This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft File: DETz4ku_xgSOX_pQw9zjZP_AErA.mft (raw, json) Hash identifier: Ik6229ZyFBN96lGfn2siz4eBhetKq1ihPDKYYoUoXM4= Subject key identifier: 92:DF:E9:1F:E2:EE:BA:4B:E1:6B:3C:7E:6D:6C:7E:03:1B:E0:E8:53 Authority key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0 Certificate issuer: /CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0 Certificate serial: 019B1CBC2123DDD46DCCF7FD7B5C2DBA1BB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft Manifest number: 143E Signing time: Sun 14 Dec 2025 12:00:49 +0000 Manifest this update: Sun 14 Dec 2025 12:00:49 +0000 Manifest next update: Mon 15 Dec 2025 12:00:49 +0000 Files and hashes: 1: DETz4ku_xgSOX_pQw9zjZP_AErA.crl (hash: +MpbWheeVjbmAN6KxY5d6HMLEGxQFTN66WzmitGoL5w=) 2: ZWVOs3WDW-rx5m7taQu6I2WYx7Q.roa (hash: yPh81fsK4TJM83HFw4j8d9BB5tZUMJFngOFcn+J9UgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bc:21:23:dd:d4:6d:cc:f7:fd:7b:5c:2d:ba:1b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0 Validity Not Before: Dec 14 12:00:49 2025 GMT Not After : Dec 15 12:00:49 2025 GMT Subject: CN=92dfe91fe2eeba4be16b3c7e6d6c7e031be0e853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a3:81:44:41:7d:c0:76:2e:e0:e4:9a:98:69: b8:d7:e6:04:1d:14:6f:af:92:9a:42:02:96:30:d4: 12:89:dc:15:0c:cd:6b:49:01:5d:b8:4c:76:4c:3c: ef:78:fe:5d:8c:22:b4:0b:93:d7:1b:cd:c1:44:d9: f1:5c:91:41:f3:8a:0b:41:5d:89:de:55:be:0b:43: 60:a0:32:2d:cf:bb:c6:ce:d5:0b:bf:aa:fa:d4:50: bb:ad:cd:db:ee:f9:2c:b8:15:77:92:4c:b7:ce:e0: fb:02:8b:13:25:e6:ed:00:4b:cf:eb:a7:be:6c:a2: 47:b2:72:97:49:26:7a:79:b9:7f:7f:b9:4c:49:52: 67:f8:43:28:79:03:92:dc:ff:32:e7:1f:8c:d0:34: 6e:0f:ae:91:6b:07:f8:45:c8:9e:dd:a9:f8:b2:1c: f2:fe:d8:bd:f7:84:e7:12:66:cc:7a:8c:7a:7d:98: e5:be:1b:3c:18:45:0b:9f:f2:cd:7c:3f:69:4a:f7: 3b:e2:b8:0a:e6:aa:4b:f9:e0:21:c1:ac:d1:0f:93: 4a:e3:88:97:3d:3e:47:6f:d7:41:40:f3:17:cb:7f: 2b:e7:04:15:d6:02:b1:df:f0:67:69:eb:80:b2:ff: 24:ec:81:f9:14:da:e2:2a:33:a6:f9:0b:21:ff:d4: 7e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DF:E9:1F:E2:EE:BA:4B:E1:6B:3C:7E:6D:6C:7E:03:1B:E0:E8:53 X509v3 Authority Key Identifier: keyid:0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:8e:26:29:f1:18:b4:f2:a3:fc:cf:f8:7a:34:e3:af:a2:86: ab:f3:7a:d4:0c:c9:09:bc:d4:40:be:77:79:b2:5b:f2:07:6a: