This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft File: dAId0eJ80ed44tu9YKoYSxY7zv4.mft (raw, json) Hash identifier: RfcUcACzoWJN078O7ZDfnP6piCkr0goieWdFMgr/YBM= Subject key identifier: AA:47:98:81:43:BB:BC:81:6E:97:16:CC:54:A3:1C:B8:B0:4E:D8:CD Authority key identifier: 74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE Certificate issuer: /CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe Certificate serial: 019AF20987F920C802D9967F4AA267CE29EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft Manifest number: 02B7 Signing time: Sat 06 Dec 2025 05:01:42 +0000 Manifest this update: Sat 06 Dec 2025 05:01:42 +0000 Manifest next update: Sun 07 Dec 2025 05:01:42 +0000 Files and hashes: 1: SFufe6GxPr18jUulsobsVcJNabA.roa (hash: BS7brnhU1ziQ1RkRsO80taFEBA/xtbs+mzY1lj67wlg=) 2: dAId0eJ80ed44tu9YKoYSxY7zv4.crl (hash: 897iTwyd/8b/9D+5pWa7cc3tswxKDjgHpWqD3ftzCfk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:87:f9:20:c8:02:d9:96:7f:4a:a2:67:ce:29:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe Validity Not Before: Dec 6 05:01:42 2025 GMT Not After : Dec 7 05:01:42 2025 GMT Subject: CN=aa47988143bbbc816e9716cc54a31cb8b04ed8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f1:52:da:f6:d7:36:48:76:f7:c4:69:e7:f8: 62:9b:80:86:e0:09:39:be:7d:ca:84:97:6d:ed:1a: 71:36:71:cc:2d:e6:9b:7f:5e:a0:02:7c:81:9a:4f: 95:7f:ea:15:9e:42:7e:1e:b6:2d:32:0b:41:97:64: 8b:cb:77:83:f5:f2:62:59:a5:c8:b8:ee:d7:cc:9c: fb:61:a6:35:ab:b9:75:a3:b4:01:61:18:4a:b5:cd: f5:61:8f:d9:db:60:71:98:03:fd:35:76:7c:d9:f7: 3c:5f:14:52:05:71:a0:93:ae:14:54:b7:7e:c1:36: 6f:09:fd:e8:06:d9:ac:53:37:ac:b2:d1:34:1f:54: 0c:fa:c9:30:cf:0a:07:70:30:b2:ac:49:d2:6c:8e: da:1f:c4:6e:29:17:c5:70:b1:a1:dd:ca:e1:e8:03: 35:67:d8:da:a5:0a:5b:34:5a:19:5b:6c:a5:42:ec: 27:e1:74:ef:53:ae:7a:b3:e6:32:a9:fe:88:c4:c1: 58:0c:0c:57:4b:31:6e:60:25:c1:3c:23:c7:09:91: 11:b1:47:0f:3a:d6:d0:76:59:a3:5d:91:53:46:96: c4:71:84:52:68:bb:a5:b1:f8:c2:14:9f:3b:7f:38: 26:ba:1f:55:bb:ba:73:22:9f:1d:8c:6b:5b:dd:ef: 54:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:47:98:81:43:BB:BC:81:6E:97:16:CC:54:A3:1C:B8:B0:4E:D8:CD X509v3 Authority Key Identifier: keyid:74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:1a:a3:d2:52:de:ea:74:38:72:06:39:13:bd:dd:03:74:04: 0b:cc:00:90:23:fd:30:78:a3:aa:4f:84:a8:1f:38:f7:88:0d: 