This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft File: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft (raw, json) Hash identifier: mmePfQBz3Fj+S4JMMtnx8GFV2UlnUxXOCP7k8+Q8Odk= Subject key identifier: B7:6A:EE:63:34:22:47:14:5A:D2:E7:19:39:BC:1E:2B:9A:93:EC:80 Authority key identifier: 75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E Certificate issuer: /CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e Certificate serial: 019AF50B47ABB504884CB2283E60FC687ADE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 19:02:28 +0000 Manifest this update: Sat 06 Dec 2025 19:02:28 +0000 Manifest next update: Sun 07 Dec 2025 19:02:28 +0000 Files and hashes: 1: 1-TOVnm2gd04tI-uLivEABR6Pazo.roa (hash: QVp2c0LkMSwloi3MOMCG1fyuxaPczwJ3tn0nHSxmhjE=) 2: HgA_tKLG5N3ASR5gcHl20EupVRE.roa (hash: DRYtmqvkH/s26hespCVF8HpGzgqR1cL88tvUFROmz9s=) 3: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl (hash: xGCrnTsmzeqGOY3edAt5sTeii8nd3x98NMvgnt/JPNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:47:ab:b5:04:88:4c:b2:28:3e:60:fc:68:7a:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e Validity Not Before: Dec 6 19:02:28 2025 GMT Not After : Dec 7 19:02:28 2025 GMT Subject: CN=b76aee63342247145ad2e71939bc1e2b9a93ec80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b8:70:30:40:19:6a:41:c6:c8:4b:42:e4:6e: 74:4f:0b:61:a5:3a:98:ce:c4:6d:f8:e5:c5:b2:21: 41:89:ea:81:85:85:04:2d:b5:82:4c:09:f2:70:5c: 4e:be:a1:ba:1b:09:3a:f0:7e:2b:8d:09:48:fb:d9: 99:b1:e7:df:66:d2:ca:b1:f4:2b:18:2e:a3:ee:e1: ef:0f:db:b5:59:17:c9:00:f9:af:53:1a:11:81:71: bd:b2:45:fe:b3:a3:2c:66:e7:dd:57:0c:60:13:6b: 6c:0c:79:4d:15:3c:41:98:ae:35:74:54:93:21:b1: 2b:ea:d0:99:b2:cb:1c:18:d4:4c:29:68:6d:be:2b: 52:6f:ff:ce:71:1b:81:38:30:14:e3:23:48:ec:b4: 3c:25:ad:f3:5b:3c:b4:79:7a:f6:b9:39:8b:3c:2b: 05:dd:2d:f6:e3:80:ac:01:fb:3f:64:de:b8:4b:f7: 43:90:6d:df:cf:d7:78:8d:84:c9:af:8d:2e:e0:eb: 21:e0:33:0c:95:05:f9:68:e4:e7:7c:0f:2e:17:ae: 5f:8f:b3:f8:b8:c1:5c:6a:30:45:a4:11:6e:42:05: 56:53:71:cd:55:51:dd:ab:68:42:c1:7e:58:c0:d6: 35:26:e0:e9:84:a3:06:3a:51:02:44:f9:29:ea:ac: 80:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6A:EE:63:34:22:47:14:5A:D2:E7:19:39:BC:1E:2B:9A:93:EC:80 X509v3 Authority Key Identifier: keyid:75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:71:65:38:a5:bb:5f:92:89:f3:9b:35:90:c5:8c:4b:cf:f8: 