This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft File: DefybbQ61DIFvrBn_Qqz4wAnhl0.mft (raw, json) Hash identifier: j2tsKg7VQfZGuCMV4Gu+ODrFWIHLRZVFVUJL8YQOAyQ= Subject key identifier: E0:E1:B2:A0:53:3F:99:51:1A:C8:5B:1B:5E:29:4B:16:3E:90:78:AE Authority key identifier: 0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D Certificate issuer: /CN=0de7f26db43ad43205beb067fd0ab3e30027865d Certificate serial: 019B2776D0C684BB0838F7E4B12C46637603 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft Manifest number: 14AB Signing time: Tue 16 Dec 2025 14:00:56 +0000 Manifest this update: Tue 16 Dec 2025 14:00:56 +0000 Manifest next update: Wed 17 Dec 2025 14:00:56 +0000 Files and hashes: 1: 69ehIxwfed5HZyZV9c2Bvvjf_kA.roa (hash: ZxU5cKBsS8xLFH6sctBsWlQRFFqOiJR2279n4TmOSw4=) 2: DefybbQ61DIFvrBn_Qqz4wAnhl0.crl (hash: DchYuPL4B+PQkGQKbFcRODCgrNblK+/fRzvlsbx67cI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:76:d0:c6:84:bb:08:38:f7:e4:b1:2c:46:63:76:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0de7f26db43ad43205beb067fd0ab3e30027865d Validity Not Before: Dec 16 14:00:56 2025 GMT Not After : Dec 17 14:00:56 2025 GMT Subject: CN=e0e1b2a0533f99511ac85b1b5e294b163e9078ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:db:94:ae:3b:a8:af:b6:24:c1:b7:e9:73:6a: 0b:1f:26:9e:8a:6a:c5:c0:07:0a:81:da:19:00:a3: f2:23:38:34:a5:3e:d2:82:16:be:22:61:ba:a8:99: 5f:81:b7:9a:22:8b:1e:38:42:50:26:ce:55:12:b3: 8b:c3:2f:ff:2b:72:b8:7f:1d:22:50:3f:bc:c2:94: 53:19:c5:f0:f0:6a:71:db:7e:92:07:27:1f:be:be: 5f:03:81:43:8e:95:8c:6f:0a:7f:2a:91:32:e0:16: 69:40:d5:58:0c:b3:20:e1:be:76:08:aa:2f:3a:22: f6:14:52:cf:83:d2:0e:61:ad:27:79:7f:c3:8d:c5: 1f:93:7f:71:a8:29:85:ad:31:dd:2b:0e:ab:df:bd: 01:76:a2:e6:24:e7:12:b3:88:9a:fc:b3:2c:a3:40: 55:8f:f4:ac:9d:9b:f1:d3:eb:7f:ad:5e:aa:06:69: f1:72:5e:20:50:af:85:48:ac:25:3a:f1:66:12:59: bb:aa:5d:1a:99:1e:11:2c:18:94:c7:25:de:5d:7f: b9:33:bf:d9:ff:96:09:4f:de:0c:69:b1:1a:35:d5: a5:91:a3:4b:af:ef:5e:cb:e9:15:cc:36:51:df:75: 5a:5d:f4:0a:27:6d:c3:2e:f2:81:3b:ae:14:6d:42: 01:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E1:B2:A0:53:3F:99:51:1A:C8:5B:1B:5E:29:4B:16:3E:90:78:AE X509v3 Authority Key Identifier: keyid:0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:08:08:d6:26:95:78:c1:db:49:19:86:de:13:34:c0:0c:f2: 92:06:e7:58:e0:b1:f6:0d:6c:1f:3d:0f:42:88:4d:f6:f6:a2: 