This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft File: dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft (raw, json) Hash identifier: b/0sCQPcf87fm5PI6c1ubipApzMlew5yS0Lbub586ao= Subject key identifier: F4:B9:0A:30:2D:81:DD:72:25:47:DB:14:A5:F7:37:D9:5B:3E:E1:B5 Authority key identifier: 74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC Certificate issuer: /CN=747bb7c24505b6f58f94817d7c8d5376756d37fc Certificate serial: 019AF19B855B5D8ACB1CEA438ED8D96A13FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft Manifest number: 077F Signing time: Sat 06 Dec 2025 03:01:32 +0000 Manifest this update: Sat 06 Dec 2025 03:01:32 +0000 Manifest next update: Sun 07 Dec 2025 03:01:32 +0000 Files and hashes: 1: Akagd0l7QO9OvkucPctZVYCXA9M.roa (hash: IhMY55O2zxdfLlGwJcA2GKoYXI6fuVYr/yI0EHnUALg=) 2: dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl (hash: gbGbUmVdzxEumxOHucVfMeNndzkXqACDFDySd8iAjpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:85:5b:5d:8a:cb:1c:ea:43:8e:d8:d9:6a:13:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=747bb7c24505b6f58f94817d7c8d5376756d37fc Validity Not Before: Dec 6 03:01:32 2025 GMT Not After : Dec 7 03:01:32 2025 GMT Subject: CN=f4b90a302d81dd722547db14a5f737d95b3ee1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:95:01:d0:14:8c:ce:8c:3a:54:64:af:0f:a2: c9:39:e8:5f:ce:20:b8:cd:23:84:d1:6e:02:bc:eb: ca:7b:96:bc:95:a4:5c:45:52:cc:6d:66:dd:26:07: bd:1c:06:49:d6:e7:77:e9:7e:1b:65:97:72:de:34: aa:60:c4:5b:db:2d:6f:cd:1d:29:7d:28:ed:53:d1: 1d:37:f2:01:c2:6b:84:14:c8:3b:09:f6:01:fd:d4: 56:88:b7:6b:0a:bf:45:f1:e8:1a:48:10:92:22:c3: 64:a5:24:a1:21:77:bb:c2:92:d9:da:7c:4d:5b:1b: ec:28:3d:a2:a9:22:cd:78:d7:3e:af:a3:04:f4:f0: 97:94:53:10:4c:fb:76:fe:f3:3f:88:01:d4:38:ca: 39:50:79:67:77:01:bb:60:f2:ed:b5:a5:e4:91:ed: bf:54:6a:3d:3f:3a:54:6f:c4:6d:e7:96:55:b9:42: 82:ab:86:27:da:99:d6:29:6f:fe:6b:30:f1:e0:38: 90:c3:0f:14:96:ae:a3:5f:ee:2e:4a:ea:3c:3b:bd: 20:c7:f7:63:f8:fe:33:a9:9f:13:80:6c:65:a7:3c: f3:9d:1d:04:14:bc:e2:3a:41:3f:85:79:6e:fc:07: ac:19:0e:a7:6f:77:f1:7a:3d:21:5c:86:3f:87:0b: e5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B9:0A:30:2D:81:DD:72:25:47:DB:14:A5:F7:37:D9:5B:3E:E1:B5 X509v3 Authority Key Identifier: keyid:74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:01:d7:7c:8f:81:57:b5:cc:8c:15:fe:9c:ce:11:75:62:a3: