This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft File: dODVhfGshfVEks_JXh3OD8L3lw8.mft (raw, json) Hash identifier: lpWWtTfFpLShNcLZWOl3FEDSIAoXZkBYYdbi1pMYjq0= Subject key identifier: 25:E1:0E:E3:A4:2A:6D:D4:08:15:0C:E6:71:81:92:AA:1D:FA:50:73 Authority key identifier: 74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F Certificate issuer: /CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f Certificate serial: 019B6EB45B2F197EAFB5A83F135C7DB6F320 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft Manifest number: 03EA Signing time: Tue 30 Dec 2025 10:01:12 +0000 Manifest this update: Tue 30 Dec 2025 10:01:12 +0000 Manifest next update: Wed 31 Dec 2025 10:01:12 +0000 Files and hashes: 1: ZK2-Yf0vyUn-1yqVZSeh59hAASc.roa (hash: dJFWEY6bKtkQB9DqJ5/i3H6PU+2US3ATnt6WwIQ5YmQ=) 2: dODVhfGshfVEks_JXh3OD8L3lw8.crl (hash: 6L4r1Cu92x/UtDkaimQ9UWgDsY++Ww03NJPW7pCeah4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:b4:5b:2f:19:7e:af:b5:a8:3f:13:5c:7d:b6:f3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f Validity Not Before: Dec 30 10:01:12 2025 GMT Not After : Dec 31 10:01:12 2025 GMT Subject: CN=25e10ee3a42a6dd408150ce6718192aa1dfa5073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7c:c1:1c:a6:2b:ee:63:16:33:b9:16:a4:bc: ba:8f:27:ff:cf:b4:7c:e1:5f:16:a6:da:3a:67:ea: 8d:78:70:8b:b4:1a:80:fc:ea:92:12:04:bc:98:03: e3:7e:88:e0:af:66:68:8d:82:95:f5:3c:74:33:c5: 36:a2:e5:a2:29:fb:09:72:0e:d4:52:9c:2c:e5:a6: b6:f3:b0:3d:cd:c1:9e:25:ed:1f:12:f8:eb:64:96: fd:66:6f:41:a5:2f:10:98:05:3f:58:c9:44:52:98: 63:b7:11:9d:90:3e:f0:fd:5a:d8:34:49:d7:e4:0e: 5d:bd:71:89:91:2b:d5:11:49:37:f2:c2:44:df:d1: c6:96:59:fd:83:3d:fd:4c:8f:58:7d:d5:eb:17:80: 66:05:56:86:f1:2e:e9:42:90:63:98:6d:a2:9c:96: 79:72:1f:7d:2a:36:b8:3e:16:2a:bf:37:27:87:40: 2e:70:2f:65:9f:73:ac:af:c0:df:1b:26:3f:53:02: 33:a4:e0:65:46:bd:da:c8:b6:ce:3d:c1:bc:18:58: 49:f4:b2:5a:f1:9f:e4:54:dc:5e:20:88:58:26:05: 58:68:6a:ed:3a:9e:b4:bf:3c:56:55:64:cb:6d:22: 49:27:e8:76:22:56:b2:37:74:26:5e:c4:99:72:9f: 71:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E1:0E:E3:A4:2A:6D:D4:08:15:0C:E6:71:81:92:AA:1D:FA:50:73 X509v3 Authority Key Identifier: keyid:74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5f:da:86:6a:7b:f9:d5:68:8a:bc:fb:25:00:9e:17:f4:d7: a5:31:f9:b0:6c:3a:1d:d9:dd:8c:c8:5e:1e:62:55:d1:90:74: