This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft File: dVebPdiwkr6Q2p90gOp2HpzSZIY.mft (raw, json) Hash identifier: 4CjYDnjfAMDS0Vo8ejNkVNmn/ZTJ6Zz6WRCA91CvzuI= Subject key identifier: 2C:23:14:9F:7E:70:C5:65:6B:21:F2:50:5F:95:62:E1:01:DE:9D:EF Authority key identifier: 75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86 Certificate issuer: /CN=75579b3dd8b092be90da9f7480ea761e9cd26486 Certificate serial: 019AF3C01DA0C1F103F10F8D192B42328F3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 13:00:45 +0000 Manifest this update: Sat 06 Dec 2025 13:00:45 +0000 Manifest next update: Sun 07 Dec 2025 13:00:45 +0000 Files and hashes: 1: _q_4z0J5i384UaXDQJYWs6HPoTM.roa (hash: b9Q87HIqk0+LBterNnXAl95RMpu5d8FMkhgmGh/3VlI=) 2: dVebPdiwkr6Q2p90gOp2HpzSZIY.crl (hash: J7xUqbS8NT1Rwm4bJQftlPX/IjgeW/DemPorqG4rEZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.crl rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:1d:a0:c1:f1:03:f1:0f:8d:19:2b:42:32:8f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75579b3dd8b092be90da9f7480ea761e9cd26486 Validity Not Before: Dec 6 13:00:45 2025 GMT Not After : Dec 7 13:00:45 2025 GMT Subject: CN=2c23149f7e70c5656b21f2505f9562e101de9def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1c:45:ae:44:26:4f:0a:0f:48:87:bd:ed:bd: 6b:25:a9:ee:3b:d5:18:b1:cd:55:d8:91:87:ee:ad: 84:ad:55:b2:30:80:d8:06:59:7c:ae:96:dc:e4:e0: 77:73:5c:93:e2:47:6c:a2:8d:74:c1:5e:8b:3f:38: 46:f3:a4:62:53:e8:47:0d:44:fa:37:d5:cf:fd:31: 9b:67:4b:aa:86:da:79:0e:43:4e:ef:e0:7f:16:09: aa:4d:0d:c8:0c:d2:b3:bb:e7:f5:75:64:2a:e9:2b: b0:cd:87:db:7c:96:0c:26:4c:71:be:e1:d4:88:8a: ac:d9:d1:24:bc:50:8c:15:66:85:dc:4a:2a:ef:a4: b9:d9:e8:50:8b:fb:72:54:14:24:41:b6:a7:bc:9a: 74:8a:51:21:2d:75:0f:50:d7:b3:32:d9:5a:d7:42: 55:03:2c:32:19:3a:34:8b:ac:1d:98:5c:e3:1f:bd: fe:22:73:6f:b6:76:1a:70:26:a5:70:b7:93:2f:fa: 99:b8:31:22:5c:6a:24:5a:51:1c:41:6f:5f:fd:66: c4:64:30:82:35:e5:5e:0a:e0:a3:f8:8f:da:06:1f: 74:e9:4e:1a:f8:45:6e:58:ff:d1:f6:1f:9a:67:b9: 69:b0:80:b2:0c:69:21:32:63:41:1f:dc:fb:50:48: 93:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:23:14:9F:7E:70:C5:65:6B:21:F2:50:5F:95:62:E1:01:DE:9D:EF X509v3 Authority Key Identifier: keyid:75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:88:aa:42:48:32:bf:86:83:86:be:12:a5:08:08:24:85:23: 7c:38:17:69:91:28:ca:e1:3f:b9:24:58:ca:89:af:21:30:4b: 