This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft File: dLQqbeTgH8MSUNG74yIoEEbuYao.mft (raw, json) Hash identifier: n+Nr1ZeY5Qt8y5+iUTC4RCZlGuxb2KGPiv/Rfp0xR8U= Subject key identifier: CF:E9:00:6E:98:36:40:61:CA:3E:B2:16:A0:DD:E9:23:08:B2:74:A0 Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA Certificate issuer: /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa Certificate serial: 019AF50A5F2CE5CF5BAD6298A0324689D684 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft Manifest number: 1206 Signing time: Sat 06 Dec 2025 19:01:28 +0000 Manifest this update: Sat 06 Dec 2025 19:01:28 +0000 Manifest next update: Sun 07 Dec 2025 19:01:28 +0000 Files and hashes: 1: Lgun1kUgKuu9jlLCkgKdcwux9To.roa (hash: lGBfmzCEfkvZzXJZAi/9+uOmPeLs0qMduHpdLInrHEE=) 2: dLQqbeTgH8MSUNG74yIoEEbuYao.crl (hash: ewEEBS5HNLJKrwFGE8NWQm+wOzDRakBjG6gyZRvyCdw=) 3: jSoECDBgi6VXYwcb2Ry0gxkfevA.roa (hash: IB9PwzbzFSot/avb9nPz1wMhdqqmWhuiYKAtdM5DSM0=) 4: qi0gnQ2A8mtm5nYWriDtU7TmQuc.roa (hash: uJnkHGGJ2XDTIlw0+Vcce7p4k0hUULEaSnw534z2SoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:5f:2c:e5:cf:5b:ad:62:98:a0:32:46:89:d6:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa Validity Not Before: Dec 6 19:01:28 2025 GMT Not After : Dec 7 19:01:28 2025 GMT Subject: CN=cfe9006e98364061ca3eb216a0dde92308b274a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cd:89:ca:1a:bd:4e:bd:76:a0:8d:0a:ce:16: 0d:c1:ac:66:df:84:eb:09:23:f9:97:b7:82:55:de: 53:92:44:b8:19:4d:fd:c9:04:f5:2c:23:cc:a4:2e: d7:8e:34:9e:69:54:74:0f:c9:0e:37:54:a2:31:8b: 61:49:f7:2d:0d:f5:53:5d:ab:db:ad:be:02:a7:cd: d1:29:e8:72:19:7f:89:51:2b:74:bd:31:8a:fa:e7: aa:85:4b:8c:2f:ec:04:56:dd:3c:e4:a0:14:f8:9c: 4c:b0:ad:49:b2:4e:a8:75:da:55:48:63:9b:f5:f4: 2f:a6:34:95:ba:2d:4c:5c:b5:3a:29:80:34:b0:9a: 0d:4a:7f:14:33:94:20:07:64:37:46:da:57:0c:7d: f4:87:1d:77:1d:a9:58:4d:97:dd:b4:ff:bb:57:db: df:be:28:f8:a1:2a:0e:4a:7d:c2:77:54:f9:3e:a3: 99:03:52:0d:d5:87:9a:f8:e7:41:25:0c:f1:57:4d: ff:31:47:63:c8:87:b7:2c:01:9a:a1:f0:b3:06:15: 1d:f8:83:e8:f7:17:6b:17:52:6e:d7:d4:29:ac:3b: 86:66:d9:5d:3f:a4:76:3d:c3:b4:44:67:c3:20:cd: e3:d8:68:ec:2e:af:44:cb:f8:fe:19:ca:50:28:dd: e6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E9:00:6E:98:36:40:61:CA:3E:B2:16:A0:DD:E9:23:08:B2:74:A0 X509v3 Authority Key Identifier: keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:97:a3:9c:5c:84:0d:ae:56:ee:27:51:e4:bc:5b:fd:2b:4d: 26:77:b8:cc:c6:35:f3:9b:fe:2e:5d:b5:05:2d:38:81:9a:04: 63:af:41:16:57:34:69:bb:c5:b8:b2:35:a8:d3:5f:5b:92:c1: bc:11:19:3d:9f:db:75:fb:ea:28:0d:aa:e8:c7:4f:c6:80:26: 2d:f5:ff:bd:b3:98:58:6f:94:81:e0:d3:f1:18:b3:a6:3e:f7: de:01:a7:bf:ad:b8:e8:47:5c:32:50:ee:87:59:4f:f7:7b:84: b4:43:5b:04:bc:a1:b4:6a:8a:eb:fc:33:64:4d:e5:23:21:ec: 39:73:e1:54:3b:c4:a7:ee:89:55:27:e6:72:51:ee:e6:2d:65: 81:89:76:65:a5:9e:67:82:8c:f7:cd:90:00:77:6a:b8:e2:bf: 4c:50:ac:27:b7:61:ca:b0:86:e9:56:7d:68:76:27:18:fb:cc: b2:7e:3d:22:e4:15:c0:f0:8d:3e:73:e9:59:62:09:1f:86:b0: d7:01:c4:5a:59:c9:b2:5c:62:4d:2d:03:40:47:e6:2b:bf:4f: 07:cd:37:23:cb:1f:7b:e0:3f:09:1b:14:9d:3e:89:15:62:34: fd:ff:29:d5:10:d7:da:c6:28:e9:b3:d4:f8:69:40:0d:ca:35: a1:ce:d2:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cl8s5c9brWKYoDJGidaEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YjQyYTZkZTRlMDFmYzMxMjUwZDFiYmUzMjIyODEwNDZl ZTYxYWEwHhcNMjUxMjA2MTkwMTI4WhcNMjUxMjA3MTkwMTI4WjAzMTEwLwYDVQQD EyhjZmU5MDA2ZTk4MzY0MDYxY2EzZWIyMTZhMGRkZTkyMzA4YjI3NGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus2Jyhq9Tr12oI0KzhYNwaxm34Tr CSP5l7eCVd5TkkS4GU39yQT1LCPMpC7XjjSeaVR0D8kON1SiMYthSfctDfVTXavb rb4Cp83RKehyGX+JUSt0vTGK+ueqhUuML+wEVt085KAU+JxMsK1Jsk6oddpVSGOb 9fQvpjSVui1MXLU6KYA0sJoNSn8UM5QgB2Q3RtpXDH30hx13HalYTZfdtP+7V9vf vij4oSoOSn3Cd1T5PqOZA1IN1Yea+OdBJQzxV03/MUdjyIe3LAGaofCzBhUd+IPo 9xdrF1Ju19QprDuGZtldP6R2PcO0RGfDIM3j2GjsLq9Ey/j+GcpQKN3mlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/pAG6YNkBhyj6yFqDd6SMIsnSgMB8GA1UdIwQY MBaAFHS0Km3k4B/DElDRu+MiKBBG7mGqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9lNTU1NmMtY2ZlYS00OTcyLWFhZjgt MTdhMWRjZGNjNmUwLzEvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9lNTU1NmMtY2ZlYS00OTcyLWFhZjgtMTdhMWRjZGNjNmUw LzEvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpejnFyE Da5W7idR5Lxb/StNJne4zMY185v+Ll21BS04gZoEY69BFlc0abvFuLI1qNNfW5LB vBEZPZ/bdfvqKA2q6MdPxoAmLfX/vbOYWG+UgeDT8Rizpj733gGnv6246EdcMlDu h1lP93uEtENbBLyhtGqK6/wzZE3lIyHsOXPhVDvEp+6JVSfmclHu5i1lgYl2ZaWe Z4KM982QAHdquOK/TFCsJ7dhyrCG6VZ9aHYnGPvMsn49IuQVwPCNPnPpWWIJH4aw 1wHEWlnJslxiTS0DQEfmK79PB803I8sfe+A/CRsUnT6JFWI0/f8p1RDX2sYo6bPU +GlADco1oc7SiQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:12:36 2025 by rpki-client