This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft File: t_bDO_udlL0PdKc45_FtDp2gw7k.mft (raw, json) Hash identifier: ONUQssSic3NUaH4JdcE4kdV/rkEDCumFWMakP0Pg/Kw= Subject key identifier: C6:16:98:EA:79:42:16:2B:0C:A7:1B:63:C2:B7:22:90:A3:D4:B4:01 Authority key identifier: B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9 Certificate issuer: /CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9 Certificate serial: 019AF31CD856C20C2ED06FEC032392FDDB68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft Manifest number: 1733 Signing time: Sat 06 Dec 2025 10:02:25 +0000 Manifest this update: Sat 06 Dec 2025 10:02:25 +0000 Manifest next update: Sun 07 Dec 2025 10:02:25 +0000 Files and hashes: 1: dQipKZolIhGkhWFJoygF3CDiTvg.roa (hash: +eA96uDNL0C8CyvGH+7b3dtqwE+sSbn83k1fDZzMPtg=) 2: t_bDO_udlL0PdKc45_FtDp2gw7k.crl (hash: oQiZLAvEKZdFh+HET9U6lQX4tnfiXcqxEUm9y7hUL+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:d8:56:c2:0c:2e:d0:6f:ec:03:23:92:fd:db:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9 Validity Not Before: Dec 6 10:02:25 2025 GMT Not After : Dec 7 10:02:25 2025 GMT Subject: CN=c61698ea7942162b0ca71b63c2b72290a3d4b401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3e:53:0b:f9:b5:52:c6:d7:65:8d:7d:8f:92: c2:12:22:53:46:99:f2:c0:58:45:64:08:df:77:2a: 5e:36:ba:76:f0:0c:78:89:e3:f8:83:85:32:09:f5: 8d:23:27:ee:f0:ef:cd:07:f7:c6:d2:9e:6f:8e:13: 2a:5a:b6:09:9a:42:d2:b0:9d:ae:8b:f3:ea:00:47: ef:3e:f8:31:7a:0f:e6:cb:84:3b:17:f5:a9:ab:8a: b9:04:fc:ad:52:24:7f:7a:27:ce:cb:13:4c:55:71: a9:61:42:4b:5c:85:03:af:44:77:08:8a:dd:6c:a4: 99:4e:bf:d9:12:c3:6f:f4:6c:df:39:a9:a0:eb:e4: 5c:0d:ff:a2:c3:86:95:ee:cc:0b:c7:a2:06:47:d2: 25:d6:36:ca:22:01:8f:fd:d1:17:37:62:35:45:d4: 2a:46:0b:d3:89:44:29:b1:07:48:97:9c:21:2d:6d: 55:67:a8:20:93:8d:1b:cc:c3:b2:1b:7a:84:54:fb: 3b:9a:bd:54:21:3a:d3:a8:91:69:ea:46:69:a9:ea: ab:81:4d:9b:88:6c:0b:77:6c:3f:fb:72:94:b7:ab: 3c:6a:68:58:2b:78:96:11:2c:a0:82:79:73:a1:fb: 30:9b:fe:40:ca:87:b1:6f:7e:b0:a3:13:b8:20:79: e4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:16:98:EA:79:42:16:2B:0C:A7:1B:63:C2:B7:22:90:A3:D4:B4:01 X509v3 Authority Key Identifier: keyid:B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:2d:fd:87:cb:65:40:d5:10:d7:91:b8:ab:7e:75:db:d8:60: 8b:d0:f8:28:ba:c0:2e:9e:0e:da:48:df:50:b6:1f:88:24:2d: 