This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft File: ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft (raw, json) Hash identifier: E7OWHZa6ONjX4GnJFZw/8fPMHYHogNv7yx32iXu2LLE= Subject key identifier: D6:4B:30:66:2B:A7:D5:D7:A3:AD:5F:A0:C8:0F:94:19:EA:74:E6:75 Authority key identifier: B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5 Certificate issuer: /CN=b9de70122e49285d05b05f9bbf4449bfc80830e5 Certificate serial: 019B3A90EBD8BF8FC5A26043AF58E881E736 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft Manifest number: 101F Signing time: Sat 20 Dec 2025 07:02:14 +0000 Manifest this update: Sat 20 Dec 2025 07:02:14 +0000 Manifest next update: Sun 21 Dec 2025 07:02:14 +0000 Files and hashes: 1: KzXb-GAIiluztxWbXEztv2KxINE.roa (hash: RfAT/ToLMD66v1yb0qJDxKlt/UFCsEuoJitem9+zGng=) 2: ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl (hash: l4FXzFWqqqbIooTcdhydMHKAoZVUo4QE+v/sgW4rV0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:eb:d8:bf:8f:c5:a2:60:43:af:58:e8:81:e7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9de70122e49285d05b05f9bbf4449bfc80830e5 Validity Not Before: Dec 20 07:02:14 2025 GMT Not After : Dec 21 07:02:14 2025 GMT Subject: CN=d64b30662ba7d5d7a3ad5fa0c80f9419ea74e675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0f:5f:13:64:47:7e:58:be:e6:60:d1:71:87: ff:3b:cd:5b:2e:a0:ae:38:b1:c5:72:e1:4d:5a:67: 66:9f:53:0f:46:13:05:90:b5:65:d3:31:26:1d:a4: 18:65:62:3e:9b:97:10:4d:51:b7:77:ea:e8:40:90: 6a:8d:58:36:68:e2:63:97:71:7b:01:83:db:c3:0b: e4:09:75:18:25:3a:0d:5a:84:fa:b3:53:57:d3:91: ce:5c:2c:3c:1e:6f:e1:8e:8a:c8:a3:bd:e3:6b:5e: 63:b4:23:98:69:bd:9b:0d:54:b8:36:f9:b1:f4:2c: 3c:ea:c1:63:47:3d:a4:33:39:ff:32:e1:d4:78:01: 09:2d:e6:fb:61:06:e6:bd:df:f5:ea:04:ad:1e:d6: 45:3a:d4:7e:2d:e7:8f:09:9c:29:9f:2b:49:2f:0d: 7a:02:ec:bc:72:ab:ce:ed:38:70:c8:8d:77:34:22: d5:b0:b9:57:66:ea:01:f2:57:e7:83:9e:7a:f1:a0: 7c:fe:ab:f0:6b:9d:6e:71:ca:fb:73:34:43:6a:22: 70:de:13:17:a8:11:bc:e2:7c:bd:8a:56:62:59:f1: 9d:ea:c4:97:d1:5c:a5:be:e3:52:bf:7d:98:1b:41: 22:b8:3e:32:cf:98:33:85:29:0d:aa:50:4e:4d:da: 09:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4B:30:66:2B:A7:D5:D7:A3:AD:5F:A0:C8:0F:94:19:EA:74:E6:75 X509v3 Authority Key Identifier: keyid:B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:58:3f:eb:2f:1b:a8:44:18:55:e5:56:28:13:d9:6f:43:3f: 