9a:86:a4:6f:e2:ca:9a:3b:5f:61:85:9e:07:9f:47:a7:32:b2: be:30:ca:ae:43:e3:53:61:77:fe:ff:f6:a7:82:f0:0e:81:53: c2:bb:41:4f:04:31:fa:15:76:e8:da:48:71:01:45:91:97:43: f2:51:8e:86:dc:01:c8:bc:d5:e6:86:cf:9b:c3:29:34:b0:aa: 59:e9:0f:8d:1a:05:43:ad:ce:14:0a:c4:c6:93:d4:ba:2e:d8: 8d:a5:dd:7a:82:9d:f2:99:90:6a:e8:33:47:c9:52:7f:6d:52: 24:8b:5c:ba:e9:2c:96:ee:0f:01:6f:f9:56:fa:c2:c4:55:7e: 48:90:5f:c2:09:13:ed:33:b7:31:73:27:09:8d:a6:80:16:63: d1:17:ca:19:3f:1b:65:6b:c6:92:1c:a4:73:bb:27:c4:cc:1a: 17:c9:a8:1b:c0:52:59:7b:68:b1:7a:bd:d6:28:ec:0e:1b:3a: d0:62:14:55:e5:24:d3:0a:28:40:89:81:4e:56:b2:aa:4d:73: 10:9d:90:7d:ac:72:5e:ce:e8:b8:93:3a:4d:02:db:68:8b:26: a9:13:09:52:4d:ca:45:2f:da:e4:da:9e:08:90:96:56:40:b1: dd:d2:fe:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C0ertQSITLIoPmD8aHreMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MmIwZDcyYmYwNzQzYmYyY2RjNzhiYTFmNTNlOWE5ODhm OWFmMWUwHhcNMjUxMjA2MTkwMjI4WhcNMjUxMjA3MTkwMjI4WjAzMTEwLwYDVQQD EyhiNzZhZWU2MzM0MjI0NzE0NWFkMmU3MTkzOWJjMWUyYjlhOTNlYzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrhwMEAZakHGyEtC5G50TwthpTqY zsRt+OXFsiFBieqBhYUELbWCTAnycFxOvqG6Gwk68H4rjQlI+9mZseffZtLKsfQr GC6j7uHvD9u1WRfJAPmvUxoRgXG9skX+s6MsZufdVwxgE2tsDHlNFTxBmK41dFST IbEr6tCZssscGNRMKWhtvitSb//OcRuBODAU4yNI7LQ8Ja3zWzy0eXr2uTmLPCsF 3S3244CsAfs/ZN64S/dDkG3fz9d4jYTJr40u4Osh4DMMlQX5aOTnfA8uF65fj7P4 uMFcajBFpBFuQgVWU3HNVVHdq2hCwX5YwNY1JuDphKMGOlECRPkp6qyAawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLdq7mM0IkcUWtLnGTm8Hiuak+yAMB8GA1UdIwQY MBaAFHUrDXK/B0O/LNx4uh9T6amI+a8eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFNzTmNyOEhRNzhzM0hpNkgxUHBxWWo1cng0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zYWJhN2UtMWQ1MC00NzJmLThkYjct NjkxMjE5MjEzNGU5LzEvZFNzTmNyOEhRNzhzM0hpNkgxUHBxWWo1cng0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8zYWJhN2UtMWQ1MC00NzJmLThkYjctNjkxMjE5MjEzNGU5 LzEvZFNzTmNyOEhRNzhzM0hpNkgxUHBxWWo1cng0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXFlOKW7 X5KJ85s1kMWMS8/4moakb+LKmjtfYYWeB59HpzKyvjDKrkPjU2F3/v/2p4LwDoFT wrtBTwQx+hV26NpIcQFFkZdD8lGOhtwByLzV5obPm8MpNLCqWekPjRoFQ63OFArE xpPUui7YjaXdeoKd8pmQaugzR8lSf21SJItcuukslu4PAW/5VvrCxFV+SJBfwgkT 7TO3MXMnCY2mgBZj0RfKGT8bZWvGkhykc7snxMwaF8moG8BSWXtosXq91ijsDhs6 0GIUVeUk0wooQImBTlayqk1zEJ2QfaxyXs7ouJM6TQLbaIsmqRMJUk3KRS/a5Nqe CJCWVkCx3dL+kQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:54 2025 by rpki-client