This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft File: d2pYTSefAHBmo4tesPGOe-22FOs.mft (raw, json) Hash identifier: zyAsPNPWgNr3Y2ld2xe9r2OoXUwGjy/JoWGFBzojxJM= Subject key identifier: 98:00:8F:E3:B5:8B:A7:6B:23:04:B2:21:00:90:39:C7:74:86:1F:8D Authority key identifier: 77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB Certificate issuer: /CN=776a584d279f007066a38b5eb0f18e7bedb614eb Certificate serial: 019AF1D266E7C909C22425583920C3D0DCE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:01:29 +0000 Manifest this update: Sat 06 Dec 2025 04:01:29 +0000 Manifest next update: Sun 07 Dec 2025 04:01:29 +0000 Files and hashes: 1: WUTyK7BrRNi0uHZK_0QCE_Vt8SE.roa (hash: 4x8uT/6JZLvMnikfzpcnGLUs5znzoRWzxY13Odgg+MI=) 2: d2pYTSefAHBmo4tesPGOe-22FOs.crl (hash: xTEEGBd8AlLH5JlQZpV28hFxnPwAotdeYM6353gakEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.crl rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:66:e7:c9:09:c2:24:25:58:39:20:c3:d0:dc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=776a584d279f007066a38b5eb0f18e7bedb614eb Validity Not Before: Dec 6 04:01:29 2025 GMT Not After : Dec 7 04:01:29 2025 GMT Subject: CN=98008fe3b58ba76b2304b221009039c774861f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:61:d9:39:8d:19:dc:ee:6e:93:64:73:1a:d3: ff:59:12:fc:62:d5:b0:59:06:44:5e:63:dd:4a:05: 07:ad:04:03:d5:b2:85:b3:ac:d2:39:14:35:e3:cc: 04:9c:b7:9a:4f:3b:63:74:0c:c6:4e:24:50:40:73: a2:8b:a3:98:26:53:7a:d2:14:60:e7:45:ab:84:d8: b6:3a:4c:18:da:92:eb:9c:cf:02:85:20:8c:95:52: 51:de:7c:f7:2f:b5:43:02:81:a6:91:a4:df:af:32: 9f:9b:f1:ec:30:3e:a1:fd:31:34:f1:e2:5b:06:8e: f9:14:02:0c:5d:d6:a1:8e:81:76:d8:25:68:60:c9: 91:43:7c:df:73:fd:c4:af:46:a7:5f:89:8d:57:79: 74:62:0c:e0:b1:29:0d:72:67:50:50:f0:00:12:a4: a5:18:f0:ea:aa:ad:7c:ac:d2:bc:32:45:65:64:4d: 59:42:2f:4b:e7:7d:ac:77:11:1c:43:d9:b3:ce:6d: 65:39:3d:7e:b6:a8:6d:35:74:92:e7:ae:e0:d6:b2: 0c:53:ce:1d:84:68:95:18:b6:b2:3f:0c:c1:e2:82: 69:7e:41:a2:3c:39:b3:cf:e6:ab:00:17:13:6e:d5: cf:65:ce:2e:9f:09:6f:54:88:1a:09:b8:64:72:93: 70:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:00:8F:E3:B5:8B:A7:6B:23:04:B2:21:00:90:39:C7:74:86:1F:8D X509v3 Authority Key Identifier: keyid:77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ed:10:c8:50:2c:e5:f1:d6:2e:25:c9:56:e7:c3:d3:eb:35: 05:3f:f9:76:eb:c9:9f:c6:5a:89:72:13:f3:0f:18:b4:d0:c6: 