This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft File: D5_AEbXohjvPO7cq12ldMZdCuEQ.mft (raw, json) Hash identifier: OeAwIGVuQhTDNz7I1OAS0PkFwAeHOZqUsNDoJEQ+LMQ= Subject key identifier: 0E:CB:CA:C2:96:7E:3D:07:94:64:21:46:9B:56:2B:AE:88:72:79:E2 Authority key identifier: 0F:9F:C0:11:B5:E8:86:3B:CF:3B:B7:2A:D7:69:5D:31:97:42:B8:44 Certificate issuer: /CN=0f9fc011b5e8863bcf3bb72ad7695d319742b844 Certificate serial: 019B4B1C62522418EE1FC1EE957B31919C57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft Manifest number: 36 Signing time: Tue 23 Dec 2025 12:08:29 +0000 Manifest this update: Tue 23 Dec 2025 12:08:29 +0000 Manifest next update: Wed 24 Dec 2025 12:08:29 +0000 Files and hashes: 1: D5_AEbXohjvPO7cq12ldMZdCuEQ.crl (hash: /50kvbsBlYklSHQLPAuogCYn4JuumMxbtieMkDK/s1w=) 2: Zdpdfd3DNV2iwzW9YILlmzVL6v8.roa (hash: 7ArMiFQWoDHYKGK+iJ3R0PJ5aN9xvw/KJGHrKJrBVTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 12:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:1c:62:52:24:18:ee:1f:c1:ee:95:7b:31:91:9c:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9fc011b5e8863bcf3bb72ad7695d319742b844 Validity Not Before: Dec 23 12:08:29 2025 GMT Not After : Dec 24 12:08:29 2025 GMT Subject: CN=0ecbcac2967e3d07946421469b562bae887279e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d9:93:dd:ac:08:d8:11:97:4e:87:30:ae:98: d5:b8:bc:67:d2:c9:69:9b:79:e1:1a:6e:28:66:54: 30:e9:12:92:79:96:c0:f2:3a:3d:dd:91:83:3b:41: a2:d4:aa:66:92:fa:80:a4:96:00:09:c4:86:86:d3: e4:f3:d8:3d:ce:67:e6:e1:ba:5f:7d:2d:af:2c:9b: 42:be:7a:6c:ce:4c:df:4a:36:b6:ca:21:12:ca:2b: 4d:26:7f:9b:66:e5:44:a2:2f:99:ff:8d:6f:ec:ad: 93:76:10:a4:1c:92:7c:bc:90:9c:d1:1e:b1:0f:ce: b1:f8:fc:f3:d5:d5:19:5b:0b:a5:b0:3f:f5:90:9f: 2b:23:d3:ad:f0:04:ce:cb:5e:de:dd:81:1c:d1:f5: 68:9b:39:c5:ae:85:d4:52:97:ec:bb:73:e1:0e:37: a5:45:76:d6:e7:d3:7d:d8:c0:29:ff:b2:87:a3:c4: 23:4e:e5:c5:b7:1a:d5:90:5c:6a:3e:cb:7e:af:9d: eb:79:81:a0:af:83:fc:b6:d4:7c:6f:67:e7:6c:dc: dd:4a:64:06:05:e5:f0:5f:b7:ce:8a:00:43:1f:fd: 75:ec:31:ec:a4:22:9f:da:1e:bb:d4:a2:ca:e7:bc: bc:4c:7a:5d:11:62:12:4c:17:c3:b2:68:fe:ba:b3: a0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CB:CA:C2:96:7E:3D:07:94:64:21:46:9B:56:2B:AE:88:72:79:E2 X509v3 Authority Key Identifier: keyid:0F:9F:C0:11:B5:E8:86:3B:CF:3B:B7:2A:D7:69:5D:31:97:42:B8:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:bb:0f:98:b5:4c:3b:09:f4:92:3e:03:27:7a:f0:11:1b:4a: 