This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft File: dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft (raw, json) Hash identifier: MZMcXkE347yONCDOiKYAGWe2WUgQXGCmYcLO4oHXjEs= Subject key identifier: 60:5A:BB:F4:79:EE:98:1A:68:EC:78:66:D8:20:20:3F:79:26:44:62 Authority key identifier: 75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D Certificate issuer: /CN=75535bade37a3d6fc380442a285e157b984ca91d Certificate serial: 019AF20971C1989097F487B8AC6356F3C461 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 05:01:36 +0000 Manifest this update: Sat 06 Dec 2025 05:01:36 +0000 Manifest next update: Sun 07 Dec 2025 05:01:36 +0000 Files and hashes: 1: 3DXXEnpw8Kq8exXKbL27_UtPX4M.roa (hash: PH+r8FXGuNWkdvccxwTfvbjUFdbtdPYMtKDMmyDHBUw=) 2: dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl (hash: ll50offuTuEyV9p6o0F1Soq94rdtWSHE4oabJnCdXYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:71:c1:98:90:97:f4:87:b8:ac:63:56:f3:c4:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75535bade37a3d6fc380442a285e157b984ca91d Validity Not Before: Dec 6 05:01:36 2025 GMT Not After : Dec 7 05:01:36 2025 GMT Subject: CN=605abbf479ee981a68ec7866d820203f79264462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:2a:66:3a:80:57:01:fa:15:59:2c:67:1a:6c: 07:2d:c2:d1:ed:24:f4:56:4d:b6:9e:b5:2f:08:ff: b4:3a:7c:d3:c4:d1:b1:f9:f0:ed:52:28:b1:d9:58: 5b:a4:77:05:83:c8:37:02:a4:05:8a:1f:e5:4a:e2: 6f:5a:a7:ca:d7:b9:1a:d3:64:05:d1:6c:20:f5:11: 81:18:6f:3b:86:d5:cc:73:8c:a8:90:a0:13:ba:64: 37:5b:f5:a9:e6:23:45:0a:c7:9d:ac:84:16:67:3d: d4:28:29:a5:57:1a:0b:a2:c3:3f:2a:3a:11:ae:e4: 6f:d1:3d:41:b2:82:bb:25:3f:a4:87:4c:20:da:07: ec:5d:51:dd:eb:ea:b4:bd:0f:fb:1a:16:35:96:ae: f2:0f:78:60:be:70:06:8d:2d:a0:4a:9f:d0:0b:14: 7e:9a:bc:fb:6d:bd:9b:1b:f2:83:fc:c8:0d:b2:81: b2:5f:f8:8d:aa:8e:ec:74:0d:33:a9:68:2d:93:a9: 65:d6:dd:4b:de:54:16:bd:12:df:d1:d2:dd:36:04: f1:cb:10:67:77:24:e0:00:f0:3f:68:6a:16:db:6a: e9:8c:15:1c:e8:a7:95:ec:0f:37:f5:b1:31:ab:2b: 6e:68:10:61:11:11:66:f6:5d:d2:2a:68:6a:05:07: c0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5A:BB:F4:79:EE:98:1A:68:EC:78:66:D8:20:20:3F:79:26:44:62 X509v3 Authority Key Identifier: keyid:75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:c4:d0:15:fa:8b:ff:98:53:6d:da:ed:0b:24:c3:f4:7a:4c: 6c:6e:6f:86:47:ed:46:46:5f:3f:ba:7c:a6:03:02:a2:d9:45: 