This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft File: dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json) Hash identifier: HVdkqwhGiMrDY5spYyiw57nWXAOE7T8trBGgyCiMYTg= Subject key identifier: E2:DC:F7:B5:E0:58:E0:7F:FA:2B:7C:71:F9:38:FA:4B:47:64:0F:87 Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09 Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209 Certificate serial: 019AF50A3683E03DBB155C537D87BDE849F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 19:01:18 +0000 Manifest this update: Sat 06 Dec 2025 19:01:18 +0000 Manifest next update: Sun 07 Dec 2025 19:01:18 +0000 Files and hashes: 1: bXLXdbvFGFR0FszgHn84rVBOGio.roa (hash: nmNBpS+PbDPDefHKYKNVtxbPVQnu+QoIycRrjJFcsBw=) 2: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: wLlIs6iRyh6LyFKIkSQ7ckSjE1eZPMIs1XvEQnyyuN4=) 3: hKQ8LLa9--B-K86xayaw0kpiYWg.roa (hash: d0JIaOsBs7E/BdBAQ915qmU5N9B7n1lC3k/0IYxFCFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:36:83:e0:3d:bb:15:5c:53:7d:87:bd:e8:49:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209 Validity Not Before: Dec 6 19:01:18 2025 GMT Not After : Dec 7 19:01:18 2025 GMT Subject: CN=e2dcf7b5e058e07ffa2b7c71f938fa4b47640f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ca:1a:2d:8b:b4:e5:7a:20:bc:16:cf:f7:0d: 70:80:c1:b8:78:d1:3a:67:ae:5e:42:46:e9:e9:7d: f9:13:c7:79:46:ef:09:7e:c2:12:ca:4b:90:4e:cd: b7:2d:70:0f:f5:99:46:40:17:71:0a:bc:c3:66:fe: 32:ff:e5:06:f8:70:b5:cd:2a:97:1c:91:e6:7d:85: af:bb:ac:07:ad:10:fd:3a:20:10:da:6c:f6:7d:b7: 98:60:ea:7e:d8:cf:24:80:a4:bb:ab:44:84:9d:e8: d9:ff:a9:42:e7:6d:dd:0e:a6:0a:4f:10:42:81:65: 2e:a5:cd:9e:32:28:78:40:64:aa:fc:51:ec:58:63: ce:15:17:5c:01:60:21:81:df:02:7e:98:80:dd:31: 5a:3e:3d:e0:0d:e7:62:ff:03:31:29:05:ac:8b:ad: 36:59:9f:d8:7c:a5:06:98:3c:1b:27:cf:ba:79:96: 1b:cb:f0:98:e7:59:71:b2:82:53:83:1b:6f:b9:76: 2b:2d:31:1c:32:46:e5:16:46:12:10:59:ea:ce:ec: 9d:63:cb:21:b1:86:83:0d:21:23:3c:01:b1:54:93: 5a:e6:98:4a:85:09:4f:e2:de:4c:76:c6:13:3b:5b: 0a:fc:45:f5:f2:36:30:51:2f:ce:86:a7:52:d7:98: 9f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DC:F7:B5:E0:58:E0:7F:FA:2B:7C:71:F9:38:FA:4B:47:64:0F:87 X509v3 Authority Key Identifier: keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:44:33:b3:df:50:f5:70:47:4f:a5:2f:73:c1:13:11:80:75: 1a:42:62:c6:1d:d1:9d:0d:55:27:3b:d4:f2:df:ea:17:08:71: 