This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft File: rSzfJ9neZesk5c_J0xDkyKAwFGA.mft (raw, json) Hash identifier: Y7RZflPqtD+LkYgUXFfe9xBIux3kBJl0AkKq29osFTU= Subject key identifier: 82:7F:42:71:D9:04:09:4A:63:AB:79:87:F3:96:E1:6A:65:7C:C7:3F Authority key identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60 Certificate issuer: /CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460 Certificate serial: 019B62421276BB19DF51DE39710B3311DC34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft Manifest number: 0DA4 Signing time: Sun 28 Dec 2025 00:00:55 +0000 Manifest this update: Sun 28 Dec 2025 00:00:55 +0000 Manifest next update: Mon 29 Dec 2025 00:00:55 +0000 Files and hashes: 1: Zp_o_Avy64dimsDN37AJZ_vsvNw.roa (hash: w725AD9grVqnjs1N3X5smX0OnVgWb9b37Wpm1j4UCoQ=) 2: rSzfJ9neZesk5c_J0xDkyKAwFGA.crl (hash: XxAxEDCYBmF91KVYvm1rlfeuPCY53avuBh9PtySBlus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:42:12:76:bb:19:df:51:de:39:71:0b:33:11:dc:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460 Validity Not Before: Dec 28 00:00:55 2025 GMT Not After : Dec 29 00:00:55 2025 GMT Subject: CN=827f4271d904094a63ab7987f396e16a657cc73f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f3:a6:ec:de:5d:8b:a2:16:14:65:f9:02:6c: 39:e7:79:8c:4c:7e:47:d1:34:ae:8a:68:31:18:63: a3:50:2e:42:79:fe:95:79:7e:1e:e2:84:0b:41:09: 12:9c:40:31:d7:57:38:05:7d:35:ba:40:54:33:2e: d7:dd:66:76:d7:73:b5:85:d1:67:70:a9:6c:90:af: bc:00:1e:b7:dd:15:f5:b0:25:7e:74:80:10:52:b8: a3:9b:d6:5b:04:ba:38:32:c3:26:0e:66:c7:47:e0: 5e:34:b4:18:5b:9e:83:a2:9d:73:f4:9d:5e:7e:09: 98:56:4b:c4:1d:32:5d:f3:31:91:fd:93:5a:fb:93: 98:73:70:bb:46:54:f9:63:67:91:8f:06:bf:40:79: 1a:e9:82:d4:ac:b1:93:ea:ae:6a:83:22:4c:82:5b: 3c:fa:39:b0:bc:a8:c1:30:19:29:88:c6:86:83:29: ed:7e:3f:7e:14:32:ca:2d:c8:66:15:38:62:7b:28: f2:9d:d3:7d:4f:63:72:77:e6:4e:63:4c:d6:99:49: ae:7b:19:47:19:5b:a2:e4:d0:2e:e3:b2:82:bd:34: 3c:e6:5a:97:72:8c:a7:05:8d:37:c9:d8:fe:53:35: 3f:d4:16:b5:63:7e:85:a9:a5:bc:90:ae:0a:0a:7e: f6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7F:42:71:D9:04:09:4A:63:AB:79:87:F3:96:E1:6A:65:7C:C7:3F X509v3 Authority Key Identifier: keyid:AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:39:2d:12:10:24:98:1e:ed:4a:c2:df:b2:1d:59:c1:c0:08: 2d:4b:13:31:c4:d3:d4:1b:72:a9:87:06:f8:02:db:d4:7a:bb: 