6e:30:cf:be:9f:a3:65:fd:bb:56:e7:82:3f:4e:12:bc:06:28: c1:72:69:b7:84:f4:51:2d:dd:ad:16:5b:df:09:34:f1:a7:74: 16:5f:00:3e:ba:8b:c6:4a:0d:25:c7:69:a5:4f:3f:9c:3b:fa: f9:c4:7f:57:25:b5:49:10:e0:76:b9:62:7b:a5:ad:b4:12:f5: 8e:6d:72:24:c4:83:6e:76:a2:21:72:78:3a:91:a2:1e:1c:e9: fc:06:99:b9:cc:02:d3:83:75:93:ec:3a:9d:69:b4:f3:0e:58: fa:54:01:5b:cf:17:b8:b8:04:1d:70:6b:da:ab:a2:7e:46:55: a3:10:73:f7:c1:7d:9d:35:1c:56:9c:e2:1d:94:e2:cd:34:66: 15:22:0d:c0:61:cf:56:ea:32:90:ec:82:d2:77:44:e2:68:fd: 76:ad:2f:a2:86:81:e3:c6:7b:0a:13:42:0d:31:06:4c:4f:3b: 30:b5:38:72:3b:eb:c0:45:8f:e8:7c:10:d2:8c:6d:e7:b9:5b: e8:62:be:38:d5:db:ce:4e:75:d3:42:e2:6a:30:11:5a:71:57: 3f:45:71:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHNhWwgwu0G/sAyOS/dtoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ZjZjMzNiZmI5ZDk0YmQwZjc0YTczOGU3ZjE2ZDBlOWRh MGMzYjkwHhcNMjUxMjA2MTAwMjI1WhcNMjUxMjA3MTAwMjI1WjAzMTEwLwYDVQQD EyhjNjE2OThlYTc5NDIxNjJiMGNhNzFiNjNjMmI3MjI5MGEzZDRiNDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T5TC/m1UsbXZY19j5LCEiJTRpny wFhFZAjfdypeNrp28Ax4ieP4g4UyCfWNIyfu8O/NB/fG0p5vjhMqWrYJmkLSsJ2u i/PqAEfvPvgxeg/my4Q7F/Wpq4q5BPytUiR/eifOyxNMVXGpYUJLXIUDr0R3CIrd bKSZTr/ZEsNv9GzfOamg6+RcDf+iw4aV7swLx6IGR9Il1jbKIgGP/dEXN2I1RdQq RgvTiUQpsQdIl5whLW1VZ6ggk40bzMOyG3qEVPs7mr1UITrTqJFp6kZpqeqrgU2b iGwLd2w/+3KUt6s8amhYK3iWESyggnlzofswm/5Ayoexb36woxO4IHnkSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYWmOp5QhYrDKcbY8K3IpCj1LQBMB8GA1UdIwQY MBaAFLf2wzv7nZS9D3SnOOfxbQ6doMO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdF9iRE9fdWRsTDBQZEtjNDVfRnREcDJndzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNGQ5MDMtNWJhYS00MzQxLTkzOTIt YTNlNDgxZmI1MWI5LzEvdF9iRE9fdWRsTDBQZEtjNDVfRnREcDJndzdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNGQ5MDMtNWJhYS00MzQxLTkzOTItYTNlNDgxZmI1MWI5 LzEvdF9iRE9fdWRsTDBQZEtjNDVfRnREcDJndzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdC39h8tl QNUQ15G4q35129hgi9D4KLrALp4O2kjfULYfiCQtbjDPvp+jZf27VueCP04SvAYo wXJpt4T0US3drRZb3wk08ad0Fl8APrqLxkoNJcdppU8/nDv6+cR/VyW1SRDgdrli e6WttBL1jm1yJMSDbnaiIXJ4OpGiHhzp/AaZucwC04N1k+w6nWm08w5Y+lQBW88X uLgEHXBr2quifkZVoxBz98F9nTUcVpziHZTizTRmFSINwGHPVuoykOyC0ndE4mj9 dq0vooaB48Z7ChNCDTEGTE87MLU4cjvrwEWP6HwQ0oxt57lb6GK+ONXbzk5100Li ajARWnFXP0VxSg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:50 2025 by rpki-client