This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft File: sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json) Hash identifier: MtV1FMh/TRI2HXcrffNG/sv7rK4TrD996NR7ppaaYmg= Subject key identifier: 6E:0E:74:20:95:CD:D7:79:96:E7:A2:92:5E:D7:17:59:04:4D:18:F9 Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e Certificate serial: 019B62427CE6B10310D3149FCED333D16C8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft Manifest number: 05FC Signing time: Sun 28 Dec 2025 00:01:23 +0000 Manifest this update: Sun 28 Dec 2025 00:01:23 +0000 Manifest next update: Mon 29 Dec 2025 00:01:23 +0000 Files and hashes: 1: mMP3R6Y_E5t6fees10l8AYe8F8o.roa (hash: GVxHnVRZ4k3nHcgJKtEX5VgjvPdVGaTcdXcLRvNp8IM=) 2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: Vu9dRQsI98ORB8t3RN71iHt1a0qFeoKcRLM76qANqSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:42:7c:e6:b1:03:10:d3:14:9f:ce:d3:33:d1:6c:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e Validity Not Before: Dec 28 00:01:23 2025 GMT Not After : Dec 29 00:01:23 2025 GMT Subject: CN=6e0e742095cdd77996e7a2925ed71759044d18f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b5:7e:ab:d3:6e:4a:2d:97:9e:b2:9e:63:7c: 64:46:a7:71:e8:c9:1b:49:74:94:e1:71:c0:6b:69: d3:12:c6:f0:f9:b5:18:79:ce:40:4c:38:16:38:4d: d8:31:97:5e:4a:a3:6d:a9:d4:85:b4:b4:a5:0c:83: 82:ea:58:9d:bc:8b:ba:ec:e8:fc:84:a9:7e:ea:ce: 60:2b:2a:37:49:bc:46:f3:df:9e:28:f9:c1:5a:73: 5f:03:53:2b:3f:48:ff:2c:5b:af:36:08:73:9d:9c: 68:ba:32:01:a0:c1:af:3b:d2:2f:b4:6d:96:cf:69: ee:6d:9a:b1:d2:6f:83:f7:ee:7e:90:39:df:c9:30: 46:ea:e7:88:97:39:99:1e:a0:68:1b:ba:b6:d8:5a: d0:3f:f0:85:10:69:23:7c:20:73:e1:4c:ae:ce:dd: 58:86:48:4a:fb:3f:12:16:d2:fd:86:39:2c:6a:3b: 8d:0c:11:23:a7:0b:c2:83:14:da:35:5c:e8:db:9f: e2:7a:7e:02:c8:a0:5b:ae:ce:03:40:64:17:2a:11: a0:d1:b0:34:f6:8c:84:7f:35:a7:2b:41:52:e7:81: 23:4d:89:f1:1c:3d:d0:bd:08:bc:a0:6b:ed:35:db: 57:97:08:b0:61:65:ad:b3:49:ae:4a:53:3a:eb:e0: 82:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:0E:74:20:95:CD:D7:79:96:E7:A2:92:5E:D7:17:59:04:4D:18:F9 X509v3 Authority Key Identifier: keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:fb:e2:18:9e:0d:b2:6c:6a:a4:c9:c5:c1:35:2f:e6:3c:f0: de:bb:fb:34:da:f0:e0:27:c1:36:7e:0a:a2:15:bc:60:91:53: 23:2c:22:f2:2d:14:37:37:a2:1d:39:e9:ee:0f:87:05:23:16: 5a:12:91:88:92:49:0e:95:d6:dd:08:54:c4:99:d9:b5:55:d9: e0:11:42:7b:db:be:11:7e:8a:3a:53:6e:f0:4a:b1:a9:93:0f: 89:63:a7:5b:55:be:3c:b2:28:56:73:aa:7d:91:88:0f:62:25: 96:9c:b4:10:43:c6:cd:12:a4:c7:68:98:0f:fc:7a:f9:9d:5f: 71:4e:e2:6f:67:0f:40:15:33:65:d9:b3:87:52:af:8e:da:72: 84:79:cf:68:9f:52:6e:3a:b1:c9:fd:a4:52:b9:db:37:c3:60: 74:68:43:fc:93:52:22:e8:cc:23:e4:ed:bf:f8:09:1a:a8:b1: 3d:43:3e:09:fb:10:ee:d6:88:42:68:4c:fe:70:b1:5c:6b:dc: 02:82:ea:9d:98:3b:ad:a1:4b:ef:c8:58:5c:f3:f9:5d:a1:87: 08:f7:ea:40:2e:11:8c:05:a1:93:63:56:20:5d:40:5e:bc:7a: d7:e8:b3:92:74:b4:49:1a:bd:4e:8a:8f:19:a5:48:4d:d1:45: 9a:41:bc:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiQnzmsQMQ0xSfztMz0WyLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMzlhYjgyOThmYTM2M2FlODM3ZTUzMDAyODk2OWNjNWNi ZjEwNGUwHhcNMjUxMjI4MDAwMTIzWhcNMjUxMjI5MDAwMTIzWjAzMTEwLwYDVQQD Eyg2ZTBlNzQyMDk1Y2RkNzc5OTZlN2EyOTI1ZWQ3MTc1OTA0NGQxOGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLV+q9NuSi2XnrKeY3xkRqdx6Mkb SXSU4XHAa2nTEsbw+bUYec5ATDgWOE3YMZdeSqNtqdSFtLSlDIOC6lidvIu67Oj8 hKl+6s5gKyo3SbxG89+eKPnBWnNfA1MrP0j/LFuvNghznZxoujIBoMGvO9IvtG2W z2nubZqx0m+D9+5+kDnfyTBG6ueIlzmZHqBoG7q22FrQP/CFEGkjfCBz4Uyuzt1Y hkhK+z8SFtL9hjksajuNDBEjpwvCgxTaNVzo25/ien4CyKBbrs4DQGQXKhGg0bA0 9oyEfzWnK0FS54EjTYnxHD3QvQi8oGvtNdtXlwiwYWWts0muSlM66+CC1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4OdCCVzdd5lueikl7XF1kETRj5MB8GA1UdIwQY MBaAFLA5q4KY+jY66DflMAKJacxcvxBOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZmQ3MmYtZWY3Ny00NTM3LTg5ZTkt OWZiZDk2M2E1MTNjLzEvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZmQ3MmYtZWY3Ny00NTM3LTg5ZTktOWZiZDk2M2E1MTNj LzEvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfviGJ4N smxqpMnFwTUv5jzw3rv7NNrw4CfBNn4KohW8YJFTIywi8i0UNzeiHTnp7g+HBSMW WhKRiJJJDpXW3QhUxJnZtVXZ4BFCe9u+EX6KOlNu8EqxqZMPiWOnW1W+PLIoVnOq fZGID2Illpy0EEPGzRKkx2iYD/x6+Z1fcU7ib2cPQBUzZdmzh1KvjtpyhHnPaJ9S bjqxyf2kUrnbN8NgdGhD/JNSIujMI+Ttv/gJGqixPUM+CfsQ7taIQmhM/nCxXGvc AoLqnZg7raFL78hYXPP5XaGHCPfqQC4RjAWhk2NWIF1AXrx61+izknS0SRq9ToqP GaVITdFFmkG86Q== -----END CERTIFICATE-----Generated at Sun Dec 28 05:51:45 2025 by rpki-client