This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft File: dNYxjajSNXnE9zi26OVcxf8n5bE.mft (raw, json) Hash identifier: GPN4uJfdNv3TXEbXZeUZJTj6u2KJq8tMCLxBroKFKDw= Subject key identifier: AC:D1:17:59:D1:57:81:AA:31:F3:F2:F9:6B:DD:62:F2:C9:BF:16:3E Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1 Certificate issuer: /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1 Certificate serial: 019AF65342DF2032B0D4BD121B358D2F2BE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft Manifest number: 0D64 Signing time: Sun 07 Dec 2025 01:00:42 +0000 Manifest this update: Sun 07 Dec 2025 01:00:42 +0000 Manifest next update: Mon 08 Dec 2025 01:00:42 +0000 Files and hashes: 1: J3P2ScDRq3f4KKlGP_mAY51M1_c.roa (hash: W5jPrF0qqkPJpHpX3woDY2gshtve5dFyc1+G6+uag6o=) 2: dNYxjajSNXnE9zi26OVcxf8n5bE.crl (hash: EpYgcHHj5wppO7So+iddl1gjf0yg/Pl3ZxFYCHE+HOI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:42:df:20:32:b0:d4:bd:12:1b:35:8d:2f:2b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1 Validity Not Before: Dec 7 01:00:42 2025 GMT Not After : Dec 8 01:00:42 2025 GMT Subject: CN=acd11759d15781aa31f3f2f96bdd62f2c9bf163e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bd:6a:08:0b:93:ce:8f:e5:a4:1e:a1:ac:f6: 61:99:e1:22:64:34:44:3a:17:8b:e1:70:21:82:94: e2:f3:37:d5:53:79:a8:d9:30:3b:6a:a6:45:99:11: 4d:53:ea:5b:dd:e5:61:3b:76:d4:b8:78:80:0c:0f: 61:3b:4a:b9:43:a9:7c:96:6f:48:17:a1:2d:fe:4b: 05:ef:d9:81:a6:16:a5:16:9e:4b:e4:86:29:5c:f3: a2:39:b6:b7:7d:77:41:69:c2:0c:be:60:9e:2b:28: 3d:1a:06:9f:e0:6e:30:ee:db:5e:f3:fc:9d:32:88: 64:0d:d4:bb:47:84:34:86:87:62:2b:53:f5:5f:5e: 92:ba:3d:53:96:65:1d:3e:d5:e3:85:a6:fb:09:7a: 99:20:c5:09:f5:74:a6:0e:6a:86:d3:b0:d8:40:15: a1:b7:cf:06:b1:be:1c:a9:d9:0b:e9:e8:19:fc:d3: 79:5b:c5:cb:27:04:89:0a:95:45:77:b0:ee:96:92: d1:2e:5e:ae:aa:f2:c6:aa:b5:96:5a:cc:b8:d7:37: 4f:9f:1b:7f:1a:10:c6:62:d2:b2:a4:a8:a3:35:0f: 86:12:d8:76:9b:3e:d3:28:a6:a9:ba:6c:41:2a:0f: 2c:f2:80:4c:64:6d:7b:61:35:66:1c:13:2f:cb:3d: 0e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D1:17:59:D1:57:81:AA:31:F3:F2:F9:6B:DD:62:F2:C9:BF:16:3E X509v3 Authority Key Identifier: keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:7f:92:8c:9d:b6:cb:2a:ad:62:21:aa:db:c1:86:25:7b:f1: e9:1d:2d:28:d6:b4:44:3d:38:a4:9d:a6:b9:73:f1:52:bc:b9: 