73:e4:3f:59:79:0c:08:03:2e:85:65:c9:a1:b2:d5:82:b0:e3: 71:a9:d4:b6:a1:ec:db:c6:a9:c8:ae:04:84:6d:0c:28:2f:63: 37:6a:3d:d5:dd:f7:78:ba:7b:3d:6d:92:44:bb:b0:f1:20:0c: 23:6f:fd:6b:da:2a:2e:24:ed:fc:be:47:5c:9d:fe:d1:6c:ae: c2:d3:42:2e:85:5f:81:02:c2:7c:b4:da:ff:38:3e:35:74:23: 6c:2c:b5:70:77:43:91:84:0c:f6:59:b4:a6:f4:91:a3:9c:67: 63:43:0d:75:51:f8:b2:54:88:7b:f7:a7:e8:21:c6:da:00:17: a0:e7:45:33:75:dd:e8:7d:2d:14:9c:0d:ac:ad:1f:b0:65:95: e6:98:ee:aa:16:15:c8:6d:b9:74:43:0c:80:fe:21:5b:41:30: 95:1e:54:9a:d4:1c:96:62:f8:42:3c:5a:18:4f:aa:21:fe:1e: 3f:ae:55:ea:22:b1:a9:f5:fe:7a:c3:27:8d:46:d6:c2:dd:30: 5b:6f:67:4d:08:a5:86:f5:ae:a4:65:3d:f5:7a:bd:3b:b9:e7: b2:b9:d8:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYf5IMgC2ZZ/SqJnzinsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MDIxZGQxZTI3Y2QxZTc3OGUyZGJiZDYwYWExODRiMTYz YmNlZmUwHhcNMjUxMjA2MDUwMTQyWhcNMjUxMjA3MDUwMTQyWjAzMTEwLwYDVQQD EyhhYTQ3OTg4MTQzYmJiYzgxNmU5NzE2Y2M1NGEzMWNiOGIwNGVkOGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vFS2vbXNkh298Rp5/him4CG4Ak5 vn3KhJdt7RpxNnHMLeabf16gAnyBmk+Vf+oVnkJ+HrYtMgtBl2SLy3eD9fJiWaXI uO7XzJz7YaY1q7l1o7QBYRhKtc31YY/Z22BxmAP9NXZ82fc8XxRSBXGgk64UVLd+ wTZvCf3oBtmsUzesstE0H1QM+skwzwoHcDCyrEnSbI7aH8RuKRfFcLGh3crh6AM1 Z9japQpbNFoZW2ylQuwn4XTvU656s+Yyqf6IxMFYDAxXSzFuYCXBPCPHCZERsUcP OtbQdlmjXZFTRpbEcYRSaLulsfjCFJ87fzgmuh9Vu7pzIp8djGtb3e9UqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpHmIFDu7yBbpcWzFSjHLiwTtjNMB8GA1UdIwQY MBaAFHQCHdHifNHneOLbvWCqGEsWO87+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEFJZDBlSjgwZWQ0NHR1OVlLb1lTeFk3enY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84OTQxZjgtOWZiNi00ZDBmLWI0OTUt OTMzODVmODA1NjU1LzEvZEFJZDBlSjgwZWQ0NHR1OVlLb1lTeFk3enY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC84OTQxZjgtOWZiNi00ZDBmLWI0OTUtOTMzODVmODA1NjU1 LzEvZEFJZDBlSjgwZWQ0NHR1OVlLb1lTeFk3enY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBqj0lLe 6nQ4cgY5E73dA3QEC8wAkCP9MHijqk+EqB8494gNc+Q/WXkMCAMuhWXJobLVgrDj canUtqHs28apyK4EhG0MKC9jN2o91d33eLp7PW2SRLuw8SAMI2/9a9oqLiTt/L5H XJ3+0WyuwtNCLoVfgQLCfLTa/zg+NXQjbCy1cHdDkYQM9lm0pvSRo5xnY0MNdVH4 slSIe/en6CHG2gAXoOdFM3Xd6H0tFJwNrK0fsGWV5pjuqhYVyG25dEMMgP4hW0Ew lR5UmtQclmL4QjxaGE+qIf4eP65V6iKxqfX+esMnjUbWwt0wW29nTQilhvWupGU9 9Xq9O7nnsrnYig== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:32 2025 by rpki-client