This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft File: dr5GHrn3AE8poX_d3-8uLqBeua8.mft (raw, json) Hash identifier: 5QC5QAyfUy+xY+q0K/96orbN9eLuunY7eCDrnOplC9I= Subject key identifier: 0D:42:4A:F8:80:C3:93:78:97:DF:5D:2D:78:BF:76:F1:71:57:75:0D Authority key identifier: 76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF Certificate issuer: /CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af Certificate serial: 019B416DB2C15C717F72377DA5D7BCE2B7F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft Manifest number: 171F Signing time: Sun 21 Dec 2025 15:01:06 +0000 Manifest this update: Sun 21 Dec 2025 15:01:06 +0000 Manifest next update: Mon 22 Dec 2025 15:01:06 +0000 Files and hashes: 1: SmenFq2eO29wVInO8xQQnEozH4M.roa (hash: NLqfCsW+19ubwmofae6n/UEN1RfOh4ZI/s4/YAFk4k4=) 2: dr5GHrn3AE8poX_d3-8uLqBeua8.crl (hash: U8hynh9IRhi4DkuoJy5RV1fez7YC9u31lUIlrz+nwoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:b2:c1:5c:71:7f:72:37:7d:a5:d7:bc:e2:b7:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af Validity Not Before: Dec 21 15:01:06 2025 GMT Not After : Dec 22 15:01:06 2025 GMT Subject: CN=0d424af880c3937897df5d2d78bf76f17157750d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6a:bd:46:de:de:be:a9:fc:09:4d:13:83:b0: 96:b7:43:f1:d8:42:05:5e:d1:f7:99:a8:fc:97:6e: 94:b3:0e:ff:d9:eb:bd:17:83:a6:8f:f3:46:cf:fa: 53:31:72:87:d4:d7:cd:c0:25:74:bf:63:48:43:b2: d5:83:8d:b9:33:3a:5e:87:71:13:15:db:09:6b:99: 06:3f:2b:7c:9a:4e:46:b9:0d:28:19:96:50:db:f9: 8e:4b:46:1d:bf:6d:3f:44:e8:16:38:f3:8b:17:5a: 58:3f:aa:e6:1b:aa:c2:14:df:fa:52:81:a9:16:27: c0:73:7a:a5:3f:5e:a0:b6:3a:6c:93:7c:6c:f2:6f: 2a:f6:6d:80:3b:a3:3a:70:05:2e:db:f8:44:39:46: 28:ee:16:cb:c9:43:37:c6:22:80:90:f1:dd:21:cf: e9:e3:f0:bb:01:fa:ce:85:88:fc:e6:93:82:40:ab: 65:85:69:c9:5c:3d:84:ac:f0:4c:4a:59:94:13:d6: 38:8f:70:25:fc:9b:a7:62:e0:a6:1a:33:b9:62:ab: 12:27:a5:45:d8:7d:e4:5d:81:ef:9e:cb:96:74:4a: 37:02:56:06:8e:07:6f:92:12:54:6e:5a:3c:70:8d: 5e:ec:c4:04:68:f8:a9:08:97:97:6d:d4:ee:7f:31: bd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:42:4A:F8:80:C3:93:78:97:DF:5D:2D:78:BF:76:F1:71:57:75:0D X509v3 Authority Key Identifier: keyid:76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:a3:eb:e5:c3:b3:17:fe:72:91:44:85:e3:b8:85:38:8f:1d: 1d:99:30:5b:37:4f:0a:4c:92:c1:3f:ba:ae:de:93:a3:b2:bd: 