This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft File: dfUobuOFWb3Zicdk9aZHQ0ewO28.mft (raw, json) Hash identifier: 68n9rWPk057j1mbyVbmlGDzont+S2DF+bipPgdFi9t0= Subject key identifier: 76:9B:1E:D5:8E:85:A3:38:01:A1:6B:4F:55:98:F2:B4:14:F2:02:E8 Authority key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F Certificate issuer: /CN=75f5286ee38559bdd989c764f5a6474347b03b6f Certificate serial: 019AF9553FA8C6DFB08CE4E7A150F88E3E26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft Manifest number: A2 Signing time: Sun 07 Dec 2025 15:01:44 +0000 Manifest this update: Sun 07 Dec 2025 15:01:44 +0000 Manifest next update: Mon 08 Dec 2025 15:01:44 +0000 Files and hashes: 1: KcL9v8r1ilJRcQB0ccfbEYTCJtg.roa (hash: rlzaxnEOZCErQdw9cvJ2yLX/BKeb6IB9wJmrnWDfV8E=) 2: dfUobuOFWb3Zicdk9aZHQ0ewO28.crl (hash: YwS/taPP3WTctgJFJeJHqMf6oa3YojfzJZUJYWzVWlY=) 3: oLz2eFbmpRFR5A5oj9_IzGOfqTg.roa (hash: K42AQKk/5JQbpER6nQEE4PNnPHJ5tbcZAd8Cz+zivrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:55:3f:a8:c6:df:b0:8c:e4:e7:a1:50:f8:8e:3e:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75f5286ee38559bdd989c764f5a6474347b03b6f Validity Not Before: Dec 7 15:01:44 2025 GMT Not After : Dec 8 15:01:44 2025 GMT Subject: CN=769b1ed58e85a33801a16b4f5598f2b414f202e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5e:58:98:eb:30:ab:3c:31:69:95:8c:ed:62: 07:71:95:44:ed:03:b9:48:25:59:01:40:3e:7c:bf: 72:51:5e:c7:1b:8b:54:80:c6:33:fc:fb:fa:81:cc: 30:06:af:f9:f3:bd:d0:31:0c:f4:d1:79:e0:c2:a8: 06:1a:b8:74:85:84:59:f4:cd:a4:84:a7:74:22:69: cb:b9:c8:c2:be:61:0d:ce:22:f9:9c:45:e5:df:5b: 4e:a7:28:b5:fa:ab:ce:45:47:a8:9a:5c:ca:0d:32: df:5b:d1:19:38:01:de:bb:0b:f9:f4:68:1d:7e:fd: dd:14:43:10:96:02:59:5b:f7:4b:3a:b1:72:c9:aa: 2d:d6:55:f5:b1:c1:6e:ab:b5:a5:c4:26:4b:20:94: 6f:72:ca:13:79:68:c0:56:8f:10:76:43:83:86:cb: 78:82:2f:d8:51:72:e0:68:68:a6:0e:ca:22:7c:9c: 58:89:50:2e:1c:2b:fb:20:b7:0d:c2:d1:35:7e:1f: b2:5d:cc:01:d1:7a:e4:21:d5:bf:20:31:f2:b2:d5: 6c:d4:bc:62:c6:bf:0c:ba:ec:55:28:33:4f:6e:01: 22:a1:1f:14:6f:7c:7b:67:6f:58:bb:c2:67:4f:57: 99:61:f1:44:c7:4b:07:a2:1b:56:ac:a9:f7:88:19: 42:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9B:1E:D5:8E:85:A3:38:01:A1:6B:4F:55:98:F2:B4:14:F2:02:E8 X509v3 Authority Key Identifier: keyid:75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:cc:36:3a:df:7c:5f:d5:73:8b:ee:55:88:cd:2b:f3:2b:1c: 