This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft File: 29weM6UtreAbUtkXC8KbjCjZi2w.mft (raw, json) Hash identifier: LcP1CanrVjSQAhSLMgDQpyyfpe9jfQPZWrNZcHbCzik= Subject key identifier: CD:EB:E4:F0:C8:A9:68:2F:7B:2A:B6:CC:53:AD:25:AD:6A:EA:AD:DE Authority key identifier: DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C Certificate issuer: /CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c Certificate serial: 019AF1D18868A7C6FCE883825C8B5419135C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft Manifest number: 01DC Signing time: Sat 06 Dec 2025 04:00:32 +0000 Manifest this update: Sat 06 Dec 2025 04:00:32 +0000 Manifest next update: Sun 07 Dec 2025 04:00:32 +0000 Files and hashes: 1: 29weM6UtreAbUtkXC8KbjCjZi2w.crl (hash: Jt5GmLBQdpbprSz5/oRueeiIw9Gjo0NyI4eh85bykc8=) 2: B1LqaZUhsUfUDpN-9vYGCP2m0g8.roa (hash: QrKbpCe6SJ2ZphzaQI2EN0WS9Q27CgrmTnBcyr8V/oE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:88:68:a7:c6:fc:e8:83:82:5c:8b:54:19:13:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c Validity Not Before: Dec 6 04:00:32 2025 GMT Not After : Dec 7 04:00:32 2025 GMT Subject: CN=cdebe4f0c8a9682f7b2ab6cc53ad25ad6aeaadde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:47:01:64:81:62:c0:29:67:f4:09:b0:09:b0: 41:49:b3:09:14:6a:f9:6d:56:a6:c5:29:04:b0:bb: 6d:8e:30:cd:08:dd:26:2a:b5:11:80:1b:2a:ff:01: d7:65:11:48:b2:89:28:20:d6:60:d1:1a:5c:ed:3b: c0:3a:19:57:32:b8:ba:6c:f8:9a:c7:a1:29:6a:31: da:8a:e7:d0:05:75:61:01:1f:46:59:23:61:0f:4f: ac:31:19:ec:4e:62:15:e1:b4:7d:b6:72:8b:ab:de: 09:d7:a8:cd:33:f9:20:fc:18:23:47:57:25:00:5c: 21:ce:ec:0e:0b:d5:59:7e:23:f8:26:cd:98:e7:83: e3:f1:f2:c8:14:5a:cb:f9:97:1c:14:0e:4f:23:46: 5a:8e:7c:11:80:fa:b3:29:fb:e7:68:03:a8:ea:92: 15:3d:64:25:f7:cf:2e:11:28:13:48:69:aa:7b:90: 83:ad:d9:0c:70:bb:3e:5d:d8:dd:c6:24:50:a6:8e: d1:bc:85:ed:2b:a0:2d:3f:69:06:ba:bd:bb:97:54: 04:0f:db:ef:84:1d:d9:bf:5f:45:60:98:03:86:f6: 2e:2f:b8:b6:f9:80:fa:e8:63:fd:2a:90:52:66:a5: 83:51:a7:34:14:1e:f1:bf:1f:5a:71:5b:3d:c9:6e: 92:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EB:E4:F0:C8:A9:68:2F:7B:2A:B6:CC:53:AD:25:AD:6A:EA:AD:DE X509v3 Authority Key Identifier: keyid:DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ef:33:3a:3a:49:01:91:9b:f3:5e:ea:75:88:80:6e:35:79: 19:f2:d5:58:91:67:82:e7:7d:dc:8d:7b:48:3d:0a:07:5a:88: 