This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft File: da9OLDR4Dz2fUegKU7rDvm8yWUM.mft (raw, json) Hash identifier: syG7Q1w4zF8q9HEgIT442j9Dh2ducd+L6HjF17xuNFM= Subject key identifier: F7:4D:F3:F6:FD:7A:5E:F4:1E:C4:27:48:86:8C:9E:82:38:B0:3C:AF Authority key identifier: 75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43 Certificate issuer: /CN=75af4e2c34780f3d9f51e80a53bac3be6f325943 Certificate serial: 019B4F29808D6E899DF4CC62B1FEDE0991E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft Manifest number: 107B Signing time: Wed 24 Dec 2025 07:01:18 +0000 Manifest this update: Wed 24 Dec 2025 07:01:18 +0000 Manifest next update: Thu 25 Dec 2025 07:01:18 +0000 Files and hashes: 1: 4FCKqar0XtnEKUi3gFfvOiKskUg.roa (hash: n0va6MokXLOyx5Mouds6xLFs3obz/ZHN/b5YuHxhU6k=) 2: da9OLDR4Dz2fUegKU7rDvm8yWUM.crl (hash: wmQ2QYM8GUhLwrgjQ13QDZ8+kJlUueMAB8VYPO5RVfk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:80:8d:6e:89:9d:f4:cc:62:b1:fe:de:09:91:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75af4e2c34780f3d9f51e80a53bac3be6f325943 Validity Not Before: Dec 24 07:01:18 2025 GMT Not After : Dec 25 07:01:18 2025 GMT Subject: CN=f74df3f6fd7a5ef41ec42748868c9e8238b03caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b8:3d:17:a5:3f:30:0c:a2:9f:6c:e7:31:d6: 26:80:33:be:86:80:37:7c:63:5a:b4:8f:22:20:4e: 5d:57:27:d9:fe:f9:9d:4b:86:d4:d5:83:04:c7:bb: 3d:16:c1:4a:40:6b:be:a4:24:e8:e6:be:70:99:7e: 40:4b:42:84:64:ed:37:7b:c8:53:49:37:a7:98:4d: 61:35:7b:f0:a9:db:52:f1:76:1c:0e:d8:30:ce:1e: a1:f4:71:98:25:b0:bc:c7:82:c9:b8:5f:fa:b4:46: 3e:a7:38:83:d7:06:a8:73:be:ee:b2:76:0f:2d:d9: b1:2d:3e:f8:d7:6b:74:a4:74:50:f3:bd:37:75:5d: 93:c3:57:4d:e8:9d:db:b3:49:ed:ab:e0:3b:b1:06: 3d:93:f5:20:93:3b:14:ca:8f:a5:4a:d5:cb:fb:32: 1a:12:29:ef:36:62:12:34:dd:e6:45:51:0c:41:c8: 70:d3:91:47:7c:77:a9:4c:a1:79:ac:01:b5:0e:72: 24:85:11:84:ba:d3:bf:36:25:c2:e9:a7:6b:7d:8d: 71:58:2c:43:cc:98:07:3e:ab:4a:dd:e0:a0:f9:70: ec:cd:63:ce:ca:c8:d5:94:6b:43:e4:e7:83:ff:9e: 5f:a9:15:ed:ec:54:74:c5:f9:89:6f:e5:df:6c:a2: 80:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:4D:F3:F6:FD:7A:5E:F4:1E:C4:27:48:86:8C:9E:82:38:B0:3C:AF X509v3 Authority Key Identifier: keyid:75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:7c:8c:7d:dd:0b:01:84:e5:cb:6b:10:61:c1:ba:38:b7:d2: 7f:83:ff:6a:98:44:91:d6:54:92:00:ab:68:86:04:92:34:52: 