This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft File: DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft (raw, json) Hash identifier: tM1oSN0uUJuYpVyoeZd42VCEGVjpI1R18Yq5rvR5Do0= Subject key identifier: 18:38:CA:40:9A:05:4F:9C:2D:F3:9B:CB:7E:5E:37:77:6A:BD:98:21 Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E Certificate issuer: /CN=0c4579a4028829d37acac65f66c056063251e57e Certificate serial: 019B2D0AE3276EA112AE3F1E1563AEBBC367 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft Manifest number: 0EAF Signing time: Wed 17 Dec 2025 16:00:46 +0000 Manifest this update: Wed 17 Dec 2025 16:00:46 +0000 Manifest next update: Thu 18 Dec 2025 16:00:46 +0000 Files and hashes: 1: DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl (hash: BKVEy1Gp0KzkqpvfwzIVDD5IpHfGRB55edCpu2sxs5w=) 2: fzCVh6B_DKQwB3K_lMMIaHfyrF8.roa (hash: ywjvOQhNwUvuKUliKOgNli6M3ye5boySGrRRcKij+48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0a:e3:27:6e:a1:12:ae:3f:1e:15:63:ae:bb:c3:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e Validity Not Before: Dec 17 16:00:46 2025 GMT Not After : Dec 18 16:00:46 2025 GMT Subject: CN=1838ca409a054f9c2df39bcb7e5e37776abd9821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:42:35:f5:58:d3:5d:a9:37:3c:d9:35:2f: 08:81:00:34:9f:0f:21:e1:b4:21:d7:e4:cb:9f:27: ae:c2:39:f0:64:3d:79:3c:48:2f:08:de:bb:fc:57: c7:9d:0e:ea:01:ef:6f:af:b6:7f:1e:84:d3:c3:7d: 6d:45:01:2c:0d:e5:72:9c:39:00:5c:26:7d:1c:8f: 44:34:3b:63:30:f8:cd:f8:61:71:de:e0:b7:11:e7: d6:6d:04:2f:4a:42:37:7e:ad:fd:87:c1:9e:f8:29: 39:bc:c2:81:27:0b:26:12:f4:ca:f5:c3:ab:6c:2f: c0:eb:2c:48:62:7f:2f:8b:40:16:87:55:3a:e4:5c: 4b:19:4a:5d:46:9f:ca:45:ae:2e:85:c8:a7:c7:f6: 2c:68:90:70:c5:f5:2a:63:14:c8:00:a9:bb:9b:be: fe:ba:31:3a:1e:05:e5:75:86:27:dd:ed:ea:d3:fd: 84:7a:9d:10:cc:94:02:28:7d:04:53:30:98:32:7d: b1:41:98:9f:0c:f0:44:79:08:7f:de:fe:40:78:81: 0d:22:41:78:4a:02:9d:27:39:3d:2e:79:10:7e:7a: de:8a:bf:94:c9:87:a8:4c:78:e8:1e:97:1e:79:3a: c9:66:07:28:10:25:f1:d5:18:59:aa:45:ba:3b:4f: 29:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:38:CA:40:9A:05:4F:9C:2D:F3:9B:CB:7E:5E:37:77:6A:BD:98:21 X509v3 Authority Key Identifier: keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e8:28:b2:7d:3a:8f:46:9f:42:38:59:fa:f5:3e:8a:95:60: b6:34:c2:5e:a1:2d:45:8f:48:b5:52:c9:17:51:e0:dd:2b:3b: cb:87:fd:77:9d:7d:91:af:f8:bc:82:9b:db:8d:a8:18:8e:2a: 6c:29:67:de:9a:fa:65:05:f9:21:36:53:95:7d:bc:fe:1e:a9: bb:a1:38:dd:75:c4:e5:ab:e4:61:bf:af:72:a4:65:06:22:50: cf:22:bb:2a:7f:fd:f4:1a:11:45:f6:5b:b5:87:65:8e:b4:f0: 4c:55:85:1f:e0:5c:4a:45:a3:be:05:19:46:f2:d7:4a:20:46: dd:11:c1:ef:0f:b8:0c:b6:04:a1:aa:ea:7c:49:9c:ad:bf:a2: 1a:69:ac:a1:bf:38:ff:8f:a2:9d:46:a2:f3:59:7a:9b:a7:fe: 5f:08:71:a3:76:b7:70:4e:cb:1d:ab:ad:79:c2:1e:2d:12:13: 59:5d:f5:69:e0:da:3f:26:86:f5:ad:63:8a:06:8f:95:4c:59: e1:e6:41:a2:23:0b:4c:59:1d:50:d3:dd:d2:9b:c6:d6:c9:16: 5c:68:e1:44:77:83:81:55:52:a3:87:97:d6:3a:54:0b:d3:bb: 1f:cf:e5:58:ef:ab:0c:36:48:b5:98:1c:d2:e2:87:21:42:db: fb:bb:29:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstCuMnbqESrj8eFWOuu8NnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNDU3OWE0MDI4ODI5ZDM3YWNhYzY1ZjY2YzA1NjA2MzI1 MWU1N2UwHhcNMjUxMjE3MTYwMDQ2WhcNMjUxMjE4MTYwMDQ2WjAzMTEwLwYDVQQD EygxODM4Y2E0MDlhMDU0ZjljMmRmMzliY2I3ZTVlMzc3NzZhYmQ5ODIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiNCNfVY012pNzzZNS8IgQA0nw8h 4bQh1+TLnyeuwjnwZD15PEgvCN67/FfHnQ7qAe9vr7Z/HoTTw31tRQEsDeVynDkA XCZ9HI9ENDtjMPjN+GFx3uC3EefWbQQvSkI3fq39h8Ge+Ck5vMKBJwsmEvTK9cOr bC/A6yxIYn8vi0AWh1U65FxLGUpdRp/KRa4uhcinx/YsaJBwxfUqYxTIAKm7m77+ ujE6HgXldYYn3e3q0/2Eep0QzJQCKH0EUzCYMn2xQZifDPBEeQh/3v5AeIENIkF4 SgKdJzk9LnkQfnreir+UyYeoTHjoHpceeTrJZgcoECXx1RhZqkW6O08pnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBg4ykCaBU+cLfOby35eN3dqvZghMB8GA1UdIwQY MBaAFAxFeaQCiCnTesrGX2bAVgYyUeV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lZGFlYjUtNWU2ZS00MTFiLTk5Y2It M2M1MDE4MDc4MGIwLzEvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9lZGFlYjUtNWU2ZS00MTFiLTk5Y2ItM2M1MDE4MDc4MGIw LzEvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOgosn06 j0afQjhZ+vU+ipVgtjTCXqEtRY9ItVLJF1Hg3Ss7y4f9d519ka/4vIKb242oGI4q bCln3pr6ZQX5ITZTlX28/h6pu6E43XXE5avkYb+vcqRlBiJQzyK7Kn/99BoRRfZb tYdljrTwTFWFH+BcSkWjvgUZRvLXSiBG3RHB7w+4DLYEoarqfEmcrb+iGmmsob84 /4+inUai81l6m6f+Xwhxo3a3cE7LHautecIeLRITWV31aeDaPyaG9a1jigaPlUxZ 4eZBoiMLTFkdUNPd0pvG1skWXGjhRHeDgVVSo4eX1jpUC9O7H8/lWO+rDDZItZgc 0uKHIULb+7spYw== -----END CERTIFICATE-----Generated at Wed Dec 17 20:48:02 2025 by rpki-client