5e:12:18:8e:a2:67:53:12:54:c4:76:de:aa:82:30:79:d9:0b: 8f:18:81:09:95:2d:33:d4:8a:da:19:06:28:8b:03:d5:5b:e8: 1e:ab:97:e7:a9:08:9c:f9:9b:b8:46:0b:27:e3:a3:25:24:0f: 9b:04:9c:9b:79:1d:f0:1c:ff:d5:dd:38:e3:34:05:58:12:55: 80:9e:36:82:19:b5:b5:54:f3:3c:5e:13:fe:a8:20:b9:6d:7a: 25:e8:6e:ba:90:af:ff:d6:4c:77:c6:55:07:bf:e5:e1:cf:87: 84:95:1c:77:5a:36:d8:c3:09:2b:7c:98:87:cc:0f:89:fd:81: fa:46:b2:6a:39:c0:9e:75:ee:87:e7:c5:20:39:bc:f2:bb:66: 5e:ae:cd:2e:02:e8:3b:8d:fa:cb:01:06:e9:2d:1c:3a:71:10: e6:d6:6a:dd:e4:e7:9b:ee:58:06:ea:e9:d2:39:55:24:5b:1c: 6c:06:fd:7c:03:50:c8:cd:09:fb:a4:07:2d:56:4a:12:e6:ac: 0b:59:a6:50:36:04:63:38:90:98:85:10:82:ed:52:6e:aa:fe: 3b:74:cf:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CjaD4D27FVxTfYe96EnwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1N2Y5ZmRlYTM1MGE3NjZiYjk4YzYwNGQzYjljMjc5MTY3 MzIyMDkwHhcNMjUxMjA2MTkwMTE4WhcNMjUxMjA3MTkwMTE4WjAzMTEwLwYDVQQD EyhlMmRjZjdiNWUwNThlMDdmZmEyYjdjNzFmOTM4ZmE0YjQ3NjQwZjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsoaLYu05XogvBbP9w1wgMG4eNE6 Z65eQkbp6X35E8d5Ru8JfsISykuQTs23LXAP9ZlGQBdxCrzDZv4y/+UG+HC1zSqX HJHmfYWvu6wHrRD9OiAQ2mz2fbeYYOp+2M8kgKS7q0SEnejZ/6lC523dDqYKTxBC gWUupc2eMih4QGSq/FHsWGPOFRdcAWAhgd8CfpiA3TFaPj3gDedi/wMxKQWsi602 WZ/YfKUGmDwbJ8+6eZYby/CY51lxsoJTgxtvuXYrLTEcMkblFkYSEFnqzuydY8sh sYaDDSEjPAGxVJNa5phKhQlP4t5MdsYTO1sK/EX18jYwUS/OhqdS15ifNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLc97XgWOB/+it8cfk4+ktHZA+HMB8GA1UdIwQY MBaAFHV/n96jUKdmu5jGBNO5wnkWcyIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFgtZjNxTlFwMmE3bU1ZRTA3bkNlUlp6SWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81YTNiNmItOWE2MS00NTU3LWEzZDYt YzI1YWJhNmI1NWFmLzEvZFgtZjNxTlFwMmE3bU1ZRTA3bkNlUlp6SWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi81YTNiNmItOWE2MS00NTU3LWEzZDYtYzI1YWJhNmI1NWFm LzEvZFgtZjNxTlFwMmE3bU1ZRTA3bkNlUlp6SWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqUQzs99Q 9XBHT6Uvc8ETEYB1GkJixh3RnQ1VJzvU8t/qFwhxXhIYjqJnUxJUxHbeqoIwedkL jxiBCZUtM9SK2hkGKIsD1VvoHquX56kInPmbuEYLJ+OjJSQPmwScm3kd8Bz/1d04 4zQFWBJVgJ42ghm1tVTzPF4T/qgguW16JehuupCv/9ZMd8ZVB7/l4c+HhJUcd1o2 2MMJK3yYh8wPif2B+kayajnAnnXuh+fFIDm88rtmXq7NLgLoO436ywEG6S0cOnEQ 5tZq3eTnm+5YBurp0jlVJFscbAb9fANQyM0J+6QHLVZKEuasC1mmUDYEYziQmIUQ gu1Sbqr+O3TPJQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:54:55 2025 by rpki-client