This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft File: Dx1bnYi1edDd98Ics9OH1h6lFsE.mft (raw, json) Hash identifier: tL6VUJW1FoWw/H3sLaBtQFpgfdKzBVfGQYR+5wx5oEk= Subject key identifier: 3B:D8:47:A9:E5:4D:A5:90:6B:1A:09:08:C2:3F:A5:3F:35:CE:18:31 Authority key identifier: 0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1 Certificate issuer: /CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1 Certificate serial: 019AF464C169AAE1308DC28B561713B17FBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 16:00:34 +0000 Manifest this update: Sat 06 Dec 2025 16:00:34 +0000 Manifest next update: Sun 07 Dec 2025 16:00:34 +0000 Files and hashes: 1: Dx1bnYi1edDd98Ics9OH1h6lFsE.crl (hash: KjPlJoY32VmcRnp//sG/qpgZxN94CaOWhFre+46233c=) 2: v4JI5sgw_p3rivCunMet_POOF2w.roa (hash: HrxRsSTft3bYHQ8KkRnRYehAe6cSQ1K0zkkE09H7dNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:c1:69:aa:e1:30:8d:c2:8b:56:17:13:b1:7f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1 Validity Not Before: Dec 6 16:00:34 2025 GMT Not After : Dec 7 16:00:34 2025 GMT Subject: CN=3bd847a9e54da5906b1a0908c23fa53f35ce1831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:27:ef:9e:32:68:84:e0:41:c3:c7:9a:ca:79: ed:14:f2:98:5a:9a:97:26:b1:77:b8:c3:79:02:2c: 95:fa:0c:25:4a:b7:3e:40:f5:06:89:57:4d:74:12: 5b:39:8e:26:20:8a:7e:bd:1b:b4:f2:00:d0:2c:95: 5f:7f:64:f3:e4:88:68:7a:c4:d2:35:eb:91:16:69: b5:7d:aa:50:1a:c9:e4:c1:3a:05:9c:85:d8:da:05: 32:ed:7d:c3:47:b8:c9:ad:2e:53:3f:58:5b:df:c3: c6:a5:ea:73:7f:fc:07:84:a6:4a:58:25:bb:23:b6: 44:5f:57:be:2d:e5:4c:e8:84:7a:93:01:21:8a:eb: 69:42:af:2a:8f:2d:6f:c3:69:ac:f5:bb:a8:1c:4c: de:90:18:c1:b8:a2:5f:d0:21:fd:fb:da:fa:e2:87: 5a:15:46:ae:cd:48:09:ac:49:76:01:1d:d8:32:6a: 53:84:db:39:56:e5:09:65:43:74:dd:da:ec:d6:13: ac:b6:92:bf:78:80:3a:0d:ec:03:d2:dc:8e:23:b2: 9d:8c:38:37:c0:fb:da:58:33:c3:a8:f9:da:f1:f2: b8:0b:79:26:2d:50:97:4e:57:94:c1:1c:a6:f9:f5: 56:65:b7:ef:19:9e:bf:50:67:fa:8a:23:a4:2f:fe: 4b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D8:47:A9:E5:4D:A5:90:6B:1A:09:08:C2:3F:A5:3F:35:CE:18:31 X509v3 Authority Key Identifier: keyid:0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:76:55:d1:aa:14:12:7a:24:00:12:d4:9f:50:be:e5:62:5e: 43:2d:50:bc:a6:9e:b7:da:af:fd:05:21:e9:86:03:89:19:38: 13:d0:ef:f8:11:a9:f0:0d:be:f2:1c:55:3d:27:c3:e7:0f:8b: 