This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft File: _0DYouqWdjaeboF2eUkOTlBcifM.mft (raw, json) Hash identifier: Bkz5JVWq67julJSaSPjKh1YffT7M9+TpvYLjpbLYHjk= Subject key identifier: 5D:F7:9E:D8:B4:D6:70:A5:AA:57:D0:ED:F4:F3:3E:D2:D2:21:41:3A Authority key identifier: FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3 Certificate issuer: /CN=ff40d8a2ea9676369e6e817679490e4e505c89f3 Certificate serial: 019B4581F7E97DC11FCA9519B8478E1E8EFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft Manifest number: 1796 Signing time: Mon 22 Dec 2025 10:01:44 +0000 Manifest this update: Mon 22 Dec 2025 10:01:44 +0000 Manifest next update: Tue 23 Dec 2025 10:01:44 +0000 Files and hashes: 1: NfdXthzhZ_L34HPGrLUJ0q9-LtU.roa (hash: iAmQ4V4JG26ummlLKO90sg6lAyK0jGsDeoSWyDoF0l4=) 2: _0DYouqWdjaeboF2eUkOTlBcifM.crl (hash: E6HscScGfMRnzhT/cGd5m7KlMHNMZU+Zme5KP+X41k8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:f7:e9:7d:c1:1f:ca:95:19:b8:47:8e:1e:8e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff40d8a2ea9676369e6e817679490e4e505c89f3 Validity Not Before: Dec 22 10:01:44 2025 GMT Not After : Dec 23 10:01:44 2025 GMT Subject: CN=5df79ed8b4d670a5aa57d0edf4f33ed2d221413a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:24:36:fb:26:87:33:5d:2a:f6:7b:b6:79:36: 16:3a:2f:bc:c8:9a:59:55:41:a0:96:1c:50:23:d1: 60:1f:1c:c5:78:ee:5c:9a:3d:2d:a5:4c:c4:22:34: b1:40:6c:11:0b:6d:0c:d7:8c:d8:bf:cf:7a:cf:a3: 2c:bc:bb:28:6d:7c:dd:99:ba:4c:14:e3:a3:d3:86: eb:0c:1b:db:78:c6:0f:97:db:bf:ec:47:56:12:eb: 2e:50:f4:6b:ae:4d:72:d3:54:10:87:49:78:a4:eb: bd:de:ca:a0:2b:e3:e5:58:19:93:4a:b6:af:30:ad: 1b:0a:e6:f0:5c:53:11:4a:6e:0f:fd:79:83:fc:ba: 47:df:d5:23:7c:49:ab:90:57:5b:f7:90:02:34:63: d8:ac:82:d4:97:39:c0:f9:3a:37:ee:77:55:3d:5d: 97:6b:e6:64:4e:b0:2f:cc:61:fe:00:22:94:9f:d0: cc:bc:08:a3:59:ea:52:01:29:a6:49:61:ff:c3:36: 1e:5f:84:e1:29:d9:2d:0a:dc:45:2e:9a:74:d7:56: e4:c9:54:b4:82:71:92:49:58:fc:ef:c8:ee:d5:75: bd:c4:16:18:fa:cd:97:ed:89:8c:b2:61:a8:8f:8c: 68:61:20:ce:a9:21:d3:a3:b1:30:3c:54:40:fd:35: c8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F7:9E:D8:B4:D6:70:A5:AA:57:D0:ED:F4:F3:3E:D2:D2:21:41:3A X509v3 Authority Key Identifier: keyid:FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:8b:19:41:d0:c6:3b:79:39:3d:ed:4f:67:5b:a2:23:67:8f: ff:08:be:dd:21:21:ee:3b:15:f9:a0:72:52:1c:85:28:4e:5e: