This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft File: D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft (raw, json) Hash identifier: icWTVdwe+nMvtT5i//R/k5KAnSn/4EomOsH6a63NVq8= Subject key identifier: 29:5A:79:9F:62:BA:B1:4C:40:88:87:F0:D4:30:76:63:96:63:3E:94 Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB Certificate issuer: /CN=0f92c52f86009879c177092f7cd83418b4df8cab Certificate serial: 019B38A29F9D024BD84CF0C7DB46BD9E3B9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft Manifest number: 178C Signing time: Fri 19 Dec 2025 22:02:20 +0000 Manifest this update: Fri 19 Dec 2025 22:02:20 +0000 Manifest next update: Sat 20 Dec 2025 22:02:20 +0000 Files and hashes: 1: D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl (hash: S3/yM+m85F6MQIe4fxFHMtFnjRDsY5aDCIAVG2lvLuE=) 2: HUHlNiQYgJ4Q8Qh3sAD_OVXJBhA.roa (hash: OPxk8KCEOkzaDriX+1Y8hLRMwmqx3zDs8p9mPqnsEt0=) 3: PajWCIMvcFk4AhOAYqjPPCoKGSM.roa (hash: YLRXPcoHiAKu8WSdD1lhP04YPthD74gG0Yhmp7yGgeI=) 4: wkRan0gCCPqjhSya1MCejtYVUwQ.roa (hash: CcC9CLeeg2oAb+UFqiFxA3SwU8cWbyT2GAOTTlHtPbo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:9f:9d:02:4b:d8:4c:f0:c7:db:46:bd:9e:3b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab Validity Not Before: Dec 19 22:02:20 2025 GMT Not After : Dec 20 22:02:20 2025 GMT Subject: CN=295a799f62bab14c408887f0d430766396633e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:64:d8:e0:54:72:76:93:5f:d0:22:e9:88:9d: 15:17:05:bc:b1:1f:8b:57:8c:d7:e7:f2:79:7a:ff: 7f:60:7b:56:27:1a:25:4d:01:c4:1e:b7:c3:3f:14: 43:46:eb:b8:be:8f:ae:73:70:bd:3b:ba:84:01:b1: 6d:90:c0:85:7e:43:43:af:00:e4:69:9e:fb:a8:df: 48:68:92:59:6b:64:bb:9d:e6:80:3c:f2:31:a9:d1: 6b:f5:2d:f8:de:48:ea:82:da:51:93:ed:fa:1a:2c: f2:0c:5e:a9:40:5d:24:22:13:1a:2e:fc:85:d8:d6: 2e:2f:b6:d5:69:80:41:a8:78:7c:d5:5c:65:cc:8a: b3:4e:83:d1:46:78:a8:44:e5:7e:2d:b1:a2:78:c8: 7d:4b:3f:92:9e:f6:81:4d:0f:8d:45:ae:cb:6a:ec: bc:29:07:4b:21:fb:15:07:d7:b8:c1:61:7f:6d:12: c3:48:6b:48:a5:95:89:45:d4:4f:8e:25:af:4c:cb: f2:52:1d:66:43:06:79:7e:33:27:8b:4a:64:a3:69: ba:85:f3:5b:50:fc:d2:96:29:ff:aa:c2:0a:8e:6a: 8a:42:32:c2:59:0f:de:7e:8d:d8:29:14:4c:fb:88: f9:5c:15:55:ab:96:aa:7a:a0:64:85:35:a5:2c:ef: 7d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5A:79:9F:62:BA:B1:4C:40:88:87:F0:D4:30:76:63:96:63:3E:94 X509v3 Authority Key Identifier: keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:8c:c9:96:c1:84:ed:fb:1b:3d:a2:76:b9:d9:ef:b4:c5:57: 