This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft File: dNnAc7T3BpfiF1walV9sqMOmJGs.mft (raw, json) Hash identifier: wp3g+UwqwNxhwN29Og9aO+4lQvZUhgal8YjiYVU3+LM= Subject key identifier: 06:9F:49:58:D5:02:88:9A:48:5E:87:12:40:28:D0:F5:DB:42:AE:C4 Authority key identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B Certificate issuer: /CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b Certificate serial: 019AF12DE27629FC944D60D33368ABEED046 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft Manifest number: 10CC Signing time: Sat 06 Dec 2025 01:01:47 +0000 Manifest this update: Sat 06 Dec 2025 01:01:47 +0000 Manifest next update: Sun 07 Dec 2025 01:01:47 +0000 Files and hashes: 1: Jr22ey1N2NwAUwk5_MnoxmPuMXY.roa (hash: 35l8sKB3wVTvVWmpyHsbhQyl9RJrjRSgJU8YSXiR6gw=) 2: dNnAc7T3BpfiF1walV9sqMOmJGs.crl (hash: 3T3qQj7dyPD6/lQmLQyisBgnYmV0l260lDhTKZ2BXx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e2:76:29:fc:94:4d:60:d3:33:68:ab:ee:d0:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b Validity Not Before: Dec 6 01:01:47 2025 GMT Not After : Dec 7 01:01:47 2025 GMT Subject: CN=069f4958d502889a485e87124028d0f5db42aec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:34:07:c1:41:97:67:37:2f:91:39:aa:9f:a1: 2a:c2:6b:19:92:77:5d:56:03:b7:21:32:7e:2f:6d: cd:4b:ec:3a:48:f3:46:40:14:d6:b1:3c:95:3f:b4: f5:dc:7d:7f:28:e6:cd:d1:69:0a:8b:6c:d8:f6:d1: 23:e9:1b:0c:dc:b2:0a:c0:a3:02:11:6d:47:02:82: df:6e:96:00:5b:bf:3b:8a:f1:38:fc:89:8f:73:45: 09:e6:2d:78:37:fe:84:0d:1e:37:e6:59:66:b9:a6: 3d:4b:ce:45:d0:49:1c:a2:c6:c9:77:14:dd:68:0d: 03:7a:a6:1e:a8:8a:0e:d6:65:10:e7:26:05:fa:7f: 65:ed:64:25:84:f0:b8:9a:fb:d0:f4:3b:11:f8:99: 6c:c0:ad:40:05:88:8e:85:63:c4:7a:10:07:0c:76: 96:bf:25:48:1d:8b:09:38:d9:13:c8:4e:69:af:6c: 52:2d:5f:f6:54:7b:82:56:19:ee:67:9a:22:17:a4: 48:4f:f8:cc:aa:19:60:de:0b:f2:b7:95:b0:49:09: 70:d5:17:6b:3a:9e:c7:0d:4a:27:3a:03:e3:61:21: e4:42:7f:39:28:7a:f5:d0:74:03:5e:d6:1a:a9:b6: 2c:77:da:23:5a:ab:35:74:2e:24:08:4a:68:e1:45: c9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9F:49:58:D5:02:88:9A:48:5E:87:12:40:28:D0:F5:DB:42:AE:C4 X509v3 Authority Key Identifier: keyid:74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:3c:60:e2:89:fb:66:16:d8:72:5c:cd:3d:d5:86:e8:48:13: d3:f4:49:b6:78:98:1b:46:ff:33:e0:db:b8:97:73:73:bb:c7: