This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft File: 29T45HYjd_hrB6h1P26Y9vS2t5I.mft (raw, json) Hash identifier: 9QyM4ZfTrODRggEQJ+/mHixXliPNZBnOyUYZJUMSz6s= Subject key identifier: 25:0D:A9:38:23:5F:CB:24:49:93:17:89:15:BD:BE:63:2C:26:83:AE Authority key identifier: DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92 Certificate issuer: /CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792 Certificate serial: 019AF3BFEEDB2C26AC46F0C44D0C62F51E1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft Manifest number: 1771 Signing time: Sat 06 Dec 2025 13:00:33 +0000 Manifest this update: Sat 06 Dec 2025 13:00:33 +0000 Manifest next update: Sun 07 Dec 2025 13:00:33 +0000 Files and hashes: 1: 29T45HYjd_hrB6h1P26Y9vS2t5I.crl (hash: iAR1dXJW2joqxp+9sbhugkE9B7D7OxbTHsUSr1WRCAc=) 2: Bx5AqFrmCEvvpg5PP6G3iYi6cm8.roa (hash: nv+50RjE0P7RZsHAtUfv4vKeiING47CC1niIjtZ9NmE=) 3: EjiEhqCQfFeJxheh78DjOW0HnX8.roa (hash: xMjHQVoybWNabo3SxaU+I1LoAYBSZrLhM+vfUEw6Ma8=) 4: gmpsE3gYpq4JCSohIVHDm3a0vAc.roa (hash: UIxgMbyZxswMhLzYSeqRYLHgjf+FlKpy5d7Je9K3bz8=) 5: hsQv-_pPjXxEs3KS3Yli7KkGY8s.roa (hash: hNWKluVfWlyL1Lj4BF60xi3YP+tHJFMq6o5hVtlALzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:ee:db:2c:26:ac:46:f0:c4:4d:0c:62:f5:1e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792 Validity Not Before: Dec 6 13:00:33 2025 GMT Not After : Dec 7 13:00:33 2025 GMT Subject: CN=250da938235fcb244993178915bdbe632c2683ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cf:1d:21:b0:76:66:c9:ab:2d:2d:69:48:14: b9:0e:65:3a:23:db:c5:12:76:3a:70:27:14:67:b2: 76:e8:ed:c8:06:9d:a8:ff:f9:0a:13:f9:e0:a8:6a: 5d:f0:10:08:39:33:7b:36:a2:d5:35:bf:1b:25:4c: 6e:9e:73:96:6d:13:d8:f3:06:1f:6b:31:c1:57:db: de:a2:c1:35:32:d2:8c:9d:fb:cd:bf:cd:6b:c7:68: 3e:31:13:4f:77:4a:7c:0a:65:f8:f7:5f:16:7d:bf: 83:e8:43:4c:2f:f4:5a:a5:0d:88:a4:2e:24:42:e0: 9b:77:31:84:d9:19:52:76:95:85:22:3b:ab:5a:a8: d8:36:9e:a1:00:41:44:e4:b2:9c:eb:ef:c3:4f:0a: 68:fc:ed:7a:ff:63:d9:47:8a:6c:fb:79:96:df:fd: af:ac:14:ec:c0:a7:b6:0c:29:e9:d7:45:68:74:02: 62:50:46:80:2c:70:09:1c:7e:22:9b:f9:4d:51:19: 3e:37:3e:12:53:1b:7c:ff:99:1c:b4:12:4a:10:a7: f4:11:7f:24:06:6e:96:4b:49:d2:3c:ac:e3:58:76: a2:27:d6:92:5f:e0:7b:68:cd:ea:3f:c8:80:be:85: 6e:74:b3:d9:55:59:df:21:06:89:16:98:af:df:8f: c6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0D:A9:38:23:5F:CB:24:49:93:17:89:15:BD:BE:63:2C:26:83:AE X509v3 Authority Key Identifier: