This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft File: dAId0eJ80ed44tu9YKoYSxY7zv4.mft (raw, json) Hash identifier: e8w/NjoJQ+KhI+6+J5inBB/ORqQGZeF15hxHj0dZ8Cg= Subject key identifier: 05:C4:43:3F:5E:D6:DA:08:9A:CF:AD:99:87:22:27:96:F2:D2:12:8B Authority key identifier: 74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE Certificate issuer: /CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe Certificate serial: 019B620B10A85B7A0A759F9C0D129E722524 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft Manifest number: 02F1 Signing time: Sat 27 Dec 2025 23:00:50 +0000 Manifest this update: Sat 27 Dec 2025 23:00:50 +0000 Manifest next update: Sun 28 Dec 2025 23:00:50 +0000 Files and hashes: 1: SFufe6GxPr18jUulsobsVcJNabA.roa (hash: BS7brnhU1ziQ1RkRsO80taFEBA/xtbs+mzY1lj67wlg=) 2: dAId0eJ80ed44tu9YKoYSxY7zv4.crl (hash: DFtiWBAGu6Qz/wSldyMaI8MczSeQD7e6ciHRkhwbidU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 23:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:0b:10:a8:5b:7a:0a:75:9f:9c:0d:12:9e:72:25:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe Validity Not Before: Dec 27 23:00:50 2025 GMT Not After : Dec 28 23:00:50 2025 GMT Subject: CN=05c4433f5ed6da089acfad9987222796f2d2128b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:72:02:64:b5:30:09:32:7c:6a:38:10:af:00: c4:65:b8:76:92:8f:c1:8c:46:96:42:18:1d:d9:4a: 8d:87:a4:93:84:83:59:bb:9a:0f:13:c4:86:05:ea: 2b:ea:b3:cd:60:28:3a:b8:e3:23:4b:d7:ce:32:bb: a7:73:65:4c:e3:34:ee:da:70:55:0a:9f:7e:ad:99: ee:a2:68:b1:00:8f:ca:01:6f:fa:cf:60:16:4b:74: 37:47:c0:16:76:0f:f8:41:a0:92:75:0a:bb:19:f3: 92:5f:4b:e1:e1:ae:e8:8d:5a:50:be:2b:80:91:9f: 82:11:2e:8f:1a:c0:df:a6:99:37:6e:da:b5:b0:b9: 6b:6f:3e:83:db:d2:ec:7f:e9:5c:2a:0b:f5:f1:e1: 03:77:58:57:ed:c4:b2:2e:a1:73:e9:6e:9d:af:8b: a2:87:21:4d:21:67:08:e0:4a:50:53:58:c2:87:a3: aa:35:5f:7e:74:15:4f:86:0e:d6:2d:50:c0:97:ea: 33:ee:59:9b:cc:0d:b6:16:5d:71:2d:be:fb:6e:82: bc:10:89:b4:a5:0c:1d:ae:81:94:0a:e8:ba:20:f7: c4:6f:73:13:a3:f4:70:66:19:1e:6c:e9:3a:cb:88: 32:b0:a8:10:d1:8a:9d:26:b8:64:be:4c:07:97:6d: 6c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C4:43:3F:5E:D6:DA:08:9A:CF:AD:99:87:22:27:96:F2:D2:12:8B X509v3 Authority Key Identifier: keyid:74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:8b:3e:52:19:f7:18:17:0c:a6:f1:45:f0:9c:16:81:ab:4b: 53:39:a5:b0:b5:9e:05:6e:93:bc:c3:91:fa:75:f4:1e:5f:d7: