This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft File: Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft (raw, json) Hash identifier: aWQTtf4c7dmBsUfMkaj4ZDhgVpp2+RHpfdc3fkNWlIE= Subject key identifier: E0:3A:1B:B8:C7:AE:77:F7:F1:E2:C4:2D:1E:66:0C:F8:AD:D3:93:2A Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42 Certificate issuer: /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042 Certificate serial: 019B1D9821F9E803AE586BFE3C85663A2F9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft Manifest number: 177F Signing time: Sun 14 Dec 2025 16:01:07 +0000 Manifest this update: Sun 14 Dec 2025 16:01:07 +0000 Manifest next update: Mon 15 Dec 2025 16:01:07 +0000 Files and hashes: 1: 03R0VF3AsIUztN8h2zD8N2flDJY.roa (hash: 1xiwS0dYiDHRwMXNwpfOsM1AyiKMBufOaNLQPQKn/9E=) 2: Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl (hash: x/oGvbpRomW7T7HO+fR+fd3axVCeg+G4yV03rlPMYVE=) 3: Es9DToahcsj0ahEtb--Fy2u42F4.roa (hash: nfMwvWvI1T9eF9JsdtFDjnCaRTVkyNEeCBV5LJRL/I0=) 4: Kk55CxMuRoABHPQT4nyNv0rGWGc.roa (hash: lvAnBMqzmoB6sfauO06Jjpq1kAnKY/291ymOUVXS2fc=) 5: Qa5zEwk763K1EispcaZSdgxy5B4.roa (hash: 1hv3iMS5WTQuyU34tHM2fX7wAkcRaS7Ns9UFZhwEs8w=) 6: ls30qglQhlzT6rdumlShksLULN4.roa (hash: QEAqfnuTNOFE0+L1NYjaIvQVrbFOKL5GAQ0VuflmL9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:98:21:f9:e8:03:ae:58:6b:fe:3c:85:66:3a:2f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042 Validity Not Before: Dec 14 16:01:07 2025 GMT Not After : Dec 15 16:01:07 2025 GMT Subject: CN=e03a1bb8c7ae77f7f1e2c42d1e660cf8add3932a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:33:aa:42:36:1a:f8:d1:42:c5:d5:d7:d8:26: 7f:ea:9d:5d:50:ba:be:49:15:e5:62:08:4b:c7:1b: c4:a2:7d:45:c9:69:4c:a5:98:2a:e9:92:29:9e:7b: 23:09:33:9e:47:d2:ae:eb:5d:6a:6a:2e:73:22:35: f0:5a:e8:88:9a:74:d9:da:9f:54:de:de:1c:9c:18: 05:99:d1:88:63:37:57:bd:bb:f7:57:76:5b:18:dc: e5:49:1a:d9:70:52:03:cc:7f:f5:cc:2b:a8:c0:a8: b6:56:3b:e0:e4:fa:e2:5a:ef:99:7c:aa:f9:6a:0d: 88:46:50:5e:6f:ba:bb:7a:c3:3f:49:48:f5:7c:f6: c2:c7:2a:54:1c:56:bf:04:76:6c:d8:e0:ef:48:5c: 15:9e:a1:98:bf:46:5c:3f:0b:8f:2b:a2:e9:f5:5e: a6:bc:16:41:76:1f:5d:65:ec:94:b6:23:b5:47:c0: a0:12:66:d7:3f:95:20:37:d9:c7:4d:4c:96:66:32: 8a:55:1b:f3:e7:79:67:9f:97:e7:75:a8:1a:89:3a: 83:65:2f:fa:aa:1e:3f:85:62:41:32:76:39:ff:cb: a5:9e:8e:e5:36:70:3a:21:92:c3:31:17:33:e4:63: 7e:a4:82:55:3e:16:8b:d4:04:90:89:a8:e1:93:7a: 28:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3A:1B:B8:C7:AE:77:F7:F1:E2:C4:2D:1E:66:0C:F8:AD:D3:93:2A X509v3 Authority