This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft File: dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json) Hash identifier: lwf6dn18hPqnVLiCxz2QMyntJQPeGbtOGTt9qpqsqBg= Subject key identifier: 6F:5D:68:32:50:3B:F7:B0:6A:00:2D:5D:74:1B:49:CB:43:43:45:45 Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C Certificate issuer: /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c Certificate serial: 019B2C2F451D95EBEF7E9C788E73F8266F77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft Manifest number: 0BCD Signing time: Wed 17 Dec 2025 12:00:53 +0000 Manifest this update: Wed 17 Dec 2025 12:00:53 +0000 Manifest next update: Thu 18 Dec 2025 12:00:53 +0000 Files and hashes: 1: 8cafwJu77pkBukQtIkYtwta4vzE.roa (hash: 5ZeO0GQQRhcOKBhez5TUCQIoMyl73wJ5RRHIFaIhJkM=) 2: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: h6wpHiGf2R68X0pQ1CaglDeR4fHERPGhJX/wC6iSpVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:45:1d:95:eb:ef:7e:9c:78:8e:73:f8:26:6f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c Validity Not Before: Dec 17 12:00:53 2025 GMT Not After : Dec 18 12:00:53 2025 GMT Subject: CN=6f5d6832503bf7b06a002d5d741b49cb43434545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cb:29:f8:12:89:d9:70:67:d5:c7:7c:9f:b0: 3c:12:1b:8f:6b:0f:0b:c2:59:25:ce:d4:f6:2c:ef: 48:b8:a8:be:b1:fe:30:2e:ff:99:a0:bb:3f:68:63: e1:42:08:ba:9d:0d:c1:41:cc:0b:39:e8:c7:ac:58: 4a:56:b3:3c:43:5a:81:94:8d:68:8a:d4:2f:cd:c2: 9d:9b:61:9f:54:ec:64:a1:3e:66:f3:1b:5b:85:42: 18:c1:3e:cd:ad:65:0b:fa:c1:dc:5e:b6:83:05:6d: 18:75:9b:40:fc:1a:f7:68:61:b5:3e:80:15:cc:2c: 73:a3:8b:24:ff:d4:0c:32:77:e8:1a:b0:42:d0:5f: 9a:a3:59:e7:ae:6d:15:c3:c7:62:d2:41:c4:15:0c: 16:97:6c:52:12:07:1a:13:12:16:56:45:f1:d1:af: ee:67:72:e7:e7:0f:5b:d6:98:9b:93:e2:f2:c0:c2: 04:28:68:64:7b:1b:98:af:1d:d2:0c:2f:52:c5:b2: 90:6d:84:62:e0:97:32:a6:c2:41:f4:1f:89:2b:89: 5c:e0:35:b2:ef:3d:ba:86:fc:9e:67:a4:f3:bd:8b: c8:6f:b6:8d:cb:a8:7c:b9:07:ca:f3:c5:58:3a:d1: 53:19:69:76:6c:a6:ab:24:3e:e8:64:6d:6b:0b:ed: 84:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5D:68:32:50:3B:F7:B0:6A:00:2D:5D:74:1B:49:CB:43:43:45:45 X509v3 Authority Key Identifier: keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ad:47:ca:49:84:ca:2c:71:cd:5f:64:0f:3c:12:eb:61:67: 82:00:2e:87:4f:9a:7c:66:aa:4e:45:b8:1e:dd:2b:a1:fa:57: 96:6a:a8:9c:e0:e9:23:3e:d8:6b:dc:c7:83:c3:d8:0b:2f:64: cf:98:26:b0:d1:b9:08:08:45:dd:1d:0e:71:47:b4:23:df:ef: b4:ed:ff:92:24:72:a1:7c:2c:af:0f:c8:1d:b3:24:d0:e8:61: fd:78:20:9c:10:2f:f4:f3:b0:33:6e:ae:1f:2c:8e:08:d4:1c: 5c:ee:19:19:84:29:a4:7f:ef:1e:d0:dc:ec:41:bc:34:59:cf: 7e:e1:27:67:6b:30:18:5d:4e:fc:b9:57:57:e8:62:fe:34:8e: c2:31:46:f7:23:dd:c7:c8:c1:20:91:b3:ff:da:9a:98:15:7a: 71:0c:23:91:59:b5:bc:60:87:30:0f:76:ab:6f:e4:6d:90:4e: 4f:50:ee:9f:18:59:69:73:95:13:ff:c5:f1:a7:70:f9:d5:a2: 2d:99:40:53:b9:cc:49:86:9c:49:bf:64:7f:47:97:ed:69:e5: 2c:4a:0e:36:0f:05:c0:e8:3d:ca:3f:96:8d:56:2f:34:56:34: 52:e9:16:9d:37:82:22:41:2b:83:b7:51:1f:32:1b:29:1d:e5: 78:eb:ce:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL0Udlevvfpx4jnP4Jm93MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NGRjYjcyZThjYjQ3OGNmYzRiMjVhZWIxZjAzYjQwNjI2 NjM3NWMwHhcNMjUxMjE3MTIwMDUzWhcNMjUxMjE4MTIwMDUzWjAzMTEwLwYDVQQD Eyg2ZjVkNjgzMjUwM2JmN2IwNmEwMDJkNWQ3NDFiNDljYjQzNDM0NTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcsp+BKJ2XBn1cd8n7A8EhuPaw8L wlklztT2LO9IuKi+sf4wLv+ZoLs/aGPhQgi6nQ3BQcwLOejHrFhKVrM8Q1qBlI1o itQvzcKdm2GfVOxkoT5m8xtbhUIYwT7NrWUL+sHcXraDBW0YdZtA/Br3aGG1PoAV zCxzo4sk/9QMMnfoGrBC0F+ao1nnrm0Vw8di0kHEFQwWl2xSEgcaExIWVkXx0a/u Z3Ln5w9b1pibk+LywMIEKGhkexuYrx3SDC9SxbKQbYRi4JcypsJB9B+JK4lc4DWy 7z26hvyeZ6TzvYvIb7aNy6h8uQfK88VYOtFTGWl2bKarJD7oZG1rC+2EeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9daDJQO/ewagAtXXQbSctDQ0VFMB8GA1UdIwQY MBaAFHRNy3Loy0eM/EslrrHwO0BiZjdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZTFiZTktZTRlYS00Yzg0LWE4Yjct ZDBkNDc2ZjQxZmQ2LzEvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81ZTFiZTktZTRlYS00Yzg0LWE4YjctZDBkNDc2ZjQxZmQ2 LzEvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK61HykmE yixxzV9kDzwS62FnggAuh0+afGaqTkW4Ht0rofpXlmqonODpIz7Ya9zHg8PYCy9k z5gmsNG5CAhF3R0OcUe0I9/vtO3/kiRyoXwsrw/IHbMk0Ohh/XggnBAv9POwM26u HyyOCNQcXO4ZGYQppH/vHtDc7EG8NFnPfuEnZ2swGF1O/LlXV+hi/jSOwjFG9yPd x8jBIJGz/9qamBV6cQwjkVm1vGCHMA92q2/kbZBOT1DunxhZaXOVE//F8adw+dWi LZlAU7nMSYacSb9kf0eX7WnlLEoONg8FwOg9yj+WjVYvNFY0UukWnTeCIkErg7dR HzIbKR3leOvOxw== -----END CERTIFICATE-----Generated at Wed Dec 17 15:12:44 2025 by rpki-client