f1:3b:3c:42:3a:2e:19:fd:ef:10:45:cb:ab:b0:0c:85:03:9c: 1c:94:31:8c:d4:6d:f7:e7:b3:df:0f:2d:31:b9:85:08:9d:84: ec:7c:3d:f6:e6:e8:7c:45:2b:de:58:38:30:63:55:ce:f3:9b: 42:ff:b4:37:ee:74:bf:54:66:0c:54:de:b1:29:c2:17:3f:02: 18:8b:d0:51:23:56:85:e9:d6:79:a1:bc:89:71:14:5b:12:16: 86:0d:4a:22:d4:3d:8c:a6:58:4a:3e:6b:ea:ce:d8:c8:0f:6c: f7:f1:6f:b8:0f:4c:99:32:f7:93:95:b4:51:51:60:be:5e:17: b4:9d:51:fc:21:8f:e4:4f:96:29:3b:cd:59:9d:61:58:3e:9f: 26:4b:68:4d:1e:bb:55:ad:15:57:09:65:d7:04:a4:9b:8e:68: 81:4e:87:6d:98:08:ea:0e:c6:2d:12:ab:5f:a6:2e:48:78:d2: 89:5c:9c:a5:7e:37:e4:6d:fb:d4:bd:e6:b0:28:72:b8:2b:e2: 4a:b8:af:94:96:54:52:84:99:a5:88:4d:24:81:df:51:81:bd: 73:27:0b:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiCxCoW3oKdZ+cDRKeciUkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MDIxZGQxZTI3Y2QxZTc3OGUyZGJiZDYwYWExODRiMTYz YmNlZmUwHhcNMjUxMjI3MjMwMDUwWhcNMjUxMjI4MjMwMDUwWjAzMTEwLwYDVQQD EygwNWM0NDMzZjVlZDZkYTA4OWFjZmFkOTk4NzIyMjc5NmYyZDIxMjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHICZLUwCTJ8ajgQrwDEZbh2ko/B jEaWQhgd2UqNh6SThINZu5oPE8SGBeor6rPNYCg6uOMjS9fOMrunc2VM4zTu2nBV Cp9+rZnuomixAI/KAW/6z2AWS3Q3R8AWdg/4QaCSdQq7GfOSX0vh4a7ojVpQviuA kZ+CES6PGsDfppk3btq1sLlrbz6D29Lsf+lcKgv18eEDd1hX7cSyLqFz6W6dr4ui hyFNIWcI4EpQU1jCh6OqNV9+dBVPhg7WLVDAl+oz7lmbzA22Fl1xLb77boK8EIm0 pQwdroGUCui6IPfEb3MTo/RwZhkebOk6y4gysKgQ0YqdJrhkvkwHl21sOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXEQz9e1toIms+tmYciJ5by0hKLMB8GA1UdIwQY MBaAFHQCHdHifNHneOLbvWCqGEsWO87+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEFJZDBlSjgwZWQ0NHR1OVlLb1lTeFk3enY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84OTQxZjgtOWZiNi00ZDBmLWI0OTUt OTMzODVmODA1NjU1LzEvZEFJZDBlSjgwZWQ0NHR1OVlLb1lTeFk3enY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC84OTQxZjgtOWZiNi00ZDBmLWI0OTUtOTMzODVmODA1NjU1 LzEvZEFJZDBlSjgwZWQ0NHR1OVlLb1lTeFk3enY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIs+Uhn3 GBcMpvFF8JwWgatLUzmlsLWeBW6TvMOR+nX0Hl/X8Ts8QjouGf3vEEXLq7AMhQOc HJQxjNRt9+ez3w8tMbmFCJ2E7Hw99ubofEUr3lg4MGNVzvObQv+0N+50v1RmDFTe sSnCFz8CGIvQUSNWhenWeaG8iXEUWxIWhg1KItQ9jKZYSj5r6s7YyA9s9/FvuA9M mTL3k5W0UVFgvl4XtJ1R/CGP5E+WKTvNWZ1hWD6fJktoTR67Va0VVwll1wSkm45o gU6HbZgI6g7GLRKrX6YuSHjSiVycpX435G371L3msChyuCviSrivlJZUUoSZpYhN JIHfUYG9cycLoA== -----END CERTIFICATE-----Generated at Sun Dec 28 07:29:32 2025 by rpki-client