keyid:DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:36:07:f2:68:00:69:78:1a:4b:d9:b0:3b:a5:64:e3:d1:47: 62:17:c1:09:46:31:44:98:29:da:d3:b2:06:15:2b:ed:04:9a: 94:ea:92:c1:f1:ec:c8:89:60:d6:cc:1f:4f:1a:85:56:ad:10: ce:a9:50:c2:c2:22:9f:1d:3a:d4:29:7a:9b:56:9f:b5:99:20: e0:07:80:f9:da:2a:43:9e:26:8e:0e:3a:48:08:14:3a:74:74: fb:ec:62:88:94:1a:50:47:46:d8:cb:85:48:8e:d3:c6:1a:50: 3f:15:9f:05:bb:70:7f:19:37:ab:e7:79:05:7e:f7:8f:4c:ec: 60:36:05:7c:bb:15:49:40:00:1f:f8:0f:b9:c9:cb:ad:b1:f1: 19:af:dd:ed:8b:3f:ea:a9:2e:10:8a:0e:f2:58:77:48:93:70: 90:3a:c8:f1:0e:f8:98:3e:6b:08:6e:bd:69:b4:04:17:10:e3: 6e:38:17:fc:f0:6e:f6:77:7b:9d:18:f9:8a:3c:1f:ac:1a:bc: 23:90:7a:fa:b6:cb:e2:4c:1c:5a:42:ba:8f:a7:a5:d9:69:52: 82:0e:16:b5:e9:d1:93:26:9c:a2:a0:ad:9f:d7:3b:1f:56:24: fd:9a:c8:5e:b5:e8:19:0a:aa:90:7c:b4:cf:2a:0f:8e:c2:0c: 1b:51:55:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv+7bLCasRvDETQxi9R4cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZDRmOGU0NzYyMzc3Zjg2YjA3YTg3NTNmNmU5OGY2ZjRi NmI3OTIwHhcNMjUxMjA2MTMwMDMzWhcNMjUxMjA3MTMwMDMzWjAzMTEwLwYDVQQD EygyNTBkYTkzODIzNWZjYjI0NDk5MzE3ODkxNWJkYmU2MzJjMjY4M2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7c8dIbB2ZsmrLS1pSBS5DmU6I9vF EnY6cCcUZ7J26O3IBp2o//kKE/ngqGpd8BAIOTN7NqLVNb8bJUxunnOWbRPY8wYf azHBV9veosE1MtKMnfvNv81rx2g+MRNPd0p8CmX4918Wfb+D6ENML/RapQ2IpC4k QuCbdzGE2RlSdpWFIjurWqjYNp6hAEFE5LKc6+/DTwpo/O16/2PZR4ps+3mW3/2v rBTswKe2DCnp10VodAJiUEaALHAJHH4im/lNURk+Nz4SUxt8/5kctBJKEKf0EX8k Bm6WS0nSPKzjWHaiJ9aSX+B7aM3qP8iAvoVudLPZVVnfIQaJFpiv34/GZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUNqTgjX8skSZMXiRW9vmMsJoOuMB8GA1UdIwQY MBaAFNvU+OR2I3f4aweodT9umPb0treSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjlUNDVIWWpkX2hyQjZoMVAyNlk5dlMydDVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kM2Y2NWQtYWZhYi00ZDI4LWI0NmUt NjIwYTc5Y2Y3OTJiLzEvMjlUNDVIWWpkX2hyQjZoMVAyNlk5dlMydDVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kM2Y2NWQtYWZhYi00ZDI4LWI0NmUtNjIwYTc5Y2Y3OTJi LzEvMjlUNDVIWWpkX2hyQjZoMVAyNlk5dlMydDVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDYH8mgA aXgaS9mwO6Vk49FHYhfBCUYxRJgp2tOyBhUr7QSalOqSwfHsyIlg1swfTxqFVq0Q zqlQwsIinx061Cl6m1aftZkg4AeA+doqQ54mjg46SAgUOnR0++xiiJQaUEdG2MuF SI7TxhpQPxWfBbtwfxk3q+d5BX73j0zsYDYFfLsVSUAAH/gPucnLrbHxGa/d7Ys/ 6qkuEIoO8lh3SJNwkDrI8Q74mD5rCG69abQEFxDjbjgX/PBu9nd7nRj5ijwfrBq8 I5B6+rbL4kwcWkK6j6el2WlSgg4WtenRkyacoqCtn9c7H1Yk/ZrIXrXoGQqqkHy0 zyoPjsIMG1FVMA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:45:01 2025 by rpki-client