This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft File: dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json) Hash identifier: 2n7LqL40PRQLCu7Y9Gy0QOcjqjUDH4/uQasEED3UgFU= Subject key identifier: 09:DA:D8:FF:04:DD:C6:1E:61:90:AA:0A:EE:B3:18:0A:4F:2F:5E:40 Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F Certificate issuer: /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f Certificate serial: 019AF12E1443500A454FB632A172881F8C1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft Manifest number: 0D61 Signing time: Sat 06 Dec 2025 01:02:00 +0000 Manifest this update: Sat 06 Dec 2025 01:02:00 +0000 Manifest next update: Sun 07 Dec 2025 01:02:00 +0000 Files and hashes: 1: XVHW13An0H4R0lwafXi_5n-GjRQ.roa (hash: avC9Et5bzaaQctHEh7eFVRP1BlhGCdMVJW4eggq0SuY=) 2: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: IO03TdjBC+QESWsVwupqaqvjYpR01EsxI35IDLM/EGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:14:43:50:0a:45:4f:b6:32:a1:72:88:1f:8c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f Validity Not Before: Dec 6 01:02:00 2025 GMT Not After : Dec 7 01:02:00 2025 GMT Subject: CN=09dad8ff04ddc61e6190aa0aeeb3180a4f2f5e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:df:00:01:77:74:17:92:89:8d:6e:36:c8:25: 20:f2:bf:e6:e1:3d:7c:1d:7a:24:fb:00:34:56:1f: 0a:d2:71:b5:83:5c:e2:35:33:68:b2:5b:c7:16:ba: f6:c0:45:af:bf:13:23:82:8c:4e:e8:ff:e9:78:9f: 37:42:4b:5b:44:8f:4a:09:c4:d2:63:60:d0:60:65: 34:fe:a7:de:60:aa:77:27:78:0c:80:77:fb:a8:87: 66:67:cd:03:a0:b0:72:17:eb:f0:4a:34:da:4a:98: 12:bd:c7:de:b5:2d:7e:01:b9:cf:0a:2f:ca:fd:4c: 7d:e1:b6:f7:27:7e:ef:ec:c8:23:9d:df:ca:e2:6f: b5:83:b2:aa:45:d0:71:45:54:fa:f7:02:9d:50:64: 8d:a1:6d:af:ed:f6:b5:50:f4:92:fd:76:86:02:45: 09:20:6a:bc:f1:d7:85:ca:e9:bd:d6:c1:6b:b6:5d: ad:d1:5c:d6:5c:97:28:95:2b:6e:4d:7a:d0:1d:16: e3:b6:75:9b:99:02:39:85:1b:de:2a:00:16:6f:cc: e9:fd:eb:1e:92:58:c2:0c:d2:e4:bc:ba:b2:21:15: ca:6e:51:4c:fb:20:34:af:98:e3:96:0b:44:f0:e5: 2e:cc:e0:62:9f:f7:00:38:8a:3f:94:22:b8:e4:4f: cf:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DA:D8:FF:04:DD:C6:1E:61:90:AA:0A:EE:B3:18:0A:4F:2F:5E:40 X509v3 Authority Key Identifier: keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e3:d6:69:d9:ed:c1:3d:13:61:80:81:ca:6b:c2:0e:45:1f: 94:a8:df:27:4c:af:b5:89:9c:30:8c:a1:6a:14:bb:f1:1a:6e: 7d:28:cb:d2:a9:66:79:66:9f:dd:77:c0:3f:c1:12:03:11:c2: f8:c8:17:c1:a0:43:2c:32:9f:89:20:45:0f:83:03:16:0d:8c: 9b:87:07:fd:3c:f6:ea:ae:12:33:46:c6:59:19:c2:0b:c8:14: 89:b0:e5:81:1a:0a:11:1a:dd:6a:f8:8d:47:04:44:e3:b3:7e: 16:40:79:62:f6:45:c5:c2:68:a3:45:74:da:18:a0:49:70:c1: ee:94:99:c8:09:87:8d:86:d4:42:8f:83:60:c0:ce:0c:b8:a6: 63:66:ba:7c:95:92:f9:98:be:d9:8f:50:20:82:18:84:66:bb: d5:63:7e:80:0f:27:2f:b0:2a:8f:3b:0b:d7:64:68:3c:dc:d0: d3:ea:4d:22:20:f3:47:9e:10:42:6d:91:33:1b:75:2b:d4:a8: e6:8a:70:f8:80:e7:7e:6a:4e:ce:10:28:73:6f:14:03:d6:2c: 7f:47:e8:90:90:57:52:83:c1:96:34:27:57:aa:05:70:36:e1: 55:d1:e0:d2:03:d7:53:87:13:e7:88:51:90:7a:c7:87:2f:3b: 2d:bd:ce:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhRDUApFT7YyoXKIH4wfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NWI2YzNjOWFiZGVkYjk2ZWIxZWYzZjdmN2ZhNzAwNTc1 MjJjN2YwHhcNMjUxMjA2MDEwMjAwWhcNMjUxMjA3MDEwMjAwWjAzMTEwLwYDVQQD EygwOWRhZDhmZjA0ZGRjNjFlNjE5MGFhMGFlZWIzMTgwYTRmMmY1ZTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d8AAXd0F5KJjW42yCUg8r/m4T18 HXok+wA0Vh8K0nG1g1ziNTNoslvHFrr2wEWvvxMjgoxO6P/peJ83QktbRI9KCcTS Y2DQYGU0/qfeYKp3J3gMgHf7qIdmZ80DoLByF+vwSjTaSpgSvcfetS1+AbnPCi/K /Ux94bb3J37v7Mgjnd/K4m+1g7KqRdBxRVT69wKdUGSNoW2v7fa1UPSS/XaGAkUJ IGq88deFyum91sFrtl2t0VzWXJcolStuTXrQHRbjtnWbmQI5hRveKgAWb8zp/ese kljCDNLkvLqyIRXKblFM+yA0r5jjlgtE8OUuzOBin/cAOIo/lCK45E/PZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAna2P8E3cYeYZCqCu6zGApPL15AMB8GA1UdIwQY MBaAFHRbbDyave25brHvP39/pwBXUix/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEZ0c1BKcTk3Ymx1c2U4X2YzLW5BRmRTTEg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83MWQ1MmYtN2UwNy00OWQxLWI5OWIt ZjcwZDVlZjg3NWMzLzEvZEZ0c1BKcTk3Ymx1c2U4X2YzLW5BRmRTTEg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC83MWQ1MmYtN2UwNy00OWQxLWI5OWItZjcwZDVlZjg3NWMz LzEvZEZ0c1BKcTk3Ymx1c2U4X2YzLW5BRmRTTEg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOPWadnt wT0TYYCBymvCDkUflKjfJ0yvtYmcMIyhahS78RpufSjL0qlmeWaf3XfAP8ESAxHC +MgXwaBDLDKfiSBFD4MDFg2Mm4cH/Tz26q4SM0bGWRnCC8gUibDlgRoKERrdaviN RwRE47N+FkB5YvZFxcJoo0V02higSXDB7pSZyAmHjYbUQo+DYMDODLimY2a6fJWS +Zi+2Y9QIIIYhGa71WN+gA8nL7AqjzsL12RoPNzQ0+pNIiDzR54QQm2RMxt1K9So 5opw+IDnfmpOzhAoc28UA9Ysf0fokJBXUoPBljQnV6oFcDbhVdHg0gPXU4cT54hR kHrHhy87Lb3OVg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:06 2025 by rpki-client