This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft File: dpjJmefwST7jZjTokrN8nzv5QH0.mft (raw, json) Hash identifier: TkKH7+mowJtfMyK8/rNOFNMO1F3x1kFu02IuM9jpSd4= Subject key identifier: E5:D4:26:94:54:7D:B5:37:74:14:2F:F5:2D:E2:29:0B:D3:E1:FE:A3 Authority key identifier: 76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D Certificate issuer: /CN=7698c999e7f0493ee36634e892b37c9f3bf9407d Certificate serial: 019B26D2267B1EE7BA984F94D59430B96386 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 11:01:05 +0000 Manifest this update: Tue 16 Dec 2025 11:01:05 +0000 Manifest next update: Wed 17 Dec 2025 11:01:05 +0000 Files and hashes: 1: OevXGO9big2d2JK12PRdEUk2MPE.roa (hash: FmOYT06hQMPm9dCUUJxlovK9qL/uV14wUJ4HLBabvxQ=) 2: dpjJmefwST7jZjTokrN8nzv5QH0.crl (hash: KIujrxN5T4a8cVsE0mAJ/TaDeFX/qgMRwV33CvXRkmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d2:26:7b:1e:e7:ba:98:4f:94:d5:94:30:b9:63:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7698c999e7f0493ee36634e892b37c9f3bf9407d Validity Not Before: Dec 16 11:01:05 2025 GMT Not After : Dec 17 11:01:05 2025 GMT Subject: CN=e5d42694547db53774142ff52de2290bd3e1fea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bc:ed:89:c6:5c:87:f8:98:5b:f4:d3:34:0e: 98:ab:f1:f6:24:7f:bd:5b:40:c5:2f:53:e8:1e:4f: 33:fa:48:26:53:29:ce:dd:30:0c:9f:8b:f9:26:62: 2d:11:dd:7b:3b:5f:24:21:07:2c:78:9f:fd:ab:bc: c8:2a:b3:90:60:a9:c6:90:3a:71:17:b8:68:03:00: 2d:a6:a9:1b:c6:b6:f6:56:5c:a6:2e:2d:70:df:92: c5:72:65:e2:6e:4e:73:85:6f:bb:e9:65:f0:79:90: 3a:52:10:81:b0:24:e6:41:32:f6:41:34:f3:62:f8: 7a:ff:3a:b3:73:a9:98:b5:9f:c8:d5:f5:d7:9c:cd: bd:b9:3c:7d:e7:b0:0d:9c:22:f6:48:81:6c:74:82: 0b:01:7f:02:0f:c5:cc:3a:e8:b5:f1:cb:83:3d:36: 98:aa:0a:a3:0d:0f:70:27:a5:02:90:e2:85:0f:ce: ea:3f:3a:28:b7:1a:c1:39:ac:9c:30:21:bf:a1:58: ea:ca:52:3c:90:91:b0:0a:6c:81:06:d1:15:d8:36: c9:90:63:53:6d:58:78:68:b1:f9:38:de:64:3e:fd: 27:57:be:b4:ae:d0:98:bd:ca:19:ac:2e:16:c2:03: 18:25:53:27:00:16:88:f9:49:52:43:6c:c5:e1:6a: 38:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D4:26:94:54:7D:B5:37:74:14:2F:F5:2D:E2:29:0B:D3:E1:FE:A3 X509v3 Authority Key Identifier: keyid:76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:b0:23:ac:26:21:9f:29:d0:8b:8e:eb:86:b3:17:fb:49:e6: 76:77:52:90:ee:24:7c:3c:04:55:31:63:06:c6:e1:2f:2b:29: