This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft File: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft (raw, json) Hash identifier: FN7SnIVOFO/GuClx/cArEw35QDmRkWI0zvLhFg/V91E= Subject key identifier: BE:F5:20:E2:1A:86:94:9A:74:EB:7D:9E:71:39:FF:B0:50:AF:87:36 Authority key identifier: 74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E Certificate issuer: /CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e Certificate serial: 019B00691CC1068B9CFDE9B0CA14EE6BB543 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft Manifest number: 103F Signing time: Tue 09 Dec 2025 00:00:47 +0000 Manifest this update: Tue 09 Dec 2025 00:00:47 +0000 Manifest next update: Wed 10 Dec 2025 00:00:47 +0000 Files and hashes: 1: aIw9rhpD5bOiIlZAqZVUvurijMA.roa (hash: PFhebNxm67g4lRCcJKkvR6KXhdlN0MJaxI0ObUyJSp4=) 2: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl (hash: NzhUVRWN9iV5KahIA/J4ZhqkRBEJek21hoMIp+oYkFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:00:69:1c:c1:06:8b:9c:fd:e9:b0:ca:14:ee:6b:b5:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e Validity Not Before: Dec 9 00:00:47 2025 GMT Not After : Dec 10 00:00:47 2025 GMT Subject: CN=bef520e21a86949a74eb7d9e7139ffb050af8736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:63:d8:53:28:ff:a4:d3:1b:d0:91:c0:4e:e2: 6d:58:14:fe:4e:8a:cd:10:6b:3f:88:8b:a6:62:b4: ac:bb:cf:ac:86:1f:96:71:02:19:44:a6:c2:04:ed: 97:31:d6:33:72:6c:04:ea:fc:07:b4:ab:44:7a:a9: 05:7b:64:32:9b:6f:63:fa:2a:98:d9:93:06:6d:04: bd:df:0b:82:4e:53:36:21:6a:fa:0c:50:d4:3f:6c: f8:2d:b8:ad:5b:20:ae:3b:f2:cd:6c:ec:58:06:78: b1:29:60:cf:16:e5:79:fe:1d:61:0a:50:1c:63:90: 47:9c:ee:3c:5f:02:8d:f2:68:0b:bd:fb:85:3e:db: fd:c7:42:d3:30:db:d2:d1:8f:ed:81:98:a4:64:c7: 53:78:ba:b4:4f:52:64:5e:04:3b:b2:a8:35:57:64: e9:8d:2a:6c:a5:df:dc:04:3a:78:1e:a7:16:00:31: 85:49:f4:4d:8c:4b:f6:04:90:a8:36:a3:dc:91:7a: 6f:fd:36:f3:60:e1:44:de:88:a3:3d:a6:81:47:15: 55:ca:1f:70:66:84:8d:ce:46:8a:0d:7b:12:87:59: bb:f3:27:58:3d:96:29:09:04:2a:f9:84:38:d7:fc: 16:a7:e7:c8:85:9e:d8:af:fb:26:f9:7d:11:63:e7: a8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F5:20:E2:1A:86:94:9A:74:EB:7D:9E:71:39:FF:B0:50:AF:87:36 X509v3 Authority Key Identifier: keyid:74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:40:80:e4:23:d6:ea:fb:6b:43:3e:83:eb:6c:fd:3d:63:a2: 0e:cc:8c:08:c6:7a:28:8a:20:63:b1:fe:9e:c3:8b:d6:3e:27: 