This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json) Hash identifier: BOSR9d24hUpIdCMy3eq/5VYfDTOM/c6DGfe9DzA/mgY= Subject key identifier: 3B:33:67:1E:AD:EA:8D:90:F2:B6:D3:51:80:E2:01:74:69:6D:DA:EF Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92 Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992 Certificate serial: 019AF08847CA5B8982AD08D8415ED8EF49B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 22:00:54 +0000 Manifest this update: Fri 05 Dec 2025 22:00:54 +0000 Manifest next update: Sat 06 Dec 2025 22:00:54 +0000 Files and hashes: 1: BzyRKVh8G6MxV92pq1WYXw5su3Y.asa (hash: 3hX1G/8KfCcJykl9PaVXJ9wMH1P2QICFRRtGllgYDUo=) 2: PUpM4VMV5RRi5tzTokF5lqr4ZZQ.roa (hash: 9xAG/+lXKPXOcRJWGmtvJdS/t7KdmtbF4dJ5vzXbJTA=) 3: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: 7M8zfSg2MFKhbzJvWW7qoVdMr3fvUCj7IwmeXN8yIcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:47:ca:5b:89:82:ad:08:d8:41:5e:d8:ef:49:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992 Validity Not Before: Dec 5 22:00:54 2025 GMT Not After : Dec 6 22:00:54 2025 GMT Subject: CN=3b33671eadea8d90f2b6d35180e20174696ddaef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a9:ad:e1:18:1f:4b:6e:f2:f6:e6:b6:65:40: 65:fb:08:f2:a3:14:f7:2e:82:03:83:70:9d:a0:bd: 07:ff:b2:45:95:79:5d:92:92:46:c5:b8:e7:a4:ab: ad:90:8b:31:79:ff:82:7b:e9:c1:2f:e2:7c:e4:a6: db:86:ae:cc:77:58:30:e4:0b:85:ba:ef:83:5d:e2: 66:6e:e8:61:28:cc:76:7b:88:ef:cd:f9:24:34:20: 75:c4:c9:02:e3:b7:a0:82:83:48:bf:61:3a:bc:8f: d9:a9:e3:6b:50:1e:db:7d:f4:0b:8b:10:bb:c6:6b: 60:56:d8:5d:ff:f1:06:33:b4:d8:57:2e:01:5d:a6: 88:c0:de:61:f4:d6:ed:a0:5b:20:77:6b:e6:e0:04: b8:46:c5:a2:94:0d:c1:88:f2:a2:33:27:21:ec:07: db:92:2e:68:b1:88:b4:a3:f1:5f:1f:e5:98:2f:d5: 7f:16:bf:4d:53:e4:01:44:b2:87:0c:19:a6:0c:f3: 37:b7:2d:53:3c:44:e3:1f:05:82:bb:e3:56:b4:97: f2:47:f1:d6:a0:ec:ef:fd:d3:80:9a:4e:ea:26:1c: 17:75:a4:8b:e5:ef:18:c4:47:51:94:5e:c7:92:26: 85:85:bb:ce:93:9a:60:52:07:10:b0:c7:98:2b:12: 5b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:33:67:1E:AD:EA:8D:90:F2:B6:D3:51:80:E2:01:74:69:6D:DA:EF X509v3 Authority Key Identifier: keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:7a:f3:4a:a2:c5:ab:84:69:50:1a:5e:43:c6:3f:ba:62:f1: c9:2a:81:13:c1:8a:ec:6d:fb:ff:fd:0e:05:58:cb:a2:55:d1: 16:5c:9f:12:98:bb:38:d2:17:fa:0b:67:ee:16:43:14:13:d3: ef:0f:ef:ba:36:5e:20:dc:f2:5b:eb:f3:92:87:1c:8c:02:4c: d4:a7:c6:f5:19:d3:c1:13:39:7e:4a:55:95:17:48:b7:c1:cc: bd:92:8b:f5:32:67:3c:2f:0f:ab:88:7a:5d:16:33:6f:ba:69: b1:03:f1:e9:de:18:61:d9:91:7c:2d:33:10:78:af:c4:e4:ab: 34:69:4d:1d:34:19:ba:13:2b:ed:03:ca:af:3b:b5:cd:96:f5: 42:03:0b:d7:75:86:f3:79:32:bc:60:63:13:cd:5d:e6:cc:f7: 39:9f:e9:b9:a1:63:7b:a1:61:ec:9a:58:f8:eb:b3:cb:2c:d5: 98:64:1c:ae:e2:94:5f:49:3d:04:fb:e6:3f:a7:ba:e0:95:10: 55:41:35:d2:de:66:48:e9:37:bc:37:13:b1:1c:6a:f6:ba:33: 73:91:3e:1a:1e:9f:7c:ec:65:e1:a6:49:e4:8a:25:22:eb:4f: f4:4c:18:6a:88:cf:c2:5f:0e:63:6d:34:7a:4a:83:ae:de:80: aa:fb:e6:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiEfKW4mCrQjYQV7Y70m0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NTA4MTBmMTNkZjhkOTAxOWYxNTdjMzZmYmQwZjZkYjk4 NjI5OTIwHhcNMjUxMjA1MjIwMDU0WhcNMjUxMjA2MjIwMDU0WjAzMTEwLwYDVQQD EygzYjMzNjcxZWFkZWE4ZDkwZjJiNmQzNTE4MGUyMDE3NDY5NmRkYWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqmt4RgfS27y9ua2ZUBl+wjyoxT3 LoIDg3CdoL0H/7JFlXldkpJGxbjnpKutkIsxef+Ce+nBL+J85Kbbhq7Md1gw5AuF uu+DXeJmbuhhKMx2e4jvzfkkNCB1xMkC47eggoNIv2E6vI/ZqeNrUB7bffQLixC7 xmtgVthd//EGM7TYVy4BXaaIwN5h9NbtoFsgd2vm4AS4RsWilA3BiPKiMych7Afb ki5osYi0o/FfH+WYL9V/Fr9NU+QBRLKHDBmmDPM3ty1TPETjHwWCu+NWtJfyR/HW oOzv/dOAmk7qJhwXdaSL5e8YxEdRlF7HkiaFhbvOk5pgUgcQsMeYKxJbFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDszZx6t6o2Q8rbTUYDiAXRpbdrvMB8GA1UdIwQY MBaAFHRQgQ8T342QGfFXw2+9D225himSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xMzM1ZDYtYjRkNi00YzgzLThiMGUt OGYyMTVjMDlhZTcyLzEvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8xMzM1ZDYtYjRkNi00YzgzLThiMGUtOGYyMTVjMDlhZTcy LzEvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3rzSqLF q4RpUBpeQ8Y/umLxySqBE8GK7G37//0OBVjLolXRFlyfEpi7ONIX+gtn7hZDFBPT 7w/vujZeINzyW+vzkoccjAJM1KfG9RnTwRM5fkpVlRdIt8HMvZKL9TJnPC8Pq4h6 XRYzb7ppsQPx6d4YYdmRfC0zEHivxOSrNGlNHTQZuhMr7QPKrzu1zZb1QgML13WG 83kyvGBjE81d5sz3OZ/puaFje6Fh7JpY+OuzyyzVmGQcruKUX0k9BPvmP6e64JUQ VUE10t5mSOk3vDcTsRxq9rozc5E+Gh6ffOxl4aZJ5IolIutP9EwYaojPwl8OY200 ekqDrt6Aqvvmgw== -----END CERTIFICATE-----Generated at Sat Dec 6 05:05:10 2025 by rpki-client