This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft File: D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft (raw, json) Hash identifier: JuILMBv3xMVRPaesoDMYECPUDYAvRZCdrDLm/JXvrME= Subject key identifier: A3:A2:58:06:80:59:8A:1E:0E:17:35:B5:D2:B3:83:3C:17:FB:A9:DB Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1 Certificate issuer: /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1 Certificate serial: 019B4091DEA0018EBC3C2A4ACE1AF4658F9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft Manifest number: 0E20 Signing time: Sun 21 Dec 2025 11:01:00 +0000 Manifest this update: Sun 21 Dec 2025 11:01:00 +0000 Manifest next update: Mon 22 Dec 2025 11:01:00 +0000 Files and hashes: 1: D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl (hash: 0jiqLwPcXPxJpwFnpTRgWrHlkEm05PR8atvvkCZRQJg=) 2: H2kmwp7spfqcIMI0clIF2k1Rvg0.roa (hash: zHi445ArIHvkJpCdV0dHlskzjilRLemFqJLsU1rnf8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:de:a0:01:8e:bc:3c:2a:4a:ce:1a:f4:65:8f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1 Validity Not Before: Dec 21 11:01:00 2025 GMT Not After : Dec 22 11:01:00 2025 GMT Subject: CN=a3a2580680598a1e0e1735b5d2b3833c17fba9db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2e:5f:a8:84:0c:1e:88:58:f3:dc:78:0d:ec: 77:84:11:ac:90:29:25:f9:e1:21:91:0b:d4:1d:5b: 02:ca:d9:53:9d:4e:9c:e6:74:14:e3:2e:db:22:ec: 12:ef:5d:90:7a:4c:8f:6d:92:cd:8e:55:9e:5d:b8: 7d:a8:95:b9:db:5d:9f:d1:af:13:3d:f4:66:43:18: e8:76:51:06:14:9a:a2:54:f0:7c:fc:0e:e7:28:f3: 80:78:4b:88:a2:8e:98:dc:89:93:93:51:53:72:29: e6:c2:8f:46:1d:88:7b:9b:fe:ad:d7:3f:52:16:bb: d0:12:c0:b3:7e:a4:72:cb:ff:b4:ec:a1:a6:ad:7c: 33:a5:fd:fc:73:57:c2:a6:ea:78:e7:9d:16:76:8b: c7:68:7d:34:f4:46:ab:2b:81:02:9b:27:9d:37:cd: 3f:2f:02:24:2a:61:cd:ca:c1:2e:4b:58:fc:e6:50: ad:3e:41:45:8c:65:31:18:a0:a9:f6:d3:38:2b:1a: f1:36:15:5a:42:32:52:34:eb:d7:ae:17:23:11:e6: 01:55:a3:6a:9a:e2:97:67:ed:c5:9d:08:74:39:88: 72:df:c8:e6:2b:cd:bf:52:bc:02:ab:9c:b7:40:6a: 84:be:cf:2f:2d:da:16:26:d6:d6:b0:ac:d6:d2:86: aa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A2:58:06:80:59:8A:1E:0E:17:35:B5:D2:B3:83:3C:17:FB:A9:DB X509v3 Authority Key Identifier: keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:79:36:82:66:44:ed:e3:65:e3:65:fe:d8:30:eb:ac:50:e4: 4a:75:b9:69:f4:7c:79:42:0f:64:39:68:39:ef:05:90:d9:02: 96:ba:b7:84:8b:57:f4:72:8f:1f:da:e9:a6:b4:ff:4b:d0:44: d4:23:b9:41:fa:01:5c:cd:53:1e:8d:20:e5:6a:c0:f9:72:e7: 13:39:ef:2d:17:55:a4:06:a9:33:bd:07:94:6d:a1:10:23:25: bb:c6:f0:b0:a2:13:aa:89:32:84:46:76:1f:ce:a6:39:9e:e8: 4d:60:44:4b:e7:dd:36:49:7f:4d:76:52:12:a8:f5:26:da:33: 28:5c:6b:5b:3e:3f:ff:74:18:83:65:e3:66:5d:ce:90:0c:06: f0:41:06:b6:97:dd:9a:27:e3:42:0d:43:47:c0:61:f7:d9:2e: 7a:3e:13:14:22:1e:27:5d:cc:98:de:3a:04:aa:31:70:80:36: de:ae:04:78:87:09:dc:d7:fb:1a:a0:e8:8d:98:49:58:a3:d8: 47:73:c6:1c:98:e0:ee:ac:48:69:5b:17:e7:39:6c:6e:c9:25: 35:f0:54:73:61:fe:d1:e3:5b:ae:b4:56:25:4b:32:42:5d:5d: 8c:af:b0:df:11:fb:b6:8f:88:5e:e2:17:44:8b:18:fe:d1:0a: a6:b9:4b:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkd6gAY68PCpKzhr0ZY+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmODMyYzEwMTQ0ZTRkN2Y2YTY0MmM2MGRjZWFlMTQzNmZj OTljYTEwHhcNMjUxMjIxMTEwMTAwWhcNMjUxMjIyMTEwMTAwWjAzMTEwLwYDVQQD EyhhM2EyNTgwNjgwNTk4YTFlMGUxNzM1YjVkMmIzODMzYzE3ZmJhOWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS5fqIQMHohY89x4Dex3hBGskCkl +eEhkQvUHVsCytlTnU6c5nQU4y7bIuwS712QekyPbZLNjlWeXbh9qJW5212f0a8T PfRmQxjodlEGFJqiVPB8/A7nKPOAeEuIoo6Y3ImTk1FTcinmwo9GHYh7m/6t1z9S FrvQEsCzfqRyy/+07KGmrXwzpf38c1fCpup4550WdovHaH009EarK4ECmyedN80/ LwIkKmHNysEuS1j85lCtPkFFjGUxGKCp9tM4KxrxNhVaQjJSNOvXrhcjEeYBVaNq muKXZ+3FnQh0OYhy38jmK82/UrwCq5y3QGqEvs8vLdoWJtbWsKzW0oaqLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOiWAaAWYoeDhc1tdKzgzwX+6nbMB8GA1UdIwQY MBaAFA+DLBAUTk1/amQsYNzq4UNvyZyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDRNc0VCUk9UWDlxWkN4ZzNPcmhRMl9KbktFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy81YzUxY2UtNzYwZC00NGEwLWEzMzkt Y2M2OGUzN2QyNDVmLzEvRDRNc0VCUk9UWDlxWkN4ZzNPcmhRMl9KbktFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy81YzUxY2UtNzYwZC00NGEwLWEzMzktY2M2OGUzN2QyNDVm LzEvRDRNc0VCUk9UWDlxWkN4ZzNPcmhRMl9KbktFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnk2gmZE 7eNl42X+2DDrrFDkSnW5afR8eUIPZDloOe8FkNkClrq3hItX9HKPH9rpprT/S9BE 1CO5QfoBXM1THo0g5WrA+XLnEznvLRdVpAapM70HlG2hECMlu8bwsKITqokyhEZ2 H86mOZ7oTWBES+fdNkl/TXZSEqj1JtozKFxrWz4//3QYg2XjZl3OkAwG8EEGtpfd mifjQg1DR8Bh99kuej4TFCIeJ13MmN46BKoxcIA23q4EeIcJ3Nf7GqDojZhJWKPY R3PGHJjg7qxIaVsX5zlsbsklNfBUc2H+0eNbrrRWJUsyQl1djK+w3xH7to+IXuIX RIsY/tEKprlLZw== -----END CERTIFICATE-----Generated at Sun Dec 21 20:03:25 2025 by rpki-client