This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json) Hash identifier: TYPYfSPOAIJ9QKdqrb+DM8MAuPvjpZpIRIqakIHasvQ= Subject key identifier: E9:32:9D:9B:06:48:0C:8D:02:38:F2:F7:DF:67:26:21:40:1D:50:F6 Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Certificate serial: 019AF4653A91FA43C5C1AB37404C20583A5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft Manifest number: 1152 Signing time: Sat 06 Dec 2025 16:01:06 +0000 Manifest this update: Sat 06 Dec 2025 16:01:06 +0000 Manifest next update: Sun 07 Dec 2025 16:01:06 +0000 Files and hashes: 1: QKE5A2-VWyd3J0DRrfMQlK1fMX8.roa (hash: fb4kqhQuHHEA1R522FziGZUhpgN31KA7VLx4uSTZ7+0=) 2: QibsYMI2HzBANNUyuh3X_SXi7C8.roa (hash: J+6lvfhlLdmu7GB6QikI0qn006fBR9guwOXMkwXCaOk=) 3: XeENoq2HuB6omGApVd7MyU5r1TA.roa (hash: epvaDIj9ho9XW3OqF0eBT6eF6xWMid+XMsTU4k7CI2s=) 4: Yrj8M2QKm85FgqezvTNKupJvfRM.roa (hash: 19NO01gkKNfH49H88V9pcdpwsCQD2Y7XMbrn6a7gp8I=) 5: dcRF9U3L6DhFSWTZEdsiTMS3P2o.roa (hash: ES6jEJ/RK/dO83oihrvVXwCUZSvWJGm8C1RK/nM0bYI=) 6: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: v4ORAMAztx5rpsTO05mCy5quKR/oVNfcch4V4LMFKwI=) 7: eaH07OW5KOtKpWvHksqObMQWq4E.roa (hash: /p/ujtYI0LrIojxA4eFgMakt3BjMBgIlLRM6Y1JhEgo=) 8: fKdatG9WcJc5WVUN6pdVKIOjMnQ.roa (hash: kqSOLzeO/Lml0iGRyiBotGsiuI6Y4hQbc4VPC8laBE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:3a:91:fa:43:c5:c1:ab:37:40:4c:20:58:3a:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Validity Not Before: Dec 6 16:01:06 2025 GMT Not After : Dec 7 16:01:06 2025 GMT Subject: CN=e9329d9b06480c8d0238f2f7df672621401d50f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d1:bb:75:cd:ce:b6:74:bb:bd:18:7a:b2:12: 9c:b4:11:25:a4:e9:7a:1d:b1:d6:54:84:e8:36:d5: db:1b:a5:71:9e:b4:ba:52:f4:af:5f:82:ba:c3:8e: b0:b5:c1:04:21:76:98:67:e4:b0:ca:7e:2d:ea:35: 9b:d4:92:23:3d:c8:2f:d1:5b:18:c1:56:95:d0:5c: 3f:ed:6d:09:c3:57:ff:fd:c2:2f:3f:44:ab:fa:77: d4:c7:7d:7c:70:7d:81:bb:24:21:66:98:fd:28:6f: 09:28:ad:dd:76:23:8d:36:98:93:9e:65:7c:e9:f6: 6c:f6:1f:c6:4a:98:e7:b5:4a:0a:ae:2d:53:66:e8: f3:67:0c:89:09:57:76:5c:a1:64:45:18:5e:9e:8f: ad:61:71:d7:9b:2b:95:14:a1:6e:a4:63:b5:e1:29: b8:eb:09:37:05:35:eb:87:33:9b:52:70:e9:5e:d3: af:22:14:1a:35:14:05:b9:aa:fa:f7:4f:57:c5:a4: 67:c8:9c:e3:98:5f:03:8d:1b:99:88:8e:d1:68:da: 22:a8:96:8c:13:7a:5c:aa:ee:eb:cb:bb:20:6b:72: 33:07:ec:55:94:59:a8:b4:f5:c4:c3:8b:a0:d6:7f: 