This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft File: DETz4ku_xgSOX_pQw9zjZP_AErA.mft (raw, json) Hash identifier: Z2f6H1KdDcXGldsLo7MylhBgvTaak9BKfTTtoQVSUag= Subject key identifier: 8F:11:99:3A:26:3C:E5:C1:B4:EC:4E:2E:2F:AF:0A:C9:46:71:06:D6 Authority key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0 Certificate issuer: /CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0 Certificate serial: 019B3D90B897353B9EB5BB3BABAA1478CA5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft Manifest number: 144F Signing time: Sat 20 Dec 2025 21:00:53 +0000 Manifest this update: Sat 20 Dec 2025 21:00:53 +0000 Manifest next update: Sun 21 Dec 2025 21:00:53 +0000 Files and hashes: 1: DETz4ku_xgSOX_pQw9zjZP_AErA.crl (hash: iAHF+H6zyMQ+XubxfhUJJtBexocREHhx7CC3ucNKQq4=) 2: ZWVOs3WDW-rx5m7taQu6I2WYx7Q.roa (hash: yPh81fsK4TJM83HFw4j8d9BB5tZUMJFngOFcn+J9UgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:b8:97:35:3b:9e:b5:bb:3b:ab:aa:14:78:ca:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0 Validity Not Before: Dec 20 21:00:53 2025 GMT Not After : Dec 21 21:00:53 2025 GMT Subject: CN=8f11993a263ce5c1b4ec4e2e2faf0ac9467106d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:68:7e:a4:78:43:64:7a:4d:80:d3:04:12:c9: 2a:cc:3e:2b:32:41:52:16:7f:97:95:e1:e7:ec:b9: f2:d9:8e:dd:d1:5f:56:de:ca:ba:49:1c:90:67:da: 28:52:9b:5e:11:0d:d8:d3:14:04:e5:ca:af:1f:74: ab:de:08:9c:42:5c:ec:5a:2d:a4:e8:46:33:f5:59: a7:ea:69:05:30:0d:6b:a1:48:2a:b7:02:c9:4f:0f: 1d:05:be:89:19:06:d2:ae:f2:ab:f6:77:ad:f0:c0: bb:2b:37:8b:a5:75:0e:8a:5b:7c:8d:37:6d:e1:4e: 65:65:3a:13:61:da:b4:a5:70:c0:a4:e9:40:4d:72: 08:97:38:ec:e3:2a:c1:62:9b:a9:c4:46:e6:24:d6: a5:1a:39:bd:78:44:25:13:4e:97:73:19:88:d2:8b: b2:7b:c8:98:92:0b:17:2f:b8:2f:65:92:b0:10:2f: dd:82:06:ef:10:e6:21:cf:e1:8a:ba:00:0b:80:85: 4e:7b:9e:7b:68:be:21:46:6e:41:25:3b:54:b6:ec: b6:a0:fb:c3:99:2e:e6:1b:16:9f:cc:8b:ff:10:e0: 4a:30:24:30:f2:7f:72:78:b2:20:1a:74:14:5c:69: 7d:2b:91:b1:d9:dc:09:cb:b5:0b:ab:a3:95:59:6f: 84:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:11:99:3A:26:3C:E5:C1:B4:EC:4E:2E:2F:AF:0A:C9:46:71:06:D6 X509v3 Authority Key Identifier: keyid:0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e1:78:f1:b1:67:91:cd:68:cc:a8:24:eb:9e:59:04:3c:b0: f6:28:58:7b:44:a5:0d:9a:dc:03:67:59:0d:8d:5f:12:be:16: 