This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft File: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft (raw, json) Hash identifier: WPVs9ALXV71HRJzVYKLa2i+MydTN8RFuqW8PBp+XRSI= Subject key identifier: 94:DF:BB:0C:77:D0:2A:99:C5:42:35:D2:AB:39:9F:B1:09:B0:3E:E2 Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46 Certificate issuer: /CN=779fbaaac6541ab318529eb025613c6520e47646 Certificate serial: 019B3E6CC03FFE77BF50661EADF6CA8A657C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft Manifest number: 063B Signing time: Sun 21 Dec 2025 01:01:12 +0000 Manifest this update: Sun 21 Dec 2025 01:01:12 +0000 Manifest next update: Mon 22 Dec 2025 01:01:12 +0000 Files and hashes: 1: bKhEoTi8VyX_Q5KODWRSQwgQwKY.roa (hash: xvVp0HHxMjOmKvNmsan4is7a0Z8jz8EK1PXrOk2MzSo=) 2: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl (hash: Ahs+s/qUwXZfRqgBaaYX4sCxynb7Q6LTdaU+0RVC8h4=) 3: k3MkBKIkrmXV8hBuw2gGPp_sASw.roa (hash: kkGwe02sJUGG5OVjC1fC3C/lnFwMVxsODhInEGGgNMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:c0:3f:fe:77:bf:50:66:1e:ad:f6:ca:8a:65:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646 Validity Not Before: Dec 21 01:01:12 2025 GMT Not After : Dec 22 01:01:12 2025 GMT Subject: CN=94dfbb0c77d02a99c54235d2ab399fb109b03ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e2:6d:6b:97:06:b7:ab:94:48:fe:94:ca:5d: da:0f:e9:a2:b5:3e:21:92:27:42:cf:05:00:de:66: 97:29:dd:83:f9:28:4a:99:69:ac:ec:1a:b5:2b:34: f9:9b:0f:a2:0b:c7:ea:79:4a:e3:33:6a:be:66:2d: 42:e8:2f:91:31:52:e8:b9:a6:ba:f4:0b:bb:b9:e9: 06:75:47:44:6b:3c:6f:d1:84:ee:a3:3d:5c:27:7c: 0a:36:6e:b1:ed:18:93:f1:ba:56:39:2c:01:57:2a: 6a:9e:27:43:6f:38:b6:c2:e2:5a:27:9d:6d:1a:a2: bd:c6:73:21:d3:4f:1c:25:86:5a:ca:16:25:04:a0: 02:36:44:b8:a9:b5:c6:47:53:e1:4b:cb:d9:c5:5b: e9:34:c6:e9:7f:e7:24:72:af:d0:42:fe:82:5b:e0: ff:93:10:71:5b:2d:b6:e7:dd:ec:56:0c:76:b7:fc: d3:0f:8b:e6:3b:4c:e5:e7:65:18:56:0f:85:74:9d: 8a:06:f1:a5:06:1c:b4:07:d2:ad:6c:b0:7c:b3:7d: 33:4c:4d:88:d9:49:3b:db:11:a9:e0:02:4f:8a:78: 42:70:2e:52:d8:0c:50:31:29:df:f9:44:09:a4:1e: c6:aa:42:5d:0f:71:a7:fc:4e:ff:f3:61:f6:ec:c3: 04:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DF:BB:0C:77:D0:2A:99:C5:42:35:D2:AB:39:9F:B1:09:B0:3E:E2 X509v3 Authority Key Identifier: keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:3d:79:d7:64:87:88:7b:b7:ad:34:23:b1:71:fb:8d:db:46: 