36:b9:5d:5f:3f:c8:4d:3a:54:03:3c:94:53:b7:0c:44:9a:4d: 7d:21:05:5e:45:72:21:f7:da:bc:dc:6b:de:79:69:a4:70:1b: c1:9d:bd:d5:ea:80:38:6b:25:11:53:28:a6:67:7d:3c:b3:93: 5e:50:89:2c:ac:1d:c4:ff:9f:e9:60:1c:b3:06:20:86:4f:af: c8:be:11:d5:c2:b4:be:9b:90:60:02:48:18:17:42:3c:33:42: 12:45:df:e5:2a:35:5d:b3:70:ca:18:27:4b:e8:a3:2e:c4:81: 9c:7f:f7:d5:f3:a2:25:16:11:b2:cc:f8:fd:01:9b:b9:50:26: fe:6b:b2:79:88:6b:34:a8:c5:0c:4a:33:47:8e:80:90:58:2d: 82:ce:04:93:e0:35:e1:d3:4a:35:1e:0a:cd:ff:45:1e:8f:ef: 83:7e:16:58:66:30:0a:d9:92:3c:9e:26:12:3c:86:53:ad:88: 5f:88:96:a0:9f:dd:76:6c:c4:57:e6:c9:2f:d9:b5:7e:00:4a: 39:65:6a:b8:ce:c4:0c:52:f4:c4:78:1b:58:57:65:a5:f5:61: fb:a5:e8:eb:8b:50:a6:08:8a:ff:d7:f5:f9:df:2f:20:b5:39: 37:a8:21:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kOvYv4/FomBDr1jogec2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZGU3MDEyMmU0OTI4NWQwNWIwNWY5YmJmNDQ0OWJmYzgw ODMwZTUwHhcNMjUxMjIwMDcwMjE0WhcNMjUxMjIxMDcwMjE0WjAzMTEwLwYDVQQD EyhkNjRiMzA2NjJiYTdkNWQ3YTNhZDVmYTBjODBmOTQxOWVhNzRlNjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA9fE2RHfli+5mDRcYf/O81bLqCu OLHFcuFNWmdmn1MPRhMFkLVl0zEmHaQYZWI+m5cQTVG3d+roQJBqjVg2aOJjl3F7 AYPbwwvkCXUYJToNWoT6s1NX05HOXCw8Hm/hjorIo73ja15jtCOYab2bDVS4Nvmx 9Cw86sFjRz2kMzn/MuHUeAEJLeb7YQbmvd/16gStHtZFOtR+LeePCZwpnytJLw16 Auy8cqvO7ThwyI13NCLVsLlXZuoB8lfng5568aB8/qvwa51uccr7czRDaiJw3hMX qBG84ny9ilZiWfGd6sSX0VylvuNSv32YG0EiuD4yz5gzhSkNqlBOTdoJiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZLMGYrp9XXo61foMgPlBnqdOZ1MB8GA1UdIwQY MBaAFLnecBIuSShdBbBfm79ESb/ICDDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWQ1d0VpNUpLRjBGc0YtYnYwUkp2OGdJTU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hZmFlNmMtMjk4Mi00MTE5LTkwNmYt ODk1Zjg2Mjg3NTA2LzEvdWQ1d0VpNUpLRjBGc0YtYnYwUkp2OGdJTU9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9hZmFlNmMtMjk4Mi00MTE5LTkwNmYtODk1Zjg2Mjg3NTA2 LzEvdWQ1d0VpNUpLRjBGc0YtYnYwUkp2OGdJTU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlg/6y8b qEQYVeVWKBPZb0M/NrldXz/ITTpUAzyUU7cMRJpNfSEFXkVyIffavNxr3nlppHAb wZ291eqAOGslEVMopmd9PLOTXlCJLKwdxP+f6WAcswYghk+vyL4R1cK0vpuQYAJI GBdCPDNCEkXf5So1XbNwyhgnS+ijLsSBnH/31fOiJRYRssz4/QGbuVAm/muyeYhr NKjFDEozR46AkFgtgs4Ek+A14dNKNR4Kzf9FHo/vg34WWGYwCtmSPJ4mEjyGU62I X4iWoJ/ddmzEV+bJL9m1fgBKOWVquM7EDFL0xHgbWFdlpfVh+6Xo64tQpgiK/9f1 +d8vILU5N6ghZg== -----END CERTIFICATE-----Generated at Sat Dec 20 12:29:07 2025 by rpki-client