9b:a5:b9: 1b:7b:ff:78:5b:70:01:16:16:02:4e:99:fb:5b:98:52:f0:6a: 68:40:19:96:05:38:dd:2f:b5:4c:f8:48:81:1b:28:6e:7b:11: b1:27:3e:49:41:e5:4a:bc:23:52:d7:0c:b3:8a:7b:8b:fc:bb: 97:74:b5:b1:b0:79:f5:df:7a:2e:fa:3c:de:a6:2e:81:6a:15: 05:df:15:eb:f0:d3:ab:ef:fe:d3:3e:17:37:cc:a8:be:cc:63: 22:72:84:e9:5d:5a:3d:fa:ef:f8:78:aa:e3:aa:4b:b3:99:9d: de:a8:54:40:5c:ff:aa:87:3f:3f:9e:2e:a0:52:67:3b:e4:f5: 78:86:a1:44:92:5a:42:84:b5:7d:bb:49:46:be:5f:aa:7a:fd: 02:8d:a9:e1:27:32:e8:7c:7d:c3:1b:3c:a6:f6:a2:8b:da:86: c7:ee:bf:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO+0nvQ/qx70reCRDuc5kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OTJjM2ZjNjkxNTRhYzdkNTE1YmNhYzlkYWEwN2U3OGJj MjI5Y2MwHhcNMjUxMjE0MDUwMTEwWhcNMjUxMjE1MDUwMTEwWjAzMTEwLwYDVQQD EyhkOTJiMmVmN2Q1ZTNmODRkOTRiNGJlNGIzOGY4MDkzNTRiNDMxZWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBvS7oSkrS/vZH7nIWf1pPCBM4MC qr/6kM85SiQZzKUQImNegpb4DmW3Bu3YiPVazBRoP/TizT1hrna4SfY5L94n7njN c/CP2fbCtvBhZUatY77S5rratzl3rB4tGXYcB66rcPoxrDsS/WWArx5Cy5cLGGpj GZlihVQeT6bT9tn2GoppMPrQ7j0QR33xWES5hLbLsQvM6MtSHf6xsnyPZ1hZH0YE /1iUjI93FEPtDzyrQCFpzgzITbJInI/aYJF083vvtsW4WUCP2EIPBBsJ8Ww70M2s uF1BvhPh4n8y8EB9fiRjc7K2O4ph+ljd5o6IXeii8bsS8RpluuLpvXDu0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkrLvfV4/hNlLS+Szj4CTVLQx74MB8GA1UdIwQY MBaAFHeSw/xpFUrH1RW8rJ2qB+eLwinMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC81MmI0OGQtMjhhOC00OGY1LWE0ZGYt NGRiNDBhMzY1NjNlLzEvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC81MmI0OGQtMjhhOC00OGY1LWE0ZGYtNGRiNDBhMzY1NjNl LzEvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwEZlS2Vs 0qmKduG1O5YbzKi+T6BSOIHWCkcLFNl+ku4iOY4nsLrGWxBWapuYFyhR+QydW4oG jCj/oNmFp3ncT2cGW85sI9fUISJZCQOZsNtqa2zV0H8Xm6W5G3v/eFtwARYWAk6Z +1uYUvBqaEAZlgU43S+1TPhIgRsobnsRsSc+SUHlSrwjUtcMs4p7i/y7l3S1sbB5 9d96Lvo83qYugWoVBd8V6/DTq+/+0z4XN8yovsxjInKE6V1aPfrv+Hiq46pLs5md 3qhUQFz/qoc/P54uoFJnO+T1eIahRJJaQoS1fbtJRr5fqnr9Ao2p4Scy6Hx9wxs8 pvaii9qGx+6/PA== -----END CERTIFICATE-----Generated at Sun Dec 14 13:40:01 2025 by rpki-client