0e:3b:9f:d3:74:7f:cc:bc:59:88:1a:4d:23:0a:69:a9:a9:78: ae:c2:92:4b:ca:2c:46:03:82:be:ea:41:c2:0f:eb:91:2b:b6: 4b:dc:eb:80:dc:f0:be:79:7e:c8:b8:07:fd:63:9e:6b:71:09: e7:32:4f:a2:43:a6:24:dc:13:32:c2:f0:46:45:b4:08:1e:51: 5d:0d:ff:e3:a1:af:94:98:54:15:a7:7a:f1:50:08:84:44:e1: f3:6c:2d:16:68:4c:4f:10:7d:97:de:01:d4:02:ce:ef:fd:87: 87:d9:f1:1d:ca:ce:b4:ba:e9:0b:fc:fb:d1:4a:82:19:42:d2: a0:99:84:00:3a:ec:c8:c7:a4:87:3d:6d:d0:80:33:53:4e:71: f7:a1:7e:75:a8:c1:51:70:c1:34:d7:d0:04:43:f9:de:8d:d2: 65:d5:d6:5c:0a:0b:b1:c7:b8:84:88:4a:dd:e3:d7:fa:df:4e: 34:75:33:ab:ae:93:d8:07:23:7d:99:89:1c:ba:ac:7b:56:39: 35:c4:ee:01:7e:a4:b2:e0:aa:c0:80:c8:73:85:6c:37:67:6d: 53:0b:9a:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwB2gwfED8Q+NGStCMo8+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTc5YjNkZDhiMDkyYmU5MGRhOWY3NDgwZWE3NjFlOWNk MjY0ODYwHhcNMjUxMjA2MTMwMDQ1WhcNMjUxMjA3MTMwMDQ1WjAzMTEwLwYDVQQD EygyYzIzMTQ5ZjdlNzBjNTY1NmIyMWYyNTA1Zjk1NjJlMTAxZGU5ZGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RxFrkQmTwoPSIe97b1rJanuO9UY sc1V2JGH7q2ErVWyMIDYBll8rpbc5OB3c1yT4kdsoo10wV6LPzhG86RiU+hHDUT6 N9XP/TGbZ0uqhtp5DkNO7+B/FgmqTQ3IDNKzu+f1dWQq6SuwzYfbfJYMJkxxvuHU iIqs2dEkvFCMFWaF3Eoq76S52ehQi/tyVBQkQbanvJp0ilEhLXUPUNezMtla10JV AywyGTo0i6wdmFzjH73+InNvtnYacCalcLeTL/qZuDEiXGokWlEcQW9f/WbEZDCC NeVeCuCj+I/aBh906U4a+EVuWP/R9h+aZ7lpsICyDGkhMmNBH9z7UEiTVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwjFJ9+cMVlayHyUF+VYuEB3p3vMB8GA1UdIwQY MBaAFHVXmz3YsJK+kNqfdIDqdh6c0mSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZlYlBkaXdrcjZRMnA5MGdPcDJIcHpTWklZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82Y2MyOTctMTA1Yi00MjVjLWI5ODMt OTU2MzMwMTcwNjcwLzEvZFZlYlBkaXdrcjZRMnA5MGdPcDJIcHpTWklZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS82Y2MyOTctMTA1Yi00MjVjLWI5ODMtOTU2MzMwMTcwNjcw LzEvZFZlYlBkaXdrcjZRMnA5MGdPcDJIcHpTWklZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4iqQkgy v4aDhr4SpQgIJIUjfDgXaZEoyuE/uSRYyomvITBLDjuf03R/zLxZiBpNIwppqal4 rsKSS8osRgOCvupBwg/rkSu2S9zrgNzwvnl+yLgH/WOea3EJ5zJPokOmJNwTMsLw RkW0CB5RXQ3/46GvlJhUFad68VAIhETh82wtFmhMTxB9l94B1ALO7/2Hh9nxHcrO tLrpC/z70UqCGULSoJmEADrsyMekhz1t0IAzU05x96F+dajBUXDBNNfQBEP53o3S ZdXWXAoLsce4hIhK3ePX+t9ONHUzq66T2AcjfZmJHLqse1Y5NcTuAX6ksuCqwIDI c4VsN2dtUwuaRg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:53:48 2025 by rpki-client