This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft File: druWg5UW9vs1BsYgZNY9YoeaUnc.mft (raw, json) Hash identifier: 5HIA5nkpgV7aQYHB72+f03fUNADLrDGoi8oZ6Z4S/rA= Subject key identifier: 64:BD:DD:48:77:BD:2F:06:12:9C:42:0E:01:9E:EB:59:2C:9C:B0:3E Authority key identifier: 76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77 Certificate issuer: /CN=76bb96839516f6fb3506c62064d63d62879a5277 Certificate serial: 019B4E1652437EA646C7370516AA8CEB23AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft Manifest number: 11A0 Signing time: Wed 24 Dec 2025 02:00:44 +0000 Manifest this update: Wed 24 Dec 2025 02:00:44 +0000 Manifest next update: Thu 25 Dec 2025 02:00:44 +0000 Files and hashes: 1: A0Dli097tMkIVnJa3m1bqPYzScQ.roa (hash: xNtn+JNQ7hliFuQK823llLTpPPrEWU/YIk1KW2YsDWg=) 2: druWg5UW9vs1BsYgZNY9YoeaUnc.crl (hash: LV2Axa/Cohf4nniXE73oLbiztXbt+VA2rrNEgsqju3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 02:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:52:43:7e:a6:46:c7:37:05:16:aa:8c:eb:23:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76bb96839516f6fb3506c62064d63d62879a5277 Validity Not Before: Dec 24 02:00:44 2025 GMT Not After : Dec 25 02:00:44 2025 GMT Subject: CN=64bddd4877bd2f06129c420e019eeb592c9cb03e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7e:06:d4:a9:b2:fc:2c:3c:07:23:d9:3e:fb: e6:b2:3c:f4:5a:48:1a:fd:60:66:0f:37:5f:23:0e: 66:65:f2:55:2e:13:36:d8:bf:c9:cc:f3:53:8c:5f: d7:75:28:4a:70:e0:1f:c7:f4:a3:f3:77:a8:9f:d3: b7:5e:61:12:ca:4d:56:c9:e0:48:68:50:84:3f:13: 57:5b:d9:cc:3c:09:b8:dd:21:5c:c9:b9:89:92:c2: c8:5f:10:97:9d:52:d0:73:62:c0:7d:13:b8:42:ab: 81:97:b4:bd:2a:f9:dc:da:aa:7a:69:18:95:87:1e: 6e:c2:5d:93:9e:dc:25:e7:90:6e:38:36:c4:e7:e4: 12:f0:67:f8:56:4a:5d:e2:aa:19:49:bd:04:d8:78: c2:c5:6c:08:30:c6:67:eb:a4:2a:92:b8:0b:cb:90: 22:de:15:d9:a5:5e:7e:8d:a1:81:89:68:35:30:0c: 5a:03:9a:18:a1:dd:3e:b2:00:ef:8d:d0:5b:8a:20: 81:f9:eb:e4:1c:91:1f:f5:3b:8b:83:13:19:10:d7: c8:97:a5:8e:73:e4:7e:a8:03:90:9c:4f:4c:d8:e2: 09:97:c4:cc:9a:b8:e5:ea:0e:08:2c:5d:fc:b5:16: 1f:29:f2:e6:47:0d:d1:66:c3:f4:4f:74:15:b0:2d: b0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BD:DD:48:77:BD:2F:06:12:9C:42:0E:01:9E:EB:59:2C:9C:B0:3E X509v3 Authority Key Identifier: