This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft File: dEXd7t-9ctMT6e6MzuroQDzDQUY.mft (raw, json) Hash identifier: xoaJnG65MOAVs6W/vqxo/bJmteeqFqEV6SRoWRSW2rs= Subject key identifier: D4:C2:2A:A8:24:20:5B:E3:0C:54:E2:11:C2:14:63:87:60:41:29:EE Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46 Certificate issuer: /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146 Certificate serial: 019B31556531ECE03BD30E7E8FF5AC6C296D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft Manifest number: 1787 Signing time: Thu 18 Dec 2025 12:00:38 +0000 Manifest this update: Thu 18 Dec 2025 12:00:38 +0000 Manifest next update: Fri 19 Dec 2025 12:00:38 +0000 Files and hashes: 1: 0oXrffU-rSHDpr6TX7IphO7-POk.roa (hash: WbRM1hyDPFlmbx1lM12Y7DHbqSzxb6BFvKIPhKhJrRs=) 2: J9QY7yh1pdc4gxwkKHvbRdbJ5Hc.roa (hash: FqRH6xGeGokOrR3y4N/PmTYLTqphdEbs3zKWJDOiox8=) 3: RL1wLq44Bf2ikyDTpOd16y5e10g.roa (hash: X39FqUvCzgp1Twm8EXglBTxwVJ18DwP2RWSMPjQDYfw=) 4: dEXd7t-9ctMT6e6MzuroQDzDQUY.crl (hash: LFj46GG/WhhlizjRNmbi4S67cerSR0mvr2mJ2zVaUrM=) 5: nb_SgNToJhQlWuIX7tsN5k_y4pE.roa (hash: 4kJjY6lHt/g87dKdPa2zMnovZO8sWINioQls7x+X7vU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:65:31:ec:e0:3b:d3:0e:7e:8f:f5:ac:6c:29:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146 Validity Not Before: Dec 18 12:00:38 2025 GMT Not After : Dec 19 12:00:38 2025 GMT Subject: CN=d4c22aa824205be30c54e211c2146387604129ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8b:24:66:a2:9f:46:e4:8f:1c:1a:1a:6c:46: 68:08:8b:5a:15:7b:2a:f8:8f:6c:d2:11:8e:11:9a: c1:3c:b3:5e:07:21:63:43:da:17:2d:62:b3:11:1e: 79:10:06:f7:ad:15:bd:cc:14:a0:47:78:52:a8:76: 4f:23:4b:a9:33:e3:6f:43:ea:f9:03:d8:f8:17:8a: f2:24:af:50:49:15:7c:8f:e5:e9:12:a1:e4:92:68: c7:3b:bb:18:14:4b:2e:7d:83:15:53:9d:7e:e9:34: 97:54:8e:43:ca:f6:27:10:54:6a:fa:63:60:bd:7e: c0:66:f2:e4:18:45:8b:dd:70:da:8f:b4:c4:b8:43: 6d:9c:cb:7c:e7:26:8d:b9:31:83:07:eb:7a:97:a4: 0c:2e:d6:7e:26:ea:fc:d6:44:8c:13:20:42:57:74: aa:7f:04:32:91:e4:1a:7c:db:3a:03:e0:44:a8:87: 29:3c:49:ce:37:8b:d0:3a:71:ea:68:0d:80:2a:e2: 95:96:c2:73:fe:d4:4f:e4:d9:81:06:ac:5b:96:c1: d3:ea:f6:ee:01:83:a6:a9:2e:10:7c:4e:99:20:3b: 11:cb:a3:7d:6f:86:16:33:2c:1e:4d:df:0a:3c:e7: b8:95:c9:ae:21:ab:8d:76:4a:8e:61:92:24:e9:22: 67:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C2:2A:A8:24:20:5B:E3:0C:54:E2:11:C2:14:63:87:60:41:29:EE