This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft File: dRk72fhLSp7UegO9-JLZ55i3Jyc.mft (raw, json) Hash identifier: 9cq23yNjl0+V6ogOAdKQ+F0gUcFgiXl7AyTqHhgURTo= Subject key identifier: 5A:7E:7E:88:9F:85:70:38:13:03:0E:72:90:5C:A4:93:D0:D1:F0:DC Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27 Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727 Certificate serial: 019AF12D96BD6E210BA76D49EDB980A69AD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:01:27 +0000 Manifest this update: Sat 06 Dec 2025 01:01:27 +0000 Manifest next update: Sun 07 Dec 2025 01:01:27 +0000 Files and hashes: 1: dRk72fhLSp7UegO9-JLZ55i3Jyc.crl (hash: /xLU5Mbx4xUqB5iSC31Ay7K2Q8ir0+fnvNnzmiC8CqE=) 2: kX-VdRHtzW1CfMS8g0O9lVNrN34.roa (hash: 1YTwpLO8F8/c72ElMFw6a0YxOTA0MMlnVtuXBy93WMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:96:bd:6e:21:0b:a7:6d:49:ed:b9:80:a6:9a:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727 Validity Not Before: Dec 6 01:01:27 2025 GMT Not After : Dec 7 01:01:27 2025 GMT Subject: CN=5a7e7e889f85703813030e72905ca493d0d1f0dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3e:a1:f6:61:13:e4:1c:6f:1e:cc:b6:53:03: d0:32:bf:bb:9c:5c:65:b4:3b:65:e5:1d:88:42:26: 30:5e:12:ac:5b:96:fd:93:51:36:a6:3c:0e:88:b4: d6:3d:9e:30:e1:3e:7d:74:92:44:6b:07:80:c7:ed: c4:21:77:d8:d8:a0:67:07:86:45:f2:a1:41:71:1d: 6b:b1:68:b9:d6:85:d9:0c:99:04:fb:55:ea:4d:1e: 7c:b8:4b:b2:58:72:70:5a:3a:5c:fd:5c:3d:c5:a7: d3:1b:1a:0e:f5:0a:58:95:97:20:a0:cf:85:0d:3c: 11:9c:b1:bf:8a:c6:c6:4d:94:de:7b:2a:27:19:03: d7:78:5d:76:dd:ff:fc:14:26:de:43:5a:ec:08:09: c4:ec:aa:33:4b:e2:56:8c:c7:7e:9f:3b:4e:db:8e: 68:4d:5b:09:cb:84:09:fd:b8:63:8d:48:fe:99:1c: 94:5a:07:12:d1:e8:c8:9c:fa:35:01:a7:41:a0:25: 91:a2:d5:a4:be:29:97:66:f9:25:57:e0:87:0e:05: d3:aa:ec:ce:47:fe:1c:ad:6a:6d:5c:e0:6d:87:81: ee:cc:c3:b9:8c:d7:11:16:0e:6b:6f:cc:6b:9d:a8: 7c:9b:7d:9a:22:99:93:5b:a3:22:ca:4e:e4:78:36: 43:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7E:7E:88:9F:85:70:38:13:03:0E:72:90:5C:A4:93:D0:D1:F0:DC X509v3 Authority Key Identifier: keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:20:3f:07:dd:da:ad:8a:80:c1:25:d9:52:ce:9a:a3:42:64: c3:f8:31:88:57:12:25:9b:bd:f6:0a:2a:e1:9b:39:79:22:b6: 0b:dc:9b:87:fb:c6:3f:f5:01:dc:49:c9:1e:35:3b:e9:cd:12: 6d:c2:c8:47:1f:d7:e5:17:2f:1c:15:ee:35:f8:59:cb:94:09: be:23:42:a9:80:c9:e0:6a:16:f4:13:d2:81:05:4d:51:86:42: b8:70:6f:bb:84:be:7c:5c:df:17:72:42:a8:e7:a9:1d:0f:ae: 87:54:8d:ef:e8:3c:f0:ea:b7:2d:58:24:e1:12:9a:5a:0d:01: 99:17:cf:40:16:21:a6:17:60:c3:00:b2:41:92:b9:c6:01:ae: 1f:02:79:1d:b0:8a:d1:89:43:54:1e:ce:e0:52:9f:24:e3:71: f7:48:00:6f:bb:ec:28:6d:95:f8:b8:2a:44:b1:c0:9b:53:44: fd:9d:99:c6:8a:29:ea:5b:76:55:a8:40:c4:77:2d:eb:df:04: f9:a8:dd:0d:bf:bf:a1:3b:4e:39:cb:33:c1:70:29:33:61:97: 46:e8:41:5a:53:f4:02:c9:71:a1:43:10:86:c2:95:58:0a:b6: 2d:5d:42:33:2a:ba:0f:64:55:c2:24:d4:5d:75:af:0a:f8:6d: e6:19:fe:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZa9biELp21J7bmApprRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MTkzYmQ5Zjg0YjRhOWVkNDdhMDNiZGY4OTJkOWU3OThi NzI3MjcwHhcNMjUxMjA2MDEwMTI3WhcNMjUxMjA3MDEwMTI3WjAzMTEwLwYDVQQD Eyg1YTdlN2U4ODlmODU3MDM4MTMwMzBlNzI5MDVjYTQ5M2QwZDFmMGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz6h9mET5BxvHsy2UwPQMr+7nFxl tDtl5R2IQiYwXhKsW5b9k1E2pjwOiLTWPZ4w4T59dJJEaweAx+3EIXfY2KBnB4ZF 8qFBcR1rsWi51oXZDJkE+1XqTR58uEuyWHJwWjpc/Vw9xafTGxoO9QpYlZcgoM+F DTwRnLG/isbGTZTeeyonGQPXeF123f/8FCbeQ1rsCAnE7KozS+JWjMd+nztO245o TVsJy4QJ/bhjjUj+mRyUWgcS0ejInPo1AadBoCWRotWkvimXZvklV+CHDgXTquzO R/4crWptXOBth4HuzMO5jNcRFg5rb8xrnah8m32aIpmTW6Miyk7keDZDowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFp+foifhXA4EwMOcpBcpJPQ0fDcMB8GA1UdIwQY MBaAFHUZO9n4S0qe1HoDvfiS2eeYtycnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jNGU2YTQtNjFjMi00Mzg4LWI4NDQt M2I3MTU2OTFkMmU5LzEvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9jNGU2YTQtNjFjMi00Mzg4LWI4NDQtM2I3MTU2OTFkMmU5 LzEvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiA/B93a rYqAwSXZUs6ao0Jkw/gxiFcSJZu99goq4Zs5eSK2C9ybh/vGP/UB3EnJHjU76c0S bcLIRx/X5RcvHBXuNfhZy5QJviNCqYDJ4GoW9BPSgQVNUYZCuHBvu4S+fFzfF3JC qOepHQ+uh1SN7+g88Oq3LVgk4RKaWg0BmRfPQBYhphdgwwCyQZK5xgGuHwJ5HbCK 0YlDVB7O4FKfJONx90gAb7vsKG2V+LgqRLHAm1NE/Z2Zxoop6lt2VahAxHct698E +ajdDb+/oTtOOcszwXApM2GXRuhBWlP0AslxoUMQhsKVWAq2LV1CMyq6D2RVwiTU XXWvCvht5hn+Ng== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:25 2025 by rpki-client