8a:e1:42:07:ca:d6:ac:49:18:6d:62:ae:81:1b:4a:65:ac:32: 6e:0e:73:b9:04:4e:e3:2a:6a:9a:00:29:9b:b3:ea:99:ec:57: 64:c2:15:97:ba:6e:19:e7:db:ba:21:33:a8:43:18:b4:6b:f0: 5d:41:02:57:a3:85:14:0e:c6:6f:dd:82:57:e7:b7:fa:9c:90: 52:f2:3b:13:6d:58:65:43:ae:52:16:b3:c6:fc:9d:8e:cf:eb: ad:b7:61:47:95:d6:49:fa:cb:59:7c:ac:fd:79:f4:9b:7e:03: 8a:5e:66:92:40:7e:37:cf:b3:fa:7b:f1:80:5a:9f:c2:04:92: 6a:38:e1:34:fe:6d:7e:3b:46:41:22:1c:ab:38:91:08:93:77: 18:23:3a:00:ed:92:a8:57:f5:c6:7a:78:6b:19:3b:8d:3f:b9: 97:df:05:eb:16:67:7c:42:d7:4b:d9:c6:9d:42:09:c4:c9:56: bc:42:da:bb:da:a0:93:d1:53:67:42:af:6b:9d:5d:ad:68:f3: ec:e6:ce:48:4d:a3:cf:7e:5c:4a:7b:c0:cc:98:2e:70:3a:21: 28:96:70:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U0LfIDKw1L0SGzWNLyviMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZDYzMThkYThkMjM1NzljNGY3MzhiNmU4ZTU1Y2M1ZmYy N2U1YjEwHhcNMjUxMjA3MDEwMDQyWhcNMjUxMjA4MDEwMDQyWjAzMTEwLwYDVQQD EyhhY2QxMTc1OWQxNTc4MWFhMzFmM2YyZjk2YmRkNjJmMmM5YmYxNjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb1qCAuTzo/lpB6hrPZhmeEiZDRE OheL4XAhgpTi8zfVU3mo2TA7aqZFmRFNU+pb3eVhO3bUuHiADA9hO0q5Q6l8lm9I F6Et/ksF79mBphalFp5L5IYpXPOiOba3fXdBacIMvmCeKyg9Ggaf4G4w7tte8/yd MohkDdS7R4Q0hodiK1P1X16Suj1TlmUdPtXjhab7CXqZIMUJ9XSmDmqG07DYQBWh t88Gsb4cqdkL6egZ/NN5W8XLJwSJCpVFd7DulpLRLl6uqvLGqrWWWsy41zdPnxt/ GhDGYtKypKijNQ+GEth2mz7TKKapumxBKg8s8oBMZG17YTVmHBMvyz0OGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzRF1nRV4GqMfPy+WvdYvLJvxY+MB8GA1UdIwQY MBaAFHTWMY2o0jV5xPc4tujlXMX/J+WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE5ZeGphalNOWG5FOXppMjZPVmN4ZjhuNWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lZjU0ZGItYTU2NS00MzU0LTg5OWEt MDgzYWExOGE3NjI5LzEvZE5ZeGphalNOWG5FOXppMjZPVmN4ZjhuNWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lZjU0ZGItYTU2NS00MzU0LTg5OWEtMDgzYWExOGE3NjI5 LzEvZE5ZeGphalNOWG5FOXppMjZPVmN4ZjhuNWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfX+SjJ22 yyqtYiGq28GGJXvx6R0tKNa0RD04pJ2muXPxUry5iuFCB8rWrEkYbWKugRtKZawy bg5zuQRO4ypqmgApm7PqmexXZMIVl7puGefbuiEzqEMYtGvwXUECV6OFFA7Gb92C V+e3+pyQUvI7E21YZUOuUhazxvydjs/rrbdhR5XWSfrLWXys/Xn0m34Dil5mkkB+ N8+z+nvxgFqfwgSSajjhNP5tfjtGQSIcqziRCJN3GCM6AO2SqFf1xnp4axk7jT+5 l98F6xZnfELXS9nGnUIJxMlWvELau9qgk9FTZ0Kva51drWjz7ObOSE2jz35cSnvA zJgucDohKJZwdQ== -----END CERTIFICATE-----Generated at Sun Dec 7 06:06:42 2025 by rpki-client