X509v3 Authority Key Identifier: keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:3f:0d:95:17:5a:ea:02:ae:20:eb:ed:a8:a6:9c:c0:cc:45: 0a:75:2b:b4:64:d7:91:49:7b:47:35:62:f9:ea:c6:f1:85:80: 4d:a1:f9:b0:a7:b9:b9:b7:9d:54:e5:49:c9:7b:b4:de:02:c3: 4c:d5:cc:23:20:78:7c:68:25:bd:7e:65:b0:b2:71:05:a1:6b: 1f:f0:e6:69:90:19:01:1c:4b:43:95:da:a0:c3:d1:53:db:cb: 1d:40:ad:c4:7a:29:7d:e8:e5:7c:cd:76:09:e4:58:3a:87:a4: 71:0f:32:68:df:7b:93:6e:8b:2a:50:28:c4:3e:28:b3:b9:61: 25:08:8a:c6:33:dc:88:f0:da:9a:7c:6b:ad:64:4b:ee:c1:93: 18:7e:66:7b:cb:52:1c:54:36:f7:f7:9f:32:bb:94:f9:f0:f6: 52:02:5f:53:be:de:c5:2f:f1:cb:88:e4:66:ad:9f:a6:cd:f9: 0a:ad:20:e5:f8:0c:8a:c7:86:8a:1c:88:c0:ba:a1:8e:12:41: ce:f0:fa:ea:89:f5:82:2d:64:d1:d9:20:2e:19:7b:2d:c5:22: 14:16:56:0e:b5:1f:eb:5e:3c:a1:34:94:f3:47:8c:7c:b4:2e: 59:fc:2b:fb:49:ca:3a:0e:33:a7:d6:36:63:d1:16:a3:74:52: c1:56:42:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVWUx7OA70w5+j/WsbCltMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NDVkZGVlZGZiZDcyZDMxM2U5ZWU4Y2NlZWFlODQwM2Nj MzQxNDYwHhcNMjUxMjE4MTIwMDM4WhcNMjUxMjE5MTIwMDM4WjAzMTEwLwYDVQQD EyhkNGMyMmFhODI0MjA1YmUzMGM1NGUyMTFjMjE0NjM4NzYwNDEyOWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4skZqKfRuSPHBoabEZoCItaFXsq +I9s0hGOEZrBPLNeByFjQ9oXLWKzER55EAb3rRW9zBSgR3hSqHZPI0upM+NvQ+r5 A9j4F4ryJK9QSRV8j+XpEqHkkmjHO7sYFEsufYMVU51+6TSXVI5DyvYnEFRq+mNg vX7AZvLkGEWL3XDaj7TEuENtnMt85yaNuTGDB+t6l6QMLtZ+Jur81kSMEyBCV3Sq fwQykeQafNs6A+BEqIcpPEnON4vQOnHqaA2AKuKVlsJz/tRP5NmBBqxblsHT6vbu AYOmqS4QfE6ZIDsRy6N9b4YWMyweTd8KPOe4lcmuIauNdkqOYZIk6SJnVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTCKqgkIFvjDFTiEcIUY4dgQSnuMB8GA1UdIwQY MBaAFHRF3e7fvXLTE+nujM7q6EA8w0FGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMt NmNhMzQwZmE3NDkzLzEvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMtNmNhMzQwZmE3NDkz LzEvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdj8NlRda 6gKuIOvtqKacwMxFCnUrtGTXkUl7RzVi+erG8YWATaH5sKe5ubedVOVJyXu03gLD TNXMIyB4fGglvX5lsLJxBaFrH/DmaZAZARxLQ5XaoMPRU9vLHUCtxHopfejlfM12 CeRYOoekcQ8yaN97k26LKlAoxD4os7lhJQiKxjPciPDamnxrrWRL7sGTGH5me8tS HFQ29/efMruU+fD2UgJfU77exS/xy4jkZq2fps35Cq0g5fgMiseGihyIwLqhjhJB zvD66on1gi1k0dkgLhl7LcUiFBZWDrUf6148oTSU80eMfLQuWfwr+0nKOg4zp9Y2 Y9EWo3RSwVZCdg== -----END CERTIFICATE-----Generated at Thu Dec 18 21:49:44 2025 by rpki-client