50:98:ed:32:91:42:dc:e1:85:85:f4:60:d0:bc:83:b3:d0:bc: af:05:b4:07:cd:8b:09:d3:b3:8a:da:ae:ac:e7:40:82:08:e8: a5:ef:d7:6a:2c:54:cc:a5:2c:02:be:77:e7:d0:b0:f2:02:5e: 37:3b:62:6e:c0:db:6e:37:5b:be:84:24:7f:30:5e:2a:42:75: 2a:09:86:cf:e1:8f:61:84:a3:1e:6f:4a:e7:23:9c:22:49:c2: ca:94:a2:f8:f5:cc:eb:25:4b:5d:54:42:a6:3b:1f:b2:c9:a0: f3:dc:18:c6:3a:00:09:7a:f6:2f:89:be:e0:65:94:f7:9d:db: a5:de:96:d4:47:1a:87:b9:7d:ce:ea:11:20:57:eb:41:9b:98: f6:93:56:da:3f:9a:52:88:6d:09:71:a0:a5:5a:9c:fe:ae:f6: ac:57:2b:8d:c7:5d:56:7c:68:93:2a:03:03:de:a8:b6:00:d6: 11:2f:0d:ad:c2:47:bb:94:9a:88:40:27:5f:6c:5f:a7:ed:3f: 2a:c5:4c:ff:f2:81:c3:fe:68:9b:1a:47:3d:0f:92:bf:98:90: 27:89:62:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsndtDGhLsIOPfksSxGY3YDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZTdmMjZkYjQzYWQ0MzIwNWJlYjA2N2ZkMGFiM2UzMDAy Nzg2NWQwHhcNMjUxMjE2MTQwMDU2WhcNMjUxMjE3MTQwMDU2WjAzMTEwLwYDVQQD EyhlMGUxYjJhMDUzM2Y5OTUxMWFjODViMWI1ZTI5NGIxNjNlOTA3OGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0duUrjuor7Ykwbfpc2oLHyaeimrF wAcKgdoZAKPyIzg0pT7Sgha+ImG6qJlfgbeaIoseOEJQJs5VErOLwy//K3K4fx0i UD+8wpRTGcXw8Gpx236SBycfvr5fA4FDjpWMbwp/KpEy4BZpQNVYDLMg4b52CKov OiL2FFLPg9IOYa0neX/DjcUfk39xqCmFrTHdKw6r370BdqLmJOcSs4ia/LMso0BV j/SsnZvx0+t/rV6qBmnxcl4gUK+FSKwlOvFmElm7ql0amR4RLBiUxyXeXX+5M7/Z /5YJT94MabEaNdWlkaNLr+9ey+kVzDZR33VaXfQKJ23DLvKBO64UbUIBKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODhsqBTP5lRGshbG14pSxY+kHiuMB8GA1UdIwQY MBaAFA3n8m20OtQyBb6wZ/0Ks+MAJ4ZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGVmeWJiUTYxRElGdnJCbl9RcXo0d0FuaGwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZTMyYjktNWM5ZC00ZWYwLTliOTIt ZDIyMTIzMzk3YjUwLzEvRGVmeWJiUTYxRElGdnJCbl9RcXo0d0FuaGwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hZTMyYjktNWM5ZC00ZWYwLTliOTItZDIyMTIzMzk3YjUw LzEvRGVmeWJiUTYxRElGdnJCbl9RcXo0d0FuaGwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwgI1iaV eMHbSRmG3hM0wAzykgbnWOCx9g1sHz0PQohN9vaiUJjtMpFC3OGFhfRg0LyDs9C8 rwW0B82LCdOzitqurOdAggjope/XaixUzKUsAr5359Cw8gJeNztibsDbbjdbvoQk fzBeKkJ1KgmGz+GPYYSjHm9K5yOcIknCypSi+PXM6yVLXVRCpjsfssmg89wYxjoA CXr2L4m+4GWU953bpd6W1Ecah7l9zuoRIFfrQZuY9pNW2j+aUohtCXGgpVqc/q72 rFcrjcddVnxokyoDA96otgDWES8NrcJHu5SaiEAnX2xfp+0/KsVM//KBw/5omxpH PQ+Sv5iQJ4liIg== -----END CERTIFICATE-----Generated at Tue Dec 16 23:20:36 2025 by rpki-client