06:96:92:da:bb:b1:7d:f5:02:7d:f4:8a:10:f7:f2:11:f6:68: 08:e6:a8:ae:e5:63:f3:06:c4:7b:7e:ed:57:91:bc:a7:83:8c: d9:8c:b4:6d:62:3d:69:07:cf:62:78:13:0e:af:b0:56:ab:50: 83:a1:bd:5d:7b:cb:13:8a:eb:01:a3:ca:0e:76:85:90:1c:85: 62:b1:8a:d0:f2:15:b8:74:b1:d4:84:c8:e1:41:56:ae:ec:9b: b0:0b:62:a3:c4:e4:5d:93:ae:91:a7:6e:6d:05:c8:f1:5b:e7: 78:09:d8:27:9d:31:03:58:74:32:2b:7d:c2:7e:6c:e7:05:02: f9:42:3b:86:44:76:88:cc:58:e4:81:7a:c4:48:af:82:76:87: af:66:5b:05:a1:23:c0:25:55:a4:2c:d2:15:42:df:f5:88:36: b7:c1:e8:d3:98:a8:32:5f:06:d9:d5:5b:70:34:bc:a7:b6:f4: 81:62:0b:53:63:83:0e:10:68:2a:1e:a0:5e:0e:cd:1c:94:ab: c9:86:b6:c2:f7:43:20:39:83:10:cb:a2:d3:6c:8c:2d:da:08: 31:81:21:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Yhop8b86IOCXItUGRNcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZGMxZTMzYTUyZGFkZTAxYjUyZDkxNzBiYzI5YjhjMjhk OThiNmMwHhcNMjUxMjA2MDQwMDMyWhcNMjUxMjA3MDQwMDMyWjAzMTEwLwYDVQQD EyhjZGViZTRmMGM4YTk2ODJmN2IyYWI2Y2M1M2FkMjVhZDZhZWFhZGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kcBZIFiwCln9AmwCbBBSbMJFGr5 bVamxSkEsLttjjDNCN0mKrURgBsq/wHXZRFIsokoINZg0Rpc7TvAOhlXMri6bPia x6EpajHaiufQBXVhAR9GWSNhD0+sMRnsTmIV4bR9tnKLq94J16jNM/kg/BgjR1cl AFwhzuwOC9VZfiP4Js2Y54Pj8fLIFFrL+ZccFA5PI0ZajnwRgPqzKfvnaAOo6pIV PWQl988uESgTSGmqe5CDrdkMcLs+XdjdxiRQpo7RvIXtK6AtP2kGur27l1QED9vv hB3Zv19FYJgDhvYuL7i2+YD66GP9KpBSZqWDUac0FB7xvx9acVs9yW6SuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3r5PDIqWgveyq2zFOtJa1q6q3eMB8GA1UdIwQY MBaAFNvcHjOlLa3gG1LZFwvCm4wo2YtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjl3ZU02VXRyZUFiVXRrWEM4S2JqQ2paaTJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNDlmMWMtYzk0NS00N2M0LWJkZGMt ZWVjY2MyMGE4ZDIxLzEvMjl3ZU02VXRyZUFiVXRrWEM4S2JqQ2paaTJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kNDlmMWMtYzk0NS00N2M0LWJkZGMtZWVjY2MyMGE4ZDIx LzEvMjl3ZU02VXRyZUFiVXRrWEM4S2JqQ2paaTJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhO8zOjpJ AZGb817qdYiAbjV5GfLVWJFngud93I17SD0KB1qIBpaS2ruxffUCffSKEPfyEfZo COaoruVj8wbEe37tV5G8p4OM2Yy0bWI9aQfPYngTDq+wVqtQg6G9XXvLE4rrAaPK DnaFkByFYrGK0PIVuHSx1ITI4UFWruybsAtio8TkXZOukadubQXI8VvneAnYJ50x A1h0Mit9wn5s5wUC+UI7hkR2iMxY5IF6xEivgnaHr2ZbBaEjwCVVpCzSFULf9Yg2 t8Ho05ioMl8G2dVbcDS8p7b0gWILU2ODDhBoKh6gXg7NHJSryYa2wvdDIDmDEMui 02yMLdoIMYEhOA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:17 2025 by rpki-client