This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json) Hash identifier: vKpnDWaddHvz73MqdtA+FXD6cuvnzi+kVYOQD0yX1cw= Subject key identifier: 5A:36:8A:9A:38:82:D6:5D:3B:57:92:C7:D1:A1:41:D0:11:69:31:74 Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14 Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914 Certificate serial: 019B25886060E7E28B2AF3A3511E5A33E3AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 05:00:53 +0000 Manifest this update: Tue 16 Dec 2025 05:00:53 +0000 Manifest next update: Wed 17 Dec 2025 05:00:53 +0000 Files and hashes: 1: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: C7kU8gvngL1eVbsVzlQMAgEqr4wn/oGvv8WQ1FKJKmk=) 2: eB8JcdNMitcIB4IK3YDPeoxd_sE.roa (hash: uAuMd6C1FXSh+wtAiy0MbK5wWWHEYjRTVBUBNDQkdQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 05:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:60:60:e7:e2:8b:2a:f3:a3:51:1e:5a:33:e3:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914 Validity Not Before: Dec 16 05:00:53 2025 GMT Not After : Dec 17 05:00:53 2025 GMT Subject: CN=5a368a9a3882d65d3b5792c7d1a141d011693174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a6:71:6b:33:8f:e1:16:37:06:7a:53:bf:20: 1d:07:d5:6f:aa:72:88:a7:d4:3f:2d:19:c1:75:b1: 08:bc:87:dd:74:71:5c:84:11:ce:0d:4d:ff:7c:06: 47:4f:00:f9:ce:d9:14:69:f2:4b:0c:9b:ea:62:d3: da:97:25:25:ea:4a:af:2f:f6:74:d3:15:71:f1:fa: ee:af:e2:aa:c3:02:5e:b2:7d:0c:82:35:2b:12:78: c7:3b:50:88:3f:01:c4:9b:75:a7:e9:16:45:e2:c5: 01:9f:a5:5a:29:1b:95:8a:4c:1b:0a:32:f9:47:1b: 0e:4a:aa:81:02:de:b3:b3:c5:96:12:41:76:c5:39: 47:34:89:ed:6a:b8:f8:1f:41:45:14:b4:82:96:b7: b7:86:d8:4a:53:b0:e5:1d:c3:ef:83:ed:79:61:81: 25:d2:f7:97:5d:41:d8:47:9a:dd:c2:de:c3:a9:31: 06:99:4e:f2:20:3d:cb:da:3b:32:8a:aa:77:93:48: fd:1d:fc:a7:00:23:d1:85:4d:d4:5e:6e:d5:b9:0f: a2:c9:af:4e:e0:44:f7:51:76:e4:37:a0:90:f8:c4: ec:36:0f:f4:8a:b3:99:c0:5d:7f:0c:a7:57:64:59: c3:8a:35:dd:d5:31:f9:69:13:15:8f:ea:a3:48:87: 5f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:36:8A:9A:38:82:D6:5D:3B:57:92:C7:D1:A1:41:D0:11:69:31:74 X509v3 Authority Key Identifier: keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:19:b0:04:4b:4b:e4:67:8f:82:34:ed:bf:5b:7a:91:1b:fa: 71:e1:2b:3b:ae:05:4b:fd:b4:a8:35:07:cf:2f:b7:7e:0f:10: c6:27:1d:3e:d8:d8:7f:a3:c7:29:77:2e:67:ff:92:de:9f:c3: 1e:07:50:4a:2f:ab:c3:4c:d2:49:a9:f3:7f:26:65:4e:c8:37: e7:53:a0:e5:0c:7a:32:01:67:17:07:13:9b:de:7c:d4:d7:a3: c2:ee:b0:10:cc:a0:44:05:25:90:d5:1b:73:97:67:96:aa:bf: 4d:34:da:de:6a:c6:e2:5b:d8:9b:0c:5e:1b:48:00:7e:aa:66: 76:a0:83:f4:7c:b5:b3:17:c3:33:4f:75:0f:80:e8:5a:d9:64: d5:e4:47:4a:8e:63:82:dd:ce:8b:cf:5b:ff:98:db:39:92:36: f6:45:4b:01:39:b1:de:18:99:05:38:a9:39:6b:31:4c:c2:d3: 45:7c:e3:10:b1:9f:73:a3:36:83:33:06:1a:4d:19:71:a5:b6: 08:a0:91:88:95:6d:a4:a4:88:f2:de:0a:e7:02:b5:f5:9a:18: c4:21:bb:90:01:29:d9:13:56:53:70:c8:c6:69:a9:91:4a:a6: 9d:49:f9:ce:fd:94:25:fb:13:59:d9:5e:2d:ad:7e:12:99:04: 2e:81:b8:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliGBg5+KLKvOjUR5aM+OsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNmIzODVjN2I4Nzc4YmY3OGFmMjQyMWM5OWY1ZDM4YmQ1 NTY5MTQwHhcNMjUxMjE2MDUwMDUzWhcNMjUxMjE3MDUwMDUzWjAzMTEwLwYDVQQD Eyg1YTM2OGE5YTM4ODJkNjVkM2I1NzkyYzdkMWExNDFkMDExNjkzMTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqZxazOP4RY3BnpTvyAdB9VvqnKI p9Q/LRnBdbEIvIfddHFchBHODU3/fAZHTwD5ztkUafJLDJvqYtPalyUl6kqvL/Z0 0xVx8frur+KqwwJesn0MgjUrEnjHO1CIPwHEm3Wn6RZF4sUBn6VaKRuVikwbCjL5 RxsOSqqBAt6zs8WWEkF2xTlHNIntarj4H0FFFLSClre3hthKU7DlHcPvg+15YYEl 0veXXUHYR5rdwt7DqTEGmU7yID3L2jsyiqp3k0j9HfynACPRhU3UXm7VuQ+iya9O 4ET3UXbkN6CQ+MTsNg/0irOZwF1/DKdXZFnDijXd1TH5aRMVj+qjSIdfUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFo2ipo4gtZdO1eSx9GhQdARaTF0MB8GA1UdIwQY MBaAFA5rOFx7h3i/eK8kIcmfXTi9VWkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMt MWM3NzQzMWIwNWY3LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMtMWM3NzQzMWIwNWY3 LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxmwBEtL 5GePgjTtv1t6kRv6ceErO64FS/20qDUHzy+3fg8QxicdPtjYf6PHKXcuZ/+S3p/D HgdQSi+rw0zSSanzfyZlTsg351Og5Qx6MgFnFwcTm9581Nejwu6wEMygRAUlkNUb c5dnlqq/TTTa3mrG4lvYmwxeG0gAfqpmdqCD9Hy1sxfDM091D4DoWtlk1eRHSo5j gt3Oi89b/5jbOZI29kVLATmx3hiZBTipOWsxTMLTRXzjELGfc6M2gzMGGk0ZcaW2 CKCRiJVtpKSI8t4K5wK19ZoYxCG7kAEp2RNWU3DIxmmpkUqmnUn5zv2UJfsTWdle La1+EpkELoG4Xg== -----END CERTIFICATE-----Generated at Tue Dec 16 11:45:33 2025 by rpki-client