e2:5a:50:63:2f:dc:40:51:33:55:fd:e4:b1:36:8f:ff:62:6f: 2e:41:ce:c7:00:a3:81:6f:a6:51:fe:17:3a:6a:24:ad:2b:00: da:67:0a:a6:ed:eb:07:74:d9:fc:03:6d:60:8a:d0:3c:17:40: 02:34:37:a9:0b:c5:5c:4b:8a:d1:21:76:92:c1:99:36:05:8a: a3:d9:30:06:98:c6:ee:98:f6:1a:5f:ee:ce:b1:11:07:b1:b1: a3:f4:f6:e0:e0:67:15:2e:98:c9:09:0b:ae:a5:46:66:a2:1c: 15:9c:11:96:c3:2d:d0:7b:32:10:f3:b2:b6:e5:d7:5d:13:36: 3c:5f:a2:51:fd:90:6d:ec:0f:1d:57:8e:6b:99:42:36:04:cd: c1:01:23:2e:af:20:76:fc:a3:80:99:a4:0e:dd:f1:05:d4:32: 0a:32:85:3a:53:e7:ec:34:5d:e3:d2:2c:fc:08:bd:1c:6c:06: 05:3e:b9:34:ff:dd:f4:16:f5:8c:40:e1:95:5b:73:0e:1e:0f: 97:85:eb:b7:38:b6:e1:34:c8:1d:ad:23:a1:cf:45:cb:23:ab: bb:53:6b:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgffpfcEfypUZuEeOHo7+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDBkOGEyZWE5Njc2MzY5ZTZlODE3Njc5NDkwZTRlNTA1 Yzg5ZjMwHhcNMjUxMjIyMTAwMTQ0WhcNMjUxMjIzMTAwMTQ0WjAzMTEwLwYDVQQD Eyg1ZGY3OWVkOGI0ZDY3MGE1YWE1N2QwZWRmNGYzM2VkMmQyMjE0MTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliQ2+yaHM10q9nu2eTYWOi+8yJpZ VUGglhxQI9FgHxzFeO5cmj0tpUzEIjSxQGwRC20M14zYv896z6MsvLsobXzdmbpM FOOj04brDBvbeMYPl9u/7EdWEusuUPRrrk1y01QQh0l4pOu93sqgK+PlWBmTSrav MK0bCubwXFMRSm4P/XmD/LpH39UjfEmrkFdb95ACNGPYrILUlznA+To37ndVPV2X a+ZkTrAvzGH+ACKUn9DMvAijWepSASmmSWH/wzYeX4ThKdktCtxFLpp011bkyVS0 gnGSSVj878ju1XW9xBYY+s2X7YmMsmGoj4xoYSDOqSHTo7EwPFRA/TXIvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF33nti01nClqlfQ7fTzPtLSIUE6MB8GA1UdIwQY MBaAFP9A2KLqlnY2nm6BdnlJDk5QXInzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBEWW91cVdkamFlYm9GMmVVa09UbEJjaWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS83YWJmM2MtMjlmMy00M2M4LTk3OGUt YjA1MGMxMTI5MTI2LzEvXzBEWW91cVdkamFlYm9GMmVVa09UbEJjaWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS83YWJmM2MtMjlmMy00M2M4LTk3OGUtYjA1MGMxMTI5MTI2 LzEvXzBEWW91cVdkamFlYm9GMmVVa09UbEJjaWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiosZQdDG O3k5Pe1PZ1uiI2eP/wi+3SEh7jsV+aByUhyFKE5e4lpQYy/cQFEzVf3ksTaP/2Jv LkHOxwCjgW+mUf4XOmokrSsA2mcKpu3rB3TZ/ANtYIrQPBdAAjQ3qQvFXEuK0SF2 ksGZNgWKo9kwBpjG7pj2Gl/uzrERB7Gxo/T24OBnFS6YyQkLrqVGZqIcFZwRlsMt 0HsyEPOytuXXXRM2PF+iUf2QbewPHVeOa5lCNgTNwQEjLq8gdvyjgJmkDt3xBdQy CjKFOlPn7DRd49Is/Ai9HGwGBT65NP/d9Bb1jEDhlVtzDh4Pl4Xrtzi24TTIHa0j oc9FyyOru1Nr9w== -----END CERTIFICATE-----Generated at Mon Dec 22 14:03:50 2025 by rpki-client