This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft File: dHWiyViPxpXSdUKD3NPRI9H3eBE.mft (raw, json) Hash identifier: db7yp/ges4MpL0WVI5krWyBwCC3URWzmeyl8+jxvxXY= Subject key identifier: 2D:CD:9F:77:8B:0F:25:22:C5:87:2C:B3:7E:DA:56:3A:DF:D2:5E:07 Authority key identifier: 74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11 Certificate issuer: /CN=7475a2c9588fc695d2754283dcd3d123d1f77811 Certificate serial: 019AF208DD694D57D539EB592A5ED687C4B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: byfAz36QPO1zWRGDAvBxGCJUgUc.roa (hash: cj5k9JTRqENUIcOxIhQN0l2jcQzpbWQBrAEBDWIt2vI=) 2: dHWiyViPxpXSdUKD3NPRI9H3eBE.crl (hash: pcX0s33vxbPpzXsz5MUzQN5dw7CydBf2iuN5N5xQ2cE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:dd:69:4d:57:d5:39:eb:59:2a:5e:d6:87:c4:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7475a2c9588fc695d2754283dcd3d123d1f77811 Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=2dcd9f778b0f2522c5872cb37eda563adfd25e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d6:4e:f4:6e:b6:19:84:8b:98:22:cf:53:bf: f0:32:42:3f:ab:90:a0:e2:89:85:51:6e:ef:00:2b: 38:6c:4c:5f:bd:ab:f4:a0:69:d8:9c:e0:b3:f6:46: d9:26:52:b4:5c:9b:4d:2a:5e:c2:2d:13:c0:d2:e7: 00:b1:d8:9d:20:ea:5f:4d:bd:68:56:c1:96:fc:ef: 77:3c:a4:d3:38:14:86:2a:b0:f1:3f:fd:8a:aa:b3: a9:29:4a:32:cf:c0:cf:18:c2:70:b0:f4:c0:4f:58: a4:2e:81:c3:98:2a:07:79:76:d5:d4:f3:23:46:78: 9f:25:da:6c:34:df:4a:2a:04:9f:54:21:0a:a6:a6: 8d:da:83:09:f6:68:fe:d5:85:5e:1d:d7:81:78:fa: 8d:67:80:4b:cf:a9:e4:34:37:13:3e:c7:46:2e:80: a9:6c:79:be:16:4f:26:9f:b1:3a:7d:52:d5:ad:cf: cd:07:c5:73:f2:cc:4e:2b:21:3f:9b:87:a5:19:3f: 37:4b:3c:c6:09:52:56:e8:9f:a1:04:a7:44:51:5c: 5a:9f:08:75:02:24:a2:c2:b4:03:d4:97:ba:89:a9: 97:09:dd:7a:7b:c3:1b:7f:b8:ad:62:9e:7b:ea:f4: c6:98:50:69:36:e1:af:70:74:29:cd:e0:8b:d9:67: 8b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CD:9F:77:8B:0F:25:22:C5:87:2C:B3:7E:DA:56:3A:DF:D2:5E:07 X509v3 Authority Key Identifier: keyid:74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ad:9d:73:96:97:43:44:0b:a5:98:d2:1b:25:65:2c:2d:c1: 00:e4:73:61:65:01:51:9b:ee:9b:ea:b4:0d:97:7f:f8:56:d0: 3c:6b:d3:33:e4:03:74:5e:90:07:f3:77:42:13:c9:ac:d4:a5: a6:82:f0:e5:d2:9d:31:20:3e:24:ad:f6:89:c4:0d:40:8e:1a: cd:ee:3f:89:4e:39:60:28:b2:a2:28:a2:57:17:64:71:4d:8a: 44:36:77:4b:ca:9b:0f:ac:fc:71:09:72:30:e0:a4:17:94:7e: bd:5a:ba:0b:1e:3d:eb:aa:f8:e3:fc:5a:db:74:7a:5d:c9:e6: 0a:15:23:7f:95:71:e5:95:5b:76:20:cf:42:85:b4:3a:1a:cc: cb:5a:d2:db:ea:f9:57:6c:bd:bd:f8:4a:ad:2a:62:de:11:a4: 2a:83:57:57:35:81:f3:f5:e2:3a:42:28:5e:18:12:ca:95:1f: 14:52:24:3d:fa:80:a1:ec:ae:ba:1c:5a:1e:6c:d1:f6:b7:b9: c3:da:74:29:26:71:15:59:aa:3a:06:32:15:f9:63:1e:27:f8: 88:17:92:92:cc:b1:f0:29:4c:6d:95:97:39:a7:d6:7d:03:19: d8:8b:18:c0:be:74:14:89:5c:d7:1d:92:b4:47:1c:39:e5:90: 2d:1d:77:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCN1pTVfVOetZKl7Wh8S1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NzVhMmM5NTg4ZmM2OTVkMjc1NDI4M2RjZDNkMTIzZDFm Nzc4MTEwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD EygyZGNkOWY3NzhiMGYyNTIyYzU4NzJjYjM3ZWRhNTYzYWRmZDI1ZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdZO9G62GYSLmCLPU7/wMkI/q5Cg 4omFUW7vACs4bExfvav0oGnYnOCz9kbZJlK0XJtNKl7CLRPA0ucAsdidIOpfTb1o VsGW/O93PKTTOBSGKrDxP/2KqrOpKUoyz8DPGMJwsPTAT1ikLoHDmCoHeXbV1PMj RnifJdpsNN9KKgSfVCEKpqaN2oMJ9mj+1YVeHdeBePqNZ4BLz6nkNDcTPsdGLoCp bHm+Fk8mn7E6fVLVrc/NB8Vz8sxOKyE/m4elGT83SzzGCVJW6J+hBKdEUVxanwh1 AiSiwrQD1Je6iamXCd16e8Mbf7itYp576vTGmFBpNuGvcHQpzeCL2WeLSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3Nn3eLDyUixYcss37aVjrf0l4HMB8GA1UdIwQY MBaAFHR1oslYj8aV0nVCg9zT0SPR93gRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEhXaXlWaVB4cFhTZFVLRDNOUFJJOUgzZUJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yODk4ZTYtMGQ3OS00NTRlLWFiNTQt NDBiZTBjNDYzYjkwLzEvZEhXaXlWaVB4cFhTZFVLRDNOUFJJOUgzZUJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yODk4ZTYtMGQ3OS00NTRlLWFiNTQtNDBiZTBjNDYzYjkw LzEvZEhXaXlWaVB4cFhTZFVLRDNOUFJJOUgzZUJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABq2dc5aX Q0QLpZjSGyVlLC3BAORzYWUBUZvum+q0DZd/+FbQPGvTM+QDdF6QB/N3QhPJrNSl poLw5dKdMSA+JK32icQNQI4aze4/iU45YCiyoiiiVxdkcU2KRDZ3S8qbD6z8cQly MOCkF5R+vVq6Cx4966r44/xa23R6XcnmChUjf5Vx5ZVbdiDPQoW0OhrMy1rS2+r5 V2y9vfhKrSpi3hGkKoNXVzWB8/XiOkIoXhgSypUfFFIkPfqAoeyuuhxaHmzR9re5 w9p0KSZxFVmqOgYyFfljHif4iBeSksyx8ClMbZWXOafWfQMZ2IsYwL50FIlc1x2S tEccOeWQLR13KA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:01:08 2025 by rpki-client