This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft File: d5pKQpXGOP3nYPPNpHbYv8JxErI.mft (raw, json) Hash identifier: hblC9x8caVSIwRGoY3RAq1ufFRYwwgufEDmnv3E9p6M= Subject key identifier: C8:B6:2F:26:FE:FD:23:FC:6D:67:7C:81:74:11:B2:FD:75:9B:F7:DC Authority key identifier: 77:9A:4A:42:95:C6:38:FD:E7:60:F3:CD:A4:76:D8:BF:C2:71:12:B2 Certificate issuer: /CN=779a4a4295c638fde760f3cda476d8bfc27112b2 Certificate serial: 019B649E11CB14A56588A09F881C1275A47E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft Manifest number: 0252 Signing time: Sun 28 Dec 2025 11:00:39 +0000 Manifest this update: Sun 28 Dec 2025 11:00:39 +0000 Manifest next update: Mon 29 Dec 2025 11:00:39 +0000 Files and hashes: 1: 9YQA36vAku85UbE81d8YCXXLJnY.roa (hash: Aeb9cL8NYmy9yNSDJcp65b2WQtEKFZt794slbkjrbPk=) 2: d5pKQpXGOP3nYPPNpHbYv8JxErI.crl (hash: h33whnuKY/yH/lrO33nQ8JXGpNowIc/YcZALW9Xgre4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:64:9e:11:cb:14:a5:65:88:a0:9f:88:1c:12:75:a4:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=779a4a4295c638fde760f3cda476d8bfc27112b2 Validity Not Before: Dec 28 11:00:39 2025 GMT Not After : Dec 29 11:00:39 2025 GMT Subject: CN=c8b62f26fefd23fc6d677c817411b2fd759bf7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e4:c4:64:a9:1f:35:45:c0:57:e8:48:ec:dd: 5a:26:1b:a0:2b:ba:01:b2:c0:a5:f5:e5:0c:dd:e5: 5e:f5:08:3a:60:da:b8:14:68:6a:69:7e:e2:e3:10: 19:70:38:d0:20:ba:64:4d:34:1f:dc:b2:30:d6:48: 45:1a:05:2e:49:dc:f4:52:f5:f3:76:ca:d9:08:fd: 38:31:ce:59:29:44:8a:b1:f3:7e:17:97:2a:a1:cc: b0:b4:48:20:75:b4:23:1c:7b:80:28:22:b6:de:43: 2a:69:0b:eb:fc:1a:b6:b2:6d:f2:d5:4a:dd:c7:24: 4e:b8:a0:7a:03:82:b5:56:97:4b:c9:ce:57:87:79: d3:94:0f:36:ee:fe:98:14:d6:43:8d:99:ef:48:fc: 62:91:90:94:a6:28:3b:65:92:cd:1c:8a:f9:9e:e5: f5:77:d0:ad:0d:e1:8b:78:b8:45:22:23:b5:48:18: d8:e7:5c:8d:bd:5f:fa:0d:f7:77:f2:ab:bf:11:1b: 56:11:06:04:16:de:4e:9a:1c:69:4f:20:6d:4e:04: 32:5a:7b:97:86:4e:d6:ae:74:c4:15:bf:2a:6b:57: e4:aa:5e:60:0d:69:64:e4:cc:65:32:b8:e3:f0:a8: f2:4e:78:3e:45:aa:b9:9c:d9:12:e3:cf:4a:38:96: bf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B6:2F:26:FE:FD:23:FC:6D:67:7C:81:74:11:B2:FD:75:9B:F7:DC X509v3 Authority Key Identifier: keyid:77:9A:4A:42:95:C6:38:FD:E7:60:F3:CD:A4:76:D8:BF:C2:71:12:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:31:d6:dd:23:fb:82:d9:36:78:53:05:42:d1:0c:b2:31:54: 