54:c4:09:f3:1e:db:c4:fc:2b:00:d8:cc:e5:d4:99:ce:15:18: 27:0e:a8:15:a1:d7:63:34:9a:cf:83:d2:01:f2:b0:70:f9:8b: 17:cf:1e:0f:31:85:d7:16:43:54:2e:62:a1:6e:bd:16:df:5b: 3c:c0:68:8c:71:0e:b9:56:a3:ac:58:31:57:49:78:ad:2a:cb: 02:a5:7e:3f:40:ae:f8:8a:8d:19:b4:5d:d5:92:32:f7:d4:9c: 4a:73:b9:d6:3f:ff:39:0f:6b:9c:94:d8:d6:81:af:0c:25:bd: 14:f1:9f:ba:78:43:bf:18:e0:13:b6:b1:cb:48:b6:0b:a8:8d: a4:c8:11:61:78:f5:dd:1e:a1:9a:8b:2a:d7:7e:56:2e:f4:e8: 71:81:c6:6f:be:ab:80:68:74:66:42:42:75:73:6e:2c:3a:24: ac:ee:69:47:b5:41:17:c0:47:be:9b:18:22:b1:75:53:58:a9: 05:76:a5:a4:56:ab:89:66:f6:d5:27:dc:da:cc:23:bd:03:51: 78:58:0e:a7:e5:aa:63:51:a2:88:0d:21:9a:35:4e:d2:61:9a: 75:cd:4b:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kLiXNTuetbs7q6oUeMpcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNDRmM2UyNGJiZmM2MDQ4ZTVmZmE1MGMzZGNlMzY0ZmZj MDEyYjAwHhcNMjUxMjIwMjEwMDUzWhcNMjUxMjIxMjEwMDUzWjAzMTEwLwYDVQQD Eyg4ZjExOTkzYTI2M2NlNWMxYjRlYzRlMmUyZmFmMGFjOTQ2NzEwNmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWh+pHhDZHpNgNMEEskqzD4rMkFS Fn+XleHn7Lny2Y7d0V9W3sq6SRyQZ9ooUpteEQ3Y0xQE5cqvH3Sr3gicQlzsWi2k 6EYz9Vmn6mkFMA1roUgqtwLJTw8dBb6JGQbSrvKr9net8MC7KzeLpXUOilt8jTdt 4U5lZToTYdq0pXDApOlATXIIlzjs4yrBYpupxEbmJNalGjm9eEQlE06XcxmI0ouy e8iYkgsXL7gvZZKwEC/dggbvEOYhz+GKugALgIVOe557aL4hRm5BJTtUtuy2oPvD mS7mGxafzIv/EOBKMCQw8n9yeLIgGnQUXGl9K5Gx2dwJy7ULq6OVWW+EjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8RmTomPOXBtOxOLi+vCslGcQbWMB8GA1UdIwQY MBaAFAxE8+JLv8YEjl/6UMPc42T/wBKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREVUejRrdV94Z1NPWF9wUXc5empaUF9BRXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85OTE4YWEtMzQ3ZC00ODc4LWExNmIt OGFjN2JlNDZjYzRiLzEvREVUejRrdV94Z1NPWF9wUXc5empaUF9BRXJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS85OTE4YWEtMzQ3ZC00ODc4LWExNmItOGFjN2JlNDZjYzRi LzEvREVUejRrdV94Z1NPWF9wUXc5empaUF9BRXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+F48bFn kc1ozKgk655ZBDyw9ihYe0SlDZrcA2dZDY1fEr4WVMQJ8x7bxPwrANjM5dSZzhUY Jw6oFaHXYzSaz4PSAfKwcPmLF88eDzGF1xZDVC5ioW69Ft9bPMBojHEOuVajrFgx V0l4rSrLAqV+P0Cu+IqNGbRd1ZIy99ScSnO51j//OQ9rnJTY1oGvDCW9FPGfunhD vxjgE7axy0i2C6iNpMgRYXj13R6hmosq135WLvTocYHGb76rgGh0ZkJCdXNuLDok rO5pR7VBF8BHvpsYIrF1U1ipBXalpFariWb21Sfc2swjvQNReFgOp+WqY1GiiA0h mjVO0mGadc1Luw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:06:20 2025 by rpki-client