b6:ba:80:6c:1b:44:77:e7:c7:77:ac:75:b5:8d:04:75:9f:61: 24:06:e8:cf:98:01:7e:59:66:b3:91:c4:6f:40:3b:b4:2e:38: 5f:34:4f:41:65:28:de:13:0d:80:7d:72:80:cf:e2:21:7c:47: 27:92:b6:bd:f1:8e:5c:c5:93:8f:37:d3:96:99:14:00:6f:af: e4:88:f7:2f:1c:9c:cc:71:ea:6b:98:ca:36:e9:f4:68:a9:83: bd:c8:d5:ec:fc:a1:06:2a:0b:95:8e:dd:a9:bf:b1:18:42:38: cc:07:ff:11:5b:31:1f:ea:2d:36:7e:03:ce:85:ef:3d:1d:3f: 4f:f9:66:0b:28:80:5f:d6:b5:4a:14:33:a6:62:f9:e6:b7:c3: 89:17:72:c8:40:4d:64:b1:ec:1b:17:a8:8c:ec:ff:cc:26:9a: e4:63:69:77:23:e8:dc:52:00:c3:8d:6f:be:ad:e1:16:ae:a9: fe:99:85:4a:e0:ab:89:88:94:7f:b9:d2:8f:a9:23:0d:26:e6: fd:54:4f:63:bb:29:b4:bd:ff:97:07:86:26:42:d2:a7:0e:b2: 96:f2:d9:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscvCEj3dRtzPf9e1wtuhuzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNDRmM2UyNGJiZmM2MDQ4ZTVmZmE1MGMzZGNlMzY0ZmZj MDEyYjAwHhcNMjUxMjE0MTIwMDQ5WhcNMjUxMjE1MTIwMDQ5WjAzMTEwLwYDVQQD Eyg5MmRmZTkxZmUyZWViYTRiZTE2YjNjN2U2ZDZjN2UwMzFiZTBlODUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKOBREF9wHYu4OSamGm41+YEHRRv r5KaQgKWMNQSidwVDM1rSQFduEx2TDzveP5djCK0C5PXG83BRNnxXJFB84oLQV2J 3lW+C0NgoDItz7vGztULv6r61FC7rc3b7vksuBV3kky3zuD7AosTJebtAEvP66e+ bKJHsnKXSSZ6ebl/f7lMSVJn+EMoeQOS3P8y5x+M0DRuD66Rawf4Rcie3an4shzy /ti994TnEmbMeox6fZjlvhs8GEULn/LNfD9pSvc74rgK5qpL+eAhwazRD5NK44iX PT5Hb9dBQPMXy38r5wQV1gKx3/BnaeuAsv8k7IH5FNriKjOm+Qsh/9R+xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLf6R/i7rpL4Ws8fm1sfgMb4OhTMB8GA1UdIwQY MBaAFAxE8+JLv8YEjl/6UMPc42T/wBKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREVUejRrdV94Z1NPWF9wUXc5empaUF9BRXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85OTE4YWEtMzQ3ZC00ODc4LWExNmIt OGFjN2JlNDZjYzRiLzEvREVUejRrdV94Z1NPWF9wUXc5empaUF9BRXJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS85OTE4YWEtMzQ3ZC00ODc4LWExNmItOGFjN2JlNDZjYzRi LzEvREVUejRrdV94Z1NPWF9wUXc5empaUF9BRXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVI4mKfEY tPKj/M/4ejTjr6KGq/N61AzJCbzUQL53ebJb8gdqtrqAbBtEd+fHd6x1tY0EdZ9h JAboz5gBfllms5HEb0A7tC44XzRPQWUo3hMNgH1ygM/iIXxHJ5K2vfGOXMWTjzfT lpkUAG+v5Ij3LxyczHHqa5jKNun0aKmDvcjV7PyhBioLlY7dqb+xGEI4zAf/EVsx H+otNn4DzoXvPR0/T/lmCyiAX9a1ShQzpmL55rfDiRdyyEBNZLHsGxeojOz/zCaa 5GNpdyPo3FIAw41vvq3hFq6p/pmFSuCriYiUf7nSj6kjDSbm/VRPY7sptL3/lweG JkLSpw6ylvLZVg== -----END CERTIFICATE-----Generated at Sun Dec 14 21:36:47 2025 by rpki-client