This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft File: D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft (raw, json) Hash identifier: Ny5DIvqcZaKJlIJVyoGlhoDqvFuyeRp82WlPpf0TUaE= Subject key identifier: 2E:51:14:1A:AD:9D:E1:1C:19:0A:84:DA:5C:C7:90:AF:58:46:83:DF Authority key identifier: 0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B Certificate issuer: /CN=0f827a5a24e771cc14fa69bb74b3e760167b026b Certificate serial: 019B5788B4095618D3208F45591DF396F99B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft Manifest number: 09EB Signing time: Thu 25 Dec 2025 22:02:15 +0000 Manifest this update: Thu 25 Dec 2025 22:02:15 +0000 Manifest next update: Fri 26 Dec 2025 22:02:15 +0000 Files and hashes: 1: 6C2Szm3cfjp9bAf9_VEG9JmuRyM.roa (hash: m6tO4ROtbLwqmMtYoGkRxelczMRQ44EOZBvyjQVDxjY=) 2: D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl (hash: KncgRa95czzSJLL1WrcBXZ9nCirg/3wAckrTkZ4dBks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:88:b4:09:56:18:d3:20:8f:45:59:1d:f3:96:f9:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f827a5a24e771cc14fa69bb74b3e760167b026b Validity Not Before: Dec 25 22:02:15 2025 GMT Not After : Dec 26 22:02:15 2025 GMT Subject: CN=2e51141aad9de11c190a84da5cc790af584683df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a3:b3:3e:f8:d6:7b:ea:ed:1e:17:f1:90:a3: b1:54:c3:50:47:a7:d1:a9:a1:a0:65:ca:6a:af:fa: 1e:1f:5e:77:ec:62:04:22:b7:93:00:8d:c7:a1:84: 6b:6e:5f:55:5b:b9:82:dc:0d:b8:df:af:a8:fd:5b: da:29:0c:5a:88:36:58:c0:e4:48:aa:86:8b:49:37: aa:e3:88:5e:e3:1f:be:62:b8:98:8c:b1:9b:fd:21: e6:7d:ed:81:b9:ae:0d:b6:9d:01:4d:e5:ab:e6:89: 7b:ae:ec:f1:bb:74:aa:4e:f1:b7:2b:bf:d1:65:98: 01:f0:28:5f:db:09:57:a8:c5:2f:88:d4:83:fb:41: e7:70:5a:57:20:41:d3:ea:95:fd:01:d5:db:24:d5: 25:35:dc:fc:d7:10:7e:08:d8:27:88:06:22:f0:f4: d8:ca:b7:0b:69:93:d0:cf:0d:d0:a8:63:02:bd:06: f4:4b:01:67:3e:f1:56:5e:a8:fb:19:3b:29:44:56: 13:21:dd:56:db:4e:78:c5:4e:fb:a5:0d:f7:75:c6: a4:9e:b0:3f:a9:0c:43:ba:0d:ba:c6:35:01:69:32: 9a:d3:a6:f4:b3:ae:5d:0e:a1:54:e2:55:c6:86:9d: 28:4e:1f:65:96:8a:a6:f4:e3:b2:58:9f:8d:3c:66: 59:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:51:14:1A:AD:9D:E1:1C:19:0A:84:DA:5C:C7:90:AF:58:46:83:DF X509v3 Authority Key Identifier: keyid:0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:3e:a3:28:91:f3:d2:53:c5:d9:ec:8f:7e:30:a7:28:15:b3: 