This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft File: D3jqRswh1F7WEmjUqfVnMsheIVA.mft (raw, json) Hash identifier: c+zj/RoMSWnF6PZUhVmxBCOeJ5Z2ZlTAjsFA/D5k1Fk= Subject key identifier: 32:67:BA:04:20:09:C2:04:6A:F2:6C:E1:4D:F0:2E:01:1A:73:91:83 Authority key identifier: 0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50 Certificate issuer: /CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150 Certificate serial: 019B76A40FD2A94F08A559BF5908E7AADF5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft Manifest number: 17A5 Signing time: Wed 31 Dec 2025 23:00:21 +0000 Manifest this update: Wed 31 Dec 2025 23:00:21 +0000 Manifest next update: Thu 01 Jan 2026 23:00:21 +0000 Files and hashes: 1: 8SQTxy_p8cY9en9UR93vjFnnH74.roa (hash: LPCNfHY24fbVR2x4GxfhYD0c8Fxi97g9FBcWFfU2h/o=) 2: D3jqRswh1F7WEmjUqfVnMsheIVA.crl (hash: Tyk/IPsXcF56N0FHYC7hQ8ksspKxz3E4HL3zUcInzMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 23:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:a4:0f:d2:a9:4f:08:a5:59:bf:59:08:e7:aa:df:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150 Validity Not Before: Dec 31 23:00:21 2025 GMT Not After : Jan 1 23:00:21 2026 GMT Subject: CN=3267ba042009c2046af26ce14df02e011a739183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4c:e0:f4:15:2e:be:af:52:b4:20:86:1d:da: d5:bf:20:cb:e7:8f:27:d0:88:1a:46:88:1c:82:ea: 0e:1d:c6:23:81:01:4e:6f:fe:c4:d4:da:84:ac:ab: 3f:d8:4c:0e:36:f3:03:7b:bf:15:cd:14:89:c3:48: 10:90:90:75:7c:32:c6:2c:f0:f2:ee:be:6b:46:24: d2:e9:4d:03:81:a8:49:5d:fd:18:9f:32:34:2a:85: d1:c2:3f:37:57:6a:41:bd:7d:09:b1:c7:b2:0a:99: 4c:3c:c9:d8:d9:45:43:fb:1e:47:db:b2:4c:58:36: 84:76:2e:a9:5d:d6:95:6c:37:ea:24:85:d0:73:21: 02:1a:19:43:96:23:35:77:23:cd:c7:0a:43:b8:11: 60:91:f6:45:6d:4d:b7:46:de:e2:5e:a8:54:55:74: f6:e4:12:11:a1:f2:22:4b:3b:ee:a0:d1:41:6c:44: 27:e3:7b:05:02:c1:9f:db:ec:41:36:e2:e3:40:f2: 20:f0:40:4c:2d:a6:86:00:01:1a:24:40:8e:a8:47: cf:91:e5:bf:8e:7e:4b:a8:38:61:50:3b:73:e2:49: 3a:dd:59:1a:43:02:62:5e:94:23:05:e9:60:76:27: 4b:c8:4b:e7:44:77:0c:3b:5d:01:ea:84:0d:79:a9: 56:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:67:BA:04:20:09:C2:04:6A:F2:6C:E1:4D:F0:2E:01:1A:73:91:83 X509v3 Authority Key Identifier: keyid:0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:75:1d:c0:27:36:e0:e0:26:a7:f1:f7:69:5f:99:bb:9f:19: a2:18:d6:e8:43:97:be:b2:c7:45:71:3f:b2:09:48:67:d7:0b: 