e2:df:86:6c:a5:51:74:58:a5:97:b3:a0:63:1e:a5:91:71:f4: 02:5b:0d:32:e8:0e:39:54:2f:4b:93:a8:27:d5:62:99:33:fc: 9d:28:b1:35:2f:6e:bb:37:8f:0c:ba:12:dc:50:39:74:0a:16: 4b:81:31:30:7f:59:c5:2c:65:be:c4:2c:2a:e6:6c:52:e1:f3: bd:5a:8b:af:d5:d7:b7:33:f0:02:29:d1:24:bc:ce:a0:c3:64: 94:06:1e:67:01:b6:56:5f:85:0b:c6:26:3d:6f:6b:ea:42:e3: 69:e6:90:b8:a3:f8:44:d1:e5:8e:03:ac:e3:0c:61:cf:fa:2f: 1e:e4:5d:77:a8:d1:eb:7a:73:c8:9f:aa:36:33:77:a9:80:7d: 22:8a:62:13:54:ae:5f:09:57:51:a0:56:db:05:8f:13:37:4b: 11:33:f3:2a:36:fb:cb:1c:35:2f:3e:22:b5:5e:9b:be:31:38: 8d:b5:88:e6:ef:57:ba:a0:3c:0d:18:08:e5:ca:0e:32:e4:9f: 21:84:5f:81:24:40:8a:65:58:6f:a2:1f:a1:a1:a5:1b:8c:5b: 36:cb:1c:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0iZ7Hue6mE+U1ZQwuWOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OThjOTk5ZTdmMDQ5M2VlMzY2MzRlODkyYjM3YzlmM2Jm OTQwN2QwHhcNMjUxMjE2MTEwMTA1WhcNMjUxMjE3MTEwMTA1WjAzMTEwLwYDVQQD EyhlNWQ0MjY5NDU0N2RiNTM3NzQxNDJmZjUyZGUyMjkwYmQzZTFmZWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLzticZch/iYW/TTNA6Yq/H2JH+9 W0DFL1PoHk8z+kgmUynO3TAMn4v5JmItEd17O18kIQcseJ/9q7zIKrOQYKnGkDpx F7hoAwAtpqkbxrb2VlymLi1w35LFcmXibk5zhW+76WXweZA6UhCBsCTmQTL2QTTz Yvh6/zqzc6mYtZ/I1fXXnM29uTx957ANnCL2SIFsdIILAX8CD8XMOui18cuDPTaY qgqjDQ9wJ6UCkOKFD87qPzootxrBOaycMCG/oVjqylI8kJGwCmyBBtEV2DbJkGNT bVh4aLH5ON5kPv0nV760rtCYvcoZrC4WwgMYJVMnABaI+UlSQ2zF4Wo4XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXUJpRUfbU3dBQv9S3iKQvT4f6jMB8GA1UdIwQY MBaAFHaYyZnn8Ek+42Y06JKzfJ87+UB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHBqSm1lZndTVDdqWmpUb2tyTjhuenY1UUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC85MTBiZDQtN2ZkYS00OTM0LWE0MDMt YjEzNmZlNDBkZjRkLzEvZHBqSm1lZndTVDdqWmpUb2tyTjhuenY1UUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC85MTBiZDQtN2ZkYS00OTM0LWE0MDMtYjEzNmZlNDBkZjRk LzEvZHBqSm1lZndTVDdqWmpUb2tyTjhuenY1UUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLAjrCYh nynQi47rhrMX+0nmdndSkO4kfDwEVTFjBsbhLysp4t+GbKVRdFill7OgYx6lkXH0 AlsNMugOOVQvS5OoJ9VimTP8nSixNS9uuzePDLoS3FA5dAoWS4ExMH9ZxSxlvsQs KuZsUuHzvVqLr9XXtzPwAinRJLzOoMNklAYeZwG2Vl+FC8YmPW9r6kLjaeaQuKP4 RNHljgOs4wxhz/ovHuRdd6jR63pzyJ+qNjN3qYB9IopiE1SuXwlXUaBW2wWPEzdL ETPzKjb7yxw1Lz4itV6bvjE4jbWI5u9XuqA8DRgI5coOMuSfIYRfgSRAimVYb6If oaGlG4xbNssc4A== -----END CERTIFICATE-----Generated at Tue Dec 16 18:02:25 2025 by rpki-client