This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft File: D4nIaX93ksqvWZZk6JrOZSRPiug.mft (raw, json) Hash identifier: Xa+cSF6ZSI4AuEtdt+iB1Oto5+gnriKc7J11qrhWqTg= Subject key identifier: 78:5B:E2:59:5B:C7:9E:E9:84:18:B8:E1:DF:8C:1C:40:61:F5:61:45 Authority key identifier: 0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8 Certificate issuer: /CN=0f89c8697f7792caaf599664e89ace65244f8ae8 Certificate serial: 019B4A03E0E1359AAAC34D10A5CCD29A6F2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft Manifest number: 178D Signing time: Tue 23 Dec 2025 07:02:06 +0000 Manifest this update: Tue 23 Dec 2025 07:02:06 +0000 Manifest next update: Wed 24 Dec 2025 07:02:06 +0000 Files and hashes: 1: D4nIaX93ksqvWZZk6JrOZSRPiug.crl (hash: idyQOvcfQvLNkLqZr10A594VUgBQNhBql4bp5O2G6Uw=) 2: M1fWkBIHAuVSUFxtDGIthqqmrJE.roa (hash: +6gCxjSejI/as6boiaKhDkfwSxB7S4u8Oz//yZsKkyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:e0:e1:35:9a:aa:c3:4d:10:a5:cc:d2:9a:6f:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f89c8697f7792caaf599664e89ace65244f8ae8 Validity Not Before: Dec 23 07:02:06 2025 GMT Not After : Dec 24 07:02:06 2025 GMT Subject: CN=785be2595bc79ee98418b8e1df8c1c4061f56145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:41:db:c0:00:c1:81:b1:9a:85:78:d5:53:b0: ed:d8:99:4b:4c:21:d1:c0:e0:35:62:90:f6:de:b8: 19:75:8e:83:01:57:1a:71:2e:a1:09:11:32:83:2e: 2c:31:4b:1d:66:62:26:94:b9:e9:86:23:3a:48:71: 6b:d3:dc:f2:a3:51:cf:29:52:7a:cc:22:f5:49:fc: 58:44:5f:79:f5:72:70:56:c3:31:18:71:3b:46:80: ed:b3:70:37:6f:f6:a7:d2:4e:d7:b2:d4:e9:4b:9f: c6:a1:c4:0b:b2:14:f7:15:2d:af:4c:19:5e:e6:b7: 36:53:a6:d6:7b:94:3d:29:6b:44:da:ef:5d:2b:96: 68:48:4c:96:6c:a2:71:cb:e0:cc:6a:4c:39:b1:ec: 02:3c:e0:b9:50:c0:32:50:0f:f6:d4:ac:c2:c5:09: bf:e4:83:db:8c:f0:8c:48:0d:04:b6:b6:97:de:b1: 21:26:59:f1:b4:70:ba:0f:b3:48:12:7e:4e:4b:ac: 88:82:ae:5f:b2:6c:2d:01:d1:cd:02:30:22:6c:c5: a8:fb:e5:f5:8e:35:e4:e5:4b:58:66:05:8c:e6:71: 66:4a:6a:bb:d8:06:1d:0b:2d:e2:55:45:73:58:8d: e1:51:a7:62:ea:28:5b:f1:00:47:b1:06:7c:d8:94: d7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5B:E2:59:5B:C7:9E:E9:84:18:B8:E1:DF:8C:1C:40:61:F5:61:45 X509v3 Authority Key Identifier: keyid:0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:b8:db:22:55:23:b3:ba:7f:6c:0e:2c:02:af:3b:56:8c:8b: c4:27:c4:b6:85:68:6d:d9:ed:d5:d1:1d:5d:2e:87:ef:40:92: e2:d2:c0:d1:72:4a:95:6b:17:f9:26:17:f7:6c:db:65:5a:63: a8:04:8d:07:da:0f:31:bf:41:f8:16:1d:73:69:24:d8:1c:2c: 3f:73:24:20:1e:bc:7e:39:1c:9f:2e:d5:ed:16:c9:a8:83:b9: 5f:9d:88:9d:67:82:ae:98:1c:f2:76:15:3c:31:72:cc:8d:3b: 3d:09:a6:df:8d:f1:28:4b:87:75:f2:fc:26:1e:d5:ea:5b:18: d9:7a:8f:71:da:55:e1:33:dd:1d:31:0f:57:cf:cf:ff:45:2f: 46:2e:38:82:d5:45:67:5f:ff:72:5c:0a:8e:17:b2:a3:f3:c3: 58:53:8c:a8:77:be:0b:e9:1d:cc:1c:43:c3:0b:18:87:af:56: 6f:34:d3:67:0a:65:d0:87:6e:24:c4:70:b2:e7:a3:29:b5:82: 46:8d:48:fa:48:ef:d9:a4:c0:90:38:07:e1:bc:8e:fd:03:82: 8b:d4:ec:96:67:a7:c1:74:9e:99:64:d3:cf:b6:1d:b2:8f:62: 42:77:62:60:73:3b:35:df:18:59:76:eb:95:3d:02:77:dd:68: 63:eb:f3:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA+DhNZqqw00QpczSmm8rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmODljODY5N2Y3NzkyY2FhZjU5OTY2NGU4OWFjZTY1MjQ0 ZjhhZTgwHhcNMjUxMjIzMDcwMjA2WhcNMjUxMjI0MDcwMjA2WjAzMTEwLwYDVQQD Eyg3ODViZTI1OTViYzc5ZWU5ODQxOGI4ZTFkZjhjMWM0MDYxZjU2MTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEHbwADBgbGahXjVU7Dt2JlLTCHR wOA1YpD23rgZdY6DAVcacS6hCREygy4sMUsdZmImlLnphiM6SHFr09zyo1HPKVJ6 zCL1SfxYRF959XJwVsMxGHE7RoDts3A3b/an0k7XstTpS5/GocQLshT3FS2vTBle 5rc2U6bWe5Q9KWtE2u9dK5ZoSEyWbKJxy+DMakw5sewCPOC5UMAyUA/21KzCxQm/ 5IPbjPCMSA0EtraX3rEhJlnxtHC6D7NIEn5OS6yIgq5fsmwtAdHNAjAibMWo++X1 jjXk5UtYZgWM5nFmSmq72AYdCy3iVUVzWI3hUadi6ihb8QBHsQZ82JTXGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhb4llbx57phBi44d+MHEBh9WFFMB8GA1UdIwQY MBaAFA+JyGl/d5LKr1mWZOiazmUkT4roMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDRuSWFYOTNrc3F2V1paazZKck9aU1JQaXVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZjMxODctM2JlYi00YzRiLTlhNDQt ZDZiZDU1YTllMzZkLzEvRDRuSWFYOTNrc3F2V1paazZKck9aU1JQaXVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81ZjMxODctM2JlYi00YzRiLTlhNDQtZDZiZDU1YTllMzZk LzEvRDRuSWFYOTNrc3F2V1paazZKck9aU1JQaXVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqrjbIlUj s7p/bA4sAq87VoyLxCfEtoVobdnt1dEdXS6H70CS4tLA0XJKlWsX+SYX92zbZVpj qASNB9oPMb9B+BYdc2kk2BwsP3MkIB68fjkcny7V7RbJqIO5X52InWeCrpgc8nYV PDFyzI07PQmm343xKEuHdfL8Jh7V6lsY2XqPcdpV4TPdHTEPV8/P/0UvRi44gtVF Z1//clwKjheyo/PDWFOMqHe+C+kdzBxDwwsYh69WbzTTZwpl0IduJMRwsuejKbWC Ro1I+kjv2aTAkDgH4byO/QOCi9TslmenwXSemWTTz7Ydso9iQndiYHM7Nd8YWXbr lT0Cd91oY+vz4A== -----END CERTIFICATE-----Generated at Tue Dec 23 09:03:50 2025 by rpki-client