2e:0b:b0:c6:ae:fc:09:ae:99:33:3c:7a:05:f0:64:0d:4b:1a: 60:15:26:ea:c9:59:de:4c:1a:bd:0d:7f:94:f1:ac:93:9e:6d: c7:d2:58:11:6f:88:e5:20:4b:2f:15:5f:cc:c4:76:48:55:3d: 20:81:d3:fa:e1:e1:0c:a1:d1:87:eb:65:30:d0:e3:4c:58:b2: 1a:2f:b6:6d:e4:90:72:f5:c7:99:7f:de:a4:d4:f7:f3:9a:3e: 93:69:1b:b0:e0:79:0e:21:ea:ca:f7:7f:85:b2:49:fb:73:6b: 28:8d:8d:85:b9:17:13:6f:60:0d:02:8a:74:41:4a:ae:6e:92: 22:3a:3f:55:08:8c:4c:11:fe:2c:bd:8b:57:dc:25:85:73:59: 3a:9f:d1:70:0d:74:e8:d7:68:a3:3d:03:5a:13:a7:28:89:4c: eb:b3:bc:3a:a1:14:3e:68:bc:77:bc:de:66:e9:93:05:f2:c1: e6:9b:df:5b:af:07:46:b9:24:60:34:ac:5a:06:8a:dd:c6:d6: c2:fe:44:dd:61:1c:fe:89:fa:15:ff:d0:a7:37:cd:44:28:db: aa:bf:c0:69:b2:7f:b4:85:e0:eb:ee:e9:80:37:58:55:84:86: 1a:31:76:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXiLQJVhjTII9FWR3zlvmbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmODI3YTVhMjRlNzcxY2MxNGZhNjliYjc0YjNlNzYwMTY3 YjAyNmIwHhcNMjUxMjI1MjIwMjE1WhcNMjUxMjI2MjIwMjE1WjAzMTEwLwYDVQQD EygyZTUxMTQxYWFkOWRlMTFjMTkwYTg0ZGE1Y2M3OTBhZjU4NDY4M2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKOzPvjWe+rtHhfxkKOxVMNQR6fR qaGgZcpqr/oeH1537GIEIreTAI3HoYRrbl9VW7mC3A2436+o/VvaKQxaiDZYwORI qoaLSTeq44he4x++YriYjLGb/SHmfe2Bua4Ntp0BTeWr5ol7ruzxu3SqTvG3K7/R ZZgB8Chf2wlXqMUviNSD+0HncFpXIEHT6pX9AdXbJNUlNdz81xB+CNgniAYi8PTY yrcLaZPQzw3QqGMCvQb0SwFnPvFWXqj7GTspRFYTId1W2054xU77pQ33dcaknrA/ qQxDug26xjUBaTKa06b0s65dDqFU4lXGhp0oTh9lloqm9OOyWJ+NPGZZ1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5RFBqtneEcGQqE2lzHkK9YRoPfMB8GA1UdIwQY MBaAFA+Celok53HMFPppu3Sz52AWewJrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDRKNldpVG5jY3dVLW1tN2RMUG5ZQlo3QW1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yNGE2YjMtMmU2MC00NDYzLTkyMGIt Y2JkYWVkMGQwMGFkLzEvRDRKNldpVG5jY3dVLW1tN2RMUG5ZQlo3QW1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8yNGE2YjMtMmU2MC00NDYzLTkyMGItY2JkYWVkMGQwMGFk LzEvRDRKNldpVG5jY3dVLW1tN2RMUG5ZQlo3QW1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfD6jKJHz 0lPF2eyPfjCnKBWzLguwxq78Ca6ZMzx6BfBkDUsaYBUm6slZ3kwavQ1/lPGsk55t x9JYEW+I5SBLLxVfzMR2SFU9IIHT+uHhDKHRh+tlMNDjTFiyGi+2beSQcvXHmX/e pNT385o+k2kbsOB5DiHqyvd/hbJJ+3NrKI2NhbkXE29gDQKKdEFKrm6SIjo/VQiM TBH+LL2LV9wlhXNZOp/RcA106Ndooz0DWhOnKIlM67O8OqEUPmi8d7zeZumTBfLB 5pvfW68HRrkkYDSsWgaK3cbWwv5E3WEc/on6Ff/QpzfNRCjbqr/AabJ/tIXg6+7p gDdYVYSGGjF2gw== -----END CERTIFICATE-----Generated at Thu Dec 25 23:51:55 2025 by rpki-client