This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft File: sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json) Hash identifier: lVrXmIvnhTSNu8M5bnau3XOAakVkCo7HKC+Tq8wyEB4= Subject key identifier: 9E:81:05:A9:E7:D9:36:B7:42:F1:EB:1C:99:2F:BE:A3:E8:FA:38:EB Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e Certificate serial: 019B71B5685167D32209477C0F819D688383 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft Manifest number: 0604 Signing time: Wed 31 Dec 2025 00:01:12 +0000 Manifest this update: Wed 31 Dec 2025 00:01:12 +0000 Manifest next update: Thu 01 Jan 2026 00:01:12 +0000 Files and hashes: 1: mMP3R6Y_E5t6fees10l8AYe8F8o.roa (hash: GVxHnVRZ4k3nHcgJKtEX5VgjvPdVGaTcdXcLRvNp8IM=) 2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: sFex6NKbZpo6lnGn7eNcRGLkYkOkYnYkE4MCfSshZG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:b5:68:51:67:d3:22:09:47:7c:0f:81:9d:68:83:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e Validity Not Before: Dec 31 00:01:12 2025 GMT Not After : Jan 1 00:01:12 2026 GMT Subject: CN=9e8105a9e7d936b742f1eb1c992fbea3e8fa38eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9f:3c:5b:9c:c3:f7:a4:31:58:cb:55:14:ec: 80:fe:8f:8f:8e:91:37:56:6c:7e:4c:a9:1e:ba:70: 7a:86:09:42:80:95:c8:e1:cc:26:d3:18:a3:60:6d: c5:48:71:7f:c9:82:f8:3b:cc:18:7d:77:03:c8:7f: b3:14:68:59:ec:a7:09:67:ae:a7:53:64:db:20:ff: 59:62:00:38:99:9a:f8:d3:54:fb:d2:63:90:7b:3e: 82:ef:85:c6:33:a0:c4:40:ec:08:a0:44:27:25:5b: 5b:ae:0c:44:57:03:9d:19:01:a3:03:e5:04:20:a0: 87:19:1a:5f:8b:1c:00:75:d2:0d:21:d7:c4:23:6b: c3:05:54:63:8e:0d:2e:0d:c0:e2:17:8b:42:c3:cf: ec:80:4a:b0:b7:58:72:d1:03:69:70:3f:fd:99:1a: c5:88:e4:8e:1d:e3:b2:b8:86:74:d9:16:8b:49:92: a9:5e:21:38:fe:9e:9d:14:8e:d7:e4:1e:f9:19:0c: d8:43:4c:26:02:b3:31:e4:62:c5:56:67:ae:43:ae: 5b:45:df:a0:18:30:7c:3e:30:74:10:44:be:58:56: da:18:4a:d4:36:82:76:94:9a:13:30:3d:64:38:de: ec:b6:8d:a5:c4:d8:ca:97:23:8b:72:15:7f:ff:13: fd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:81:05:A9:E7:D9:36:B7:42:F1:EB:1C:99:2F:BE:A3:E8:FA:38:EB X509v3 Authority Key Identifier: keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:51:aa:42:67:a7:59:2d:4f:7b:27:c1:62:73:b3:a5:f6:f8: 37:24:ef:44:fd:3d:0b:a0:02:82:3a:6c:ed:45:38:9b:35:0c: 36:65:e7:5d:be:29:9f:99:59:9e:c2:fc:9f:0b:f6:11:89:c5: df:f1:81:9a:f8:60:5d:4a:7f:98:7b:5f:14:9f:3e:58:0d:78: 50:eb:39:e4:a9:0c:0d:ed:02:58:7a:a8:27:78:b5:51:a1:04: a3:60:fa:28:5d:00:03:e9:af:96:75:47:14:6c:31:36:72:e5: d0:dc:80:09:3a:2a:47:67:51:8d:48:ff:db:0a:2e:11:cf:90: 85:f3:8c:f9:56:9f:41:38:f1:a0:ee:b8:d6:fe:12:da:83:b5: 66:c4:1f:a9:20:db:00:0f:87:37:09:70:37:93:9b:66:ca:c5: 48:12:74:bd:1a:99:32:5e:63:b6:f3:28:f7:6f:f5:c2:d6:26: f8:9a:cb:0a:21:f9:f0:b8:99:f4:5d:83:3b:42:f5:3c:44:34: 74:e8:4d:5c:bf:c2:f3:d3:34:21:13:8c:bd:99:82:b1:9c:c6: f6:3c:2e:62:64:ef:9f:af:7e:56:93:3a:c0:0a:eb:c2:6d:c7: 9c:49:bb:6a:a1:71:79:e9:62:b7:c9:97:37:fb:c3:e2:03:15: ed:90:b9:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxtWhRZ9MiCUd8D4GdaIODMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMzlhYjgyOThmYTM2M2FlODM3ZTUzMDAyODk2OWNjNWNi ZjEwNGUwHhcNMjUxMjMxMDAwMTEyWhcNMjYwMTAxMDAwMTEyWjAzMTEwLwYDVQQD Eyg5ZTgxMDVhOWU3ZDkzNmI3NDJmMWViMWM5OTJmYmVhM2U4ZmEzOGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Z88W5zD96QxWMtVFOyA/o+PjpE3 Vmx+TKkeunB6hglCgJXI4cwm0xijYG3FSHF/yYL4O8wYfXcDyH+zFGhZ7KcJZ66n U2TbIP9ZYgA4mZr401T70mOQez6C74XGM6DEQOwIoEQnJVtbrgxEVwOdGQGjA+UE IKCHGRpfixwAddINIdfEI2vDBVRjjg0uDcDiF4tCw8/sgEqwt1hy0QNpcD/9mRrF iOSOHeOyuIZ02RaLSZKpXiE4/p6dFI7X5B75GQzYQ0wmArMx5GLFVmeuQ65bRd+g GDB8PjB0EES+WFbaGErUNoJ2lJoTMD1kON7sto2lxNjKlyOLchV//xP9mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6BBann2Ta3QvHrHJkvvqPo+jjrMB8GA1UdIwQY MBaAFLA5q4KY+jY66DflMAKJacxcvxBOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZmQ3MmYtZWY3Ny00NTM3LTg5ZTkt OWZiZDk2M2E1MTNjLzEvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZmQ3MmYtZWY3Ny00NTM3LTg5ZTktOWZiZDk2M2E1MTNj LzEvc0RtcmdwajZOanJvTi1Vd0FvbHB6RnlfRUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzFGqQmen WS1PeyfBYnOzpfb4NyTvRP09C6ACgjps7UU4mzUMNmXnXb4pn5lZnsL8nwv2EYnF 3/GBmvhgXUp/mHtfFJ8+WA14UOs55KkMDe0CWHqoJ3i1UaEEo2D6KF0AA+mvlnVH FGwxNnLl0NyACToqR2dRjUj/2wouEc+QhfOM+VafQTjxoO641v4S2oO1ZsQfqSDb AA+HNwlwN5ObZsrFSBJ0vRqZMl5jtvMo92/1wtYm+JrLCiH58LiZ9F2DO0L1PEQ0 dOhNXL/C89M0IROMvZmCsZzG9jwuYmTvn69+VpM6wArrwm3HnEm7aqFxeelit8mX N/vD4gMV7ZC57Q== -----END CERTIFICATE-----Generated at Wed Dec 31 03:42:39 2025 by rpki-client