9b:5f:d0:23:97:2c:50:15:5d:bf:3b:4f:de:00:65:05:cf:8b: fd:ed:51:f9:54:94:c0:af:81:be:9e:79:a3:72:f3:21:32:11: fb:19:45:2f:cd:0d:df:2e:9c:5f:e6:89:4a:99:d4:4e:b5:93: ff:26:2c:e6:90:ca:db:e6:04:ad:73:e3:07:4f:81:c1:cf:d6: a2:4b:55:aa:56:ff:24:ab:45:48:83:a3:c4:56:0a:e1:69:ea: 7e:49:ba:5c:dd:6d:fe:19:ed:9e:3e:dd:34:f8:52:e6:a1:15: 7e:7f:34:7e:50:92:4d:6a:b8:c4:95:df:82:2a:98:5d:8f:84: 38:f2:4d:5d:7a:bc:40:ce:cb:60:86:b6:88:8f:d1:73:93:2b: 83:a9:57:b0:9d:a5:e8:74:2b:3a:14:a4:6c:6e:be:ca:f7:bd: f1:9d:13:4a:18:a9:7a:1c:9a:b1:55:58:e6:ff:cb:48:d0:c4: 1a:99:11:98:00:e1:93:06:d8:4d:34:96:cc:d8:27:76:17:80: 5f:8a:f3:90:8b:c4:d8:c2:74:d9:b6:60:23:a3:ad:ac:79:3e: 8a:ad:9f:ab:da:23:f3:76:e7:68:29:ac:42:fd:a4:86:f4:17: 2a:c8:8c:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtknhHLFKVliKCfiBwSdaR+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OWE0YTQyOTVjNjM4ZmRlNzYwZjNjZGE0NzZkOGJmYzI3 MTEyYjIwHhcNMjUxMjI4MTEwMDM5WhcNMjUxMjI5MTEwMDM5WjAzMTEwLwYDVQQD EyhjOGI2MmYyNmZlZmQyM2ZjNmQ2NzdjODE3NDExYjJmZDc1OWJmN2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+TEZKkfNUXAV+hI7N1aJhugK7oB ssCl9eUM3eVe9Qg6YNq4FGhqaX7i4xAZcDjQILpkTTQf3LIw1khFGgUuSdz0UvXz dsrZCP04Mc5ZKUSKsfN+F5cqocywtEggdbQjHHuAKCK23kMqaQvr/Bq2sm3y1Urd xyROuKB6A4K1VpdLyc5Xh3nTlA827v6YFNZDjZnvSPxikZCUpig7ZZLNHIr5nuX1 d9CtDeGLeLhFIiO1SBjY51yNvV/6Dfd38qu/ERtWEQYEFt5OmhxpTyBtTgQyWnuX hk7WrnTEFb8qa1fkql5gDWlk5MxlMrjj8KjyTng+Raq5nNkS489KOJa/cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMi2Lyb+/SP8bWd8gXQRsv11m/fcMB8GA1UdIwQY MBaAFHeaSkKVxjj952DzzaR22L/CcRKyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDVwS1FwWEdPUDNuWVBQTnBIYll2OEp4RXJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mZDg5ZjktOThiNi00MjE3LWJjY2Qt NjJjNjdkNGJjNTQ2LzEvZDVwS1FwWEdPUDNuWVBQTnBIYll2OEp4RXJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mZDg5ZjktOThiNi00MjE3LWJjY2QtNjJjNjdkNGJjNTQ2 LzEvZDVwS1FwWEdPUDNuWVBQTnBIYll2OEp4RXJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuTHW3SP7 gtk2eFMFQtEMsjFUm1/QI5csUBVdvztP3gBlBc+L/e1R+VSUwK+Bvp55o3LzITIR +xlFL80N3y6cX+aJSpnUTrWT/yYs5pDK2+YErXPjB0+Bwc/WoktVqlb/JKtFSIOj xFYK4Wnqfkm6XN1t/hntnj7dNPhS5qEVfn80flCSTWq4xJXfgiqYXY+EOPJNXXq8 QM7LYIa2iI/Rc5Mrg6lXsJ2l6HQrOhSkbG6+yve98Z0TShipehyasVVY5v/LSNDE GpkRmADhkwbYTTSWzNgndheAX4rzkIvE2MJ02bZgI6OtrHk+iq2fq9oj83bnaCms Qv2khvQXKsiMeQ== -----END CERTIFICATE-----Generated at Sun Dec 28 14:21:32 2025 by rpki-client