85:f7:6a:eb:2c:b1:29:55:25:3b:24:8a:93:17:f2:59:63:13: 41:fa:03:1f:39:98:3a:f6:8e:69:78:d7:54:d1:1a:29:95:53: 2e:71:34:77:d2:3f:7c:74:6c:67:44:4c:78:a7:98:db:da:09: ca:d0:16:72:0e:9b:7a:ee:63:b7:3a:22:34:38:11:d0:8f:b6: dc:34:04:11:84:74:c4:07:d9:4c:df:c6:f6:8f:15:cc:e0:5a: 34:5b:97:29:a0:8c:93:6c:12:bc:a7:62:ab:d2:0a:d4:3a:f4: 7b:39:c4:ad:81:9b:62:6f:7a:c9:ff:40:06:83:40:86:2d:29: 50:3a:6b:ec:32:f2:d3:ea:c5:56:a5:50:27:b2:d6:3f:3a:a3: f6:c7:80:a1:c4:2c:2f:cf:45:68:76:a4:03:df:1c:1d:53:e8: f0:f8:76:8b:59:7f:bf:ff:3d:0f:be:47:84:48:aa:0b:a2:cd: 70:52:92:45:4b:75:fa:b4:28:15:6e:23:28:c7:e3:3e:d3:97: 8e:d8:06:af:63:88:47:b3:94:40:d2:c6:f4:2d:53:11:9f:81: 81:f8:cc:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsAaRzBBouc/emwyhTua7VDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YTU5YjdmYjRlMDM0ZjY3Nzc1ZjI4NzVlZmJmYzllZmYy NDdlOGUwHhcNMjUxMjA5MDAwMDQ3WhcNMjUxMjEwMDAwMDQ3WjAzMTEwLwYDVQQD EyhiZWY1MjBlMjFhODY5NDlhNzRlYjdkOWU3MTM5ZmZiMDUwYWY4NzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWPYUyj/pNMb0JHATuJtWBT+TorN EGs/iIumYrSsu8+shh+WcQIZRKbCBO2XMdYzcmwE6vwHtKtEeqkFe2Qym29j+iqY 2ZMGbQS93wuCTlM2IWr6DFDUP2z4LbitWyCuO/LNbOxYBnixKWDPFuV5/h1hClAc Y5BHnO48XwKN8mgLvfuFPtv9x0LTMNvS0Y/tgZikZMdTeLq0T1JkXgQ7sqg1V2Tp jSpspd/cBDp4HqcWADGFSfRNjEv2BJCoNqPckXpv/TbzYOFE3oijPaaBRxVVyh9w ZoSNzkaKDXsSh1m78ydYPZYpCQQq+YQ41/wWp+fIhZ7Yr/sm+X0RY+eoOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL71IOIahpSadOt9nnE5/7BQr4c2MB8GA1UdIwQY MBaAFHSlm3+04DT2d3Xyh177/J7/JH6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEtXYmY3VGdOUFozZGZLSFh2djhudjhrZm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yYjE5NWUtMGFiYS00N2Q0LThlM2It YWQzMmVmNDlkNDE5LzEvZEtXYmY3VGdOUFozZGZLSFh2djhudjhrZm80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8yYjE5NWUtMGFiYS00N2Q0LThlM2ItYWQzMmVmNDlkNDE5 LzEvZEtXYmY3VGdOUFozZGZLSFh2djhudjhrZm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0CA5CPW 6vtrQz6D62z9PWOiDsyMCMZ6KIogY7H+nsOL1j4nhfdq6yyxKVUlOySKkxfyWWMT QfoDHzmYOvaOaXjXVNEaKZVTLnE0d9I/fHRsZ0RMeKeY29oJytAWcg6beu5jtzoi NDgR0I+23DQEEYR0xAfZTN/G9o8VzOBaNFuXKaCMk2wSvKdiq9IK1Dr0eznErYGb Ym96yf9ABoNAhi0pUDpr7DLy0+rFVqVQJ7LWPzqj9seAocQsL89FaHakA98cHVPo 8Ph2i1l/v/89D75HhEiqC6LNcFKSRUt1+rQoFW4jKMfjPtOXjtgGr2OIR7OUQNLG 9C1TEZ+BgfjMLg== -----END CERTIFICATE-----Generated at Tue Dec 9 03:09:16 2025 by rpki-client