keyid:76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:c0:4b:17:b8:da:62:45:47:13:da:08:8d:f1:99:03:87:69: db:cd:d5:93:5a:b3:85:53:1a:b7:29:07:50:c4:22:f2:4f:da: 50:df:1f:37:c7:4e:de:37:e6:7d:99:5e:67:4c:88:08:42:a5: 16:5c:9c:75:dd:48:70:54:9e:ae:a2:d2:02:cc:1f:f1:d7:ba: 3b:1c:f0:ad:2e:6c:0d:cd:d5:ec:c8:66:25:cf:cc:54:e9:7f: d1:49:b9:15:d4:32:6e:af:cd:a5:c5:72:36:05:98:32:93:a7: e7:3d:2a:cc:d4:8f:6a:b7:36:fe:96:58:71:19:06:bc:bf:65: a0:02:5e:08:95:f8:a3:b8:be:a8:7c:b0:a1:16:67:86:dd:1f: 4e:59:b4:2a:5c:e0:9c:e5:22:6c:78:a6:e9:8b:c4:d2:4c:4c: 86:01:41:45:2c:84:e3:5e:30:3c:0d:c2:1c:a8:33:15:d9:cb: bc:f1:16:5f:9e:63:d7:40:f0:96:e8:16:3e:43:0b:2f:5e:ed: 09:57:68:05:94:9b:ff:12:43:d3:16:03:40:b0:6b:6f:62:45: 76:9b:07:3a:80:14:48:d1:0e:00:48:e1:62:ab:6f:c6:e0:b2: f4:d8:bd:0b:fb:87:a4:41:f0:ad:57:1e:32:2b:72:79:29:82: 16:bc:ac:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFlJDfqZGxzcFFqqM6yOsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YmI5NjgzOTUxNmY2ZmIzNTA2YzYyMDY0ZDYzZDYyODc5 YTUyNzcwHhcNMjUxMjI0MDIwMDQ0WhcNMjUxMjI1MDIwMDQ0WjAzMTEwLwYDVQQD Eyg2NGJkZGQ0ODc3YmQyZjA2MTI5YzQyMGUwMTllZWI1OTJjOWNiMDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH4G1Kmy/Cw8ByPZPvvmsjz0Wkga /WBmDzdfIw5mZfJVLhM22L/JzPNTjF/XdShKcOAfx/Sj83eon9O3XmESyk1WyeBI aFCEPxNXW9nMPAm43SFcybmJksLIXxCXnVLQc2LAfRO4QquBl7S9Kvnc2qp6aRiV hx5uwl2Tntwl55BuODbE5+QS8Gf4Vkpd4qoZSb0E2HjCxWwIMMZn66QqkrgLy5Ai 3hXZpV5+jaGBiWg1MAxaA5oYod0+sgDvjdBbiiCB+evkHJEf9TuLgxMZENfIl6WO c+R+qAOQnE9M2OIJl8TMmrjl6g4ILF38tRYfKfLmRw3RZsP0T3QVsC2wmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGS93Uh3vS8GEpxCDgGe61ksnLA+MB8GA1UdIwQY MBaAFHa7loOVFvb7NQbGIGTWPWKHmlJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNjZhMzUtZjZiMi00ZTNiLWE0M2Et MThlOGI5ODE0Njk1LzEvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lNjZhMzUtZjZiMi00ZTNiLWE0M2EtMThlOGI5ODE0Njk1 LzEvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8BLF7ja YkVHE9oIjfGZA4dp283Vk1qzhVMatykHUMQi8k/aUN8fN8dO3jfmfZleZ0yICEKl Flycdd1IcFSerqLSAswf8de6OxzwrS5sDc3V7MhmJc/MVOl/0Um5FdQybq/NpcVy NgWYMpOn5z0qzNSParc2/pZYcRkGvL9loAJeCJX4o7i+qHywoRZnht0fTlm0Klzg nOUibHim6YvE0kxMhgFBRSyE414wPA3CHKgzFdnLvPEWX55j10DwlugWPkMLL17t CVdoBZSb/xJD0xYDQLBrb2JFdpsHOoAUSNEOAEjhYqtvxuCy9Ni9C/uHpEHwrVce MityeSmCFrys6w== -----END CERTIFICATE-----Generated at Wed Dec 24 10:32:33 2025 by rpki-client