This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft File: dADVATwShSJCNDCTy_UUjU6uqvk.mft (raw, json) Hash identifier: 88gA0hESLrZHxTdJ7MyvZpAPwNm6mDqZdLUeWb0cT8I= Subject key identifier: 5E:66:D2:76:81:00:8F:79:3B:46:26:AF:21:0F:7D:7E:A5:37:68:39 Authority key identifier: 74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9 Certificate issuer: /CN=7400d5013c12852242343093cbf5148d4eaeaaf9 Certificate serial: 019B6467D0E24B46E387398BE8E76D669209 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft Manifest number: 17A5 Signing time: Sun 28 Dec 2025 10:01:23 +0000 Manifest this update: Sun 28 Dec 2025 10:01:23 +0000 Manifest next update: Mon 29 Dec 2025 10:01:23 +0000 Files and hashes: 1: dADVATwShSJCNDCTy_UUjU6uqvk.crl (hash: FdnmWVIjppr9DuEiRfwMhWvaP0+GDzpFxdY8/3lXPr4=) 2: oOVgWaswWK83lx4bnEkW14OhMKs.roa (hash: YCwyUpEoklqLQv5It7tbrU/sEyoMqDnHIRoTVUyhsOs=) 3: rwCcNCLFriBxsD0bJomvJ0xlQ9c.roa (hash: PsKxZJF6yIek93GITDSEpyvFVPew4gbr5lDkhG4UbEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:64:67:d0:e2:4b:46:e3:87:39:8b:e8:e7:6d:66:92:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7400d5013c12852242343093cbf5148d4eaeaaf9 Validity Not Before: Dec 28 10:01:23 2025 GMT Not After : Dec 29 10:01:23 2025 GMT Subject: CN=5e66d27681008f793b4626af210f7d7ea5376839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:04:ac:c5:39:49:32:f1:1a:1b:ac:ed:7e:fd: 9e:1d:e0:73:82:f6:47:83:c4:34:a0:d6:33:5d:aa: 42:68:c1:bc:5f:ba:2b:1c:f9:d6:7c:fd:b6:b5:f3: ea:ee:61:b4:86:47:a7:64:93:e9:a9:ee:83:bf:99: 88:be:54:db:4f:1c:75:21:91:69:ae:e8:2d:71:80: fd:6c:eb:7d:a9:4d:45:06:20:63:34:92:48:cb:e0: c0:68:46:bc:b3:4c:ad:eb:f2:a7:78:66:8f:b2:61: 87:07:98:b3:a0:f8:e7:37:a5:64:97:72:d9:d0:2b: 0e:25:a1:1d:0b:e4:8a:96:8a:7b:8e:b6:68:51:46: e4:a1:d8:97:fc:1f:c6:c5:0b:03:a5:9a:8a:34:1b: 49:b1:55:ac:ec:0e:d0:b1:fa:94:92:3e:25:ba:1a: 05:bd:41:84:93:32:d0:86:a8:bb:cb:9c:72:f6:6b: d1:c9:76:4c:36:d5:6d:da:a6:81:49:6e:6e:7a:e8: 6f:39:9b:a3:d4:87:a3:ed:6c:8e:2a:10:48:4b:ff: 0d:18:63:ba:97:68:0f:b6:0e:fd:7b:55:82:c3:eb: af:f1:9b:44:cb:f3:42:75:1d:de:98:11:5d:76:dc: f4:1d:76:52:b3:a4:7f:15:19:9d:86:02:50:c5:b2: c5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:66:D2:76:81:00:8F:79:3B:46:26:AF:21:0F:7D:7E:A5:37:68:39 X509v3 Authority Key Identifier: keyid:74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:c0:7e:b3:79:36:37:87:43:71:ce:3f:ae:6d:ba:8f:bb:2a: 