This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.mft File: dJm8fW4g9ytAmz-7qsGDSAyekNc.mft (raw, json) Hash identifier: 7MIQtttQCJrPt9SGRNIOw6MWD+HXEhR94upRWAgjWFc= Subject key identifier: 3E:AC:07:11:91:72:D6:F9:53:2C:E6:25:AB:F1:46:1E:23:6F:7F:01 Authority key identifier: 74:99:BC:7D:6E:20:F7:2B:40:9B:3F:BB:AA:C1:83:48:0C:9E:90:D7 Certificate issuer: /CN=7499bc7d6e20f72b409b3fbbaac183480c9e90d7 Certificate serial: 019AF27704786A60A0C2FB28869876E13494 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJm8fW4g9ytAmz-7qsGDSAyekNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.mft Manifest number: 0217 Signing time: Sat 06 Dec 2025 07:01:17 +0000 Manifest this update: Sat 06 Dec 2025 07:01:17 +0000 Manifest next update: Sun 07 Dec 2025 07:01:17 +0000 Files and hashes: 1: dJm8fW4g9ytAmz-7qsGDSAyekNc.crl (hash: kH6XGJcutQzoP0RcbyNay7CcSm/4+s+0abnqCAWdefA=) 2: huwtM5H3WHHFN2LeVYLLfwYIi9U.roa (hash: lyQDWq341CJPd/NvmgyGwJD/zV+qdIXVc/dkiOsTWVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.mft rsync://rpki.ripe.net/repository/DEFAULT/dJm8fW4g9ytAmz-7qsGDSAyekNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:04:78:6a:60:a0:c2:fb:28:86:98:76:e1:34:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7499bc7d6e20f72b409b3fbbaac183480c9e90d7 Validity Not Before: Dec 6 07:01:17 2025 GMT Not After : Dec 7 07:01:17 2025 GMT Subject: CN=3eac07119172d6f9532ce625abf1461e236f7f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bb:bb:78:f2:bb:26:81:03:91:b4:42:8e:0f: 4a:87:31:f6:15:fe:71:ea:c9:26:45:51:c0:74:0a: 42:9c:5c:64:1a:11:69:b1:93:41:26:94:9e:2b:22: db:d1:a6:83:05:ba:d0:f3:13:56:05:af:a7:b3:09: ec:fc:1c:c5:e1:a9:01:9f:79:b5:d6:ca:8a:a6:fd: b4:02:b2:d1:1e:c2:ba:3d:a4:de:34:9f:28:80:e6: b5:05:99:f0:6e:24:7d:c1:66:cb:6a:32:3a:95:9b: 3a:c8:ab:88:29:e7:4c:78:5d:77:77:0b:48:6f:9e: a5:05:9c:92:f5:16:f1:2d:f7:08:e7:2c:1f:57:a1: 5c:ca:14:00:79:c2:77:20:68:86:21:88:c6:39:e6: 6e:82:ea:f0:c1:61:6d:60:df:11:d8:8f:f4:59:b5: c8:fd:f6:36:2b:62:dd:16:1b:56:5f:b5:80:1f:73: 30:5a:8a:8e:3b:d5:07:34:67:14:ce:6d:af:f1:f2: cd:b8:02:78:55:4a:89:2c:62:a6:35:2d:ad:79:60: c5:f3:5a:9c:f6:20:34:3f:7f:9c:b2:5d:d1:c0:fb: dc:ea:70:e1:de:af:1b:f6:a9:80:38:ff:f6:8e:c4: 24:c8:c6:ba:c6:72:da:6b:ec:42:99:7c:67:b0:e9: 6c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AC:07:11:91:72:D6:F9:53:2C:E6:25:AB:F1:46:1E:23:6F:7F:01 X509v3 Authority Key Identifier: keyid:74:99:BC:7D:6E:20:F7:2B:40:9B:3F:BB:AA:C1:83:48:0C:9E:90:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJm8fW4g9ytAmz-7qsGDSAyekNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f7:70:19:89:95:ba:b4:2b:11:87:be:45:69:b5:65:17:0f: 82:f2:09:a4:c7:06:62:03:b3:37:ee:aa:e3:12:89:45:20:fc: 20:2a:d5:c6:e3:23:74:50:6e:11:90:6d:51:f2:07:96:d3:d5: 29:3d:58:4d:5e:23:53:25:69:57:27:78:18:df:6d:da:87:a0: b2:77:03:1f:c1:86:ed:9a:25:01:72:f8:65:ce:f3:20:b7:e5: 20:1d:a9:63:a6:21:02:bc:11:91:ff:8d:14:63:e3:f9:a8:dc: 30:aa:d0:4f:01:5b:bf:d8:13:79:f3:f7:51:86:81:f3:c0:bf: 3f:18:a6:a8:61:cb:26:d1:1f:e3:c1:63:9e:88:1e:d1:7e:8a: 96:09:30:97:f4:b9:db:b7:50:76:5a:58:fb:34:8f:1a:e6:c3: 24:26:8a:0b:bb:1a:63:fd:e8:72:e8:31:b9:d4:b9:e1:73:df: 88:bc:4b:0c:9e:05:78:c9:67:7e:61:4d:6c:81:ef:f0:16:86: 40:d3:0b:a4:6c:7a:1c:38:e0:f1:d7:53:67:c2:ab:ac:e7:53: 9f:8b:74:c2:eb:41:f0:58:55:a6:27:0f:42:08:96:fc:9d:7c: 5e:a6:53:05:16:59:90:cf:f9:7d:19:4a:1d:5e:cf:aa:f9:81: b0:53:75:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwR4amCgwvsohph24TSUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTliYzdkNmUyMGY3MmI0MDliM2ZiYmFhYzE4MzQ4MGM5 ZTkwZDcwHhcNMjUxMjA2MDcwMTE3WhcNMjUxMjA3MDcwMTE3WjAzMTEwLwYDVQQD EygzZWFjMDcxMTkxNzJkNmY5NTMyY2U2MjVhYmYxNDYxZTIzNmY3ZjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubu7ePK7JoEDkbRCjg9KhzH2Ff5x 6skmRVHAdApCnFxkGhFpsZNBJpSeKyLb0aaDBbrQ8xNWBa+nswns/BzF4akBn3m1 1sqKpv20ArLRHsK6PaTeNJ8ogOa1BZnwbiR9wWbLajI6lZs6yKuIKedMeF13dwtI b56lBZyS9RbxLfcI5ywfV6FcyhQAecJ3IGiGIYjGOeZugurwwWFtYN8R2I/0WbXI /fY2K2LdFhtWX7WAH3MwWoqOO9UHNGcUzm2v8fLNuAJ4VUqJLGKmNS2teWDF81qc 9iA0P3+csl3RwPvc6nDh3q8b9qmAOP/2jsQkyMa6xnLaa+xCmXxnsOlshwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6sBxGRctb5UyzmJavxRh4jb38BMB8GA1UdIwQY MBaAFHSZvH1uIPcrQJs/u6rBg0gMnpDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEptOGZXNGc5eXRBbXotN3FzR0RTQXlla05jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jODU2ZGItZTQ0Yy00NmYzLTlhZjMt YzZkYmI1OWFmYjRiLzEvZEptOGZXNGc5eXRBbXotN3FzR0RTQXlla05jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jODU2ZGItZTQ0Yy00NmYzLTlhZjMtYzZkYmI1OWFmYjRi LzEvZEptOGZXNGc5eXRBbXotN3FzR0RTQXlla05jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvdwGYmV urQrEYe+RWm1ZRcPgvIJpMcGYgOzN+6q4xKJRSD8ICrVxuMjdFBuEZBtUfIHltPV KT1YTV4jUyVpVyd4GN9t2oegsncDH8GG7ZolAXL4Zc7zILflIB2pY6YhArwRkf+N FGPj+ajcMKrQTwFbv9gTefP3UYaB88C/PximqGHLJtEf48Fjnoge0X6Klgkwl/S5 27dQdlpY+zSPGubDJCaKC7saY/3ocugxudS54XPfiLxLDJ4FeMlnfmFNbIHv8BaG QNMLpGx6HDjg8ddTZ8KrrOdTn4t0wutB8FhVpicPQgiW/J18XqZTBRZZkM/5fRlK HV7PqvmBsFN1Ow== -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:52 2025 by rpki-client