7e:2f:f8:31:ab:66:dd:68:f1:63:9d:d7:8e:d1:22:ab:d7:4f: de:62:bb:33:06:2e:35:89:bd:f5:75:7f:b8:13:d3:45:6c:66: 9b:ef:98:a2:cd:40:0a:00:a6:87:38:a5:8e:43:46:ab:56:b3: b7:db:80:a7:ca:52:59:b5:20:0b:e6:dc:c4:56:ee:fa:6a:58: 9f:4d:b5:13:f5:bc:91:80:d1:f9:9a:1b:6e:2c:b8:fe:eb:aa: 08:81:26:d3:a2:d6:e2:bd:e0:55:be:28:bd:6a:a2:6a:a9:54: 59:9b:1f:a1:2d:60:16:65:83:ea:7c:bd:7b:c7:7c:b7:56:63: bc:d9:72:bc:77:81:51:c7:d6:ce:90:21:53:f5:24:94:7e:94: 05:a6:d5:5c:d0:d0:f7:0b:c3:2c:47:5a:97:74:ec:8c:03:66: 70:c3:19:81:d3:0f:ab:68:e6:a6:5e:05:1e:73:58:7e:78:d4: 99:d5:68:94:49:75:67:45:f1:f0:93:05:55:57:eb:63:0c:27: 30:48:a1:ad:fd:cd:6d:ca:5a:ee:fc:81:58:46:11:a6:68:f5: 98:2e:4a:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXHBmJCX9Ie4rGNW88RhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTM1YmFkZTM3YTNkNmZjMzgwNDQyYTI4NWUxNTdiOTg0 Y2E5MWQwHhcNMjUxMjA2MDUwMTM2WhcNMjUxMjA3MDUwMTM2WjAzMTEwLwYDVQQD Eyg2MDVhYmJmNDc5ZWU5ODFhNjhlYzc4NjZkODIwMjAzZjc5MjY0NDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ipmOoBXAfoVWSxnGmwHLcLR7ST0 Vk22nrUvCP+0OnzTxNGx+fDtUiix2VhbpHcFg8g3AqQFih/lSuJvWqfK17ka02QF 0Wwg9RGBGG87htXMc4yokKATumQ3W/Wp5iNFCsedrIQWZz3UKCmlVxoLosM/KjoR ruRv0T1BsoK7JT+kh0wg2gfsXVHd6+q0vQ/7GhY1lq7yD3hgvnAGjS2gSp/QCxR+ mrz7bb2bG/KD/MgNsoGyX/iNqo7sdA0zqWgtk6ll1t1L3lQWvRLf0dLdNgTxyxBn dyTgAPA/aGoW22rpjBUc6KeV7A839bExqytuaBBhERFm9l3SKmhqBQfA/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBau/R57pgaaOx4ZtggID95JkRiMB8GA1UdIwQY MBaAFHVTW63jej1vw4BEKiheFXuYTKkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZOYnJlTjZQV19EZ0VRcUtGNFZlNWhNcVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yZjMzOWItZjE5Zi00NTJmLTg4YmUt MjlmZmM0NDQzOTAxLzEvZFZOYnJlTjZQV19EZ0VRcUtGNFZlNWhNcVIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yZjMzOWItZjE5Zi00NTJmLTg4YmUtMjlmZmM0NDQzOTAx LzEvZFZOYnJlTjZQV19EZ0VRcUtGNFZlNWhNcVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqsTQFfqL /5hTbdrtCyTD9HpMbG5vhkftRkZfP7p8pgMCotlFfi/4Matm3WjxY53XjtEiq9dP 3mK7MwYuNYm99XV/uBPTRWxmm++Yos1ACgCmhziljkNGq1azt9uAp8pSWbUgC+bc xFbu+mpYn021E/W8kYDR+Zobbiy4/uuqCIEm06LW4r3gVb4ovWqiaqlUWZsfoS1g FmWD6ny9e8d8t1ZjvNlyvHeBUcfWzpAhU/UklH6UBabVXNDQ9wvDLEdal3TsjANm cMMZgdMPq2jmpl4FHnNYfnjUmdVolEl1Z0Xx8JMFVVfrYwwnMEihrf3Nbcpa7vyB WEYRpmj1mC5KxA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:52:46 2025 by rpki-client