b5:0a:73:b7:cc:b7:d5:29:b4:8b:fa:be:84:cd:96:54:07:b1: ee:4c:34:0a:b1:52:02:d8:ad:bf:58:f7:4e:42:74:91:12:6e: c8:eb:4e:d1:fa:ce:db:a6:b0:71:78:d7:c0:e4:b6:16:e9:a1: 70:18:2a:4b:b8:ab:89:b5:e1:c8:d5:df:14:3d:9e:d6:39:7e: 42:56:94:c0:ef:12:33:8e:70:75:fc:e9:6a:7f:ee:db:f0:64: 62:b8:55:6d:cc:a1:8e:3b:c5:22:46:95:81:c4:40:fd:d6:cb: d7:4c:88:b8:5b:0f:4c:00:48:d6:5f:26:57:65:f9:4a:65:bc: 1b:14:c6:b8:48:5a:95:da:15:de:a9:58:df:c1:a0:f7:c7:c8: c7:7a:27:b9:43:c2:65:9d:09:32:92:2b:18:86:9b:59:48:23: f6:f0:2e:07:ac:a8:4a:f6:01:ae:f3:f0:cb:41:75:68:4b:1a: 29:54:ef:fa:66:06:93:ca:b5:4d:64:91:12:b2:89:18:19:8b: a3:d1:f0:5a:2a:7b:84:7c:b5:d2:f7:ed:07:a0:8d:15:62:9b: 85:80:64:f3:c4:58:3e:84:0c:d9:76:ca:3a:34:7a:b8:aa:4b: 4f:cc:e4:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4VbXYrLHOpDjtjZahP8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0N2JiN2MyNDUwNWI2ZjU4Zjk0ODE3ZDdjOGQ1Mzc2NzU2 ZDM3ZmMwHhcNMjUxMjA2MDMwMTMyWhcNMjUxMjA3MDMwMTMyWjAzMTEwLwYDVQQD EyhmNGI5MGEzMDJkODFkZDcyMjU0N2RiMTRhNWY3MzdkOTViM2VlMWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZUB0BSMzow6VGSvD6LJOehfziC4 zSOE0W4CvOvKe5a8laRcRVLMbWbdJge9HAZJ1ud36X4bZZdy3jSqYMRb2y1vzR0p fSjtU9EdN/IBwmuEFMg7CfYB/dRWiLdrCr9F8egaSBCSIsNkpSShIXe7wpLZ2nxN WxvsKD2iqSLNeNc+r6ME9PCXlFMQTPt2/vM/iAHUOMo5UHlndwG7YPLttaXkke2/ VGo9PzpUb8Rt55ZVuUKCq4Yn2pnWKW/+azDx4DiQww8Ulq6jX+4uSuo8O70gx/dj +P4zqZ8TgGxlpzzznR0EFLziOkE/hXlu/AesGQ6nb3fxej0hXIY/hwvlGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPS5CjAtgd1yJUfbFKX3N9lbPuG1MB8GA1UdIwQY MBaAFHR7t8JFBbb1j5SBfXyNU3Z1bTf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEh1M3drVUZ0dldQbElGOWZJMVRkblZ0Tl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xN2E2MjEtZWRhZS00YTliLTg0NTUt ZmNjMDA5MWZlOWU2LzEvZEh1M3drVUZ0dldQbElGOWZJMVRkblZ0Tl93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xN2E2MjEtZWRhZS00YTliLTg0NTUtZmNjMDA5MWZlOWU2 LzEvZEh1M3drVUZ0dldQbElGOWZJMVRkblZ0Tl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQHXfI+B V7XMjBX+nM4RdWKjtQpzt8y31Sm0i/q+hM2WVAex7kw0CrFSAtitv1j3TkJ0kRJu yOtO0frO26awcXjXwOS2FumhcBgqS7iribXhyNXfFD2e1jl+QlaUwO8SM45wdfzp an/u2/BkYrhVbcyhjjvFIkaVgcRA/dbL10yIuFsPTABI1l8mV2X5SmW8GxTGuEha ldoV3qlY38Gg98fIx3onuUPCZZ0JMpIrGIabWUgj9vAuB6yoSvYBrvPwy0F1aEsa KVTv+mYGk8q1TWSRErKJGBmLo9HwWip7hHy10vftB6CNFWKbhYBk88RYPoQM2XbK OjR6uKpLT8zkKg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:55 2025 by rpki-client