This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft File: dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft (raw, json) Hash identifier: Gs/qL2U8pcT/vkTPDTJFzOgx5eAsYkhOuYJc6wlOUy0= Subject key identifier: A2:EF:1F:81:9D:46:E9:F7:0A:6B:E0:5D:9D:17:7E:74:BD:C4:FC:FC Authority key identifier: 74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A Certificate issuer: /CN=740f65f302335baa90ed81c05384d53f2332391a Certificate serial: 019AF1D19928BECA5763B238814A3B3B9561 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft Manifest number: 0877 Signing time: Sat 06 Dec 2025 04:00:36 +0000 Manifest this update: Sat 06 Dec 2025 04:00:36 +0000 Manifest next update: Sun 07 Dec 2025 04:00:36 +0000 Files and hashes: 1: dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl (hash: RyoIAVsMPCnJG6tc6B7DpWjN2oN+Azs9bMFbghGnrQA=) 2: dHoLxhcoAEUuRvCDtuAMppchNpk.roa (hash: u7XKc4RK1KVYd/fCuO1odA9687+dNJirNjEcVK4j3l0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:99:28:be:ca:57:63:b2:38:81:4a:3b:3b:95:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=740f65f302335baa90ed81c05384d53f2332391a Validity Not Before: Dec 6 04:00:36 2025 GMT Not After : Dec 7 04:00:36 2025 GMT Subject: CN=a2ef1f819d46e9f70a6be05d9d177e74bdc4fcfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b9:13:64:97:9b:c1:d2:5a:1c:70:e3:fa:31: 3e:13:06:04:2f:52:72:e3:88:f4:8e:65:7d:52:49: cb:c1:b2:30:cf:61:45:c6:bc:bf:ce:1b:54:0c:a6: 8f:d8:60:b1:88:23:16:8e:4d:35:65:df:e2:a6:77: a3:0c:2c:ba:b1:26:23:38:96:07:1c:a0:e7:6e:89: 21:5f:2c:5b:7d:d1:b3:7e:82:3b:02:ff:ab:e7:d4: 4d:9e:16:45:0c:de:e6:a7:6a:7c:5c:e1:2b:f5:63: c6:42:51:f5:27:59:d6:e3:4f:c9:c5:5a:66:13:cd: e3:cc:e7:b6:28:e4:ea:74:74:e4:14:75:e1:2f:aa: 2c:bf:9a:a4:ef:86:60:62:1b:4d:42:06:78:17:25: 20:52:aa:59:4a:b5:b6:2c:53:d1:51:e4:32:5a:56: d9:61:d5:1c:28:0f:34:ee:5a:aa:94:19:ad:e8:d6: d5:45:53:30:d0:2e:0f:a3:4f:de:31:9f:12:25:7d: c9:f8:c0:31:11:dd:87:ef:7b:53:27:17:cd:fd:e0: 5c:68:17:ba:d8:44:5f:cb:89:24:f3:a4:5f:9c:b2: 95:1e:4f:97:d3:0e:96:38:e5:ad:7c:dc:51:22:41: 52:40:be:d6:27:2d:35:64:ee:27:65:f0:34:19:72: 85:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EF:1F:81:9D:46:E9:F7:0A:6B:E0:5D:9D:17:7E:74:BD:C4:FC:FC X509v3 Authority Key Identifier: keyid:74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f5:15:85:f2:6e:c2:9e:15:e9:53:2d:1a:8a:b6:27:2c:d1: 