This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json) Hash identifier: 8eOvyo355Zalt5UD4elzH1y/fMqb6mIg+T0kfaVQ9Wo= Subject key identifier: A5:A8:1D:5E:71:4C:ED:63:5B:C9:FB:5E:24:BD:1D:5E:51:8B:9C:90 Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a Certificate serial: 019AF1644D83EEA70D1796B4BAC2E4D63AED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft Manifest number: 07C8 Signing time: Sat 06 Dec 2025 02:01:13 +0000 Manifest this update: Sat 06 Dec 2025 02:01:13 +0000 Manifest next update: Sun 07 Dec 2025 02:01:13 +0000 Files and hashes: 1: R0kpMB4FLa57YlT9gQTxUhUxTi4.roa (hash: v4gil0pPlLS8kPjffYF1yPMZ2JnOTspISeu5FIjRwfg=) 2: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: 1/RZiQu164CC1K60docx3EbuG4G83NNiXKWrFeZdfY8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:4d:83:ee:a7:0d:17:96:b4:ba:c2:e4:d6:3a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a Validity Not Before: Dec 6 02:01:13 2025 GMT Not After : Dec 7 02:01:13 2025 GMT Subject: CN=a5a81d5e714ced635bc9fb5e24bd1d5e518b9c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:31:24:bd:6a:2a:ec:6a:cb:4d:d0:02:1e:5e: c0:2e:03:c6:6f:3a:eb:bf:75:fc:23:9c:9c:3d:ff: f1:20:6e:99:70:53:37:12:61:25:e0:7e:29:36:48: df:f4:77:43:b9:3c:62:e9:4d:7c:83:96:73:3c:69: f8:3c:fc:a8:ce:3b:70:c3:46:ec:dc:3d:ad:25:0f: ea:0f:68:d7:d6:b2:2a:7b:68:6f:c3:ea:a2:c4:11: 98:c2:38:ea:16:23:ea:ed:43:58:e9:de:7c:15:ad: 20:df:47:54:f1:40:b7:84:5e:3a:05:5e:21:c5:e2: 88:66:c6:82:61:1e:e5:c9:6f:28:d9:8c:f3:69:b5: 93:af:6c:42:76:6c:9f:ab:45:fe:10:2c:6c:1c:cd: 76:1f:ff:74:f5:10:ba:7e:04:19:35:19:71:7f:f4: 01:26:4f:c2:91:ff:70:4f:46:8b:7a:24:9f:0e:d9: 74:6e:90:d1:e0:fd:76:75:9f:f9:aa:ae:a4:bd:4e: cb:50:cb:1c:bd:25:6f:c4:fe:79:c3:60:a9:b2:c7: a2:a5:24:99:1e:61:10:c2:20:8e:d1:bb:5f:a6:81: c7:c4:5a:83:d2:ae:ec:9a:a7:96:3a:0a:38:61:1b: bd:46:b9:a1:2e:d7:7c:2c:1d:c8:7c:40:70:3c:9a: f0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A8:1D:5E:71:4C:ED:63:5B:C9:FB:5E:24:BD:1D:5E:51:8B:9C:90 X509v3 Authority Key Identifier: keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:a4:8a:19:a8:dc:1b:88:6c:3d:aa:cb:e8:eb:f2:1c:d8:90: 6a:54:ff:fd:41:04:c4:94:0f:cf:e8:5e:60:e9:86:ee:f3:7e: 6d:60:b0:a9:29:b4:0b:f4:a2:04:70:57:42:de:63:bf:00:a5: e6:6f:5c:78:51:7a:3e:95:b3:aa:da:1b:e7:c5:ce:79:e9:2a: a5:9e:66:0e:a9:95:5b:2f:91:51:66:c8:38:80:57:2c:be:5a: 26:70:b0:e8:20:8a:a3:0a:e3:9b:70:7c:09:92:83:95:04:bb: 81:d7:ed:1e:65:9a:a7:d1:58:c6:d8:8b:75:73:f5:51:d7:0b: 7c:3e:70:ee:ba:62:9f:33:f7:2c:e0:f8:0d:06:7a:a3:97:98: f0:f6:c7:6c:45:85:2c:ec:ab:9a:65:65:7c:aa:95:cc:39:9c: 7b:ec:c9:5d:86:ae:a4:ba:1b:65:1a:1c:0c:d7:14:71:96:20: fd:be:51:4c:36:f7:da:0c:cf:a7:96:17:a0:dd:4f:cd:ae:66: 85:7d:89:30:74:e1:da:db:86:ea:c4:97:8f:8f:7c:72:bc:d2: 6e:bb:24:f8:90:27:80:3c:69:f2:f8:0a:15:b3:8b:57:38:7c: 71:59:0a:9d:cd:8f:6e:46:51:08:24:96:b8:c9:35:d0:7d:90: 2f:c5:2a:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZE2D7qcNF5a0usLk1jrtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjM2FiNTVkNTc1MDljYmZhZTc5OGJkNzFhYWEyM2IzNDQ0 ZDhlNWEwHhcNMjUxMjA2MDIwMTEzWhcNMjUxMjA3MDIwMTEzWjAzMTEwLwYDVQQD EyhhNWE4MWQ1ZTcxNGNlZDYzNWJjOWZiNWUyNGJkMWQ1ZTUxOGI5YzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDEkvWoq7GrLTdACHl7ALgPGbzrr v3X8I5ycPf/xIG6ZcFM3EmEl4H4pNkjf9HdDuTxi6U18g5ZzPGn4PPyozjtww0bs 3D2tJQ/qD2jX1rIqe2hvw+qixBGYwjjqFiPq7UNY6d58Fa0g30dU8UC3hF46BV4h xeKIZsaCYR7lyW8o2YzzabWTr2xCdmyfq0X+ECxsHM12H/909RC6fgQZNRlxf/QB Jk/Ckf9wT0aLeiSfDtl0bpDR4P12dZ/5qq6kvU7LUMscvSVvxP55w2CpsseipSSZ HmEQwiCO0btfpoHHxFqD0q7smqeWOgo4YRu9RrmhLtd8LB3IfEBwPJrwiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWoHV5xTO1jW8n7XiS9HV5Ri5yQMB8GA1UdIwQY MBaAFPw6tV1XUJy/rnmL1xqqI7NETY5aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYt MGM0NTIxOGU3OTgxLzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYtMGM0NTIxOGU3OTgx LzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKSKGajc G4hsParL6OvyHNiQalT//UEExJQPz+heYOmG7vN+bWCwqSm0C/SiBHBXQt5jvwCl 5m9ceFF6PpWzqtob58XOeekqpZ5mDqmVWy+RUWbIOIBXLL5aJnCw6CCKowrjm3B8 CZKDlQS7gdftHmWap9FYxtiLdXP1UdcLfD5w7rpinzP3LOD4DQZ6o5eY8PbHbEWF LOyrmmVlfKqVzDmce+zJXYaupLobZRocDNcUcZYg/b5RTDb32gzPp5YXoN1Pza5m hX2JMHTh2tuG6sSXj498crzSbrsk+JAngDxp8vgKFbOLVzh8cVkKnc2PbkZRCCSW uMk10H2QL8UqDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:03:21 2025 by rpki-client