This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft File: d0TGtvujc4EeAL7khOIkxrbiP9I.mft (raw, json) Hash identifier: dlNYTN2yuqq0yDGq/EClrckRVVUV5pDPB84smoG2TSA= Subject key identifier: 9E:09:04:9B:E1:1B:35:CD:E5:F5:4D:97:32:D3:2B:59:65:1A:C8:7E Authority key identifier: 77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2 Certificate issuer: /CN=7744c6b6fba373811e00bee484e224c6b6e23fd2 Certificate serial: 019B650DB8B34DF61FEF5C5E40FF22412521 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft Manifest number: 179D Signing time: Sun 28 Dec 2025 13:02:36 +0000 Manifest this update: Sun 28 Dec 2025 13:02:36 +0000 Manifest next update: Mon 29 Dec 2025 13:02:36 +0000 Files and hashes: 1: MPxrAGmlXi-R_-aAmj075zLDNVQ.roa (hash: u+cdaGdIb9sz6WUdHND28+hGiYkwyguJ2P/NJZ6f3PE=) 2: d0TGtvujc4EeAL7khOIkxrbiP9I.crl (hash: HfRs/rY6HuyxwwkFn7joZoMelOVBm4RTeVlNpI3jIcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0d:b8:b3:4d:f6:1f:ef:5c:5e:40:ff:22:41:25:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7744c6b6fba373811e00bee484e224c6b6e23fd2 Validity Not Before: Dec 28 13:02:36 2025 GMT Not After : Dec 29 13:02:36 2025 GMT Subject: CN=9e09049be11b35cde5f54d9732d32b59651ac87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ba:71:1e:db:14:62:73:bc:1e:5d:35:70:a4: 71:8f:19:a8:e2:77:55:c7:fe:a8:e7:af:f9:c5:80: 05:fc:ee:9a:25:0c:9c:b6:c2:17:61:2a:a4:25:12: 5b:70:6b:6d:60:e2:79:5d:5a:b6:27:9a:f4:ce:d3: b7:8b:ce:92:0e:ab:1f:65:a8:d1:4f:d9:d2:dd:b8: ff:cd:e9:0c:82:f0:d8:9d:c1:d4:56:a4:df:91:90: 92:40:c1:16:b0:4d:a9:03:57:51:92:e5:eb:19:42: 20:93:48:19:98:42:3c:0a:97:61:4b:14:7f:92:de: 88:81:ba:c9:c4:40:86:2f:64:dd:07:43:f0:db:47: 25:10:7d:49:ff:08:ae:a9:86:c5:fd:b6:5c:71:3b: 4e:46:fd:6e:fc:94:6c:cf:90:0a:31:39:0f:51:97: 35:d0:66:db:bf:a2:da:2c:34:11:ff:07:38:7e:65: 64:30:23:0b:87:d9:cf:d3:51:f8:cf:3f:4c:f8:3a: 85:a0:db:b2:aa:70:3b:75:44:3e:60:02:79:42:14: 54:77:f5:48:58:1b:16:9b:f7:4b:3f:ad:3b:56:49: cb:3f:0f:f1:df:da:09:4a:d3:27:0c:38:63:1e:34: d7:8b:47:91:55:ba:9d:00:5c:d3:ff:73:fd:51:19: 1f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:09:04:9B:E1:1B:35:CD:E5:F5:4D:97:32:D3:2B:59:65:1A:C8:7E X509v3 Authority Key Identifier: keyid:77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:bb:2b:b4:c4:e0:20:56:0a:41:f2:d6:87:06:af:93:ed:79: e2:1f:48:82:37:77:e5:30:d4:72:8d:a8:a5:a0:47:77:f2:9b: 