This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft File: dOEz6h5A_BPgdOMncQpTRKlgtcA.mft (raw, json) Hash identifier: EW6pXkWoNFQhWc/KxToqppBRytV340k3ZHyhhGPeY9Y= Subject key identifier: 3D:A7:C7:B6:DE:9D:60:89:7D:90:A7:6D:91:A7:BD:40:59:A6:58:14 Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0 Certificate issuer: /CN=74e133ea1e40fc13e074e327710a5344a960b5c0 Certificate serial: 019B3AFDB2E657438FA228D1C60BB1D24337 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft Manifest number: 0E36 Signing time: Sat 20 Dec 2025 09:01:03 +0000 Manifest this update: Sat 20 Dec 2025 09:01:03 +0000 Manifest next update: Sun 21 Dec 2025 09:01:03 +0000 Files and hashes: 1: XXhZSJTw-3dSmsRY9bvXQqHBaIs.roa (hash: mmW0AxSNYmhmTbAA4XApc0Tjpzzlw3yy/NM/Jy4hxuI=) 2: dOEz6h5A_BPgdOMncQpTRKlgtcA.crl (hash: DrpFhbPmIkWSbKBIBRz6kvvj3c2anZwaCLvN2qQ4TyM=) 3: lQpPjj9gpOYnRRV52S0ec3Spick.roa (hash: 2/R15nQqw+pyTSeVtt80lTdeScEa1kOW3xe+Ueb0Hdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:b2:e6:57:43:8f:a2:28:d1:c6:0b:b1:d2:43:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0 Validity Not Before: Dec 20 09:01:03 2025 GMT Not After : Dec 21 09:01:03 2025 GMT Subject: CN=3da7c7b6de9d60897d90a76d91a7bd4059a65814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7d:0b:8e:8f:e2:0b:71:63:9a:85:7b:07:47: 39:0f:32:7f:86:40:30:39:04:19:26:12:15:13:5f: 4d:1c:6f:08:0e:ce:79:3f:4c:3e:e1:9e:53:03:51: f4:3a:33:7b:9c:85:da:29:96:6f:dd:90:74:d9:7a: bf:0c:37:51:db:9a:f3:7c:3d:69:43:52:0b:2f:28: f3:f0:58:3d:a0:b9:da:1d:95:07:49:e0:44:a5:f9: 68:a3:10:6c:bc:f8:1f:0a:84:3e:ad:85:99:b4:59: ac:c7:67:5d:d6:32:32:93:9b:37:8b:8b:35:3e:73: b6:79:51:3c:10:98:0a:a1:47:2f:e5:98:78:e5:ee: 0e:47:95:54:0a:29:a9:ef:ce:8d:bf:45:7f:1f:9b: c5:9d:df:c6:0a:04:57:e8:a4:d6:c6:14:e4:cf:5f: f0:b4:11:4a:13:17:13:4c:14:94:67:fc:10:45:de: 1e:9a:1a:8d:1d:57:62:5a:87:2e:c1:3a:ee:08:53: 2d:b2:92:1d:1a:c3:6b:41:f7:58:44:d7:e7:27:01: 05:e5:ed:14:5a:47:d2:46:8a:c8:d9:4a:9d:e3:f0: c6:72:c0:f6:d6:a1:04:41:b8:84:8c:e1:03:d2:e0: 21:48:fd:62:dc:bc:a1:c0:68:93:3f:21:bd:b9:18: 23:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A7:C7:B6:DE:9D:60:89:7D:90:A7:6D:91:A7:BD:40:59:A6:58:14 X509v3 Authority Key Identifier: keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:aa:6e:68:de:8f:02:2f:66:23:9b:77:47:2c:a8:71:19:3f: f6:69:14:0a:49:90:cb:af:76:3b:25:60:9f:c4:4e:77:74:01: 