59:ab:70:14:5c:b4:68:8f:fe:3e:7b:ec:46:7e:81:80:48:55: d5:94:86:c8:d0:82:76:72:32:dd:45:fe:22:c7:51:f0:77:8d: fa:0e:85:10:d0:37:7c:82:1b:ed:9f:94:02:1c:b3:d7:ab:9b: 8e:6a:a4:b1:03:c0:9a:c7:1c:94:49:49:d4:0d:c6:1e:45:1c: 1a:20:37:a7:f4:d8:b2:4a:a1:6d:5b:53:ac:2f:ec:cf:64:50: c7:38:2d:b9:58:c5:68:9d:ae:75:20:ad:34:9d:86:07:0e:fa: 9b:d9:58:29:bf:10:f2:cd:31:91:bb:83:3c:fd:3a:b5:f4:4e: 38:08:1b:16:e4:14:51:54:73:65:e2:2b:2e:53:3d:67:2d:3a: 56:19:7e:79:be:13:9a:78:4b:2e:ae:21:31:d3:77:ab:4b:c4: 17:4e:a6:99:b8:67:2b:0b:96:6b:58:27:9c:7e:ed:64:6f:2e: 7d:79:4b:22:0c:02:c5:8d:80:81:ed:e2:83:23:d7:20:e4:95: ef:48:10:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZMFpquEwjcKLVhcTsX+/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMWQ1YjlkODhiNTc5ZDBkZGY3YzIxY2IzZDM4N2Q2MWVh NTE2YzEwHhcNMjUxMjA2MTYwMDM0WhcNMjUxMjA3MTYwMDM0WjAzMTEwLwYDVQQD EygzYmQ4NDdhOWU1NGRhNTkwNmIxYTA5MDhjMjNmYTUzZjM1Y2UxODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyfvnjJohOBBw8eaynntFPKYWpqX JrF3uMN5AiyV+gwlSrc+QPUGiVdNdBJbOY4mIIp+vRu08gDQLJVff2Tz5IhoesTS NeuRFmm1fapQGsnkwToFnIXY2gUy7X3DR7jJrS5TP1hb38PGpepzf/wHhKZKWCW7 I7ZEX1e+LeVM6IR6kwEhiutpQq8qjy1vw2ms9buoHEzekBjBuKJf0CH9+9r64oda FUauzUgJrEl2AR3YMmpThNs5VuUJZUN03drs1hOstpK/eIA6DewD0tyOI7KdjDg3 wPvaWDPDqPna8fK4C3kmLVCXTleUwRym+fVWZbfvGZ6/UGf6iiOkL/5LSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvYR6nlTaWQaxoJCMI/pT81zhgxMB8GA1UdIwQY MBaAFA8dW52ItXnQ3ffCHLPTh9YepRbBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHgxYm5ZaTFlZERkOThJY3M5T0gxaDZsRnNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85MDk5NzUtNGU4Ni00NDc4LWI4MWUt NzJkZjZmZWRkNzQ4LzEvRHgxYm5ZaTFlZERkOThJY3M5T0gxaDZsRnNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC85MDk5NzUtNGU4Ni00NDc4LWI4MWUtNzJkZjZmZWRkNzQ4 LzEvRHgxYm5ZaTFlZERkOThJY3M5T0gxaDZsRnNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHZV0aoU EnokABLUn1C+5WJeQy1QvKaet9qv/QUh6YYDiRk4E9Dv+BGp8A2+8hxVPSfD5w+L WatwFFy0aI/+PnvsRn6BgEhV1ZSGyNCCdnIy3UX+IsdR8HeN+g6FENA3fIIb7Z+U Ahyz16ubjmqksQPAmscclElJ1A3GHkUcGiA3p/TYskqhbVtTrC/sz2RQxzgtuVjF aJ2udSCtNJ2GBw76m9lYKb8Q8s0xkbuDPP06tfROOAgbFuQUUVRzZeIrLlM9Zy06 Vhl+eb4TmnhLLq4hMdN3q0vEF06mmbhnKwuWa1gnnH7tZG8ufXlLIgwCxY2Age3i gyPXIOSV70gQWA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:54 2025 by rpki-client