71:b6:d6:c2:a6:7f:41:9a:b7:68:b6:54:1d:94:66:48:b0:17: 71:65:54:55:55:45:f8:f3:c4:ed:e3:1c:7a:08:3d:c2:06:62: 63:48:0a:3d:a6:73:ef:d2:c1:c4:96:da:86:2b:01:f9:41:36: 84:37:67:44:95:2f:1e:29:a3:52:cf:29:d3:6c:02:8a:ef:21: 5b:a5:63:36:cf:d0:0d:2a:0d:21:51:94:54:30:8f:48:2a:2a: ea:68:79:56:d7:a4:ae:9e:08:52:05:35:6a:0d:70:64:b6:43: f4:83:ea:6a:d4:bf:89:61:15:c5:28:cc:fb:97:f8:53:5c:53: ca:f8:87:7f:ed:10:64:53:30:c1:d6:a2:ae:23:58:ea:c2:0a: b2:30:74:4d:df:cd:8d:f6:01:c1:d6:a5:84:a9:c6:25:54:14: 98:f9:ef:c6:6d:8a:f1:25:a5:7c:37:7e:5e:0a:96:76:62:7d: e2:06:d1:85:e6:13:a8:36:57:86:ee:64:00:f9:bd:ec:3e:45: 6d:a3:c6:dd:00:47:c6:82:4a:1e:be:b0:86:83:a5:89:e5:e8: 50:3e:8b:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDbizTfYf71xeQP8iQSUhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NDRjNmI2ZmJhMzczODExZTAwYmVlNDg0ZTIyNGM2YjZl MjNmZDIwHhcNMjUxMjI4MTMwMjM2WhcNMjUxMjI5MTMwMjM2WjAzMTEwLwYDVQQD Eyg5ZTA5MDQ5YmUxMWIzNWNkZTVmNTRkOTczMmQzMmI1OTY1MWFjODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57pxHtsUYnO8Hl01cKRxjxmo4ndV x/6o56/5xYAF/O6aJQyctsIXYSqkJRJbcGttYOJ5XVq2J5r0ztO3i86SDqsfZajR T9nS3bj/zekMgvDYncHUVqTfkZCSQMEWsE2pA1dRkuXrGUIgk0gZmEI8CpdhSxR/ kt6IgbrJxECGL2TdB0Pw20clEH1J/wiuqYbF/bZccTtORv1u/JRsz5AKMTkPUZc1 0Gbbv6LaLDQR/wc4fmVkMCMLh9nP01H4zz9M+DqFoNuyqnA7dUQ+YAJ5QhRUd/VI WBsWm/dLP607VknLPw/x39oJStMnDDhjHjTXi0eRVbqdAFzT/3P9URkf8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4JBJvhGzXN5fVNlzLTK1llGsh+MB8GA1UdIwQY MBaAFHdExrb7o3OBHgC+5ITiJMa24j/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDBUR3R2dWpjNEVlQUw3a2hPSWt4cmJpUDlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83NDRkZjMtOGUyOS00NThiLWE0NTkt OGY4Yzg5MjI2ZTNlLzEvZDBUR3R2dWpjNEVlQUw3a2hPSWt4cmJpUDlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83NDRkZjMtOGUyOS00NThiLWE0NTktOGY4Yzg5MjI2ZTNl LzEvZDBUR3R2dWpjNEVlQUw3a2hPSWt4cmJpUDlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbsrtMTg IFYKQfLWhwavk+154h9Igjd35TDUco2opaBHd/KbcbbWwqZ/QZq3aLZUHZRmSLAX cWVUVVVF+PPE7eMcegg9wgZiY0gKPaZz79LBxJbahisB+UE2hDdnRJUvHimjUs8p 02wCiu8hW6VjNs/QDSoNIVGUVDCPSCoq6mh5Vtekrp4IUgU1ag1wZLZD9IPqatS/ iWEVxSjM+5f4U1xTyviHf+0QZFMwwdairiNY6sIKsjB0Td/NjfYBwdalhKnGJVQU mPnvxm2K8SWlfDd+XgqWdmJ94gbRheYTqDZXhu5kAPm97D5FbaPG3QBHxoJKHr6w hoOlieXoUD6Lmg== -----END CERTIFICATE-----Generated at Sun Dec 28 20:16:26 2025 by rpki-client