This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft File: d5LD_GkVSsfVFbysnaoH54vCKcw.mft (raw, json) Hash identifier: vVNNT+0rp5KvCTbnoOH33UbjrRjNpWFz02D+j9FOIak= Subject key identifier: A4:4B:46:F7:64:6B:63:D9:C1:48:17:11:8D:76:74:40:2E:8B:D5:C6 Authority key identifier: 77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC Certificate issuer: /CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc Certificate serial: 019B3C10036804CB654861DBD9F021537E02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 14:00:40 +0000 Manifest this update: Sat 20 Dec 2025 14:00:40 +0000 Manifest next update: Sun 21 Dec 2025 14:00:40 +0000 Files and hashes: 1: XufdK4JaU0kijhaCZqp6MWC7lI8.roa (hash: tAIQSyAZo/oGjmfexz3lVWcMQblwf+06mjxANWC5dis=) 2: d5LD_GkVSsfVFbysnaoH54vCKcw.crl (hash: appP1ejVjhFozLidoa21x4SOPOhLagRp+x7U+9nqBno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:03:68:04:cb:65:48:61:db:d9:f0:21:53:7e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc Validity Not Before: Dec 20 14:00:40 2025 GMT Not After : Dec 21 14:00:40 2025 GMT Subject: CN=a44b46f7646b63d9c14817118d7674402e8bd5c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:01:f8:08:bd:7c:b5:23:76:1a:8b:e5:24:7c: 02:09:17:30:6f:7d:ff:10:e4:89:1b:d0:b9:5a:da: d4:5c:e2:6b:52:22:1e:25:0b:66:0b:3c:57:c3:0e: bb:16:d6:61:81:a9:50:ab:ed:56:79:9f:53:43:15: ef:1f:c7:85:6f:ca:58:35:82:19:b2:93:e3:05:07: ad:cd:a8:60:90:9f:99:a6:af:5b:c9:88:af:70:7b: 80:18:23:96:f0:a8:ce:93:d4:a8:2c:bd:61:73:e1: ba:3f:0f:db:b3:08:36:15:37:2f:b2:e1:8e:e2:11: 1f:32:03:f4:d2:51:c4:36:c3:2c:46:fd:39:b1:07: 49:7c:29:b3:d3:77:b6:01:b7:7b:ed:4e:3e:b4:c8: ed:44:dd:31:7f:86:e2:6a:37:5d:a7:5b:41:69:f9: 13:36:6d:81:3e:5f:5a:a7:b9:16:3c:b8:07:a8:7c: d0:df:17:78:90:f8:a9:97:cc:4b:34:41:25:ee:e1: 77:ab:f9:73:01:3e:56:0b:75:88:6c:30:fc:8c:0f: ed:ff:c2:fd:a8:05:72:12:64:fc:1c:f6:f0:1f:ba: b8:a9:62:c2:4d:73:b2:a6:15:04:50:6b:92:4d:ea: 58:bd:e3:e3:83:13:2d:89:89:cf:45:7a:6d:93:c2: d8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4B:46:F7:64:6B:63:D9:C1:48:17:11:8D:76:74:40:2E:8B:D5:C6 X509v3 Authority Key Identifier: keyid:77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:5c:98:3e:d3:d2:d9:5f:ff:9b:c0:a9:13:0c:62:5e:4a:d1: c3:1e:e6:a2:93:b4:71:33:89:06:3e:4a:76:45:13:31:e9:44: 4c:3b:5f:aa:75:d7:08:76:c4:27:3e:00:ec:dc:73:9e:06:2b: 03:58:35:d2:83:7e:93:85:00:2c:5a:a6:d5:8d:00:11:a5:1e: 04:93:1e:c9:0f:f4:a5:a7:6f:2c:2e:cf:11:d0:d3:6d:86:4a: 45:24:a2:a6:45:17:c1:a7:0e:86:13:0c:0c:d7:be:38:93:0c: 12:13:d2:31:39:b2:ca:27:a7:51:c4:e2:66:5d:93:c4:f3:d1: 55:ea:e5:11:13:79:b2:27:70:f7:de:51:1f:d3:02:fb:1c:4a: a3:14:68:bb:c4:c7:ac:04:21:88:c2:fb:8e:cd:5e:e1:7b:19: 66:e7:8d:d4:d9:8c:a1:5d:1b:48:37:14:a9:27:a7:62:68:8b: 68:4e:f3:6d:6d:0f:cc:f8:37:bd:0f:7a:52:bb:a4:5d:c9:05: 15:55:b0:bc:94:ab:00:7c:45:5d:04:b4:5e:fe:ea:60:58:f5: 64:c5:38:c3:0c:4b:fd:41:31:a9:ec:64:af:0e:54:48:0c:66: be:9a:6d:a8:7a:99:b9:83:71:4d:04:b7:cf:25:96:d6:d9:0e: e4:8b:e5:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EANoBMtlSGHb2fAhU34CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OTJjM2ZjNjkxNTRhYzdkNTE1YmNhYzlkYWEwN2U3OGJj MjI5Y2MwHhcNMjUxMjIwMTQwMDQwWhcNMjUxMjIxMTQwMDQwWjAzMTEwLwYDVQQD EyhhNDRiNDZmNzY0NmI2M2Q5YzE0ODE3MTE4ZDc2NzQ0MDJlOGJkNWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QH4CL18tSN2GovlJHwCCRcwb33/ EOSJG9C5WtrUXOJrUiIeJQtmCzxXww67FtZhgalQq+1WeZ9TQxXvH8eFb8pYNYIZ spPjBQetzahgkJ+Zpq9byYivcHuAGCOW8KjOk9SoLL1hc+G6Pw/bswg2FTcvsuGO 4hEfMgP00lHENsMsRv05sQdJfCmz03e2Abd77U4+tMjtRN0xf4biajddp1tBafkT Nm2BPl9ap7kWPLgHqHzQ3xd4kPipl8xLNEEl7uF3q/lzAT5WC3WIbDD8jA/t/8L9 qAVyEmT8HPbwH7q4qWLCTXOyphUEUGuSTepYvePjgxMtiYnPRXptk8LYWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRLRvdka2PZwUgXEY12dEAui9XGMB8GA1UdIwQY MBaAFHeSw/xpFUrH1RW8rJ2qB+eLwinMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC81MmI0OGQtMjhhOC00OGY1LWE0ZGYt NGRiNDBhMzY1NjNlLzEvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC81MmI0OGQtMjhhOC00OGY1LWE0ZGYtNGRiNDBhMzY1NjNl LzEvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1yYPtPS 2V//m8CpEwxiXkrRwx7mopO0cTOJBj5KdkUTMelETDtfqnXXCHbEJz4A7NxzngYr A1g10oN+k4UALFqm1Y0AEaUeBJMeyQ/0padvLC7PEdDTbYZKRSSipkUXwacOhhMM DNe+OJMMEhPSMTmyyienUcTiZl2TxPPRVerlERN5sidw995RH9MC+xxKoxRou8TH rAQhiML7js1e4XsZZueN1NmMoV0bSDcUqSenYmiLaE7zbW0PzPg3vQ96UrukXckF FVWwvJSrAHxFXQS0Xv7qYFj1ZMU4wwxL/UExqexkrw5USAxmvpptqHqZuYNxTQS3 zyWW1tkO5IvleA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:50:36 2025 by rpki-client