This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json) Hash identifier: E0+BzQPiyuGvv3CduoZxMPpMp7pto/T5MoEhQmi2akY= Subject key identifier: 59:3B:96:6E:F3:59:5A:CA:86:53:2F:E0:7D:7F:98:AB:62:A5:3C:F1 Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38 Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838 Certificate serial: 019AF23FAB3284BBB832F95A81EF8BFC6039 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft Manifest number: 08F7 Signing time: Sat 06 Dec 2025 06:00:50 +0000 Manifest this update: Sat 06 Dec 2025 06:00:50 +0000 Manifest next update: Sun 07 Dec 2025 06:00:50 +0000 Files and hashes: 1: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: sauh2mIaoMdS+trHyNlTqEsaOJ6QOVuOx4dajM0dc5U=) 2: zQKrXmW9bWHdUqBWvY33a8SbMCE.roa (hash: HT0Uv7b54sK7sP7mnHeROBQjHCb1P8YG6jJ1hRPnfL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ab:32:84:bb:b8:32:f9:5a:81:ef:8b:fc:60:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838 Validity Not Before: Dec 6 06:00:50 2025 GMT Not After : Dec 7 06:00:50 2025 GMT Subject: CN=593b966ef3595aca86532fe07d7f98ab62a53cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c6:75:bf:1d:2a:15:99:e7:8b:df:8a:84:00: 09:81:d3:91:85:4b:1e:98:6d:52:9f:2e:98:0d:fc: 57:d6:58:c2:30:a1:3e:27:76:7f:ff:f2:c2:07:9b: 37:ee:d9:d9:e2:68:05:ee:c2:61:57:c7:27:55:16: dc:8c:fc:9a:0a:0d:ad:13:a2:46:c9:40:2e:a2:6b: 4a:5d:1e:6c:38:ef:d6:c4:06:49:8e:9c:b5:dd:a5: 4b:6c:1e:a4:46:1a:be:74:69:e2:03:e9:5f:fc:f0: 9c:cd:b8:08:74:e9:11:9e:08:0a:33:89:43:d1:a6: 4d:92:cc:a7:ae:7b:42:b7:1f:f6:f8:dd:05:6e:40: d4:41:dc:27:50:cf:63:d2:45:ea:21:e1:3a:1d:b9: 63:14:02:a2:9b:eb:b2:4d:95:b0:e6:d5:89:f5:fe: d6:43:f5:95:04:71:4f:10:fb:ff:72:dd:23:a4:a0: 0b:67:30:5d:db:85:18:f5:c5:8f:0f:9b:03:36:8b: 04:f1:ff:0a:c1:a1:98:3e:14:be:92:d0:87:60:ea: b8:01:35:cb:3c:d8:a2:1e:e1:73:5d:51:36:2e:5c: 16:04:c9:b5:c3:04:b6:dd:db:bd:0a:bb:1b:6b:03: ae:eb:ca:08:5e:ed:2b:a3:3c:fa:97:8b:0f:9e:ac: 99:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3B:96:6E:F3:59:5A:CA:86:53:2F:E0:7D:7F:98:AB:62:A5:3C:F1 X509v3 Authority Key Identifier: keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:76:f8:0b:6d:49:ea:0a:59:70:ca:22:3f:a0:11:09:4d:c5: 13:a4:50:ae:71:4e:31:74:9f:39:af:68:d1:6b:35:68:2b:82: 15:9a:05:ad:34:53:3b:b0:a3:94:ed:f2:78:47:ae:00:8d:de: 82:c9:da:ce:fc:38:7b:c6:a2:8e:79:17:1d:6d:74:e2:7c:a4: 21:8d:b1:b5:f0:62:6d:88:e4:d6:0d:eb:69:7c:36:e3:d6:30: a1:71:31:2d:cb:ed:5a:3c:8f:c8:ec:a2:e8:24:76:3e:bb:83: d5:92:84:3b:98:65:92:b9:fa:33:36:10:7b:ca:7a:04:cd:15: 4d:79:34:17:17:01:cd:6f:8e:2f:3b:cd:bc:1a:bb:81:1c:f5: f9:f6:e8:14:31:ea:6e:ee:df:6f:9b:64:f4:30:0c:c8:c1:01: 6a:61:8c:6c:2b:06:86:ff:e7:2c:16:5c:59:06:d7:c4:7c:50: 00:94:73:1d:05:31:80:8f:de:9c:5b:65:d4:80:9a:c6:cb:de: 9b:ee:ec:70:b3:6a:76:c5:ef:6d:7a:3e:e3:4e:78:1d:1a:f0: 21:bf:39:a8:91:11:cd:92:a5:62:dc:37:6e:be:c5:88:21:d8: 0d:9a:b9:92:64:27:82:7a:a4:1b:e7:d0:75:b3:3d:9b:6e:f4: 28:b4:47:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6syhLu4Mvlage+L/GA5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0N2FhZTVkMjRiMGM5N2E0MjAzMWYzNTEwYTE0ZTJmOTVi YmQ4MzgwHhcNMjUxMjA2MDYwMDUwWhcNMjUxMjA3MDYwMDUwWjAzMTEwLwYDVQQD Eyg1OTNiOTY2ZWYzNTk1YWNhODY1MzJmZTA3ZDdmOThhYjYyYTUzY2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsZ1vx0qFZnni9+KhAAJgdORhUse mG1Sny6YDfxX1ljCMKE+J3Z///LCB5s37tnZ4mgF7sJhV8cnVRbcjPyaCg2tE6JG yUAuomtKXR5sOO/WxAZJjpy13aVLbB6kRhq+dGniA+lf/PCczbgIdOkRnggKM4lD 0aZNksynrntCtx/2+N0FbkDUQdwnUM9j0kXqIeE6HbljFAKim+uyTZWw5tWJ9f7W Q/WVBHFPEPv/ct0jpKALZzBd24UY9cWPD5sDNosE8f8KwaGYPhS+ktCHYOq4ATXL PNiiHuFzXVE2LlwWBMm1wwS23du9CrsbawOu68oIXu0rozz6l4sPnqyZVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFk7lm7zWVrKhlMv4H1/mKtipTzxMB8GA1UdIwQY MBaAFHR6rl0ksMl6QgMfNRChTi+Vu9g4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9mNDFmYmYtNGU4ZC00YWFhLTlkYjEt NjI2YmJmZWUwYjMxLzEvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9mNDFmYmYtNGU4ZC00YWFhLTlkYjEtNjI2YmJmZWUwYjMx LzEvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHb4C21J 6gpZcMoiP6ARCU3FE6RQrnFOMXSfOa9o0Ws1aCuCFZoFrTRTO7CjlO3yeEeuAI3e gsnazvw4e8aijnkXHW104nykIY2xtfBibYjk1g3raXw249YwoXExLcvtWjyPyOyi 6CR2PruD1ZKEO5hlkrn6MzYQe8p6BM0VTXk0FxcBzW+OLzvNvBq7gRz1+fboFDHq bu7fb5tk9DAMyMEBamGMbCsGhv/nLBZcWQbXxHxQAJRzHQUxgI/enFtl1ICaxsve m+7scLNqdsXvbXo+4054HRrwIb85qJERzZKlYtw3br7FiCHYDZq5kmQngnqkG+fQ dbM9m270KLRH7g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:11 2025 by rpki-client