This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft File: DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json) Hash identifier: moCE1DeIiLE3Nj2a53zmt7HfQHGI+I/j1mx2WG9eJho= Subject key identifier: 7D:C2:43:D8:4B:B8:3E:82:65:51:E5:A1:3D:CC:EE:D1:50:CA:9C:3D Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E Certificate issuer: /CN=0e2283e6e6af991422743711f7a723137680e69e Certificate serial: 019B3D5A3296126EE7A542D77922A82B5E36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft Manifest number: 05A3 Signing time: Sat 20 Dec 2025 20:01:19 +0000 Manifest this update: Sat 20 Dec 2025 20:01:19 +0000 Manifest next update: Sun 21 Dec 2025 20:01:19 +0000 Files and hashes: 1: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: 8mcI2FaaldT2HfZS0dRqS4CUrpnhTZPtrGnIPvu1nZw=) 2: H09sImQpPd7oxswyyMfYCrHeDVg.roa (hash: F88ZTfKzhXNpAdlmJ7zmMSZP6dr7sViXeL2PLZiWpvA=) 3: Xy-GvzWZoQ4DZimCZXffSq7urSs.roa (hash: ueXh7ktY0jc26A3LbRVHrwaonrcTqoMtDjp0hV9hqJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:32:96:12:6e:e7:a5:42:d7:79:22:a8:2b:5e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e Validity Not Before: Dec 20 20:01:19 2025 GMT Not After : Dec 21 20:01:19 2025 GMT Subject: CN=7dc243d84bb83e826551e5a13dcceed150ca9c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:63:ae:66:76:9c:e9:88:1e:56:82:da:b2:a8: 9d:2f:fc:70:7e:5e:30:64:c8:75:8b:92:7a:4e:f8: 8d:74:dc:94:7d:cd:28:ba:98:d5:15:4e:2e:13:84: 13:81:51:e8:ad:09:86:c5:d7:99:91:7a:fc:7d:78: 23:38:78:9a:90:d7:7f:76:71:f4:9f:88:a1:53:e5: fc:31:c7:d1:91:ac:f9:d5:fb:07:b7:66:33:2a:1e: 81:83:74:bd:01:1d:42:71:88:9c:03:cb:86:b3:ff: 5e:00:1a:28:75:4b:7e:9d:ce:56:0d:b8:36:c6:55: f5:0a:a3:db:a5:54:36:fa:92:9d:dd:4d:f2:77:c2: f4:1e:66:c0:89:a2:69:94:7a:c8:dc:e0:83:d7:2b: 8c:4c:da:46:13:80:49:6c:18:81:d1:44:33:e8:d2: fc:1d:ee:89:23:3b:71:94:af:41:99:57:88:7e:14: ec:10:41:06:79:76:0e:2e:3b:26:c9:8f:f7:a8:a4: dd:39:ce:88:f0:de:c3:58:bd:c6:e5:41:e7:ad:17: 0c:39:dc:1b:e2:2f:5a:0b:56:6e:42:a7:d9:75:fe: fb:1c:53:94:69:b5:0d:91:d4:7f:5e:1b:db:f1:34: b3:44:a2:5c:34:e9:8f:5a:fb:51:df:46:99:35:63: 5c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C2:43:D8:4B:B8:3E:82:65:51:E5:A1:3D:CC:EE:D1:50:CA:9C:3D X509v3 Authority Key Identifier: keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:03:87:b1:71:79:e4:38:81:ae:c7:94:eb:82:84:79:16:57: 