be:74:31:aa:e0:65:86:a7:8e:97:a3:67:3d:b6:eb:d4:df:71: 69:0a:0f:91:d8:50:f5:0b:22:ea:4a:7d:39:1d:50:86:79:71: 47:0c:c1:35:19:b3:e9:89:c2:24:28:ba:21:a3:89:0d:01:6a: 6a:a0:ff:cd:3b:8e:4b:43:d7:db:d2:e9:db:d3:ef:66:69:b2: 0a:66:c4:9c:77:e0:7e:72:cc:70:0c:57:25:47:67:29:90:21: 79:78:8e:88:5a:7f:0f:b9:a0:e7:7b:79:4f:e3:eb:64:fc:06: d6:d1:a3:a5:1a:db:9a:29:8a:40:56:c7:8e:31:7c:95:08:b8: ce:cb:1c:5a:90:ac:5d:8f:a1:fa:0a:17:85:13:b9:61:05:8e: d4:ee:46:ba:43:ce:f2:99:27:f3:89:cc:98:41:98:55:50:d6: 05:04:30:51:6c:23:62:19:b1:88:68:a5:15:ed:0a:59:c7:da: 9f:39:32:e3:37:33:e2:3e:05:9f:b0:60:c3:9e:7e:11:dc:88: ab:2f:c6:ef:09:73:ce:23:d1:52:66:a1:35:ed:a1:d2:4a:98: bc:c3:6d:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeJ2KfyUTWDTM2ir7tBGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZDljMDczYjRmNzA2OTdlMjE3NWMxYTk1NWY2Y2E4YzNh NjI0NmIwHhcNMjUxMjA2MDEwMTQ3WhcNMjUxMjA3MDEwMTQ3WjAzMTEwLwYDVQQD EygwNjlmNDk1OGQ1MDI4ODlhNDg1ZTg3MTI0MDI4ZDBmNWRiNDJhZWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojQHwUGXZzcvkTmqn6EqwmsZkndd VgO3ITJ+L23NS+w6SPNGQBTWsTyVP7T13H1/KObN0WkKi2zY9tEj6RsM3LIKwKMC EW1HAoLfbpYAW787ivE4/ImPc0UJ5i14N/6EDR435llmuaY9S85F0EkcosbJdxTd aA0DeqYeqIoO1mUQ5yYF+n9l7WQlhPC4mvvQ9DsR+JlswK1ABYiOhWPEehAHDHaW vyVIHYsJONkTyE5pr2xSLV/2VHuCVhnuZ5oiF6RIT/jMqhlg3gvyt5WwSQlw1Rdr Op7HDUonOgPjYSHkQn85KHr10HQDXtYaqbYsd9ojWqs1dC4kCEpo4UXJIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAafSVjVAoiaSF6HEkAo0PXbQq7EMB8GA1UdIwQY MBaAFHTZwHO09waX4hdcGpVfbKjDpiRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE5uQWM3VDNCcGZpRjF3YWxWOXNxTU9tSkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85Y2QxZDctMzRlNy00N2MxLTg0ODQt YzE5MTQxMGRjODg5LzEvZE5uQWM3VDNCcGZpRjF3YWxWOXNxTU9tSkdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi85Y2QxZDctMzRlNy00N2MxLTg0ODQtYzE5MTQxMGRjODg5 LzEvZE5uQWM3VDNCcGZpRjF3YWxWOXNxTU9tSkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjxg4on7 ZhbYclzNPdWG6EgT0/RJtniYG0b/M+DbuJdzc7vHvnQxquBlhqeOl6NnPbbr1N9x aQoPkdhQ9Qsi6kp9OR1QhnlxRwzBNRmz6YnCJCi6IaOJDQFqaqD/zTuOS0PX29Lp 29PvZmmyCmbEnHfgfnLMcAxXJUdnKZAheXiOiFp/D7mg53t5T+PrZPwG1tGjpRrb mimKQFbHjjF8lQi4zsscWpCsXY+h+goXhRO5YQWO1O5GukPO8pkn84nMmEGYVVDW BQQwUWwjYhmxiGilFe0KWcfanzky4zcz4j4Fn7Bgw55+EdyIqy/G7wlzziPRUmah Ne2h0kqYvMNtDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:07 2025 by rpki-client