This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json) Hash identifier: dc/YTZzaU4F0wUucR4rfbGbsQmUxvmLCeH6ZUj0zGME= Subject key identifier: 20:B4:06:69:00:61:F1:09:25:F1:84:E6:67:7E:B1:A9:55:5D:A9:83 Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa Certificate serial: 019B3B34B0B6123CCF1B0A0397BEFD14C512 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft Manifest number: 121E Signing time: Sat 20 Dec 2025 10:01:07 +0000 Manifest this update: Sat 20 Dec 2025 10:01:07 +0000 Manifest next update: Sun 21 Dec 2025 10:01:07 +0000 Files and hashes: 1: 1NP21bBcjBPyQEY2JxKMTy8KWnI.roa (hash: nEpG5QclJFuSzinXm1Th0RF7eqEVbPT7VUvAfBWJ6uw=) 2: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: bZCNtNcpqD7+CNV4WNNrboh+YVUlJYucb0r7ZnHZQ4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:b0:b6:12:3c:cf:1b:0a:03:97:be:fd:14:c5:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa Validity Not Before: Dec 20 10:01:07 2025 GMT Not After : Dec 21 10:01:07 2025 GMT Subject: CN=20b406690061f10925f184e6677eb1a9555da983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:61:fc:58:3e:89:a3:6e:cf:60:18:31:5e:c9: 61:d9:b1:fb:49:f8:0c:c2:bf:89:c4:89:8c:ba:7f: 5d:90:f9:1b:c3:72:c5:3a:78:4d:28:d9:85:25:0e: 06:f0:24:08:af:40:25:f6:14:64:ff:54:53:95:8c: ec:cd:49:7f:69:44:ce:eb:ed:25:1e:3e:2c:29:a3: 87:b1:9c:71:3b:7f:0d:99:87:60:f9:91:94:1f:a9: 87:0f:41:14:7f:e2:7c:28:ec:11:f4:30:22:57:80: 2f:4e:3b:56:f6:9f:3b:9e:bf:56:63:37:21:ef:5f: b7:2e:42:b8:04:e8:f0:0a:8a:2c:d6:46:4c:e1:b3: 51:48:1b:f4:39:db:8e:17:a5:8d:fa:8c:30:3e:b9: c3:b0:ad:df:03:60:9f:c5:8f:3e:e6:1e:88:9f:c8: df:b8:13:04:b9:fe:68:36:a1:a7:98:81:cc:6c:0e: b0:78:ff:ac:b9:2e:5f:9d:f0:ec:4b:6d:76:57:f9: 1b:f3:b7:c0:25:1a:71:8c:a8:0b:3c:8d:2c:a3:bd: 29:8b:e4:31:53:f0:b7:00:f2:a0:38:be:39:f1:8b: 7e:2c:d1:37:71:aa:b0:46:87:e4:86:0c:94:54:1e: 66:ea:f6:92:6a:5a:b6:88:c9:c1:bb:aa:9a:6e:2b: d9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B4:06:69:00:61:F1:09:25:F1:84:E6:67:7E:B1:A9:55:5D:A9:83 X509v3 Authority Key Identifier: keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:5b:ef:24:ce:09:96:4e:12:c7:6e:8f:09:8a:fd:b6:34:13: d7:1e:c2:6f:6e:97:fa:1f:25:1c:80:f0:70:a3:af:ed:bf:0a: 8c:df:3a:49:e8:8f:a2:9d:27:89:3d:85:cd:8f:11:34:e7:49: ea:f2:99:4f:3f:32:12:6c:76:db:3c:d1:7a:68:60:7a:f1:ad: 9b:c4:06:d3:bf:fb:26:70:30:de:fe:15:76:5c:3a:4d:e8:99: 11:e6:d1:c2:e1:de:cd:a9:5c:e3:2e:ad:7a:4b:6b:ab:c2:47: 42:fc:ea:3f:cf:68:12:38:61:cb:55:6e:1e:e0:48:06:27:29: a0:69:de:db:5a:6d:6a:f2:f7:0d:8d:e6:3d:68:a3:66:e6:17: b7:67:37:4a:a5:03:21:2b:f9:d9:1a:69:71:e9:3c:ff:f4:85: 33:90:fc:9b:ad:06:66:80:fd:2d:e5:15:7f:1c:df:91:4d:d6: 46:08:e4:fe:43:a8:ef:5f:68:65:48:cf:5a:15:35:48:a0:2a: b1:18:d0:f7:5c:15:52:6f:22:bd:3f:85:15:7f:55:da:fc:61: a5:7f:7e:92:fe:64:01:cf:26:72:c8:ee:d9:ca:6d:1c:39:cc: 8d:23:54:14:28:c0:a8:d1:25:59:03:49:0e:7e:4d:3f:90:f1: d6:6a:21:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NLC2EjzPGwoDl779FMUSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZTczMmU2YjI0OTA5M2U3OWExYTUwN2NiY2Q4MTk2ZjAx ODE3ZmEwHhcNMjUxMjIwMTAwMTA3WhcNMjUxMjIxMTAwMTA3WjAzMTEwLwYDVQQD EygyMGI0MDY2OTAwNjFmMTA5MjVmMTg0ZTY2NzdlYjFhOTU1NWRhOTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWH8WD6Jo27PYBgxXslh2bH7SfgM wr+JxImMun9dkPkbw3LFOnhNKNmFJQ4G8CQIr0Al9hRk/1RTlYzszUl/aUTO6+0l Hj4sKaOHsZxxO38NmYdg+ZGUH6mHD0EUf+J8KOwR9DAiV4AvTjtW9p87nr9WYzch 71+3LkK4BOjwCoos1kZM4bNRSBv0OduOF6WN+owwPrnDsK3fA2CfxY8+5h6In8jf uBMEuf5oNqGnmIHMbA6weP+suS5fnfDsS212V/kb87fAJRpxjKgLPI0so70pi+Qx U/C3APKgOL458Yt+LNE3caqwRofkhgyUVB5m6vaSalq2iMnBu6qabivZewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCC0BmkAYfEJJfGE5md+salVXamDMB8GA1UdIwQY MBaAFA/nMuaySQk+eaGlB8vNgZbwGBf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUt YTI3Nzg5ODI5M2I5LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUtYTI3Nzg5ODI5M2I5 LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFvvJM4J lk4Sx26PCYr9tjQT1x7Cb26X+h8lHIDwcKOv7b8KjN86SeiPop0niT2FzY8RNOdJ 6vKZTz8yEmx22zzRemhgevGtm8QG07/7JnAw3v4Vdlw6TeiZEebRwuHezalc4y6t ektrq8JHQvzqP89oEjhhy1VuHuBIBicpoGne21ptavL3DY3mPWijZuYXt2c3SqUD ISv52Rppcek8//SFM5D8m60GZoD9LeUVfxzfkU3WRgjk/kOo719oZUjPWhU1SKAq sRjQ91wVUm8ivT+FFX9V2vxhpX9+kv5kAc8mcsju2cptHDnMjSNUFCjAqNElWQNJ Dn5NP5Dx1mohvQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:57:10 2025 by rpki-client