94:d2:51:c0:f7:d5:45:dc:80:5e:bc:d6:43:3f:19:4f:89:24: 1b:e2:a6:b6:11:db:79:ba:a8:94:c3:f5:b1:a0:cc:9e:d7:8c: b5:3a:5e:da:ba:6f:11:b2:7c:90:10:f5:a1:78:00:dd:51:43: 7a:15:61:aa:b3:35:72:f7:22:e3:08:1c:7a:06:fa:2c:6b:76: 84:a0:3e:5a:f4:8b:02:46:66:9d:ca:9f:e2:8a:8c:c9:69:8a: e0:58:f8:26:f1:bc:b3:75:bd:ec:a2:ce:98:94:c0:b5:6e:df: 19:65:f9:f0:3b:71:08:42:fa:28:45:13:c2:48:75:41:47:b8: 77:fd:26:a9:c5:ad:68:1a:e9:03:a0:66:45:98:3f:29:87:b9: 25:c7:07:20:57:56:fa:0b:bf:1e:03:1d:2a:c3:ae:78:4b:9f: fe:1c:94:3c:6f:9e:11:2d:27:e1:e6:c1:f2:00:c2:ee:ed:2e: fd:4e:d8:fa:62:4d:8d:23:7e:5a:90:a9:cf:97:32:c3:6d:36: d9:33:a7:98:bd:ca:ee:48:6a:0c:f3:58:b0:b5:75:1a:d7:1c: f6:6a:d0:b6:ab:45:20:71:1c:4f:58:c2:8e:05:e4:28:c6:9f: 03:ab:27:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5VT+oxt+wjOTnoVD4jj4mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZjUyODZlZTM4NTU5YmRkOTg5Yzc2NGY1YTY0NzQzNDdi MDNiNmYwHhcNMjUxMjA3MTUwMTQ0WhcNMjUxMjA4MTUwMTQ0WjAzMTEwLwYDVQQD Eyg3NjliMWVkNThlODVhMzM4MDFhMTZiNGY1NTk4ZjJiNDE0ZjIwMmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs15YmOswqzwxaZWM7WIHcZVE7QO5 SCVZAUA+fL9yUV7HG4tUgMYz/Pv6gcwwBq/5873QMQz00XngwqgGGrh0hYRZ9M2k hKd0ImnLucjCvmENziL5nEXl31tOpyi1+qvORUeomlzKDTLfW9EZOAHeuwv59Ggd fv3dFEMQlgJZW/dLOrFyyaot1lX1scFuq7WlxCZLIJRvcsoTeWjAVo8QdkODhst4 gi/YUXLgaGimDsoifJxYiVAuHCv7ILcNwtE1fh+yXcwB0XrkIdW/IDHystVs1Lxi xr8MuuxVKDNPbgEioR8Ub3x7Z29Yu8JnT1eZYfFEx0sHohtWrKn3iBlCeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHabHtWOhaM4AaFrT1WY8rQU8gLoMB8GA1UdIwQY MBaAFHX1KG7jhVm92YnHZPWmR0NHsDtvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGZVb2J1T0ZXYjNaaWNkazlhWkhRMGV3TzI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yOWJmNjEtZmRjOC00OWU2LTg0ZDkt MDM4NTM0OWZmMWU4LzEvZGZVb2J1T0ZXYjNaaWNkazlhWkhRMGV3TzI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8yOWJmNjEtZmRjOC00OWU2LTg0ZDktMDM4NTM0OWZmMWU4 LzEvZGZVb2J1T0ZXYjNaaWNkazlhWkhRMGV3TzI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMw2Ot98 X9Vzi+5ViM0r8ysclNJRwPfVRdyAXrzWQz8ZT4kkG+KmthHbebqolMP1saDMnteM tTpe2rpvEbJ8kBD1oXgA3VFDehVhqrM1cvci4wgcegb6LGt2hKA+WvSLAkZmncqf 4oqMyWmK4Fj4JvG8s3W97KLOmJTAtW7fGWX58DtxCEL6KEUTwkh1QUe4d/0mqcWt aBrpA6BmRZg/KYe5JccHIFdW+gu/HgMdKsOueEuf/hyUPG+eES0n4ebB8gDC7u0u /U7Y+mJNjSN+WpCpz5cyw2022TOnmL3K7khqDPNYsLV1Gtcc9mrQtqtFIHEcT1jC jgXkKMafA6sn1g== -----END CERTIFICATE-----Generated at Sun Dec 7 18:28:59 2025 by rpki-client