This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft File: d92irQmMangU-yWLRpsNhM4kxKc.mft (raw, json) Hash identifier: zzLZt+CaTipgpTh2FhZuykiABYaOyLUHHJIJalq5xhQ= Subject key identifier: 97:E5:49:15:58:BE:EB:78:62:D8:F4:0D:E2:98:1F:84:05:B5:9D:28 Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7 Certificate issuer: /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7 Certificate serial: 019AF2764AAA7DEFB32EA448AE3D8EB4C4AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:00:29 +0000 Manifest this update: Sat 06 Dec 2025 07:00:29 +0000 Manifest next update: Sun 07 Dec 2025 07:00:29 +0000 Files and hashes: 1: auoQhH7aBJnI1g3L4GojEkAsQQY.roa (hash: gWIiP5OtZwTCpaoFewi8x05lW349LkZSfT6+AFOcha0=) 2: d92irQmMangU-yWLRpsNhM4kxKc.crl (hash: s20uhf5r9ryeBrye5JzUI4FWlViqdo7Sp3U+wxRXYGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:4a:aa:7d:ef:b3:2e:a4:48:ae:3d:8e:b4:c4:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7 Validity Not Before: Dec 6 07:00:29 2025 GMT Not After : Dec 7 07:00:29 2025 GMT Subject: CN=97e5491558beeb7862d8f40de2981f8405b59d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d9:f1:67:7b:b1:e4:40:8e:ed:6a:51:48:d2: 85:d6:f7:9b:4e:11:40:ad:62:09:36:68:7d:3c:fa: d4:69:2b:39:fa:38:67:43:53:32:05:19:78:00:7e: 5d:ba:6d:d1:d1:5a:4c:1f:e8:66:92:de:f6:ec:bf: 6f:7f:32:a1:da:f4:b8:97:a7:16:7f:26:1d:52:18: 33:e2:32:ea:3c:d3:83:a5:5e:9c:01:82:ad:dd:30: d0:0a:89:20:d5:ab:ce:2f:1c:59:35:12:29:01:f1: 1d:7c:9c:60:cd:2e:82:5b:cf:c7:f1:6c:3d:95:22: 54:47:a5:a0:fc:1a:3a:30:44:2d:57:2f:c4:6e:86: 62:e0:24:52:19:1f:9c:5b:4b:be:3c:51:8e:08:e1: a8:00:f0:f4:c5:ef:9e:66:d1:b9:d9:83:9c:05:98: 11:a1:b7:13:49:fb:b6:23:11:ed:78:79:c2:59:05: 6e:c3:3b:44:55:44:25:c6:32:9a:6a:a2:bc:ef:a9: d1:a0:e1:28:b2:b2:88:c9:5e:d5:d3:59:d7:22:ce: a5:4c:e4:71:a3:8f:02:bf:13:44:86:1c:83:48:d9: b1:e9:2d:c8:fb:7e:e1:cc:c0:5c:b8:43:91:4e:19: 9b:a8:a1:50:e6:00:f8:4f:b1:f1:6a:62:60:7d:63: 18:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E5:49:15:58:BE:EB:78:62:D8:F4:0D:E2:98:1F:84:05:B5:9D:28 X509v3 Authority Key Identifier: keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:72:c6:b7:a2:cf:5c:fb:c9:e1:2a:06:5f:88:90:60:a0:c3: 79:06:70:f6:6c:21:a5:9d:61:bb:91:87:95:ff:ba:b9:19:80: 29:e7:f7:8c:d0:eb:e1:28:47:f1:41:95:99:57:ec:82:47:36: a8:c2:b8:b1:81:e8:ec:f1:03:7a:f7:e7:ca:b8:eb:b8:e2:f5: dd:f0:85:8a:b2:54:09:69:e8:67:43:0b:56:0f:05:4f:2f:fd: 73:67:0a:8d:96:d7:e0:4d:2d:67:49:63:ff:fe:bb:37:e7:55: 82:91:98:e9:d5:48:a1:f3:e4:1c:f8:80:77:a1:de:04:2b:7b: 3d:ab:e1:5e:9f:bd:3b:54:b6:51:6d:68:21:67:52:12:ac:43: d6:08:38:75:0c:eb:19:43:57:58:5f:d9:15:0b:74:e1:fe:4a: 59:38:2f:12:bf:1c:ef:1f:a3:03:99:9f:59:26:ca:ac:83:ed: b2:1b:bc:3b:82:b7:cf:7e:2d:2a:2f:db:41:39:a3:de:a5:19: 66:cd:4c:33:11:af:c1:f9:fe:d6:5c:34:74:cf:41:a7:5e:b0: 8f:35:45:ad:dc:ea:3c:3d:4d:23:60:ff:a0:3b:e0:88:3d:af: 37:d2:4d:0a:c8:a8:0d:7f:60:0a:18:96:8a:95:64:a4:dc:53: 24:05:d2:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydkqqfe+zLqRIrj2OtMSsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZGRhMmFkMDk4YzZhNzgxNGZiMjU4YjQ2OWIwZDg0Y2Uy NGM0YTcwHhcNMjUxMjA2MDcwMDI5WhcNMjUxMjA3MDcwMDI5WjAzMTEwLwYDVQQD Eyg5N2U1NDkxNTU4YmVlYjc4NjJkOGY0MGRlMjk4MWY4NDA1YjU5ZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdnxZ3ux5ECO7WpRSNKF1vebThFA rWIJNmh9PPrUaSs5+jhnQ1MyBRl4AH5dum3R0VpMH+hmkt727L9vfzKh2vS4l6cW fyYdUhgz4jLqPNODpV6cAYKt3TDQCokg1avOLxxZNRIpAfEdfJxgzS6CW8/H8Ww9 lSJUR6Wg/Bo6MEQtVy/EboZi4CRSGR+cW0u+PFGOCOGoAPD0xe+eZtG52YOcBZgR obcTSfu2IxHteHnCWQVuwztEVUQlxjKaaqK876nRoOEosrKIyV7V01nXIs6lTORx o48CvxNEhhyDSNmx6S3I+37hzMBcuEORThmbqKFQ5gD4T7HxamJgfWMY7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJflSRVYvut4Ytj0DeKYH4QFtZ0oMB8GA1UdIwQY MBaAFHfdoq0JjGp4FPsli0abDYTOJMSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDkyaXJRbU1hbmdVLXlXTFJwc05oTTRreEtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84ODU0NTctNzBmMi00NDEwLWJlN2Mt ODE0NzZkYmFiMTQ0LzEvZDkyaXJRbU1hbmdVLXlXTFJwc05oTTRreEtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC84ODU0NTctNzBmMi00NDEwLWJlN2MtODE0NzZkYmFiMTQ0 LzEvZDkyaXJRbU1hbmdVLXlXTFJwc05oTTRreEtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3LGt6LP XPvJ4SoGX4iQYKDDeQZw9mwhpZ1hu5GHlf+6uRmAKef3jNDr4ShH8UGVmVfsgkc2 qMK4sYHo7PEDevfnyrjruOL13fCFirJUCWnoZ0MLVg8FTy/9c2cKjZbX4E0tZ0lj //67N+dVgpGY6dVIofPkHPiAd6HeBCt7PavhXp+9O1S2UW1oIWdSEqxD1gg4dQzr GUNXWF/ZFQt04f5KWTgvEr8c7x+jA5mfWSbKrIPtshu8O4K3z34tKi/bQTmj3qUZ Zs1MMxGvwfn+1lw0dM9Bp16wjzVFrdzqPD1NI2D/oDvgiD2vN9JNCsioDX9gChiW ipVkpNxTJAXS3A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:04 2025 by rpki-client