This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json) Hash identifier: 3UmWP5MScrjcYtIits28h1nxq2B2nsv79vo+5ySYm1U= Subject key identifier: DE:A6:9F:AD:22:C8:B0:67:4C:45:DB:91:FE:6A:1C:72:8B:0C:89:6F Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83 Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83 Certificate serial: 019B35D754590EE8BEBB51F8BE00F974C654 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft Manifest number: 0593 Signing time: Fri 19 Dec 2025 09:01:02 +0000 Manifest this update: Fri 19 Dec 2025 09:01:02 +0000 Manifest next update: Sat 20 Dec 2025 09:01:02 +0000 Files and hashes: 1: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: fw/0hHGFrbFLD2o866LJfqVip3CZWQmeJbpA2I1X8vc=) 2: yErW5kNKHDcTg-fzTjTLkaeTdfs.roa (hash: kizhklattplgXfiOmItfgbUnFHeiT1NCHm8Wv3r0lL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:54:59:0e:e8:be:bb:51:f8:be:00:f9:74:c6:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83 Validity Not Before: Dec 19 09:01:02 2025 GMT Not After : Dec 20 09:01:02 2025 GMT Subject: CN=dea69fad22c8b0674c45db91fe6a1c728b0c896f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7c:24:d3:e7:6d:f5:9a:f7:ea:9a:e6:75:bf: dd:25:e1:08:ff:77:17:b8:53:0e:93:ca:3b:f7:1d: f2:00:f4:e8:58:e2:9d:3c:5c:26:5c:a4:d8:6a:e9: d1:23:df:e2:ad:b1:45:52:38:20:a2:2c:06:bc:35: 38:1d:2b:c5:da:3e:f2:71:05:5a:7b:ff:c5:a3:2d: 58:8d:9f:e5:2d:52:eb:c3:3b:ed:9d:33:ae:0a:17: bf:8c:7b:50:f3:30:1a:b8:6f:f6:97:2f:9b:a6:52: d2:8d:80:5d:43:c9:be:d9:ee:28:41:a7:98:fe:c4: ca:06:33:a6:d7:7d:3d:68:d9:e9:09:eb:78:cc:85: 7f:56:63:65:8d:a9:22:b3:a4:0b:03:cb:28:21:a0: f9:46:5a:89:95:f4:ff:cc:8a:4a:64:aa:4e:95:e0: af:c6:7a:7e:2a:8b:9a:2b:4c:94:22:c0:51:8c:d6: b9:10:be:89:ba:84:65:a9:ad:dc:15:7c:83:ae:f0: 6b:8f:09:ca:c7:9a:b8:32:04:92:d2:7c:0d:8e:30: 32:89:71:32:ab:b5:75:c9:93:b1:f2:87:e7:d4:d3: a5:2a:89:44:e8:97:fc:00:eb:2f:d6:28:ed:9d:6c: b1:3b:fe:77:13:cd:8a:1d:20:d6:69:1b:8e:e3:ef: a6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A6:9F:AD:22:C8:B0:67:4C:45:DB:91:FE:6A:1C:72:8B:0C:89:6F X509v3 Authority Key Identifier: keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:4b:82:8f:d2:ba:9e:6e:43:52:b4:56:27:28:0a:2c:0d:15: 11:97:05:83:c2:42:3d:a2:ac:4b:c5:0a:3a:ea:56:0a:fd:7d: 98:ff:82:17:21:77:e7:bd:b4:72:66:83:8c:6e:19:bc:ba:6e: 01:31:fc:5d:af:fb:ec:5c:3e:f5:bd:cb:7f:d0:77:59:b6:b5: aa:ba:86:2b:8b:38:6d:b9:02:4b:84:cb:39:d7:81:ce:7c:1e: 47:0e:9a:d5:51:23:f8:d8:68:fe:0f:4f:f3:e2:f3:09:73:c6: 92:de:88:55:d2:6b:57:56:9b:91:71:6e:62:57:d4:ae:b8:8c: 00:9b:7b:c2:57:11:f3:17:6d:f8:1a:90:b3:27:07:50:9c:3f: 36:21:e0:24:e9:eb:bd:04:89:8f:49:8d:e5:b9:1b:d2:fe:9c: 76:2f:d6:c6:e8:83:e5:21:95:97:47:20:c4:84:0e:ea:2a:bd: 5c:ff:bf:ee:e6:30:6d:91:d1:c9:58:16:8f:1c:02:66:37:fd: e9:25:b0:63:4c:e7:f8:ac:33:23:32:59:2f:2f:17:d6:15:2e: 3b:fc:56:60:51:e0:83:e7:b9:e1:d2:85:be:08:6c:f8:90:95: 1b:c2:1d:a3:ef:7f:85:e0:5a:20:1f:63:4f:35:bc:3b:c7:80: 5e:ac:73:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs111RZDui+u1H4vgD5dMZUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOTI1NjkxNjAzOTAzZWYyNDQ4NWNiNGJmMzVlMjgzMDc4 NjdiODMwHhcNMjUxMjE5MDkwMTAyWhcNMjUxMjIwMDkwMTAyWjAzMTEwLwYDVQQD EyhkZWE2OWZhZDIyYzhiMDY3NGM0NWRiOTFmZTZhMWM3MjhiMGM4OTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Hwk0+dt9Zr36prmdb/dJeEI/3cX uFMOk8o79x3yAPToWOKdPFwmXKTYaunRI9/irbFFUjggoiwGvDU4HSvF2j7ycQVa e//Foy1YjZ/lLVLrwzvtnTOuChe/jHtQ8zAauG/2ly+bplLSjYBdQ8m+2e4oQaeY /sTKBjOm1309aNnpCet4zIV/VmNljakis6QLA8soIaD5RlqJlfT/zIpKZKpOleCv xnp+KouaK0yUIsBRjNa5EL6JuoRlqa3cFXyDrvBrjwnKx5q4MgSS0nwNjjAyiXEy q7V1yZOx8ofn1NOlKolE6Jf8AOsv1ijtnWyxO/53E82KHSDWaRuO4++mHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6mn60iyLBnTEXbkf5qHHKLDIlvMB8GA1UdIwQY MBaAFA+SVpFgOQPvJEhctL814oMHhnuDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDVKV2tXQTVBLThrU0Z5MHZ6WGlnd2VHZTRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mZjkyNTItM2RiNC00NTVmLWIyMGYt ZTNlMzAyMDA1ZDhmLzEvRDVKV2tXQTVBLThrU0Z5MHZ6WGlnd2VHZTRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9mZjkyNTItM2RiNC00NTVmLWIyMGYtZTNlMzAyMDA1ZDhm LzEvRDVKV2tXQTVBLThrU0Z5MHZ6WGlnd2VHZTRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyEuCj9K6 nm5DUrRWJygKLA0VEZcFg8JCPaKsS8UKOupWCv19mP+CFyF35720cmaDjG4ZvLpu ATH8Xa/77Fw+9b3Lf9B3Wba1qrqGK4s4bbkCS4TLOdeBznweRw6a1VEj+Nho/g9P 8+LzCXPGkt6IVdJrV1abkXFuYlfUrriMAJt7wlcR8xdt+BqQsycHUJw/NiHgJOnr vQSJj0mN5bkb0v6cdi/WxuiD5SGVl0cgxIQO6iq9XP+/7uYwbZHRyVgWjxwCZjf9 6SWwY0zn+KwzIzJZLy8X1hUuO/xWYFHgg+e54dKFvghs+JCVG8Ido+9/heBaIB9j TzW8O8eAXqxzgw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:23:12 2025 by rpki-client