10:a8:64:ae:ce:1b:ae:7c:ac:23:3b:98:a2:8f:8e:f2:19:58: 79:a3:5a:3a:1f:f2:81:40:8d:ac:e0:9d:48:aa:a4:9a:88:2c: 2a:ce:dd:ec:b1:9d:82:a2:dc:75:c6:7f:8b:03:eb:a9:1f:f5: 96:68:58:b5:b5:e1:68:57:d5:05:3e:0d:00:fc:21:c8:45:da: cd:ee:a2:22:76:7e:2f:69:34:bf:f6:34:af:78:23:ce:94:22: 87:54:1a:c0:ca:b1:95:11:27:fd:5f:30:65:4e:b8:8e:8f:1e: b0:6a:83:7e:35:cf:3d:01:9c:44:c7:6e:2c:0d:2c:4c:2e:9b: b9:0a:f5:a0:6b:2b:c8:6c:58:81:ed:5e:09:49:28:9a:74:63: ad:54:90:ce:df:0b:c8:9b:ad:bf:f9:d2:e2:c7:c5:cb:dc:5d: fe:dc:51:60:8a:f6:ab:89:4b:1c:56:4f:10:09:8a:8f:94:10: be:84:e6:97:33:03:9f:01:22:e1:f1:70:27:b0:10:5d:fd:8f: 44:0c:bd:c2:74:dc:b2:c8:e3:0f:d3:cf:24:11:40:bd:f4:e0: e5:09:ef:9f:a8:a9:5e:f1:26:4b:cb:21:eb:cb:2d:12:94:cb: f7:13:b0:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bMA//ne/UGYerfbKimV8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OWZiYWFhYzY1NDFhYjMxODUyOWViMDI1NjEzYzY1MjBl NDc2NDYwHhcNMjUxMjIxMDEwMTEyWhcNMjUxMjIyMDEwMTEyWjAzMTEwLwYDVQQD Eyg5NGRmYmIwYzc3ZDAyYTk5YzU0MjM1ZDJhYjM5OWZiMTA5YjAzZWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+Jta5cGt6uUSP6Uyl3aD+mitT4h kidCzwUA3maXKd2D+ShKmWms7Bq1KzT5mw+iC8fqeUrjM2q+Zi1C6C+RMVLouaa6 9Au7uekGdUdEazxv0YTuoz1cJ3wKNm6x7RiT8bpWOSwBVypqnidDbzi2wuJaJ51t GqK9xnMh008cJYZayhYlBKACNkS4qbXGR1PhS8vZxVvpNMbpf+ckcq/QQv6CW+D/ kxBxWy22593sVgx2t/zTD4vmO0zl52UYVg+FdJ2KBvGlBhy0B9KtbLB8s30zTE2I 2Uk72xGp4AJPinhCcC5S2AxQMSnf+UQJpB7GqkJdD3Gn/E7/82H27MMENQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTfuwx30CqZxUI10qs5n7EJsD7iMB8GA1UdIwQY MBaAFHefuqrGVBqzGFKesCVhPGUg5HZGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDUtNnFzWlVHck1ZVXA2d0pXRThaU0RrZGtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85ODNiNDctNDdhOS00MjUxLWExMjkt MjAwMjQ5MThlZTY2LzEvZDUtNnFzWlVHck1ZVXA2d0pXRThaU0RrZGtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi85ODNiNDctNDdhOS00MjUxLWExMjktMjAwMjQ5MThlZTY2 LzEvZDUtNnFzWlVHck1ZVXA2d0pXRThaU0RrZGtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArj1512SH iHu3rTQjsXH7jdtGEKhkrs4brnysIzuYoo+O8hlYeaNaOh/ygUCNrOCdSKqkmogs Ks7d7LGdgqLcdcZ/iwPrqR/1lmhYtbXhaFfVBT4NAPwhyEXaze6iInZ+L2k0v/Y0 r3gjzpQih1QawMqxlREn/V8wZU64jo8esGqDfjXPPQGcRMduLA0sTC6buQr1oGsr yGxYge1eCUkomnRjrVSQzt8LyJutv/nS4sfFy9xd/txRYIr2q4lLHFZPEAmKj5QQ voTmlzMDnwEi4fFwJ7AQXf2PRAy9wnTcssjjD9PPJBFAvfTg5Qnvn6ipXvEmS8sh 68stEpTL9xOwlQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:43:42 2025 by rpki-client