8a:b0:ac:9e:fc:fa:60:d8:5a:2e:53:0b:c1:c8:f9:5d:c9:2c: d9:0a:53:74:8e:64:ed:64:49:e8:44:30:f4:26:39:1a:fa:7a: 73:d4:4b:43:c7:c4:81:18:f9:15:19:06:cd:6b:02:3b:bb:51: 50:98:f2:4e:ac:81:18:f8:4a:e4:91:66:4a:dc:6a:95:0c:11: 31:0a:d6:3b:45:bb:1d:52:ba:57:29:97:b3:80:90:53:c1:7a: 64:5f:3b:18:32:b4:b5:98:f2:86:5d:24:ab:03:73:a6:50:1c: bb:34:eb:dd:b6:35:29:1a:9a:a0:58:2f:de:94:ba:01:9a:e4: 24:f0:b7:4b:84:e2:1f:c4:9d:14:19:6e:2b:98:c6:5d:ec:06: fb:2f:d5:51:fc:5e:93:b4:07:17:14:78:6c:85:bb:e7:73:70: 1d:31:4f:2b:f2:e8:34:00:7c:60:87:b0:7e:43:a0:89:f8:2c: 13:19:ad:36:3f:fd:61:b9:f0:e0:92:94:43:79:c5:28:39:69: fe:29:98:73:6e:c4:59:70:4f:91:b7:49:d3:30:f5:3e:18:09: 3f:06:f9:27:39:81:63:b1:c8:d4:80:c1:9e:d9:bc:85:f2:d0: 4f:bf:a3:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLHGJSJBjuH8HulXsxkZxXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOWZjMDExYjVlODg2M2JjZjNiYjcyYWQ3Njk1ZDMxOTc0 MmI4NDQwHhcNMjUxMjIzMTIwODI5WhcNMjUxMjI0MTIwODI5WjAzMTEwLwYDVQQD EygwZWNiY2FjMjk2N2UzZDA3OTQ2NDIxNDY5YjU2MmJhZTg4NzI3OWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztmT3awI2BGXTocwrpjVuLxn0slp m3nhGm4oZlQw6RKSeZbA8jo93ZGDO0Gi1KpmkvqApJYACcSGhtPk89g9zmfm4bpf fS2vLJtCvnpszkzfSja2yiESyitNJn+bZuVEoi+Z/41v7K2TdhCkHJJ8vJCc0R6x D86x+Pzz1dUZWwulsD/1kJ8rI9Ot8ATOy17e3YEc0fVomznFroXUUpfsu3PhDjel RXbW59N92MAp/7KHo8QjTuXFtxrVkFxqPst+r53reYGgr4P8ttR8b2fnbNzdSmQG BeXwX7fOigBDH/117DHspCKf2h671KLK57y8THpdEWISTBfDsmj+urOg8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7LysKWfj0HlGQhRptWK66IcnniMB8GA1UdIwQY MBaAFA+fwBG16IY7zzu3KtdpXTGXQrhEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDVfQUViWG9oanZQTzdjcTEybGRNWmRDdUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zYWJjNzQtYTg0Zi00YzZjLWFmMGQt NzBjNTg5ZGQyMTcxLzEvRDVfQUViWG9oanZQTzdjcTEybGRNWmRDdUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zYWJjNzQtYTg0Zi00YzZjLWFmMGQtNzBjNTg5ZGQyMTcx LzEvRDVfQUViWG9oanZQTzdjcTEybGRNWmRDdUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALsPmLVM Own0kj4DJ3rwERtKirCsnvz6YNhaLlMLwcj5Xcks2QpTdI5k7WRJ6EQw9CY5Gvp6 c9RLQ8fEgRj5FRkGzWsCO7tRUJjyTqyBGPhK5JFmStxqlQwRMQrWO0W7HVK6VymX s4CQU8F6ZF87GDK0tZjyhl0kqwNzplAcuzTr3bY1KRqaoFgv3pS6AZrkJPC3S4Ti H8SdFBluK5jGXewG+y/VUfxek7QHFxR4bIW753NwHTFPK/LoNAB8YIewfkOgifgs ExmtNj/9Ybnw4JKUQ3nFKDlp/imYc27EWXBPkbdJ0zD1PhgJPwb5JzmBY7HI1IDB ntm8hfLQT7+jUQ== -----END CERTIFICATE-----Generated at Tue Dec 23 17:24:20 2025 by rpki-client