a7:35:85:c7:a8:e7:a0:db:d1:d1:4b:54:41:bd:63:8d:85:70: ed:86:0b:51:6e:ee:8c:28:da:a4:9e:d6:28:b4:e6:dd:96:36: 1c:30:3d:0a:b0:f4:0c:75:34:83:83:c8:60:0f:2c:9a:07:99: a2:c3:ad:86:ea:ea:e1:08:9d:07:f6:62:cb:14:af:d6:05:83: 22:b2:fa:6c:29:2e:41:e2:d1:06:e3:26:d6:ea:11:59:83:5a: e9:d5:40:48:ae:b6:5b:de:b4:6b:d8:b7:03:fb:e1:0d:38:e5: 93:94:70:4a:58:f3:fc:55:d3:9d:99:77:83:f1:3c:28:14:3e: f6:a8:ce:78:1e:d9:df:e8:f0:7e:d3:9e:f7:8a:93:26:47:43: 7a:e9:68:6f:52:f9:0b:9c:7b:47:2d:79:c9:59:89:80:74:58: 8e:ff:b4:f3:18:67:4e:31:c3:80:78:75:c7:13:ae:51:1c:30: 43:81:a3:e3:d4:49:c9:f9:b7:cd:59:85:44:a4:ad:32:28:e0: 27:6a:8e:ad:b4:8a:a1:1f:18:87:c7:e3:b2:0a:f8:3e:73:3f: bc:4a:5b:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtutFsvGX6vtag/E1x9tvMgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTBkNTg1ZjFhYzg1ZjU0NDkyY2ZjOTVlMWRjZTBmYzJm Nzk3MGYwHhcNMjUxMjMwMTAwMTEyWhcNMjUxMjMxMTAwMTEyWjAzMTEwLwYDVQQD EygyNWUxMGVlM2E0MmE2ZGQ0MDgxNTBjZTY3MTgxOTJhYTFkZmE1MDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHzBHKYr7mMWM7kWpLy6jyf/z7R8 4V8Wpto6Z+qNeHCLtBqA/OqSEgS8mAPjfojgr2ZojYKV9Tx0M8U2ouWiKfsJcg7U Upws5aa287A9zcGeJe0fEvjrZJb9Zm9BpS8QmAU/WMlEUphjtxGdkD7w/VrYNEnX 5A5dvXGJkSvVEUk38sJE39HGlln9gz39TI9YfdXrF4BmBVaG8S7pQpBjmG2inJZ5 ch99Kja4PhYqvzcnh0AucC9ln3Osr8DfGyY/UwIzpOBlRr3ayLbOPcG8GFhJ9LJa 8Z/kVNxeIIhYJgVYaGrtOp60vzxWVWTLbSJJJ+h2IlayN3QmXsSZcp9xrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXhDuOkKm3UCBUM5nGBkqod+lBzMB8GA1UdIwQY MBaAFHTg1YXxrIX1RJLPyV4dzg/C95cPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9EVmhmR3NoZlZFa3NfSlhoM09EOEwzbHc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mZTBiZjItZjgzOC00MDhiLTk4NDMt NjU5ODkxMDIwMmEyLzEvZE9EVmhmR3NoZlZFa3NfSlhoM09EOEwzbHc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9mZTBiZjItZjgzOC00MDhiLTk4NDMtNjU5ODkxMDIwMmEy LzEvZE9EVmhmR3NoZlZFa3NfSlhoM09EOEwzbHc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnl/ahmp7 +dVoirz7JQCeF/TXpTH5sGw6HdndjMheHmJV0ZB0pzWFx6jnoNvR0UtUQb1jjYVw 7YYLUW7ujCjapJ7WKLTm3ZY2HDA9CrD0DHU0g4PIYA8smgeZosOthurq4QidB/Zi yxSv1gWDIrL6bCkuQeLRBuMm1uoRWYNa6dVASK62W960a9i3A/vhDTjlk5RwSljz /FXTnZl3g/E8KBQ+9qjOeB7Z3+jwftOe94qTJkdDeulob1L5C5x7Ry15yVmJgHRY jv+08xhnTjHDgHh1xxOuURwwQ4Gj49RJyfm3zVmFRKStMijgJ2qOrbSKoR8Yh8fj sgr4PnM/vEpbaw== -----END CERTIFICATE-----Generated at Tue Dec 30 16:32:47 2025 by rpki-client