This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft File: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft (raw, json) Hash identifier: W1Xt+T3fP2fOXCD1cr5AG80TVG9Txp31HXmUUVo1+Wo= Subject key identifier: 77:72:22:A6:5C:15:1E:FB:6A:CA:94:E5:93:A6:1B:A5:50:95:4C:79 Authority key identifier: 74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07 Certificate issuer: /CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907 Certificate serial: 019AF3895B2AF0277A05BD5011604AF8A46B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 12:00:56 +0000 Manifest this update: Sat 06 Dec 2025 12:00:56 +0000 Manifest next update: Sun 07 Dec 2025 12:00:56 +0000 Files and hashes: 1: dFMSfN7MRHvmo2z77TleB1icwq8.roa (hash: /EIF28RJEmpawXw8Jts26G5tvzRqBblkps3qt2KKi+I=) 2: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl (hash: wZFWBEu+cyHX+gqlF9LYVssywuv/kFvBL04QBOO8Y/o=) 3: f859ZdSNJcfJKStuw77yAkHe9lU.roa (hash: kyLklvM7jagtw4zC+hzmwKGnI3XjZWGfhg7ojPBYscg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:5b:2a:f0:27:7a:05:bd:50:11:60:4a:f8:a4:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907 Validity Not Before: Dec 6 12:00:56 2025 GMT Not After : Dec 7 12:00:56 2025 GMT Subject: CN=777222a65c151efb6aca94e593a61ba550954c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d4:1b:e4:92:14:62:b7:2e:c9:a6:fa:4e:24: 23:d9:f2:fe:d8:5c:7c:b9:01:52:60:6f:47:45:d9: 43:5d:ab:b6:31:ca:44:20:0a:20:2e:82:2e:ef:53: 07:4a:c7:83:da:e3:cc:ad:9e:6f:ad:c8:3b:0c:34: 3a:43:b3:fc:58:e8:0b:5b:8d:85:9c:73:a5:96:05: 12:98:2b:39:3f:df:03:5d:3b:6a:ee:34:1b:93:86: 69:c2:f3:b6:42:65:6c:d3:a7:ef:48:a8:3a:fc:38: 2c:0f:63:5a:f9:f6:13:d0:16:57:07:d4:91:96:b4: f1:fe:78:39:90:1d:c8:f7:fd:d8:11:72:ab:51:f3: 2e:7a:91:c6:1b:10:00:b8:70:14:bf:5e:fe:2b:c6: 61:f3:9e:be:af:84:56:98:ae:5f:df:30:f9:10:41: 84:e7:49:25:db:d5:ef:e0:a0:fa:21:6d:c5:03:aa: 68:fc:60:93:50:4d:a6:0e:ab:b0:5e:ce:d6:39:0c: fb:74:05:ff:14:5e:2a:23:25:3f:5c:f4:14:5d:fb: 22:55:bb:13:e5:0e:ee:0d:b3:7d:b2:b4:d2:b8:b9: 32:a2:ac:67:f3:9e:26:c6:c8:f0:82:8c:24:d4:68: be:49:02:79:ad:a6:80:9f:67:5c:a3:b7:b2:12:e3: 16:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:72:22:A6:5C:15:1E:FB:6A:CA:94:E5:93:A6:1B:A5:50:95:4C:79 X509v3 Authority Key Identifier: keyid:74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:35:1c:fe:39:ad:2e:ec:81:76:94:3b:57:03:a8:c4:96:a9: ca:f5:de:e5:e1:4c:57:92:fe:dd:d5:dc:99:9b:86:41:c0:a4: 0f:6b:35:67:d7:d7:a2:55:33:67:11:79:ff:51:f4:f2:29:d0: dc:56:8e:2a:d1:d8:ac:af:9b:88:97:d8:6b:13:5f:93:15:e0: 39:d9:af:72:b3:1b:c5:76:00:46:5d:b7:11:dd:1e:80:6e:21: 23:33:64:be:d1:35:80:39:67:ca:c4:0b:b0:08:3a:ea:d4:ab: cb:6b:cb:c6:fa:36:22:6a:a7:d6:b2:d6:a4:82:0b:cf:22:4d: 76:27:41:c8:d9:83:d3:86:8b:4f:db:c9:9d:92:5a:f1:fc:69: d4:3c:b0:8c:12:68:b1:f6:3b:d7:49:8e:aa:09:0a:9c:a8:a5: e9:42:cd:1c:7a:c3:85:e8:4d:24:22:78:96:1a:bc:9b:e3:4b: 3b:c9:46:f5:47:63:ea:2d:28:45:c1:82:f1:e3:28:90:84:a0: c2:ed:5c:dd:72:2c:06:bf:03:f4:e9:02:66:70:69:c6:ee:19: 0d:83:f2:5e:65:2a:97:35:d7:d0:b8:cf:08:84:30:eb:00:0f: 22:61:e2:34:0b:a6:a8:95:91:27:34:09:e3:84:1a:8c:f5:67: 0a:16:2f:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziVsq8Cd6Bb1QEWBK+KRrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTQzZjllNWFlM2Y2ZWFmYjUwNjhhZTg4ZjE4YzI5ZTQ0 MzU5MDcwHhcNMjUxMjA2MTIwMDU2WhcNMjUxMjA3MTIwMDU2WjAzMTEwLwYDVQQD Eyg3NzcyMjJhNjVjMTUxZWZiNmFjYTk0ZTU5M2E2MWJhNTUwOTU0Yzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dQb5JIUYrcuyab6TiQj2fL+2Fx8 uQFSYG9HRdlDXau2McpEIAogLoIu71MHSseD2uPMrZ5vrcg7DDQ6Q7P8WOgLW42F nHOllgUSmCs5P98DXTtq7jQbk4ZpwvO2QmVs06fvSKg6/DgsD2Na+fYT0BZXB9SR lrTx/ng5kB3I9/3YEXKrUfMuepHGGxAAuHAUv17+K8Zh856+r4RWmK5f3zD5EEGE 50kl29Xv4KD6IW3FA6po/GCTUE2mDquwXs7WOQz7dAX/FF4qIyU/XPQUXfsiVbsT 5Q7uDbN9srTSuLkyoqxn854mxsjwgowk1Gi+SQJ5raaAn2dco7eyEuMW3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdyIqZcFR77asqU5ZOmG6VQlUx5MB8GA1UdIwQY MBaAFHTkP55a4/bq+1BorojxjCnkQ1kHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9RX25scmo5dXI3VUdpdWlQR01LZVJEV1FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kYTMzYWUtMTZjYy00YzlhLWJmOWMt NzE3OTk4YWEzY2ZmLzEvZE9RX25scmo5dXI3VUdpdWlQR01LZVJEV1FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9kYTMzYWUtMTZjYy00YzlhLWJmOWMtNzE3OTk4YWEzY2Zm LzEvZE9RX25scmo5dXI3VUdpdWlQR01LZVJEV1FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzUc/jmt LuyBdpQ7VwOoxJapyvXe5eFMV5L+3dXcmZuGQcCkD2s1Z9fXolUzZxF5/1H08inQ 3FaOKtHYrK+biJfYaxNfkxXgOdmvcrMbxXYARl23Ed0egG4hIzNkvtE1gDlnysQL sAg66tSry2vLxvo2Imqn1rLWpIILzyJNdidByNmD04aLT9vJnZJa8fxp1DywjBJo sfY710mOqgkKnKil6ULNHHrDhehNJCJ4lhq8m+NLO8lG9Udj6i0oRcGC8eMokISg wu1c3XIsBr8D9OkCZnBpxu4ZDYPyXmUqlzXX0LjPCIQw6wAPImHiNAumqJWRJzQJ 44QajPVnChYvtg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:53 2025 by rpki-client