This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft File: dThqb64eVfV2pAW9dLfwjnpsRlM.mft (raw, json) Hash identifier: 9znWO1NgOOivTs1YwsV8FFL3vB8ts6lADMdZtsf8YGs= Subject key identifier: 39:39:40:F8:14:5F:22:10:C6:FA:B1:F3:99:C1:62:FB:94:F1:91:26 Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53 Certificate issuer: /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653 Certificate serial: 019B2DAFFD997F282E8E2B6FB6720EC5ECB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft Manifest number: 0A2D Signing time: Wed 17 Dec 2025 19:01:06 +0000 Manifest this update: Wed 17 Dec 2025 19:01:06 +0000 Manifest next update: Thu 18 Dec 2025 19:01:06 +0000 Files and hashes: 1: RbCZ4FuBiM5bQVW3sP5PrxSE_ic.roa (hash: heyjJE1M941WJSvHrhTQkBoLwbj5RIQs9kFiPjSVnUw=) 2: VgQVNXTLznzmHsP79v3Zsr2IWwU.roa (hash: V8Zv8ak7cEH62i1TGjfWmCMowy8kun9bTSlwi87+E9s=) 3: dThqb64eVfV2pAW9dLfwjnpsRlM.crl (hash: RSKqGJLl9wrCYKaG89IpuRVpBQ+ZaZB2BKKx6QCj3uc=) 4: rgad5_QrqjzIqPuzW_IRWvVFFb4.roa (hash: CW37KfuVvlCtejt5YGCTadY3jiqhfL5iQfoIqu008Bo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:af:fd:99:7f:28:2e:8e:2b:6f:b6:72:0e:c5:ec:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653 Validity Not Before: Dec 17 19:01:06 2025 GMT Not After : Dec 18 19:01:06 2025 GMT Subject: CN=393940f8145f2210c6fab1f399c162fb94f19126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1b:24:fb:34:40:f3:fe:33:e3:19:a1:34:12: 8a:fb:b0:2b:03:7c:68:e0:0c:11:8d:35:ec:95:f7: 73:f1:0a:f9:29:19:fe:93:f7:eb:11:e1:c0:de:eb: b9:42:c5:37:7c:8c:9b:f2:b0:bd:51:f3:9e:d7:6e: b8:91:9c:92:df:ac:9f:4f:46:0a:f3:02:b8:49:32: 26:96:92:be:02:f0:15:e2:53:22:f2:71:ef:2a:31: ce:00:a5:3f:6d:a8:83:c4:f2:73:b9:9a:9b:29:f9: 3f:5e:c7:90:c1:7a:58:a9:79:bb:43:00:78:78:a3: b9:8b:61:1f:95:d6:11:88:1b:97:07:03:a7:a8:80: 7f:35:8e:15:ee:31:1c:ad:99:ad:b4:b4:64:63:00: 9c:e6:6e:44:ad:ae:e2:0f:5e:75:ca:67:37:ba:32: 56:c5:36:a4:d3:13:ac:b8:ed:28:81:ac:dd:46:47: 01:12:d0:67:77:41:93:6a:4f:dc:b4:1e:60:52:89: 8c:79:ae:92:d9:ab:4d:56:10:79:41:4b:76:f2:7e: 94:d5:ee:5d:6b:9c:8f:53:ff:ef:39:f6:37:23:ae: e6:c0:e8:33:74:ab:4b:f8:4d:0d:0b:15:e3:82:1f: be:71:f6:a7:23:fd:cf:fe:ff:a2:f3:39:0a:9f:64: 20:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:39:40:F8:14:5F:22:10:C6:FA:B1:F3:99:C1:62:FB:94:F1:91:26 X509v3 Authority Key Identifier: keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:37:97:72:19:27:de:59:0d:c5:0c:78:7e:3a:4d:7b:b0:49: 7e:80:6c:2f:29:0d:ac:a1:09:69:0f:54:be:29:29:5e:2b:3a: 3d:a1:b2:bc:04:bb:fb:ed:73:24:b0:b6:23:5d:7b:7d:0c:47: d2:77:06:1c:73:43:ab:7c:8b:de:a9:e6:56:c2:68:9f:bc:bc: 6a:db:0e:38:65:93:e7:9b:e2:91:b5:40:d9:bb:93:f8:cc:53: 38:da:31:b7:77:25:f9:61:ee:cd:10:4d:44:c1:8c:1e:7f:b6: 70:f6:10:99:e9:55:16:0b:4f:1e:58:78:81:a1:cb:5d:46:2c: d7:25:ed:cb:f6:7d:15:74:51:2a:c8:b3:65:91:c0:9b:17:5e: 5a:2a:1b:fa:83:ba:02:28:08:c5:9e:41:c4:1b:55:2b:6f:0a: d9:7f:7b:95:2b:f2:98:45:97:87:bf:40:28:8a:40:d2:3f:e9: 3e:7e:7c:85:f9:15:66:f1:5f:56:82:79:f3:b5:78:e8:9e:7f: f0:cb:81:68:60:11:ef:db:0c:14:de:fb:dc:d7:ef:08:17:b5: 07:cc:85:03:1f:69:41:97:87:34:d5:46:6f:c3:dd:b2:82:62: 22:42:80:af:d0:b2:2e:94:c5:e6:72:fd:2e:96:61:a1:a2:d7: 78:bc:e1:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstr/2ZfygujitvtnIOxey5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1Mzg2YTZmYWUxZTU1ZjU3NmE0MDViZDc0YjdmMDhlN2E2 YzQ2NTMwHhcNMjUxMjE3MTkwMTA2WhcNMjUxMjE4MTkwMTA2WjAzMTEwLwYDVQQD EygzOTM5NDBmODE0NWYyMjEwYzZmYWIxZjM5OWMxNjJmYjk0ZjE5MTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRsk+zRA8/4z4xmhNBKK+7ArA3xo 4AwRjTXslfdz8Qr5KRn+k/frEeHA3uu5QsU3fIyb8rC9UfOe1264kZyS36yfT0YK 8wK4STImlpK+AvAV4lMi8nHvKjHOAKU/baiDxPJzuZqbKfk/XseQwXpYqXm7QwB4 eKO5i2EfldYRiBuXBwOnqIB/NY4V7jEcrZmttLRkYwCc5m5Era7iD151ymc3ujJW xTak0xOsuO0ogazdRkcBEtBnd0GTak/ctB5gUomMea6S2atNVhB5QUt28n6U1e5d a5yPU//vOfY3I67mwOgzdKtL+E0NCxXjgh++cfanI/3P/v+i8zkKn2Qg7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDk5QPgUXyIQxvqx85nBYvuU8ZEmMB8GA1UdIwQY MBaAFHU4am+uHlX1dqQFvXS38I56bEZTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kOWEwMWMtNWM5MS00ZDAwLWEwOWEt Zjg3OTJmNTc3YjlhLzEvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9kOWEwMWMtNWM5MS00ZDAwLWEwOWEtZjg3OTJmNTc3Yjlh LzEvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFDeXchkn 3lkNxQx4fjpNe7BJfoBsLykNrKEJaQ9UvikpXis6PaGyvAS7++1zJLC2I117fQxH 0ncGHHNDq3yL3qnmVsJon7y8atsOOGWT55vikbVA2buT+MxTONoxt3cl+WHuzRBN RMGMHn+2cPYQmelVFgtPHlh4gaHLXUYs1yXty/Z9FXRRKsizZZHAmxdeWiob+oO6 AigIxZ5BxBtVK28K2X97lSvymEWXh79AKIpA0j/pPn58hfkVZvFfVoJ587V46J5/ 8MuBaGAR79sMFN773NfvCBe1B8yFAx9pQZeHNNVGb8PdsoJiIkKAr9CyLpTF5nL9 LpZhoaLXeLzhMw== -----END CERTIFICATE-----Generated at Thu Dec 18 04:56:44 2025 by rpki-client