0e:d0:40:86:d7:5f:28:93:05:54:c6:7f:84:e7:c9:45:bf:8c: b4:95:b3:b2:4d:6b:f7:00:fc:07:41:08:03:48:96:b0:7a:8f: f3:30:15:35:ea:be:c3:7b:ae:2b:bb:6c:94:08:07:d7:ca:cd: d8:a4:bd:c4:75:3b:61:6b:ff:b4:fd:ca:40:3f:63:9d:47:a1: 3d:7f:1f:f8:d2:23:da:be:cc:a5:23:ed:bb:30:0f:f4:9f:cc: 26:94:f5:c1:b7:0c:00:97:a1:60:49:d8:c1:34:bd:01:44:fa: 69:75:c9:db:56:58:12:15:cb:0d:12:67:0c:77:d1:f8:78:ff: 0b:c9:82:22:a4:8f:1c:da:0b:1d:8d:45:cd:62:18:84:bb:fa: 19:af:66:54:df:94:6e:16:2b:d2:0b:b7:c2:a4:9c:e1:fd:c8: 6a:f2:8f:55:a7:04:81:f8:96:ed:96:72:ea:78:3e:c2:ab:44: 77:d8:75:a2:f7:01:fe:5e:21:b6:f3:49:f6:a0:20:f3:21:cd: 18:0e:7e:8d:6d:d1:0b:3b:3d:6f:dc:c3:24:04:f3:ab:f1:0c: 14:aa:a0:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/bLmV0OPoijRxgux0kM3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTEzM2VhMWU0MGZjMTNlMDc0ZTMyNzcxMGE1MzQ0YTk2 MGI1YzAwHhcNMjUxMjIwMDkwMTAzWhcNMjUxMjIxMDkwMTAzWjAzMTEwLwYDVQQD EygzZGE3YzdiNmRlOWQ2MDg5N2Q5MGE3NmQ5MWE3YmQ0MDU5YTY1ODE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn0Ljo/iC3FjmoV7B0c5DzJ/hkAw OQQZJhIVE19NHG8IDs55P0w+4Z5TA1H0OjN7nIXaKZZv3ZB02Xq/DDdR25rzfD1p Q1ILLyjz8Fg9oLnaHZUHSeBEpflooxBsvPgfCoQ+rYWZtFmsx2dd1jIyk5s3i4s1 PnO2eVE8EJgKoUcv5Zh45e4OR5VUCimp786Nv0V/H5vFnd/GCgRX6KTWxhTkz1/w tBFKExcTTBSUZ/wQRd4emhqNHVdiWocuwTruCFMtspIdGsNrQfdYRNfnJwEF5e0U WkfSRorI2Uqd4/DGcsD21qEEQbiEjOED0uAhSP1i3LyhwGiTPyG9uRgj5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2nx7benWCJfZCnbZGnvUBZplgUMB8GA1UdIwQY MBaAFHThM+oeQPwT4HTjJ3EKU0SpYLXAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9FejZoNUFfQlBnZE9NbmNRcFRSS2xndGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xZjU1ODctY2I5Mi00OTE3LThjZjMt MmNiOWUyMTcyZjk3LzEvZE9FejZoNUFfQlBnZE9NbmNRcFRSS2xndGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8xZjU1ODctY2I5Mi00OTE3LThjZjMtMmNiOWUyMTcyZjk3 LzEvZE9FejZoNUFfQlBnZE9NbmNRcFRSS2xndGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKpuaN6P Ai9mI5t3RyyocRk/9mkUCkmQy692OyVgn8ROd3QBDtBAhtdfKJMFVMZ/hOfJRb+M tJWzsk1r9wD8B0EIA0iWsHqP8zAVNeq+w3uuK7tslAgH18rN2KS9xHU7YWv/tP3K QD9jnUehPX8f+NIj2r7MpSPtuzAP9J/MJpT1wbcMAJehYEnYwTS9AUT6aXXJ21ZY EhXLDRJnDHfR+Hj/C8mCIqSPHNoLHY1FzWIYhLv6Ga9mVN+UbhYr0gu3wqSc4f3I avKPVacEgfiW7ZZy6ng+wqtEd9h1ovcB/l4htvNJ9qAg8yHNGA5+jW3RCzs9b9zD JATzq/EMFKqggA== -----END CERTIFICATE-----Generated at Sat Dec 20 14:04:04 2025 by rpki-client