24:f6:5a:e2:de:74:3c:ad:20:68:fc:a4:a3:d9:4f:65:89:c6: 8f:7c:1a:8b:a8:26:11:3b:41:d4:0f:9f:9f:7b:c0:f8:ef:2e: 40:fb:5a:5d:37:e5:d8:84:0b:21:6e:98:7b:ef:2e:4c:71:4a: 5c:33:69:66:1e:ca:e9:84:67:49:e9:a8:b2:11:90:70:07:52: 98:71:c4:d8:ef:6c:89:1e:68:12:42:f0:85:8e:5b:21:14:5e: ed:bc:12:54:cb:81:6f:4c:d1:4e:cf:c9:f2:4c:7f:09:98:82: 67:d2:6d:74:e9:81:48:1a:7b:a1:f6:66:75:5a:f5:9d:f7:97: 89:c5:80:3f:0c:a9:b6:87:32:03:72:f0:2a:5a:b1:a5:81:27: 4f:9b:7a:ed:49:f7:05:5d:93:32:5f:27:70:9c:84:01:84:90: 36:ea:63:93:b1:bc:fe:f9:23:eb:11:08:d6:7a:17:aa:a6:2c: 9a:07:27:74:be:f8:5a:75:99:56:7d:72:ac:8c:3f:e7:df:4d: 98:5d:0e:81:f7:80:3b:8f:23:14:0d:94:83:e3:8a:7f:0b:10: c2:46:06:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0mbnyQnCJCVYOSDD0NzgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NmE1ODRkMjc5ZjAwNzA2NmEzOGI1ZWIwZjE4ZTdiZWRi NjE0ZWIwHhcNMjUxMjA2MDQwMTI5WhcNMjUxMjA3MDQwMTI5WjAzMTEwLwYDVQQD Eyg5ODAwOGZlM2I1OGJhNzZiMjMwNGIyMjEwMDkwMzljNzc0ODYxZjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmHZOY0Z3O5uk2RzGtP/WRL8YtWw WQZEXmPdSgUHrQQD1bKFs6zSORQ148wEnLeaTztjdAzGTiRQQHOii6OYJlN60hRg 50WrhNi2OkwY2pLrnM8ChSCMlVJR3nz3L7VDAoGmkaTfrzKfm/HsMD6h/TE08eJb Bo75FAIMXdahjoF22CVoYMmRQ3zfc/3Er0anX4mNV3l0YgzgsSkNcmdQUPAAEqSl GPDqqq18rNK8MkVlZE1ZQi9L532sdxEcQ9mzzm1lOT1+tqhtNXSS567g1rIMU84d hGiVGLayPwzB4oJpfkGiPDmzz+arABcTbtXPZc4unwlvVIgaCbhkcpNwVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgAj+O1i6drIwSyIQCQOcd0hh+NMB8GA1UdIwQY MBaAFHdqWE0nnwBwZqOLXrDxjnvtthTrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDJwWVRTZWZBSEJtbzR0ZXNQR09lLTIyRk9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny83ZTg4NDgtMTA2NS00Mzg2LTgxNTYt Mzg3YzZjNGQ4ZjAyLzEvZDJwWVRTZWZBSEJtbzR0ZXNQR09lLTIyRk9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny83ZTg4NDgtMTA2NS00Mzg2LTgxNTYtMzg3YzZjNGQ4ZjAy LzEvZDJwWVRTZWZBSEJtbzR0ZXNQR09lLTIyRk9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOO0QyFAs 5fHWLiXJVufD0+s1BT/5duvJn8ZaiXIT8w8YtNDGJPZa4t50PK0gaPyko9lPZYnG j3wai6gmETtB1A+fn3vA+O8uQPtaXTfl2IQLIW6Ye+8uTHFKXDNpZh7K6YRnSemo shGQcAdSmHHE2O9siR5oEkLwhY5bIRRe7bwSVMuBb0zRTs/J8kx/CZiCZ9JtdOmB SBp7ofZmdVr1nfeXicWAPwyptocyA3LwKlqxpYEnT5t67Un3BV2TMl8ncJyEAYSQ Nupjk7G8/vkj6xEI1noXqqYsmgcndL74WnWZVn1yrIw/599NmF0OgfeAO48jFA2U g+OKfwsQwkYGgA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:57:04 2025 by rpki-client