This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json) Hash identifier: 1Nn5/fE7cUxC2mvGDYVbtLLYhdZUCD5xk5p04dD8LHk= Subject key identifier: CA:52:4B:8E:CA:F2:68:9D:B3:5B:86:98:01:DC:87:1E:BA:1C:05:36 Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86 Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486 Certificate serial: 019AF31C2DC561FEAEBA848DE325AB96A7B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft Manifest number: 149E Signing time: Sat 06 Dec 2025 10:01:41 +0000 Manifest this update: Sat 06 Dec 2025 10:01:41 +0000 Manifest next update: Sun 07 Dec 2025 10:01:41 +0000 Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: ObF/d/jr1b0zzXILfVzDFDrcl4rJ49WU/U4AyFxVAUo=) 2: iUMe2JOAJNlxZXEaHwJwVAIN3WA.roa (hash: ZvIlGSaMCDAbt70045McSuBEc2GtkECp8D75xEWNHU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:2d:c5:61:fe:ae:ba:84:8d:e3:25:ab:96:a7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486 Validity Not Before: Dec 6 10:01:41 2025 GMT Not After : Dec 7 10:01:41 2025 GMT Subject: CN=ca524b8ecaf2689db35b869801dc871eba1c0536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:3d:88:19:cc:be:57:a4:35:0d:12:b4:1e: 73:13:da:89:bd:01:ce:3e:24:94:dd:e7:33:1d:0c: a0:e7:27:43:ef:e9:20:c1:a6:ed:0a:73:92:be:8d: 71:ed:c9:29:5c:21:c2:bf:63:a8:86:20:76:bb:f2: 96:62:1b:f3:4d:4c:16:cb:e9:aa:dd:a0:fc:0d:3e: f7:22:47:17:1b:94:2e:f3:54:9a:8a:bf:ab:77:6c: 4a:e9:1c:46:ec:85:07:b5:e6:3b:0f:f5:a5:6f:b5: c2:a8:db:a5:09:2a:c4:e5:c3:be:48:a1:71:2d:51: 44:85:87:f9:2d:ed:9d:43:df:32:2c:de:32:a1:62: bd:41:29:e1:4e:0b:dd:b2:ea:a3:10:73:7c:d4:89: e1:e9:59:3c:b6:bb:f9:d2:19:1a:c8:5e:3f:59:7a: e8:5e:d3:25:79:67:7e:a2:3c:fb:8f:84:0d:91:9e: 7a:22:ff:99:f2:be:42:b7:2f:ad:36:36:d8:3a:9c: 78:40:88:83:9d:e6:a0:d4:59:57:50:69:73:50:53: 81:c4:fe:48:8a:2a:39:4f:7f:35:8f:6d:c1:bb:61: 44:85:bb:b9:94:c7:1d:13:18:f4:3a:44:44:56:ef: 42:9d:cf:9e:57:01:6f:eb:a7:84:9e:cf:f4:53:91: 40:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:52:4B:8E:CA:F2:68:9D:B3:5B:86:98:01:DC:87:1E:BA:1C:05:36 X509v3 Authority Key Identifier: keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:7c:19:46:5c:fa:2f:55:0b:a4:48:43:e5:b5:07:b7:7b:0d: 29:14:1e:f0:ff:1d:9e:b8:35:36:9d:0c:a6:8f:e6:a5:d9:6b: a6:f6:36:a2:42:dd:3c:16:91:62:e2:54:40:83:45:c9:3b:68: b3:51:20:07:a8:87:8b:c9:d8:d3:1a:ed:1c:0a:c6:a1:0d:4a: 8f:89:80:ec:21:d1:46:b5:e2:96:4f:2f:6f:71:cb:23:ff:f0: f5:80:18:06:4d:10:ba:8c:9a:2e:ac:f8:cb:f6:25:8c:67:3e: a8:0c:fd:b7:f5:12:04:ab:b0:e5:bf:85:5e:07:36:cf:c4:9b: a4:10:0e:22:ee:cb:24:86:cf:79:03:40:45:92:39:69:fa:05: 3e:67:57:73:37:15:d3:d5:21:03:99:a2:08:28:78:29:41:99: 22:bd:88:8d:d6:11:e3:b2:40:8f:7d:c5:cf:31:b1:21:96:a7: ae:05:f2:96:d5:80:6d:f9:ec:83:1d:e3:a7:aa:32:45:b6:cd: 7f:78:9a:4d:dd:0a:52:10:d3:14:cc:8d:19:d0:16:61:4f:ab: 19:ad:f7:5c:9d:6c:fd:60:e0:30:fc:f4:4a:f7:53:b0:da:3b: f5:e2:00:cf:8e:ef:8f:83:0d:57:f1:4a:f2:f9:99:8e:c8:30: ba:2e:7e:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHC3FYf6uuoSN4yWrlqewMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZDM4MjI3NGI0NTc2NjJiYTcyZDE4ODY1NzNhMmM3ZGNj MzU0ODYwHhcNMjUxMjA2MTAwMTQxWhcNMjUxMjA3MTAwMTQxWjAzMTEwLwYDVQQD EyhjYTUyNGI4ZWNhZjI2ODlkYjM1Yjg2OTgwMWRjODcxZWJhMWMwNTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJc9iBnMvlekNQ0StB5zE9qJvQHO PiSU3eczHQyg5ydD7+kgwabtCnOSvo1x7ckpXCHCv2OohiB2u/KWYhvzTUwWy+mq 3aD8DT73IkcXG5Qu81Sair+rd2xK6RxG7IUHteY7D/Wlb7XCqNulCSrE5cO+SKFx LVFEhYf5Le2dQ98yLN4yoWK9QSnhTgvdsuqjEHN81Inh6Vk8trv50hkayF4/WXro XtMleWd+ojz7j4QNkZ56Iv+Z8r5Cty+tNjbYOpx4QIiDneag1FlXUGlzUFOBxP5I iio5T381j23Bu2FEhbu5lMcdExj0OkREVu9Cnc+eVwFv66eEns/0U5FAsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpSS47K8mids1uGmAHchx66HAU2MB8GA1UdIwQY MBaAFNvTgidLRXZiunLRiGVzosfcw1SGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjlPQ0owdEZkbUs2Y3RHSVpYT2l4OXpEVklZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mMTIwMjktNjc1OC00MjMzLTlkZmMt YzY1NDM1NmIwN2M0LzEvMjlPQ0owdEZkbUs2Y3RHSVpYT2l4OXpEVklZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mMTIwMjktNjc1OC00MjMzLTlkZmMtYzY1NDM1NmIwN2M0 LzEvMjlPQ0owdEZkbUs2Y3RHSVpYT2l4OXpEVklZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKHwZRlz6 L1ULpEhD5bUHt3sNKRQe8P8dnrg1Np0Mpo/mpdlrpvY2okLdPBaRYuJUQINFyTto s1EgB6iHi8nY0xrtHArGoQ1Kj4mA7CHRRrXilk8vb3HLI//w9YAYBk0QuoyaLqz4 y/YljGc+qAz9t/USBKuw5b+FXgc2z8SbpBAOIu7LJIbPeQNARZI5afoFPmdXczcV 09UhA5miCCh4KUGZIr2IjdYR47JAj33FzzGxIZanrgXyltWAbfnsgx3jp6oyRbbN f3iaTd0KUhDTFMyNGdAWYU+rGa33XJ1s/WDgMPz0SvdTsNo79eIAz47vj4MNV/FK 8vmZjsgwui5+/w== -----END CERTIFICATE-----Generated at Sat Dec 6 19:31:20 2025 by rpki-client