This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft File: D5x3odzbju1izTyoClFE3E4kP04.mft (raw, json) Hash identifier: IXSD6Ps0dL3tYylQdaioEIhoFmTuW8U/W5HPcrF8UTY= Subject key identifier: F4:F2:00:71:C8:BB:69:FE:39:09:01:E3:10:3F:75:D2:B8:4C:71:25 Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e Certificate serial: 019B3E6C42A8C629B774E2A966A39F9CAA15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft Manifest number: 1794 Signing time: Sun 21 Dec 2025 01:00:40 +0000 Manifest this update: Sun 21 Dec 2025 01:00:40 +0000 Manifest next update: Mon 22 Dec 2025 01:00:40 +0000 Files and hashes: 1: D5x3odzbju1izTyoClFE3E4kP04.crl (hash: xzl+FLrYPkHmEsIx591RlzvoO/6z23g9ojnSMRgP+9s=) 2: EU9ZI9FwGK9Je2LIHv8oyryDbQ0.roa (hash: lg1hblUtV5bfdjAsYpP/FKql2pfxKFHlS2JkI4euny0=) 3: UttiV2rZhXbpiEroK90NOoWzeyo.roa (hash: clJAUfrgzlJXm2cn+fD7HIKwQaoQPkMOMFf6DpqSgo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:42:a8:c6:29:b7:74:e2:a9:66:a3:9f:9c:aa:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e Validity Not Before: Dec 21 01:00:40 2025 GMT Not After : Dec 22 01:00:40 2025 GMT Subject: CN=f4f20071c8bb69fe390901e3103f75d2b84c7125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b7:6e:ff:de:10:0c:70:07:dd:46:3e:a5:d7: 00:bb:80:a7:15:50:9a:b7:cc:c0:c7:f7:4b:c9:a8: bc:1c:f1:73:ec:76:c1:24:f1:4a:b9:62:32:f9:52: 28:f5:de:cf:5c:65:4d:26:4b:2d:17:97:f6:9b:3f: fe:80:fa:76:69:2e:35:0c:99:8e:8f:5d:a2:41:9e: 7b:b4:17:eb:22:7c:df:a2:0e:d6:84:6b:9b:43:a2: f1:c4:bc:33:2b:0c:f2:db:54:58:5a:4c:f9:2d:aa: bb:17:52:9e:5d:4c:68:2d:99:33:8a:9f:38:dd:f7: 31:2a:b8:34:42:ed:da:ea:a5:f0:44:1e:43:9d:e1: 46:39:7c:a5:6a:58:ab:42:20:1d:5e:46:a7:c3:d3: 10:0d:4d:92:9e:af:bb:98:09:8b:95:ee:63:1e:d7: 9b:bf:65:9e:89:e0:44:69:2f:e1:b9:ed:9a:67:0c: ca:f2:cb:07:7a:dc:5b:17:6e:8e:01:4a:10:f9:6b: 30:e5:ef:46:db:36:65:3f:a9:63:cd:24:3c:eb:91: f2:0b:88:93:1f:59:ff:1a:84:cf:84:68:83:bc:7c: 14:6a:88:44:e4:dc:83:4d:17:6a:ed:a7:2c:2c:9b: 96:19:0d:8e:e6:60:26:be:07:c8:98:2b:6e:e0:e5: 5d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F2:00:71:C8:BB:69:FE:39:09:01:E3:10:3F:75:D2:B8:4C:71:25 X509v3 Authority Key Identifier: keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:de:bd:a5:de:50:33:56:20:d6:95:17:69:92:ac:5c:9a:13: b8:6a:5a:82:b2:69:36:7a:57:96:f8:87:f7:9c:5d:2a:91:20: f3:35:9b:9d:6b:aa:c4:53:a9:58:0a:eb:ab:49:a2:94:2b:f5: 4f:38:3a:81:7c:87:c4:e9:57:14:8e:00:51:b8:b9:f2:a7:f2: 68:77:ed:21:9a:c7:40:28:f8:b3:73:35:6b:4c:17:78:c8:3a: cd:4b:01:7c:19:65:45:fb:c2:ed:55:06:e7:76:88:0c:ca:48: 8c:dc:d4:b9:c5:2a:dc:07:56:a8:7d:c0:14:fb:2e:f3:a6:a7: 08:3c:e2:1a:c9:3d:f9:55:73:37:21:36:e1:fe:fe:c0:7c:3a: fb:48:5d:92:c0:16:ce:fb:5a:33:97:3c:70:fa:07:ae:c6:0e: 54:13:dd:8c:21:e1:9e:7c:55:0e:68:33:74:db:37:72:a5:56: 62:8e:ea:b1:cb:52:3c:75:50:99:97:3b:6e:50:74:a9:b0:53: 12:db:c3:d9:a3:ff:c1:d7:2d:9e:65:1d:04:90:ad:4d:c6:e1: 3f:e0:8d:08:35:50:5a:1e:02:95:ed:6b:30:e3:2d:b6:9a:b9: f7:5a:0a:f5:0c:56:f9:a3:4e:24:c8:83:07:b4:01:84:8e:35: c9:a9:04:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bEKoxim3dOKpZqOfnKoVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOWM3N2ExZGNkYjhlZWQ2MmNkM2NhODBhNTE0NGRjNGUy NDNmNGUwHhcNMjUxMjIxMDEwMDQwWhcNMjUxMjIyMDEwMDQwWjAzMTEwLwYDVQQD EyhmNGYyMDA3MWM4YmI2OWZlMzkwOTAxZTMxMDNmNzVkMmI4NGM3MTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrdu/94QDHAH3UY+pdcAu4CnFVCa t8zAx/dLyai8HPFz7HbBJPFKuWIy+VIo9d7PXGVNJkstF5f2mz/+gPp2aS41DJmO j12iQZ57tBfrInzfog7WhGubQ6LxxLwzKwzy21RYWkz5Laq7F1KeXUxoLZkzip84 3fcxKrg0Qu3a6qXwRB5DneFGOXylalirQiAdXkanw9MQDU2Snq+7mAmLle5jHteb v2WeieBEaS/hue2aZwzK8ssHetxbF26OAUoQ+Wsw5e9G2zZlP6ljzSQ865HyC4iT H1n/GoTPhGiDvHwUaohE5NyDTRdq7acsLJuWGQ2O5mAmvgfImCtu4OVdowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTyAHHIu2n+OQkB4xA/ddK4THElMB8GA1UdIwQY MBaAFA+cd6Hc247tYs08qApRRNxOJD9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85ZDBlMTQtMTEzYi00Y2JhLTgzMDgt YWNjNTY5NzdiNmY0LzEvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85ZDBlMTQtMTEzYi00Y2JhLTgzMDgtYWNjNTY5NzdiNmY0 LzEvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvd69pd5Q M1Yg1pUXaZKsXJoTuGpagrJpNnpXlviH95xdKpEg8zWbnWuqxFOpWArrq0milCv1 Tzg6gXyHxOlXFI4AUbi58qfyaHftIZrHQCj4s3M1a0wXeMg6zUsBfBllRfvC7VUG 53aIDMpIjNzUucUq3AdWqH3AFPsu86anCDziGsk9+VVzNyE24f7+wHw6+0hdksAW zvtaM5c8cPoHrsYOVBPdjCHhnnxVDmgzdNs3cqVWYo7qsctSPHVQmZc7blB0qbBT EtvD2aP/wdctnmUdBJCtTcbhP+CNCDVQWh4Cle1rMOMttpq591oK9QxW+aNOJMiD B7QBhI41yakEsg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:30:16 2025 by rpki-client