6e:fc:dc:48:7f:e1:e5:39:45:52:80:9c:f9:c7:0c:f3:7e:ca: 27:c1:a1:19:34:f7:18:93:68:db:c3:39:cd:77:7f:aa:62:30: d3:4d:fc:8e:91:30:e2:8c:15:0d:49:24:4f:ec:31:49:51:84: 7c:c7:81:88:9d:82:a5:68:b7:94:d8:2b:2e:bc:9c:b3:73:66: 1b:0c:82:78:48:82:8e:b0:4b:79:f5:06:c7:61:27:2d:04:19: db:43:14:7c:f4:fa:a8:8e:c2:a9:92:ed:43:a3:ab:e6:0b:be: a3:22:70:85:2f:84:1e:03:27:bb:f2:94:47:96:83:b9:25:9f: 76:37:52:99:1a:04:2d:0f:45:be:32:5e:e0:25:02:57:6a:60: 4c:7e:21:d4:25:6c:61:56:46:98:06:4d:10:8f:51:07:13:53: 0f:02:19:89:75:31:fa:85:4a:2e:63:4a:59:5b:76:5a:54:3f: 65:df:f2:68:13:a4:df:25:4d:f9:ee:bf:0c:2d:8a:0b:cf:59: af:7e:2c:5a:6d:eb:db:17:af:ef:2a:f1:62:1c:e0:a6:64:68: 9e:bb:8e:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKYCNbomd9Mxisf7eCZHhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YWY0ZTJjMzQ3ODBmM2Q5ZjUxZTgwYTUzYmFjM2JlNmYz MjU5NDMwHhcNMjUxMjI0MDcwMTE4WhcNMjUxMjI1MDcwMTE4WjAzMTEwLwYDVQQD EyhmNzRkZjNmNmZkN2E1ZWY0MWVjNDI3NDg4NjhjOWU4MjM4YjAzY2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07g9F6U/MAyin2znMdYmgDO+hoA3 fGNatI8iIE5dVyfZ/vmdS4bU1YMEx7s9FsFKQGu+pCTo5r5wmX5AS0KEZO03e8hT STenmE1hNXvwqdtS8XYcDtgwzh6h9HGYJbC8x4LJuF/6tEY+pziD1waoc77usnYP LdmxLT7412t0pHRQ8703dV2Tw1dN6J3bs0ntq+A7sQY9k/UgkzsUyo+lStXL+zIa EinvNmISNN3mRVEMQchw05FHfHepTKF5rAG1DnIkhRGEutO/NiXC6adrfY1xWCxD zJgHPqtK3eCg+XDszWPOysjVlGtD5OeD/55fqRXt7FR0xfmJb+XfbKKAfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdN8/b9el70HsQnSIaMnoI4sDyvMB8GA1UdIwQY MBaAFHWvTiw0eA89n1HoClO6w75vMllDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGE5T0xEUjREejJmVWVnS1U3ckR2bTh5V1VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wOTIzOWEtNGY4OC00MDliLWE3ODEt NzUzMzBkNGNlODZlLzEvZGE5T0xEUjREejJmVWVnS1U3ckR2bTh5V1VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wOTIzOWEtNGY4OC00MDliLWE3ODEtNzUzMzBkNGNlODZl LzEvZGE5T0xEUjREejJmVWVnS1U3ckR2bTh5V1VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlnyMfd0L AYTly2sQYcG6OLfSf4P/aphEkdZUkgCraIYEkjRSbvzcSH/h5TlFUoCc+ccM837K J8GhGTT3GJNo28M5zXd/qmIw0038jpEw4owVDUkkT+wxSVGEfMeBiJ2CpWi3lNgr Lrycs3NmGwyCeEiCjrBLefUGx2EnLQQZ20MUfPT6qI7CqZLtQ6Or5gu+oyJwhS+E HgMnu/KUR5aDuSWfdjdSmRoELQ9FvjJe4CUCV2pgTH4h1CVsYVZGmAZNEI9RBxNT DwIZiXUx+oVKLmNKWVt2WlQ/Zd/yaBOk3yVN+e6/DC2KC89Zr34sWm3r2xev7yrx YhzgpmRonruOIQ== -----END CERTIFICATE-----Generated at Wed Dec 24 12:33:47 2025 by rpki-client