8b:4d:00:0b:27:30:ee:a1:0c:d8:31:84:38:90:9d:6e:f5:01: 4f:29:d5:c8:9a:89:68:15:01:7b:2b:a3:fc:ca:6c:99:31:c4: 35:10:a0:66:60:51:49:2d:67:52:fc:22:17:bf:e7:5d:1e:6b: 52:68:18:a5:6d:6b:92:e1:9b:cf:64:b4:33:4c:12:4c:b8:e5: a1:62:2a:5a:01:67:ff:1b:bd:2b:4d:03:fc:34:fb:bf:33:b4: 1f:3e:3e:6d:ac:de:8b:92:bd:f1:b2:3d:92:dc:3d:61:d2:af: 39:e7:0d:2d:f0:fa:d2:5a:86:34:f6:07:61:75:d4:be:42:3a: 41:a5:95:8a:33:9e:aa:93:7f:34:0b:ed:25:96:fc:3b:2b:f3: d3:46:5e:25:aa:aa:0a:01:bb:55:d8:b9:ab:cf:e1:2d:10:8f: 9b:d0:2d:d1:52:be:1c:25:4d:36:58:81:88:59:5b:ad:88:c2: 28:ce:6d:e5:0b:40:42:e0:5e:10:24:55:c5:32:6b:4b:92:8f: 4c:3d:37:52:c3:d4:e8:59:c5:ed:24:8e:33:3b:59:1a:35:90: 39:9d:c3:2e:be:8f:9e:69:21:2c:f1:4a:dd:d1:13:e3:c6:9b: 10:27:10:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4op+dAkvYTPDH20a9njuaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOTJjNTJmODYwMDk4NzljMTc3MDkyZjdjZDgzNDE4YjRk ZjhjYWIwHhcNMjUxMjE5MjIwMjIwWhcNMjUxMjIwMjIwMjIwWjAzMTEwLwYDVQQD EygyOTVhNzk5ZjYyYmFiMTRjNDA4ODg3ZjBkNDMwNzY2Mzk2NjMzZTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGTY4FRydpNf0CLpiJ0VFwW8sR+L V4zX5/J5ev9/YHtWJxolTQHEHrfDPxRDRuu4vo+uc3C9O7qEAbFtkMCFfkNDrwDk aZ77qN9IaJJZa2S7neaAPPIxqdFr9S343kjqgtpRk+36GizyDF6pQF0kIhMaLvyF 2NYuL7bVaYBBqHh81VxlzIqzToPRRnioROV+LbGieMh9Sz+SnvaBTQ+NRa7Lauy8 KQdLIfsVB9e4wWF/bRLDSGtIpZWJRdRPjiWvTMvyUh1mQwZ5fjMni0pko2m6hfNb UPzSlin/qsIKjmqKQjLCWQ/efo3YKRRM+4j5XBVVq5aqeqBkhTWlLO99swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClaeZ9iurFMQIiH8NQwdmOWYz6UMB8GA1UdIwQY MBaAFA+SxS+GAJh5wXcJL3zYNBi034yrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDVMRkw0WUFtSG5CZHdrdmZOZzBHTFRmaktzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lOGMyODctZjA0OS00NTk1LTg2ZWIt MGJlMjA5ZmZiYWVjLzEvRDVMRkw0WUFtSG5CZHdrdmZOZzBHTFRmaktzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lOGMyODctZjA0OS00NTk1LTg2ZWItMGJlMjA5ZmZiYWVj LzEvRDVMRkw0WUFtSG5CZHdrdmZOZzBHTFRmaktzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIzJlsGE 7fsbPaJ2udnvtMVXi00ACycw7qEM2DGEOJCdbvUBTynVyJqJaBUBeyuj/MpsmTHE NRCgZmBRSS1nUvwiF7/nXR5rUmgYpW1rkuGbz2S0M0wSTLjloWIqWgFn/xu9K00D /DT7vzO0Hz4+bazei5K98bI9ktw9YdKvOecNLfD60lqGNPYHYXXUvkI6QaWVijOe qpN/NAvtJZb8Oyvz00ZeJaqqCgG7Vdi5q8/hLRCPm9At0VK+HCVNNliBiFlbrYjC KM5t5QtAQuBeECRVxTJrS5KPTD03UsPU6FnF7SSOMztZGjWQOZ3DLr6PnmkhLPFK 3dET48abECcQ6A== -----END CERTIFICATE-----Generated at Sat Dec 20 01:31:44 2025 by rpki-client