This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json) Hash identifier: RvQUo0LkFItcVwCDuh3hH6JfbQGBmMeEsfKlLrTBp6M= Subject key identifier: 7C:8E:F4:3B:EB:AF:29:7F:40:B1:C0:3B:4B:2A:F2:54:25:83:C8:8C Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32 Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632 Certificate serial: 019B5F41478F1ACC71FDB5212C0E21EC3774 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft Manifest number: 0CF5 Signing time: Sat 27 Dec 2025 10:01:12 +0000 Manifest this update: Sat 27 Dec 2025 10:01:12 +0000 Manifest next update: Sun 28 Dec 2025 10:01:12 +0000 Files and hashes: 1: YmdDnE-Vn1310ZEVyUeueCTQcs4.roa (hash: NlHhFYGZnQdX8LSnZttscO3Rwl4+d4S2jrYpL4VTU9k=) 2: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: lqpfSLkUrlebc8e5zGbmcmcLX05LsNfR8784paUZd1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:41:47:8f:1a:cc:71:fd:b5:21:2c:0e:21:ec:37:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632 Validity Not Before: Dec 27 10:01:12 2025 GMT Not After : Dec 28 10:01:12 2025 GMT Subject: CN=7c8ef43bebaf297f40b1c03b4b2af2542583c88c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:eb:61:24:54:6f:5c:8d:45:48:cf:b1:41:97: 7b:b5:51:fb:bc:9e:e4:f3:16:9d:d8:6a:e7:13:3a: 8d:e8:77:69:35:b2:36:16:98:33:97:24:ea:ad:da: 7d:6f:6d:f7:81:8d:29:0a:89:c1:00:af:b9:96:36: 94:0a:af:03:cc:79:59:7c:68:f8:66:83:43:26:30: e0:f0:dc:cc:c1:91:b7:66:1c:7a:e6:21:4e:1e:fe: f9:dd:0b:4c:94:ec:79:ed:b8:9b:8c:4c:b9:6e:66: b3:9f:be:3a:a8:e8:9c:a2:df:cb:57:84:45:c3:6c: e4:7c:13:e2:fe:cf:9b:69:f2:94:8f:e2:1d:67:23: c1:b2:f0:0a:d5:e9:a0:03:19:98:e2:d3:4d:eb:40: 5d:6e:f5:75:94:cc:27:47:6d:e7:b2:c0:6b:01:45: be:f2:d6:63:20:23:eb:88:9c:fb:dd:95:5b:d7:b3: 4e:33:60:96:b1:52:a7:5b:75:11:d6:0d:15:63:15: 1d:31:e0:56:a6:b4:13:91:74:40:44:43:fb:ca:5b: a3:89:84:fd:c2:cd:f8:8c:9c:77:be:eb:1c:c8:01: fe:8c:b3:0d:0d:3e:55:61:c0:cb:1e:1b:5d:00:d3: 3a:af:1c:d9:37:42:9f:41:1e:40:ce:30:bd:d1:c1: c5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8E:F4:3B:EB:AF:29:7F:40:B1:C0:3B:4B:2A:F2:54:25:83:C8:8C X509v3 Authority Key Identifier: keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:25:33:39:e2:7d:3b:41:a9:14:83:73:71:97:3a:63:fd:8a: 11:83:3d:c4:9c:74:d3:61:a7:9a:eb:fb:e6:69:75:92:8a:00: 7e:63:ba:dc:85:c0:b3:f2:11:a1:39:0b:67:23:de:ef:68:db: a6:a2:af:bb:e6:11:5d:0f:7b:98:c6:fb:f0:19:08:18:bd:3d: bb:74:a5:49:f3:65:7c:7e:cf:31:cc:a4:17:df:ed:a5:0c:83: 98:9d:6a:ce:6a:9f:9f:20:4e:9a:79:3e:f4:84:3d:80:d3:ca: 7f:d5:42:04:e6:db:6b:7b:79:02:cd:bb:d2:e3:9b:dd:d6:2a: f7:b1:95:ae:2d:e2:00:c6:14:6d:0b:43:fc:01:0f:45:64:1b: 06:67:ca:67:bb:f6:59:16:2e:6e:7c:44:26:4b:d7:30:d0:55: 5d:19:b4:ec:fa:45:52:68:7e:a4:33:01:22:b4:0e:bc:5f:ec: cf:85:12:8b:da:a7:27:25:de:51:09:e9:42:70:16:a5:96:fc: 0a:d3:69:2d:da:5d:49:78:99:66:0d:de:2d:72:2e:c2:f1:d9: 9e:76:d8:dc:88:f4:6e:15:c1:a6:d6:9f:fd:f8:85:9d:27:a7: c2:42:8e:71:c1:85:86:73:74:08:c4:44:56:73:61:a4:2b:a8: 68:c1:3d:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQUePGsxx/bUhLA4h7Dd0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OGUxMzRlNGZmYjVmYjEzYWMyODRmZTk0ODgyNzY4MjYx NTY2MzIwHhcNMjUxMjI3MTAwMTEyWhcNMjUxMjI4MTAwMTEyWjAzMTEwLwYDVQQD Eyg3YzhlZjQzYmViYWYyOTdmNDBiMWMwM2I0YjJhZjI1NDI1ODNjODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApethJFRvXI1FSM+xQZd7tVH7vJ7k 8xad2GrnEzqN6HdpNbI2FpgzlyTqrdp9b233gY0pConBAK+5ljaUCq8DzHlZfGj4 ZoNDJjDg8NzMwZG3Zhx65iFOHv753QtMlOx57bibjEy5bmazn746qOicot/LV4RF w2zkfBPi/s+bafKUj+IdZyPBsvAK1emgAxmY4tNN60BdbvV1lMwnR23nssBrAUW+ 8tZjICPriJz73ZVb17NOM2CWsVKnW3UR1g0VYxUdMeBWprQTkXRAREP7ylujiYT9 ws34jJx3vuscyAH+jLMNDT5VYcDLHhtdANM6rxzZN0KfQR5AzjC90cHFlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHyO9Dvrryl/QLHAO0sq8lQlg8iMMB8GA1UdIwQY MBaAFHeOE05P+1+xOsKE/pSIJ2gmFWYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUt MDk5YmFkMDM3NjhlLzEvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUtMDk5YmFkMDM3Njhl LzEvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyUzOeJ9 O0GpFINzcZc6Y/2KEYM9xJx002Gnmuv75ml1kooAfmO63IXAs/IRoTkLZyPe72jb pqKvu+YRXQ97mMb78BkIGL09u3SlSfNlfH7PMcykF9/tpQyDmJ1qzmqfnyBOmnk+ 9IQ9gNPKf9VCBObba3t5As270uOb3dYq97GVri3iAMYUbQtD/AEPRWQbBmfKZ7v2 WRYubnxEJkvXMNBVXRm07PpFUmh+pDMBIrQOvF/sz4USi9qnJyXeUQnpQnAWpZb8 CtNpLdpdSXiZZg3eLXIuwvHZnnbY3Ij0bhXBptaf/fiFnSenwkKOccGFhnN0CMRE VnNhpCuoaME9bA== -----END CERTIFICATE-----Generated at Sat Dec 27 17:49:21 2025 by rpki-client