87:d0:17:c1:6d:db:48:ed:89:f6:d7:ce:13:ee:d0:be:e4:4d: 12:e2:23:00:a4:fb:3b:ff:69:22:31:38:6b:26:5a:b8:ca:ad: 31:fa:f4:2d:1b:06:e4:ab:85:1a:29:26:1d:3f:54:e1:9a:05: 95:66:f3:f3:8c:b7:32:b9:9c:39:ba:19:f2:2e:ba:ca:97:45: 84:3e:68:f2:88:b8:1d:d9:10:5e:ae:5f:b3:7a:a2:44:d0:f6: 69:af:eb:a7:11:9b:20:fb:f0:2a:cb:56:79:02:02:ba:1e:c7: db:71:45:b6:d5:e3:53:36:6d:34:bf:f3:cb:84:dd:ec:35:a8: a2:4b:6b:57:2e:ac:38:83:cf:28:c5:18:f3:e3:5d:ac:1a:9f: 4a:e5:0d:3b:8f:bc:a3:f1:5f:f4:7a:b7:91:ed:cd:43:d6:c0: e8:10:9c:6b:9a:e5:28:5f:88:d0:87:96:2f:79:ba:47:4c:26: 7b:87:4b:72:01:6f:fd:41:05:27:d6:98:2d:7d:51:0a:e0:c9: 31:01:cb:eb:72:18:f1:bd:bc:05:40:74:14:16:d9:79:ba:37: ef:26:69:08:c1:9a:0c:8c:c7:d6:52:70:6e:be:91:66:6b:75: a0:3c:93:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtkZ9DiS0bjhzmL6OdtZpIJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MDBkNTAxM2MxMjg1MjI0MjM0MzA5M2NiZjUxNDhkNGVh ZWFhZjkwHhcNMjUxMjI4MTAwMTIzWhcNMjUxMjI5MTAwMTIzWjAzMTEwLwYDVQQD Eyg1ZTY2ZDI3NjgxMDA4Zjc5M2I0NjI2YWYyMTBmN2Q3ZWE1Mzc2ODM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtASsxTlJMvEaG6ztfv2eHeBzgvZH g8Q0oNYzXapCaMG8X7orHPnWfP22tfPq7mG0hkenZJPpqe6Dv5mIvlTbTxx1IZFp rugtcYD9bOt9qU1FBiBjNJJIy+DAaEa8s0yt6/KneGaPsmGHB5izoPjnN6Vkl3LZ 0CsOJaEdC+SKlop7jrZoUUbkodiX/B/GxQsDpZqKNBtJsVWs7A7QsfqUkj4luhoF vUGEkzLQhqi7y5xy9mvRyXZMNtVt2qaBSW5ueuhvOZuj1Iej7WyOKhBIS/8NGGO6 l2gPtg79e1WCw+uv8ZtEy/NCdR3emBFddtz0HXZSs6R/FRmdhgJQxbLFKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5m0naBAI95O0YmryEPfX6lN2g5MB8GA1UdIwQY MBaAFHQA1QE8EoUiQjQwk8v1FI1Orqr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEFEVkFUd1NoU0pDTkRDVHlfVVVqVTZ1cXZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85NWQ3MWQtZjQxYi00MTcxLTgzNTAt ZTA4OTJhMjhhYWM5LzEvZEFEVkFUd1NoU0pDTkRDVHlfVVVqVTZ1cXZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS85NWQ3MWQtZjQxYi00MTcxLTgzNTAtZTA4OTJhMjhhYWM5 LzEvZEFEVkFUd1NoU0pDTkRDVHlfVVVqVTZ1cXZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMB+s3k2 N4dDcc4/rm26j7sqh9AXwW3bSO2J9tfOE+7QvuRNEuIjAKT7O/9pIjE4ayZauMqt Mfr0LRsG5KuFGikmHT9U4ZoFlWbz84y3MrmcOboZ8i66ypdFhD5o8oi4HdkQXq5f s3qiRND2aa/rpxGbIPvwKstWeQICuh7H23FFttXjUzZtNL/zy4Td7DWooktrVy6s OIPPKMUY8+NdrBqfSuUNO4+8o/Ff9Hq3ke3NQ9bA6BCca5rlKF+I0IeWL3m6R0wm e4dLcgFv/UEFJ9aYLX1RCuDJMQHL63IY8b28BUB0FBbZebo37yZpCMGaDIzH1lJw br6RZmt1oDyTFg== -----END CERTIFICATE-----Generated at Sun Dec 28 20:16:26 2025 by rpki-client