29:fa:1b:e8:9b:49:49:83:ca:95:35:08:d0:b1:ba:3e:ae:d8: 57:f0:24:3a:1e:59:d5:5c:c7:31:ce:da:47:21:ef:1f:5f:3f: 5a:6c:d0:f8:85:36:88:ef:86:32:05:07:b2:36:e3:1d:2d:02: 7c:e0:99:ef:d8:a3:b2:7c:e3:1e:c3:25:7d:77:6d:a0:ed:60: 81:e3:bd:d2:c5:7d:b5:a7:14:be:ce:62:6e:6a:72:6a:69:6f: 72:5e:b5:ca:cc:61:58:6f:fa:7f:ce:ce:5b:13:73:ed:b2:0d: a4:e4:90:cd:da:36:62:11:95:ed:0b:ca:b0:4a:c6:1c:de:5a: 66:ab:a7:63:ba:fd:38:dd:80:16:22:1c:20:5b:af:2c:16:92: 1a:43:ba:27:ca:bf:78:f7:20:ad:1b:68:78:87:47:14:81:76: c6:ee:5a:27:17:64:8d:1b:1e:54:4e:c8:37:f5:a8:6f:8a:bf: 3e:90:83:99:26:81:68:3a:d8:cb:14:51:c5:35:d2:5f:b8:fc: 4c:0d:34:5b:e5:40:c7:f7:a3:24:40:87:45:fb:89:16:55:44: 4f:9f:86:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiQhJ2uxnfUd45cQszEdw0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMmNkZjI3ZDlkZTY1ZWIyNGU1Y2ZjOWQzMTBlNGM4YTAz MDE0NjAwHhcNMjUxMjI4MDAwMDU1WhcNMjUxMjI5MDAwMDU1WjAzMTEwLwYDVQQD Eyg4MjdmNDI3MWQ5MDQwOTRhNjNhYjc5ODdmMzk2ZTE2YTY1N2NjNzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPOm7N5di6IWFGX5Amw553mMTH5H 0TSuimgxGGOjUC5Cef6VeX4e4oQLQQkSnEAx11c4BX01ukBUMy7X3WZ213O1hdFn cKlskK+8AB633RX1sCV+dIAQUrijm9ZbBLo4MsMmDmbHR+BeNLQYW56Dop1z9J1e fgmYVkvEHTJd8zGR/ZNa+5OYc3C7RlT5Y2eRjwa/QHka6YLUrLGT6q5qgyJMgls8 +jmwvKjBMBkpiMaGgyntfj9+FDLKLchmFThieyjyndN9T2Nyd+ZOY0zWmUmuexlH GVui5NAu47KCvTQ85lqXcoynBY03ydj+UzU/1Ba1Y36FqaW8kK4KCn72SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJ/QnHZBAlKY6t5h/OW4WplfMc/MB8GA1UdIwQY MBaAFK0s3yfZ3mXrJOXPydMQ5MigMBRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclN6Zko5bmVaZXNrNWNfSjB4RGt5S0F3RkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lZDYzNGItMzlmNy00YjljLTg2ZTQt MWU5MjM4Y2YwMjhjLzEvclN6Zko5bmVaZXNrNWNfSjB4RGt5S0F3RkdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lZDYzNGItMzlmNy00YjljLTg2ZTQtMWU5MjM4Y2YwMjhj LzEvclN6Zko5bmVaZXNrNWNfSjB4RGt5S0F3RkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjktEhAk mB7tSsLfsh1ZwcAILUsTMcTT1BtyqYcG+ALb1Hq7Kfob6JtJSYPKlTUI0LG6Pq7Y V/AkOh5Z1VzHMc7aRyHvH18/WmzQ+IU2iO+GMgUHsjbjHS0CfOCZ79ijsnzjHsMl fXdtoO1ggeO90sV9tacUvs5ibmpyamlvcl61ysxhWG/6f87OWxNz7bINpOSQzdo2 YhGV7QvKsErGHN5aZqunY7r9ON2AFiIcIFuvLBaSGkO6J8q/ePcgrRtoeIdHFIF2 xu5aJxdkjRseVE7IN/Wob4q/PpCDmSaBaDrYyxRRxTXSX7j8TA00W+VAx/ejJECH RfuJFlVET5+GWw== -----END CERTIFICATE-----Generated at Sun Dec 28 09:06:32 2025 by rpki-client