Key Identifier: keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:0e:46:8d:c5:cf:fc:cb:ee:b7:74:2a:cf:5e:2b:ba:b7:39: 7f:69:4a:1b:c1:d4:a8:88:f7:dc:30:94:6d:23:49:c3:b7:15: 2f:36:25:38:98:e6:d6:05:dd:37:68:06:bc:58:42:ec:fb:69: 8e:86:75:b0:6c:06:41:c3:d0:14:73:84:ea:7a:76:cb:60:9b: de:4f:ff:fd:14:09:87:55:40:e7:c0:35:f4:85:8c:55:07:84: 4f:32:1b:5d:3b:ca:d3:1b:28:62:ba:28:03:4d:15:bd:f2:ef: 24:ba:2a:a3:7a:ac:b2:06:87:27:e5:6a:a7:0b:58:d2:0f:5c: da:3e:6d:9d:fe:24:a8:b0:96:76:d8:d2:4e:ab:cc:ec:a7:aa: fa:28:a4:ef:0f:7d:c7:51:6f:98:a0:e4:b7:b2:95:c6:2b:47: 4f:4d:f9:b8:eb:1b:49:0b:27:80:61:83:92:8f:10:34:35:ef: 31:2d:72:66:91:d8:49:fe:1c:e2:56:ba:ed:bb:72:a7:59:2f: ea:81:39:0b:2e:68:46:8f:54:36:cf:82:49:6d:ad:15:2d:45: 9f:ff:56:1f:93:21:26:37:45:aa:13:b8:04:65:70:0d:b3:cf: 43:e5:4e:49:30:98:72:10:86:ed:cc:d8:2e:70:2d:43:6c:51: 5a:8a:9b:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmCH56AOuWGv+PIVmOi+cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMmU0ZmQyMTlmNWI3N2NlODBjZGZhZjllM2E2NDQxZGVj NTAwNDIwHhcNMjUxMjE0MTYwMTA3WhcNMjUxMjE1MTYwMTA3WjAzMTEwLwYDVQQD EyhlMDNhMWJiOGM3YWU3N2Y3ZjFlMmM0MmQxZTY2MGNmOGFkZDM5MzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDOqQjYa+NFCxdXX2CZ/6p1dULq+ SRXlYghLxxvEon1FyWlMpZgq6ZIpnnsjCTOeR9Ku611qai5zIjXwWuiImnTZ2p9U 3t4cnBgFmdGIYzdXvbv3V3ZbGNzlSRrZcFIDzH/1zCuowKi2Vjvg5PriWu+ZfKr5 ag2IRlBeb7q7esM/SUj1fPbCxypUHFa/BHZs2ODvSFwVnqGYv0ZcPwuPK6Lp9V6m vBZBdh9dZeyUtiO1R8CgEmbXP5UgN9nHTUyWZjKKVRvz53lnn5fndagaiTqDZS/6 qh4/hWJBMnY5/8ulno7lNnA6IZLDMRcz5GN+pIJVPhaL1ASQiajhk3ooJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOA6G7jHrnf38eLELR5mDPit05MqMB8GA1UdIwQY MBaAFA4uT9IZ9bd86Azfr546ZEHexQBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGk1UDBobjF0M3pvRE4tdm5qcGtRZDdGQUVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lMTEyMjQtNjFjNy00Nzg2LTg2ZTkt MjM4ZmVlNjkyNDMwLzEvRGk1UDBobjF0M3pvRE4tdm5qcGtRZDdGQUVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lMTEyMjQtNjFjNy00Nzg2LTg2ZTktMjM4ZmVlNjkyNDMw LzEvRGk1UDBobjF0M3pvRE4tdm5qcGtRZDdGQUVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyA5GjcXP /Mvut3Qqz14rurc5f2lKG8HUqIj33DCUbSNJw7cVLzYlOJjm1gXdN2gGvFhC7Ptp joZ1sGwGQcPQFHOE6np2y2Cb3k///RQJh1VA58A19IWMVQeETzIbXTvK0xsoYroo A00VvfLvJLoqo3qssgaHJ+VqpwtY0g9c2j5tnf4kqLCWdtjSTqvM7Keq+iik7w99 x1FvmKDkt7KVxitHT035uOsbSQsngGGDko8QNDXvMS1yZpHYSf4c4la67btyp1kv 6oE5Cy5oRo9UNs+CSW2tFS1Fn/9WH5MhJjdFqhO4BGVwDbPPQ+VOSTCYchCG7czY LnAtQ2xRWoqbUw== -----END CERTIFICATE-----Generated at Sun Dec 14 19:16:53 2025 by rpki-client