This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json) Hash identifier: O22PuQlDKaEAV1IFhjNRRfGcdaiPQjkTsjDpvFIem5Q= Subject key identifier: AC:AA:76:E9:A7:BA:CF:05:C2:2A:0D:2C:1C:9D:9C:C9:A8:8F:82:42 Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Certificate serial: 019B30428D16DA2408F0DD2ED12330F047C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft Manifest number: 1171 Signing time: Thu 18 Dec 2025 07:00:26 +0000 Manifest this update: Thu 18 Dec 2025 07:00:26 +0000 Manifest next update: Fri 19 Dec 2025 07:00:26 +0000 Files and hashes: 1: QKE5A2-VWyd3J0DRrfMQlK1fMX8.roa (hash: fb4kqhQuHHEA1R522FziGZUhpgN31KA7VLx4uSTZ7+0=) 2: QibsYMI2HzBANNUyuh3X_SXi7C8.roa (hash: J+6lvfhlLdmu7GB6QikI0qn006fBR9guwOXMkwXCaOk=) 3: XeENoq2HuB6omGApVd7MyU5r1TA.roa (hash: epvaDIj9ho9XW3OqF0eBT6eF6xWMid+XMsTU4k7CI2s=) 4: Yrj8M2QKm85FgqezvTNKupJvfRM.roa (hash: 19NO01gkKNfH49H88V9pcdpwsCQD2Y7XMbrn6a7gp8I=) 5: dcRF9U3L6DhFSWTZEdsiTMS3P2o.roa (hash: ES6jEJ/RK/dO83oihrvVXwCUZSvWJGm8C1RK/nM0bYI=) 6: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: IOfPRtnEDNCA54N/kAj2D2TPi8MAQcP2T0/8O/z8VOs=) 7: eaH07OW5KOtKpWvHksqObMQWq4E.roa (hash: /p/ujtYI0LrIojxA4eFgMakt3BjMBgIlLRM6Y1JhEgo=) 8: fKdatG9WcJc5WVUN6pdVKIOjMnQ.roa (hash: kqSOLzeO/Lml0iGRyiBotGsiuI6Y4hQbc4VPC8laBE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 07:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:42:8d:16:da:24:08:f0:dd:2e:d1:23:30:f0:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Validity Not Before: Dec 18 07:00:26 2025 GMT Not After : Dec 19 07:00:26 2025 GMT Subject: CN=acaa76e9a7bacf05c22a0d2c1c9d9cc9a88f8242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3f:23:8b:a7:5e:10:ab:fb:a6:47:76:6a:5b: 75:14:f2:85:6e:11:99:1a:d9:a0:65:64:1e:f6:a6: 5a:4d:5e:fa:bf:33:19:a8:e6:d3:38:03:7c:92:a5: 9c:d8:6e:21:1d:ef:33:9b:87:1e:7d:11:37:f9:1e: 85:0e:5a:94:8c:d2:e3:ea:85:da:80:6b:06:cf:06: f4:49:64:f7:26:b3:c9:97:0f:cf:42:4b:e4:77:45: 9e:6b:66:9f:8f:e6:17:f3:3c:95:2f:55:df:40:01: 13:6a:e3:ab:36:cb:42:0f:04:e0:d7:34:37:ea:51: 5a:a9:c0:0d:b6:4a:2c:f6:28:1f:e7:24:75:28:cc: 2b:4b:98:91:87:7d:70:26:91:f1:9e:29:ab:a9:dd: 35:f0:0b:42:e4:63:e1:0f:af:b1:55:31:3e:89:80: f9:e6:f4:cc:54:4e:3d:dd:0e:31:cf:55:f6:e9:ed: f4:a3:ed:49:af:59:5b:22:4c:23:3b:89:8d:e2:7f: 5c:19:b0:9c:cc:84:f2:b2:f1:a4:72:57:f1:14:4e: a0:c1:b2:b8:73:31:6e:0d:c6:66:f5:bb:52:0f:17: f7:fd:6c:e0:c4:42:8f:14:cb:92:97:30:e0:68:5e: 5d:b4:cf:94:38:06:ac:66:b8:d3:cc:50:ec:4b:e3: 25:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AA:76:E9:A7:BA:CF:05:C2:2A:0D:2C:1C:9D:9C:C9:A8:8F:82:42 X509v3 Authority Key Identifier: keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:c6:57:b7:e6:70:27:d8:de:f8:df:40:fb:3f:d5:e1:eb:36: c6:a6:b9:a1:a4:32:5b:2b:cb:e9:a4:a5:61:2a:c9:89:05:35: 57:c8:85:45:e2:d1:e5:7f:7a:7f:58:01:ef:7e:95:21:3d:d7: cc:6c:f9:d0:57:ce:3e:e0:a7:18:e2:26:69:11:7c:0d:54:ca: 86:38:e8:5b:82:bb:d8:8e:23:17:98:77:ae:dd:db:d4:ae:e3: f6:69:84:86:c7:ba:29:1d:66:10:13:36:a0:b9:22:ab:a5:63: fb:6b:91:5f:b0:48:b9:b7:44:f9:86:e3:64:cc:c5:53:f4:8a: bf:19:b7:37:53:77:67:cd:82:58:40:7a:aa:5b:4f:ea:d9:ff: 58:8f:16:6d:7a:f3:91:90:03:e6:dd:67:72:24:d0:b4:1a:77: 65:d8:c9:28:10:cc:98:28:37:72:ab:9e:29:2b:1e:7c:a5:97: 0c:95:98:e6:fd:e6:ae:6c:c1:f8:c5:3e:93:c3:3e:28:73:a3: 8f:65:b0:cc:ac:4c:cf:95:b8:6a:75:dd:b3:04:8b:63:27:3e: 38:25:8d:25:c5:06:38:1b:c7:76:bf:ba:a0:0a:f5:be:da:8d: d7:c1:1e:a4:7d:65:cd:d9:5f:13:74:83:2c:bf:26:f0:c5:a6: 31:4a:c6:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQo0W2iQI8N0u0SMw8EfAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky MGMzZDkwHhcNMjUxMjE4MDcwMDI2WhcNMjUxMjE5MDcwMDI2WjAzMTEwLwYDVQQD EyhhY2FhNzZlOWE3YmFjZjA1YzIyYTBkMmMxYzlkOWNjOWE4OGY4MjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz8ji6deEKv7pkd2alt1FPKFbhGZ GtmgZWQe9qZaTV76vzMZqObTOAN8kqWc2G4hHe8zm4cefRE3+R6FDlqUjNLj6oXa gGsGzwb0SWT3JrPJlw/PQkvkd0Wea2afj+YX8zyVL1XfQAETauOrNstCDwTg1zQ3 6lFaqcANtkos9igf5yR1KMwrS5iRh31wJpHxnimrqd018AtC5GPhD6+xVTE+iYD5 5vTMVE493Q4xz1X26e30o+1Jr1lbIkwjO4mN4n9cGbCczITysvGkclfxFE6gwbK4 czFuDcZm9btSDxf3/WzgxEKPFMuSlzDgaF5dtM+UOAasZrjTzFDsS+MlGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyqdumnus8FwioNLBydnMmoj4JCMB8GA1UdIwQY MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt NGZiNTU5YjNiOWIzLzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMZXt+Zw J9je+N9A+z/V4es2xqa5oaQyWyvL6aSlYSrJiQU1V8iFReLR5X96f1gB736VIT3X zGz50FfOPuCnGOImaRF8DVTKhjjoW4K72I4jF5h3rt3b1K7j9mmEhse6KR1mEBM2 oLkiq6Vj+2uRX7BIubdE+YbjZMzFU/SKvxm3N1N3Z82CWEB6qltP6tn/WI8WbXrz kZAD5t1nciTQtBp3ZdjJKBDMmCg3cqueKSsefKWXDJWY5v3mrmzB+MU+k8M+KHOj j2WwzKxMz5W4anXdswSLYyc+OCWNJcUGOBvHdr+6oAr1vtqN18EepH1lzdlfE3SD LL8m8MWmMUrGxg== -----END CERTIFICATE-----Generated at Thu Dec 18 16:15:01 2025 by rpki-client