This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json) Hash identifier: wnF4bNViJ6m08fXNw9oj/VXZqsgG4uFAlSsdvNdkREA= Subject key identifier: 6E:2F:5F:E4:B7:C9:AA:AD:D9:0E:66:06:38:38:EA:A8:4C:14:D7:EC Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83 Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83 Certificate serial: 019B3BA21C90791370283DC5DC7AE12EF542 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft Manifest number: 0596 Signing time: Sat 20 Dec 2025 12:00:38 +0000 Manifest this update: Sat 20 Dec 2025 12:00:38 +0000 Manifest next update: Sun 21 Dec 2025 12:00:38 +0000 Files and hashes: 1: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: WM60dTSF2vIIvRw02ye7oLVm8pTU/85EQwnMO7tasuM=) 2: yErW5kNKHDcTg-fzTjTLkaeTdfs.roa (hash: kizhklattplgXfiOmItfgbUnFHeiT1NCHm8Wv3r0lL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:1c:90:79:13:70:28:3d:c5:dc:7a:e1:2e:f5:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83 Validity Not Before: Dec 20 12:00:38 2025 GMT Not After : Dec 21 12:00:38 2025 GMT Subject: CN=6e2f5fe4b7c9aaadd90e66063838eaa84c14d7ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0e:4e:bb:53:08:54:7a:36:d9:24:00:ab:2d: ea:27:88:64:f9:4f:9d:a6:94:71:43:3d:85:49:33: 45:4f:33:74:7b:37:15:fe:d3:47:c1:a9:43:4b:87: c7:56:1b:2a:27:4f:d5:e8:e5:4d:73:66:2b:77:12: 76:10:31:50:95:8e:2b:b2:53:3e:cc:85:ad:32:7c: 9f:51:da:33:d5:7d:2b:41:16:14:f2:86:64:b2:4b: 7f:10:99:ad:0a:47:f2:9a:bd:22:19:58:8c:02:ca: 8d:9c:11:ee:1f:8f:10:1d:7d:46:b2:83:cf:e7:3a: 8b:90:10:cb:80:77:cc:b1:06:5c:68:64:70:51:a5: 9d:60:26:58:3a:6a:db:27:61:cd:ee:4c:65:a5:29: 9d:c6:9b:54:37:9e:77:cb:75:da:bd:6b:7c:cd:e6: 2c:52:94:7f:6a:46:36:47:2a:70:6c:ca:6f:a5:ca: ec:ce:8c:16:94:35:e6:67:9b:46:ca:a3:25:24:47: 91:fc:ae:3b:23:5d:9a:f0:a8:5f:a2:b4:9c:43:d8: ba:12:1d:8f:6a:a5:ac:bc:35:ba:07:1b:f8:ae:56: 22:16:0b:f2:fb:8e:3d:30:73:22:b9:1f:b7:18:30: 65:11:a4:48:32:28:3e:b9:06:6b:ca:f1:2b:7c:04: 04:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2F:5F:E4:B7:C9:AA:AD:D9:0E:66:06:38:38:EA:A8:4C:14:D7:EC X509v3 Authority Key Identifier: keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:1a:18:b0:ae:79:3e:e3:51:40:8e:c4:cb:9d:c1:e1:93:7c: 46:db:7a:df:1d:2c:90:02:e9:ea:6b:11:e6:77:a1:91:f7:50: 89:ac:e7:71:49:9c:01:f4:d8:5a:b7:34:0f:26:eb:73:74:4d: fe:52:42:38:a3:62:30:ec:07:bc:74:38:d1:ac:21:0d:c3:d7: c4:0c:b5:48:34:84:73:7a:48:4d:66:1e:3e:74:8c:35:5e:9d: 9a:36:2b:13:db:38:7e:0c:a9:d6:11:14:d7:c9:9d:4a:1c:b9: 4d:8b:37:25:31:27:d0:4a:20:e2:07:73:2c:86:54:13:9c:77: 60:fe:31:ad:75:17:93:9d:ad:bb:1c:f7:be:82:7b:64:52:05: f4:13:0d:e8:3a:e7:0d:7c:fb:0d:67:3a:88:8e:7d:58:ee:41: 54:3e:fb:89:66:b4:87:a7:1b:7e:69:93:a5:65:85:e8:94:5c: 60:d7:58:fb:2c:de:23:45:ac:69:54:9c:ee:6a:7b:18:81:47: a1:3c:87:2a:3d:b4:5e:e9:1a:2a:57:d8:5b:d7:9b:2f:29:7e: ca:1b:4f:9e:0d:32:31:52:e8:e2:2b:ab:06:05:ee:bc:e4:7c: 3f:c2:e7:aa:d9:55:e1:06:6d:f3:47:1b:8c:ba:6b:78:73:b8: c0:b2:fa:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ohyQeRNwKD3F3HrhLvVCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOTI1NjkxNjAzOTAzZWYyNDQ4NWNiNGJmMzVlMjgzMDc4 NjdiODMwHhcNMjUxMjIwMTIwMDM4WhcNMjUxMjIxMTIwMDM4WjAzMTEwLwYDVQQD Eyg2ZTJmNWZlNGI3YzlhYWFkZDkwZTY2MDYzODM4ZWFhODRjMTRkN2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA5Ou1MIVHo22SQAqy3qJ4hk+U+d ppRxQz2FSTNFTzN0ezcV/tNHwalDS4fHVhsqJ0/V6OVNc2YrdxJ2EDFQlY4rslM+ zIWtMnyfUdoz1X0rQRYU8oZkskt/EJmtCkfymr0iGViMAsqNnBHuH48QHX1GsoPP 5zqLkBDLgHfMsQZcaGRwUaWdYCZYOmrbJ2HN7kxlpSmdxptUN553y3XavWt8zeYs UpR/akY2RypwbMpvpcrszowWlDXmZ5tGyqMlJEeR/K47I12a8KhforScQ9i6Eh2P aqWsvDW6Bxv4rlYiFgvy+449MHMiuR+3GDBlEaRIMig+uQZryvErfAQEpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4vX+S3yaqt2Q5mBjg46qhMFNfsMB8GA1UdIwQY MBaAFA+SVpFgOQPvJEhctL814oMHhnuDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDVKV2tXQTVBLThrU0Z5MHZ6WGlnd2VHZTRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mZjkyNTItM2RiNC00NTVmLWIyMGYt ZTNlMzAyMDA1ZDhmLzEvRDVKV2tXQTVBLThrU0Z5MHZ6WGlnd2VHZTRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9mZjkyNTItM2RiNC00NTVmLWIyMGYtZTNlMzAyMDA1ZDhm LzEvRDVKV2tXQTVBLThrU0Z5MHZ6WGlnd2VHZTRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRoYsK55 PuNRQI7Ey53B4ZN8Rtt63x0skALp6msR5nehkfdQiazncUmcAfTYWrc0Dybrc3RN /lJCOKNiMOwHvHQ40awhDcPXxAy1SDSEc3pITWYePnSMNV6dmjYrE9s4fgyp1hEU 18mdShy5TYs3JTEn0Eog4gdzLIZUE5x3YP4xrXUXk52tuxz3voJ7ZFIF9BMN6Drn DXz7DWc6iI59WO5BVD77iWa0h6cbfmmTpWWF6JRcYNdY+yzeI0WsaVSc7mp7GIFH oTyHKj20XukaKlfYW9ebLyl+yhtPng0yMVLo4iurBgXuvOR8P8LnqtlV4QZt80cb jLpreHO4wLL6jg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:51:35 2025 by rpki-client