3a:8e:d4:1c:cf:94:33:af:30:b2:08:21:91:19:69:80:83:bc: a2:aa:ab:d4:4d:3a:82:2c:db:74:b3:2f:31:4a:82:a1:7c:6b: ac:53:1b:24:23:4b:d2:27:88:ce:96:18:3f:e4:3c:c2:34:1a: 0c:a6:b4:50:ec:67:5b:b7:01:14:2a:61:0e:c8:1c:56:e4:1e: be:b5:2e:51:4f:5a:15:a6:44:e0:d3:fc:2c:99:b2:88:4f:a2: 2c:02:8b:ea:26:d0:7a:dd:44:9f:95:6b:5a:cb:c6:83:97:c4: 45:9e:df:46:f9:1a:bb:69:86:87:17:f8:a2:af:8d:8c:24:e2: 59:55:f8:01:2c:c6:ed:2a:0c:7d:74:bb:1e:b5:c3:ec:42:97: 1f:a4:69:f5:11:b3:17:d3:03:30:88:1c:52:5e:d7:3d:ff:0b: 84:37:4e:9e:03:dd:7b:4e:e9:83:03:24:07:ca:72:fe:2f:f9: 9d:16:a8:87:57:b9:19:97:61:bd:5b:3b:42:38:89:23:48:53: a7:0b:79:6c:d5:8f:51:ec:54:ec:64:9a:62:b5:36:98:86:bc: 93:81:5b:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2pA/SqU8IpVm/WQjnqt9bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNzhlYTQ2Y2MyMWQ0NWVkNjEyNjhkNGE5ZjU2NzMyYzg1 ZTIxNTAwHhcNMjUxMjMxMjMwMDIxWhcNMjYwMTAxMjMwMDIxWjAzMTEwLwYDVQQD EygzMjY3YmEwNDIwMDljMjA0NmFmMjZjZTE0ZGYwMmUwMTFhNzM5MTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0zg9BUuvq9StCCGHdrVvyDL548n 0IgaRogcguoOHcYjgQFOb/7E1NqErKs/2EwONvMDe78VzRSJw0gQkJB1fDLGLPDy 7r5rRiTS6U0DgahJXf0YnzI0KoXRwj83V2pBvX0JsceyCplMPMnY2UVD+x5H27JM WDaEdi6pXdaVbDfqJIXQcyECGhlDliM1dyPNxwpDuBFgkfZFbU23Rt7iXqhUVXT2 5BIRofIiSzvuoNFBbEQn43sFAsGf2+xBNuLjQPIg8EBMLaaGAAEaJECOqEfPkeW/ jn5LqDhhUDtz4kk63VkaQwJiXpQjBelgdidLyEvnRHcMO10B6oQNealWeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJnugQgCcIEavJs4U3wLgEac5GDMB8GA1UdIwQY MBaAFA946kbMIdRe1hJo1Kn1ZzLIXiFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDNqcVJzd2gxRjdXRW1qVXFmVm5Nc2hlSVZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wMjE5YzEtYTU1MS00YjkxLTljYTMt MDMyYjNiNjE0ZGQ4LzEvRDNqcVJzd2gxRjdXRW1qVXFmVm5Nc2hlSVZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8wMjE5YzEtYTU1MS00YjkxLTljYTMtMDMyYjNiNjE0ZGQ4 LzEvRDNqcVJzd2gxRjdXRW1qVXFmVm5Nc2hlSVZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAknUdwCc2 4OAmp/H3aV+Zu58ZohjW6EOXvrLHRXE/sglIZ9cLOo7UHM+UM68wsgghkRlpgIO8 oqqr1E06gizbdLMvMUqCoXxrrFMbJCNL0ieIzpYYP+Q8wjQaDKa0UOxnW7cBFCph DsgcVuQevrUuUU9aFaZE4NP8LJmyiE+iLAKL6ibQet1En5VrWsvGg5fERZ7fRvka u2mGhxf4oq+NjCTiWVX4ASzG7SoMfXS7HrXD7EKXH6Rp9RGzF9MDMIgcUl7XPf8L hDdOngPde07pgwMkB8py/i/5nRaoh1e5GZdhvVs7QjiJI0hTpwt5bNWPUexU7GSa YrU2mIa8k4Fb6w== -----END CERTIFICATE-----Generated at Thu Jan 1 05:45:12 2026 by rpki-client