This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft File: ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft (raw, json) Hash identifier: dOaX4UAtdgt9vcgNmt1G77cCTCK9/Sgal5c/ABXYG24= Subject key identifier: 10:6D:2F:2B:DD:F3:15:5D:09:B2:FD:FE:C1:16:6A:BB:D2:CE:B2:70 Authority key identifier: B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5 Certificate issuer: /CN=b9de70122e49285d05b05f9bbf4449bfc80830e5 Certificate serial: 019B4DE108F4F9D757A6BA3086033767E83C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft Manifest number: 1029 Signing time: Wed 24 Dec 2025 01:02:31 +0000 Manifest this update: Wed 24 Dec 2025 01:02:31 +0000 Manifest next update: Thu 25 Dec 2025 01:02:31 +0000 Files and hashes: 1: KzXb-GAIiluztxWbXEztv2KxINE.roa (hash: RfAT/ToLMD66v1yb0qJDxKlt/UFCsEuoJitem9+zGng=) 2: ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl (hash: erp1/qFSlhwkk2KAgm9AYNcJBq0ftBHCE1Gemoxri6s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e1:08:f4:f9:d7:57:a6:ba:30:86:03:37:67:e8:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9de70122e49285d05b05f9bbf4449bfc80830e5 Validity Not Before: Dec 24 01:02:31 2025 GMT Not After : Dec 25 01:02:31 2025 GMT Subject: CN=106d2f2bddf3155d09b2fdfec1166abbd2ceb270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9c:a2:74:73:df:be:89:a2:2a:06:77:e4:b4: c5:1d:f3:18:31:64:71:ce:ee:f8:eb:6f:39:0a:e7: 95:86:11:1d:43:c9:d3:c2:2f:b4:47:70:bb:5c:04: f6:d2:ed:a5:b2:ad:23:96:2b:1f:f8:59:c5:f3:71: 56:6a:f5:5b:62:6d:a3:cc:8e:b2:95:f1:82:cb:5b: 53:c4:3b:7d:ff:47:e9:dc:53:5f:69:65:17:4e:d0: 5d:11:36:53:2b:7c:88:73:30:ce:4e:2a:33:5f:de: e8:27:b2:c1:8b:90:9c:9b:4f:7f:67:0e:3e:83:e0: 50:34:58:d1:3d:d2:16:ea:bc:fa:0f:88:f4:a1:77: 9d:12:f2:b5:91:fc:c3:c3:25:f8:87:c1:22:d7:a3: 73:8d:85:1b:a5:e1:12:53:ed:59:94:5c:e4:75:46: 88:a6:70:dd:61:ef:d5:fa:e3:11:e4:06:f1:c4:21: 1e:d0:4b:0d:ee:0c:0d:89:a7:0e:61:46:fa:63:cb: 32:a1:cb:8b:a7:19:0b:54:f9:46:4f:7a:81:1d:59: 56:23:4f:30:71:4e:c0:df:b7:3b:77:f3:74:6d:0b: 27:d6:0d:b4:04:7c:a6:95:d8:5d:9d:5c:35:59:39: 3c:39:ce:90:ec:d4:f7:28:a2:fb:1c:eb:7a:86:e0: be:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6D:2F:2B:DD:F3:15:5D:09:B2:FD:FE:C1:16:6A:BB:D2:CE:B2:70 X509v3 Authority Key Identifier: keyid:B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:be:69:f8:9e:ef:44:cc:27:b0:c0:cd:f9:f4:6b:68:ce:7f: df:e6:f5:39:a5:58:68:c4:72:bc:84:50:90:ec:5c:55:7e:a5: dc:3b:46:4a:51:3c:d1:6b:5b:65:f6:b7:3a:3d:99:9c:dc:61: af:78:60:5f:26:70:46:13:24:c2:81:20:b7:9d:4f:ce:18:bf: 91:71:99:bf:9f:45:9e:24:44:05:47:af:96:e3:66:ab:d4:ff: 9d:39:ba:bc:a8:ad:d6:2d:30:c3:02:42:c9:20:d0:25:fb:c8: 59:fc:a4:93:9f:f5:a7:a3:67:82:00:ef:ee:00:08:85:05:f9: 5b:fb:4b:f3:ca:22:7a:a8:ce:5c:4c:3e:ff:a4:89:bd:f6:41: 86:fc:73:7c:16:fa:70:a5:0c:6a:af:82:01:7c:7b:5f:b0:0a: fd:8f:d9:9a:f6:e1:39:e1:6b:17:47:96:67:d7:41:48:88:12: 3e:d4:26:80:f8:1f:78:42:a2:45:a0:68:28:29:c9:87:30:12: f1:6c:1e:df:79:da:89:a2:d5:5a:30:2d:ac:75:ab:f4:1f:96: 9f:85:00:0a:ef:7e:56:3e:e1:81:df:8a:d3:db:10:ac:c5:e6: c2:35:9a:fd:4b:dc:de:a2:3f:a8:71:71:a5:0a:71:96:fa:d3: f9:a0:fb:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4Qj0+ddXprowhgM3Z+g8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZGU3MDEyMmU0OTI4NWQwNWIwNWY5YmJmNDQ0OWJmYzgw ODMwZTUwHhcNMjUxMjI0MDEwMjMxWhcNMjUxMjI1MDEwMjMxWjAzMTEwLwYDVQQD EygxMDZkMmYyYmRkZjMxNTVkMDliMmZkZmVjMTE2NmFiYmQyY2ViMjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pyidHPfvomiKgZ35LTFHfMYMWRx zu746285CueVhhEdQ8nTwi+0R3C7XAT20u2lsq0jlisf+FnF83FWavVbYm2jzI6y lfGCy1tTxDt9/0fp3FNfaWUXTtBdETZTK3yIczDOTiozX97oJ7LBi5Ccm09/Zw4+ g+BQNFjRPdIW6rz6D4j0oXedEvK1kfzDwyX4h8Ei16NzjYUbpeESU+1ZlFzkdUaI pnDdYe/V+uMR5AbxxCEe0EsN7gwNiacOYUb6Y8syocuLpxkLVPlGT3qBHVlWI08w cU7A37c7d/N0bQsn1g20BHymldhdnVw1WTk8Oc6Q7NT3KKL7HOt6huC+1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBtLyvd8xVdCbL9/sEWarvSzrJwMB8GA1UdIwQY MBaAFLnecBIuSShdBbBfm79ESb/ICDDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWQ1d0VpNUpLRjBGc0YtYnYwUkp2OGdJTU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hZmFlNmMtMjk4Mi00MTE5LTkwNmYt ODk1Zjg2Mjg3NTA2LzEvdWQ1d0VpNUpLRjBGc0YtYnYwUkp2OGdJTU9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9hZmFlNmMtMjk4Mi00MTE5LTkwNmYtODk1Zjg2Mjg3NTA2 LzEvdWQ1d0VpNUpLRjBGc0YtYnYwUkp2OGdJTU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACL5p+J7v RMwnsMDN+fRraM5/3+b1OaVYaMRyvIRQkOxcVX6l3DtGSlE80WtbZfa3Oj2ZnNxh r3hgXyZwRhMkwoEgt51Pzhi/kXGZv59FniREBUevluNmq9T/nTm6vKit1i0wwwJC ySDQJfvIWfykk5/1p6NnggDv7gAIhQX5W/tL88oieqjOXEw+/6SJvfZBhvxzfBb6 cKUMaq+CAXx7X7AK/Y/ZmvbhOeFrF0eWZ9dBSIgSPtQmgPgfeEKiRaBoKCnJhzAS 8Wwe33naiaLVWjAtrHWr9B+Wn4UACu9+Vj7hgd+K09sQrMXmwjWa/Uvc3qI/qHFx pQpxlvrT+aD7kg== -----END CERTIFICATE-----Generated at Wed Dec 24 02:59:42 2025 by rpki-client