This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft File: sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json) Hash identifier: esVY91UQkX9GhRgAhLetDK46XIcJAIlWzWQYq+JegAM= Subject key identifier: 84:74:69:38:FF:9C:26:A9:52:AB:89:FF:F5:0C:4C:DB:91:2D:F9:AC Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e Certificate serial: 019B416DD3FC0331EA6811B75BDE01635CE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft Manifest number: 05EB Signing time: Sun 21 Dec 2025 15:01:15 +0000 Manifest this update: Sun 21 Dec 2025 15:01:15 +0000 Manifest next update: Mon 22 Dec 2025 15:01:15 +0000 Files and hashes: 1: mMP3R6Y_E5t6fees10l8AYe8F8o.roa (hash: GVxHnVRZ4k3nHcgJKtEX5VgjvPdVGaTcdXcLRvNp8IM=) 2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: 1cxhnoGAISGKiQYPf3+CSjVXn4yljfNkR+Lqp6OOduI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:d3:fc:03:31:ea:68:11:b7:5b:de:01:63:5c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e Validity Not Before: Dec 21 15:01:15 2025 GMT Not After : Dec 22 15:01:15 2025 GMT Subject: CN=84746938ff9c26a952ab89fff50c4cdb912df9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:44:9b:56:7b:27:61:36:93:81:f6:c7:38:a9: df:43:c6:75:07:b3:35:3e:4f:08:0e:0d:43:0d:79: ae:f8:55:8b:ef:90:8c:34:22:f7:09:b7:3f:5d:27: 8c:26:b4:ba:f8:1a:b6:27:b1:3b:60:b7:53:59:27: c9:8a:d5:93:de:b6:7e:06:a3:7d:84:7e:58:bc:8c: 14:8f:c3:1f:de:40:7f:0f:d5:89:cc:65:5a:4e:bb: 12:92:6a:1a:6a:77:eb:1c:85:66:0d:a7:9a:40:e3: 98:d1:75:83:53:ce:a3:17:d4:24:ec:8b:b5:d5:46: f9:41:ee:67:36:2a:d8:c3:3b:ef:af:8a:c2:30:3d: e0:59:67:65:55:f8:17:e1:ad:00:9b:59:92:32:43: c9:5d:79:fb:e4:5b:48:a8:10:3c:83:78:71:13:f0: f5:a9:b6:f9:f2:34:fd:ed:79:eb:b1:78:47:0f:a2: 67:f2:fc:a8:4c:4c:9a:e9:b9:e6:53:b5:c6:be:82: 9e:f7:d7:24:b5:50:c1:17:f8:dd:03:72:f3:1b:0f: 11:6c:33:3b:1d:e0:ed:4f:59:36:93:5a:c7:08:86: c2:41:98:7a:a4:3e:02:06:98:e5:d5:7e:ed:4b:4f: af:40:fa:da:75:21:f7:05:dd:23:ad:de:ec:1d:3c: a6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:74:69:38:FF:9C:26:A9:52:AB:89:FF:F5:0C:4C:DB:91:2D:F9:AC X509v3 Authority Key Identifier: keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:cd:da:ad:83:e1:22:d7:26:e8:40:ff:ff:81:b3:49:ee:a3: c6:8d:b3:36:05:11:3c:65:c1:1a:fc:78:a7:63:24:94:c5:ee: 6d:84:50:e2:65:bd:8d:02:46:20:3a:67:f1:0f:91:cc:34:5f: 50:b2:34:35:9a:b8:77:bc:33:7c:2b:22:b7:dd:70:35:39:c5: b1:ea:3e:1f:af:ab:70:0e:9b:80:5a:3f:d9:f0:77:69:9c:e6: 6e:67:fe:48:5e:e5:42:86:a9:c2:0a:a1:8b:5b:fc:d3:97:69: 0c:31:e2:e6:95:f9:d6:82:e3:d0:b7:0c:60:a1:69:5a:74:28: d3:6d:be:7f:ab:57:07:ce:dc:c7:a7:2b:29:b1:ed:23:5a:01: 3b:37:96:c8:18:38:85:92:7f:f4:54:b3:53:18:f8:74:ef:55: ba:79:d3:f8:2c:07:1c:01:59:de:ba:8c:4d:f9:0b:ab:7b:4a: bc:4e:e9:e0:5f:10:30:dc:1b:ea:3b:e8:4e:8f:fd:57:62:49: 7b:a1:c3:cb:04:5c:00:ae:50:c7:a8:d3:90:96:92:e7:c3:dd: f9:64:6c:68:90:3d:bc:7e:c8:5d:a3:11:7c:26:7d:60:60:97: e3:2e:5e:c1:d6:7c:0e:5d:2f:78:6c:a2:3a:c6:6d:0c:19:27: f8:c9:cb:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbdP8AzHqaBG3W94BY1zgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMzlhYjgyOThmYTM2M2FlODM3ZTUzMDAyODk2OWNjNWNi ZjEwNGUwHhcNMjUxMjIxMTUwMTE1WhcNMjUxMjIyMTUwMTE1WjAzMTEwLwYDVQQD Eyg4NDc0NjkzOGZmOWMyNmE5NTJhYjg5ZmZmNTBjNGNkYjkxMmRmOWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0SbVnsnYTaTgfbHOKnfQ8Z1B7M1 Pk8IDg1DDXmu+FWL75CMNCL3Cbc/XSeMJrS6+Bq2J7E7YLdTWSfJitWT3rZ+BqN9 hH5YvIwUj8Mf3kB/D9WJzGVaTrsSkmoaanfrHIVmDaeaQOOY0XWDU86jF9Qk7Iu1 1Ub5Qe5nNirYwzvvr4rCMD3gWWdlVfgX4a0Am1mSMkPJXXn75FtIqBA8g3hxE/D1 qbb58jT97XnrsXhHD6Jn8vyoTEya6bnmU7XGvoKe99cktVDBF/jdA3LzGw8RbDM7 HeDtT1k2k1rHCIbCQZh6pD4CBpjl1X7tS0+vQPradSH3Bd0jrd7sHTymBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIR0aTj/nCapUquJ//UMTNuRLfmsMB8GA1UdIwQY MBaAFLA5q4KY+jY66DflMAKJacxcvxBOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZmQ3MmYtZWY3Ny00NTM3LTg5ZTkt OWZiZDk2M2E1MTNjLzEvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZmQ3MmYtZWY3Ny00NTM3LTg5ZTktOWZiZDk2M2E1MTNj LzEvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAns3arYPh Itcm6ED//4GzSe6jxo2zNgURPGXBGvx4p2MklMXubYRQ4mW9jQJGIDpn8Q+RzDRf ULI0NZq4d7wzfCsit91wNTnFseo+H6+rcA6bgFo/2fB3aZzmbmf+SF7lQoapwgqh i1v805dpDDHi5pX51oLj0LcMYKFpWnQo022+f6tXB87cx6crKbHtI1oBOzeWyBg4 hZJ/9FSzUxj4dO9VunnT+CwHHAFZ3rqMTfkLq3tKvE7p4F8QMNwb6jvoTo/9V2JJ e6HDywRcAK5Qx6jTkJaS58Pd+WRsaJA9vH7IXaMRfCZ9YGCX4y5ewdZ8Dl0veGyi OsZtDBkn+MnLng== -----END CERTIFICATE-----Generated at Sun Dec 21 19:01:02 2025 by rpki-client