11:f2:8e:88:87:b1:49:61:c8:53:c7:f1:af:34:f8:df:35:69: 54:a4:08:4d:f3:5f:45:6f:67:6a:ec:f7:6a:91:ca:39:12:55: 49:4e:e8:4b:a1:f3:9e:f0:04:9c:e4:4c:11:23:3d:33:b2:c3: 8c:38:fc:f4:73:57:e5:b7:c7:6a:2f:34:cd:3a:a4:2f:a1:22: 27:a3:97:26:ab:fa:24:a2:1c:bb:4b:4f:77:4b:26:ec:70:ef: ef:5b:02:28:b9:c6:ac:9d:16:33:52:3a:ce:e7:97:e0:33:94: 39:b8:33:cb:8b:3f:23:ec:34:ed:d9:97:f2:c1:b8:75:bc:09: ec:56:33:37:71:70:30:27:66:4f:6e:63:6c:b6:99:bb:fa:c7: 66:c8:20:f7:99:a3:78:9a:35:66:da:31:69:29:70:65:ef:35: bd:15:71:81:7b:6b:60:d6:68:85:09:63:f8:87:94:a1:58:22: db:46:79:c1:8a:69:a1:83:a5:3b:62:b7:e8:fb:c8:0c:65:f1: 0f:04:70:13:6b:eb:0c:56:e9:ca:08:cd:71:61:7c:a0:0d:5c: 2b:ce:7b:a5:73:0e:2c:6b:61:63:0f:f5:fd:8c:ca:20:45:5d: 5c:4c:ae:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZkovspXY7I4gUo7O5VhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MGY2NWYzMDIzMzViYWE5MGVkODFjMDUzODRkNTNmMjMz MjM5MWEwHhcNMjUxMjA2MDQwMDM2WhcNMjUxMjA3MDQwMDM2WjAzMTEwLwYDVQQD EyhhMmVmMWY4MTlkNDZlOWY3MGE2YmUwNWQ5ZDE3N2U3NGJkYzRmY2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7kTZJebwdJaHHDj+jE+EwYEL1Jy 44j0jmV9UknLwbIwz2FFxry/zhtUDKaP2GCxiCMWjk01Zd/ipnejDCy6sSYjOJYH HKDnbokhXyxbfdGzfoI7Av+r59RNnhZFDN7mp2p8XOEr9WPGQlH1J1nW40/JxVpm E83jzOe2KOTqdHTkFHXhL6osv5qk74ZgYhtNQgZ4FyUgUqpZSrW2LFPRUeQyWlbZ YdUcKA807lqqlBmt6NbVRVMw0C4Po0/eMZ8SJX3J+MAxEd2H73tTJxfN/eBcaBe6 2ERfy4kk86RfnLKVHk+X0w6WOOWtfNxRIkFSQL7WJy01ZO4nZfA0GXKFrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLvH4GdRun3CmvgXZ0XfnS9xPz8MB8GA1UdIwQY MBaAFHQPZfMCM1uqkO2BwFOE1T8jMjkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEE5bDh3SXpXNnFRN1lIQVU0VFZQeU15T1JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zYjFjMWYtMmQ4Yy00ODYxLWI3MWQt ZDAzYTJjNDM1YWVjLzEvZEE5bDh3SXpXNnFRN1lIQVU0VFZQeU15T1JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8zYjFjMWYtMmQ4Yy00ODYxLWI3MWQtZDAzYTJjNDM1YWVj LzEvZEE5bDh3SXpXNnFRN1lIQVU0VFZQeU15T1JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPUVhfJu wp4V6VMtGoq2JyzREfKOiIexSWHIU8fxrzT43zVpVKQITfNfRW9nauz3apHKORJV SU7oS6HznvAEnORMESM9M7LDjDj89HNX5bfHai80zTqkL6EiJ6OXJqv6JKIcu0tP d0sm7HDv71sCKLnGrJ0WM1I6zueX4DOUObgzy4s/I+w07dmX8sG4dbwJ7FYzN3Fw MCdmT25jbLaZu/rHZsgg95mjeJo1ZtoxaSlwZe81vRVxgXtrYNZohQlj+IeUoVgi 20Z5wYppoYOlO2K36PvIDGXxDwRwE2vrDFbpygjNcWF8oA1cK857pXMOLGthYw/1 /YzKIEVdXEyuKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:56 2025 by rpki-client