56:eb:8a:2b:03:41:5e:d4:09:68:df:e5:75:4e:a7:08:40:d1: dc:e1:60:b4:9d:e5:3e:5a:16:2e:f0:53:70:cd:96:b6:58:1c: ec:e7:a9:b4:e6:87:25:11:cb:04:0f:34:2c:7d:c5:f6:80:5d: f0:05:a2:9a:55:db:f8:cb:72:ee:83:1a:a9:b8:c1:6d:4e:c3: 91:36:1a:12:5d:6d:ae:00:a9:2f:ce:94:96:66:9b:90:01:2b: f7:8e:ed:1e:c0:91:8a:8c:9c:12:4e:2e:94:5e:4c:c6:2a:7a: cf:47:2e:69:c6:6b:ca:6a:f9:ae:b6:49:a1:29:09:d2:ae:57: 0b:13:8c:2a:41:d9:14:8c:86:b2:47:38:3e:68:8e:8b:7b:ac: 2e:7c:f9:f7:a2:86:47:24:e5:5d:66:56:86:09:c4:4f:dd:e2: 8b:0b:4c:a8:05:d7:6e:40:62:c6:dc:58:74:b8:af:74:9b:14: 3d:d0:27:36:5d:d6:be:cc:8f:39:8a:4a:f0:01:57:90:b1:58: 12:4d:e0:20:63:53:e4:c7:6b:27:0a:52:ac:1f:aa:b6:8a:f6: 18:d2:53:70:ae:bd:b1:b3:fe:11:df:99:4b:ef:c6:fe:fb:3c: 88:a5:3d:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WjKWEm7npULXeSKoK142MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjI4M2U2ZTZhZjk5MTQyMjc0MzcxMWY3YTcyMzEzNzY4 MGU2OWUwHhcNMjUxMjIwMjAwMTE5WhcNMjUxMjIxMjAwMTE5WjAzMTEwLwYDVQQD Eyg3ZGMyNDNkODRiYjgzZTgyNjU1MWU1YTEzZGNjZWVkMTUwY2E5YzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGOuZnac6YgeVoLasqidL/xwfl4w ZMh1i5J6TviNdNyUfc0oupjVFU4uE4QTgVHorQmGxdeZkXr8fXgjOHiakNd/dnH0 n4ihU+X8McfRkaz51fsHt2YzKh6Bg3S9AR1CcYicA8uGs/9eABoodUt+nc5WDbg2 xlX1CqPbpVQ2+pKd3U3yd8L0HmbAiaJplHrI3OCD1yuMTNpGE4BJbBiB0UQz6NL8 He6JIztxlK9BmVeIfhTsEEEGeXYOLjsmyY/3qKTdOc6I8N7DWL3G5UHnrRcMOdwb 4i9aC1ZuQqfZdf77HFOUabUNkdR/Xhvb8TSzRKJcNOmPWvtR30aZNWNc4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3CQ9hLuD6CZVHloT3M7tFQypw9MB8GA1UdIwQY MBaAFA4ig+bmr5kUInQ3EfenIxN2gOaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGlLRDV1YXZtUlFpZERjUjk2Y2pFM2FBNXA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84NDc1MGYtNzZjNC00MWVlLTg1MTct ZTBhZGFiN2YxMTEyLzEvRGlLRDV1YXZtUlFpZERjUjk2Y2pFM2FBNXA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi84NDc1MGYtNzZjNC00MWVlLTg1MTctZTBhZGFiN2YxMTEy LzEvRGlLRDV1YXZtUlFpZERjUjk2Y2pFM2FBNXA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArgOHsXF5 5DiBrseU64KEeRZXVuuKKwNBXtQJaN/ldU6nCEDR3OFgtJ3lPloWLvBTcM2Wtlgc 7OeptOaHJRHLBA80LH3F9oBd8AWimlXb+Mty7oMaqbjBbU7DkTYaEl1trgCpL86U lmabkAEr947tHsCRioycEk4ulF5Mxip6z0cuacZrymr5rrZJoSkJ0q5XCxOMKkHZ FIyGskc4PmiOi3usLnz596KGRyTlXWZWhgnET93iiwtMqAXXbkBixtxYdLivdJsU PdAnNl3WvsyPOYpK8AFXkLFYEk3gIGNT5MdrJwpSrB+qtor2GNJTcK69sbP+Ed+Z S+/G/vs8iKU9sg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:04:13 2025 by rpki-client