9a:9f:be:36:a9:2c:d4:4d:31:a7:93:5c:71:0f:2e: 4e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:32:9D:9B:06:48:0C:8D:02:38:F2:F7:DF:67:26:21:40:1D:50:F6 X509v3 Authority Key Identifier: keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:cc:57:87:40:b2:88:ca:b8:69:9b:6e:ee:e5:fb:81:24:52: 55:4b:5d:2f:48:8a:2f:2b:be:04:69:b2:b0:a1:af:e9:8b:ca: 10:f6:66:35:49:c7:dc:73:b8:39:a5:f1:e2:eb:7d:fe:cb:e7: 40:a3:fc:91:37:90:53:7c:13:71:a2:ae:13:28:d1:8f:5d:4c: 02:33:99:4e:4e:d1:a5:ab:f0:7a:1e:cd:0a:06:09:4a:09:8f: 45:55:c6:53:1c:cb:d9:28:41:1a:6a:2a:ae:77:f1:7a:ee:46: cf:1b:5b:16:75:6b:fc:6b:1f:38:f2:84:0c:8d:30:24:b8:94: 4d:ba:26:73:24:1b:56:69:0c:96:67:62:46:be:e4:23:42:90: f5:89:2c:ef:a4:82:7d:bb:c1:6b:2b:2b:ba:a6:dd:b6:bf:36: ad:07:94:f4:d4:3a:ce:69:26:66:cb:fe:79:da:df:93:86:05: e7:7d:6b:42:77:74:53:c0:f2:f6:e3:27:6f:a3:2d:98:11:72: e3:c9:c1:c7:dd:51:9b:b3:32:7b:e7:27:fe:60:d3:03:d6:11: c8:20:8a:b8:4e:82:92:5f:05:3a:20:08:fe:8f:43:b4:f8:dd: 21:75:e6:21:e8:3f:b2:48:81:5b:51:93:d3:ca:3d:1f:dc:c2: 8d:7b:7e:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZTqR+kPFwas3QEwgWDpcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky MGMzZDkwHhcNMjUxMjA2MTYwMTA2WhcNMjUxMjA3MTYwMTA2WjAzMTEwLwYDVQQD EyhlOTMyOWQ5YjA2NDgwYzhkMDIzOGYyZjdkZjY3MjYyMTQwMWQ1MGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9G7dc3OtnS7vRh6shKctBElpOl6 HbHWVIToNtXbG6VxnrS6UvSvX4K6w46wtcEEIXaYZ+Swyn4t6jWb1JIjPcgv0VsY wVaV0Fw/7W0Jw1f//cIvP0Sr+nfUx318cH2BuyQhZpj9KG8JKK3ddiONNpiTnmV8 6fZs9h/GSpjntUoKri1TZujzZwyJCVd2XKFkRRheno+tYXHXmyuVFKFupGO14Sm4 6wk3BTXrhzObUnDpXtOvIhQaNRQFuar6909XxaRnyJzjmF8DjRuZiI7RaNoiqJaM E3pcqu7ry7sga3IzB+xVlFmotPXEw4ug1n+an742qSzUTTGnk1xxDy5OtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkynZsGSAyNAjjy999nJiFAHVD2MB8GA1UdIwQY MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt NGZiNTU5YjNiOWIzLzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsxXh0Cy iMq4aZtu7uX7gSRSVUtdL0iKLyu+BGmysKGv6YvKEPZmNUnH3HO4OaXx4ut9/svn QKP8kTeQU3wTcaKuEyjRj11MAjOZTk7Rpavweh7NCgYJSgmPRVXGUxzL2ShBGmoq rnfxeu5GzxtbFnVr/GsfOPKEDI0wJLiUTbomcyQbVmkMlmdiRr7kI0KQ9Yks76SC fbvBaysruqbdtr82rQeU9NQ6zmkmZsv+edrfk4YF531rQnd0U8Dy9uMnb6MtmBFy 48nBx91Rm7Mye+cn/mDTA9YRyCCKuE6Ckl8FOiAI/o9DtPjdIXXmIeg/skiBW1GT 08o9H9zCjXt+sQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:56:45 2025 by rpki-client