86:64:c8:01:fd:b6:0b:e2:b3:c4:d9:eb:0c:db:50:dd:2d:dc: 00:70:1f:55:80:0e:87:03:74:51:ba:f0:4d:76:52:75:69:d1: aa:ad:16:60:04:59:9e:1d:17:01:fc:b3:7b:97:f4:67:bd:90: c9:63:ae:50:69:c4:b7:07:bf:07:4c:de:01:25:91:86:37:21: 24:1e:3e:e5:d7:6e:b4:d9:03:97:43:66:94:a2:8d:64:83:28: c9:70:75:7e:d9:f2:f5:1e:bb:11:8d:89:72:f4:d1:60:4b:c9: a8:83:37:c4:b1:d2:80:c4:d2:92:e3:99:ba:72:37:82:71:59: 12:c8:ad:ff:15:07:1a:3e:d7:2e:91:9c:64:f7:80:77:35:4a: 3f:f8:73:d5:fd:bd:c7:e2:12:8b:9b:a4:c8:59:28:39:59:e6: a9:67:75:43:b1:20:d4:16:d9:2b:2a:6a:5c:88:5d:9c:75:78: 35:12:d6:49:67:39:51:31:91:32:46:6a:b5:53:08:33:f8:9a: fd:25:7e:4f:e0:5e:40:66:d4:49:4b:7c:b5:e5:a6:92:2d:e3: 7e:c5:4a:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbbLBXHF/cjd9pde84rfxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YmU0NjFlYjlmNzAwNGYyOWExN2ZkZGRmZWYyZTJlYTA1 ZWI5YWYwHhcNMjUxMjIxMTUwMTA2WhcNMjUxMjIyMTUwMTA2WjAzMTEwLwYDVQQD EygwZDQyNGFmODgwYzM5Mzc4OTdkZjVkMmQ3OGJmNzZmMTcxNTc3NTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Wq9Rt7evqn8CU0Tg7CWt0Px2EIF XtH3maj8l26Usw7/2eu9F4Omj/NGz/pTMXKH1NfNwCV0v2NIQ7LVg425Mzpeh3ET FdsJa5kGPyt8mk5GuQ0oGZZQ2/mOS0Ydv20/ROgWOPOLF1pYP6rmG6rCFN/6UoGp FifAc3qlP16gtjpsk3xs8m8q9m2AO6M6cAUu2/hEOUYo7hbLyUM3xiKAkPHdIc/p 4/C7AfrOhYj85pOCQKtlhWnJXD2ErPBMSlmUE9Y4j3Al/JunYuCmGjO5YqsSJ6VF 2H3kXYHvnsuWdEo3AlYGjgdvkhJUblo8cI1e7MQEaPipCJeXbdTufzG9KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1CSviAw5N4l99dLXi/dvFxV3UNMB8GA1UdIwQY MBaAFHa+Rh659wBPKaF/3d/vLi6gXrmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHI1R0hybjNBRThwb1hfZDMtOHVMcUJldWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jNjgwYmYtOWI2Yy00NGQzLTgzN2Yt ODhjZmEzZGNhNmRlLzEvZHI1R0hybjNBRThwb1hfZDMtOHVMcUJldWE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9jNjgwYmYtOWI2Yy00NGQzLTgzN2YtODhjZmEzZGNhNmRl LzEvZHI1R0hybjNBRThwb1hfZDMtOHVMcUJldWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6Pr5cOz F/5ykUSF47iFOI8dHZkwWzdPCkySwT+6rt6To7K9hmTIAf22C+KzxNnrDNtQ3S3c AHAfVYAOhwN0UbrwTXZSdWnRqq0WYARZnh0XAfyze5f0Z72QyWOuUGnEtwe/B0ze ASWRhjchJB4+5ddutNkDl0NmlKKNZIMoyXB1ftny9R67EY2JcvTRYEvJqIM3xLHS gMTSkuOZunI3gnFZEsit/xUHGj7XLpGcZPeAdzVKP/hz1f29x+ISi5ukyFkoOVnm qWd1Q7Eg1BbZKypqXIhdnHV4NRLWSWc5UTGRMkZqtVMIM/ia/SV+T+BeQGbUSUt8 teWmki3jfsVKyQ== -----END CERTIFICATE-----Generated at Mon Dec 22 00:29:03 2025 by rpki-client