This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft File: fD2KpDg1BKMa_0sAaBCga88DBa4.mft (raw, json) Hash identifier: /tmRkn0Esllxexc1NLoxvJo0zqJ1L9zEdfcrOUV09D4= Subject key identifier: 4D:C9:94:B5:6C:72:88:14:07:CB:A3:31:D0:CD:13:EC:56:F2:9E:0B Authority key identifier: 7C:3D:8A:A4:38:35:04:A3:1A:FF:4B:00:68:10:A0:6B:CF:03:05:AE Certificate issuer: /CN=7c3d8aa4383504a31aff4b006810a06bcf0305ae Certificate serial: 019AF19AD76577797E6E87AE6DB43E4B4DAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft Manifest number: 133C Signing time: Sat 06 Dec 2025 03:00:47 +0000 Manifest this update: Sat 06 Dec 2025 03:00:47 +0000 Manifest next update: Sun 07 Dec 2025 03:00:47 +0000 Files and hashes: 1: 8L2O5GlhNp_lrqBMRrzhkCl_FU4.roa (hash: MpUCXGi4iU4O/s2W0Ri/evmaR2tEREi873mtgHCWuJE=) 2: fD2KpDg1BKMa_0sAaBCga88DBa4.crl (hash: o6sBXeVVKOGjAQ5MJcSn6/vINaQVre+dEvyNEAJnhmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d7:65:77:79:7e:6e:87:ae:6d:b4:3e:4b:4d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d8aa4383504a31aff4b006810a06bcf0305ae Validity Not Before: Dec 6 03:00:47 2025 GMT Not After : Dec 7 03:00:47 2025 GMT Subject: CN=4dc994b56c72881407cba331d0cd13ec56f29e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:39:4c:49:d0:08:7e:86:b6:f7:25:0a:1c:73: 34:15:b4:f4:fa:e0:f1:70:b8:7f:67:7e:24:fc:76: a8:07:b7:19:a3:61:ed:bc:cc:a5:c1:10:2a:09:43: 3f:d4:2a:0b:d8:bc:5d:c6:43:22:9f:86:90:13:19: 6b:ac:34:2c:f5:91:9d:e7:e8:eb:0c:cc:5a:3f:1b: b1:aa:70:eb:2f:f0:f8:64:63:5a:18:22:42:2a:a2: e7:bb:f0:ca:02:8b:31:f5:81:05:f7:ef:3e:e3:f5: c8:a2:05:b2:38:85:bb:34:20:56:1e:56:55:2d:27: 18:70:2e:90:3b:bf:7b:1e:cf:31:b5:62:79:25:77: 02:42:82:89:75:19:b5:a3:dd:e0:8f:64:fb:04:8d: 14:fa:ed:83:55:de:b4:cc:1a:41:87:a9:a3:13:ad: e1:b6:c5:fb:1f:bf:85:4b:d7:8a:74:9c:90:85:19: 20:cd:a8:79:3f:4b:d3:24:79:16:eb:58:6b:42:9e: 22:dd:a5:1a:03:33:2a:4f:fa:7d:3b:e8:92:b7:25: 5d:40:b0:11:d6:b1:8c:22:6b:86:ff:5c:de:ed:c5: 10:8c:0c:1b:d9:8f:0a:8a:ca:50:3a:26:90:8a:51: 81:02:de:8c:4a:f2:0d:20:1c:48:f6:29:92:42:2f: e9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C9:94:B5:6C:72:88:14:07:CB:A3:31:D0:CD:13:EC:56:F2:9E:0B X509v3 Authority Key Identifier: keyid:7C:3D:8A:A4:38:35:04:A3:1A:FF:4B:00:68:10:A0:6B:CF:03:05:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:b7:01:15:52:6b:47:13:9e:58:85:f2:21:11:76:7e:20:3e: c2:36:47:44:ad:48:5d:31:e2:e3:a1:f6:70:bb:fb:37:18:9e: d5:15:41:30:2c:39:ff:4a:9e:e7:8c:30:d7:a6:64:a6:07:c7: 1c:18:99:58:13:16:b2:5b:f4:e9:e1:07:c4:13:68:2d:9b:3a: a2:62:df:78:3a:94:dc:99:97:b7:b2:f9:21:84:0c:63:6d:97: 80:24:c9:01:28:73:64:0e:27:80:f2:5c:61:15:6a:fa:d8:9d: 38:16:b1:92:80:8c:15:85:d4:10:ac:65:bb:b8:f3:be:61:4e: 11:a5:f5:48:a9:78:d3:1c:a3:92:24:1b:56:9c:11:d0:a8:e0: 4a:fd:03:b5:9d:62:b0:ee:26:90:74:10:9a:b7:73:07:ac:e4: f4:dc:8e:cc:25:42:48:a1:5a:9e:e2:a6:91:64:f8:ca:7d:fd: bc:9a:51:37:f3:83:97:d2:0d:25:72:82:ce:35:e1:ad:c1:5e: f1:2f:c6:6d:12:68:5e:b1:a8:cc:69:be:82:af:5a:5b:62:1e: 4e:b5:c5:3e:13:b5:b1:69:f4:5d:22:83:0f:99:f5:bc:a2:f5: 1b:98:66:10:78:e1:44:a3:d7:eb:df:40:d5:30:f0:ae:aa:16: e7:64:f1:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtdld3l+boeubbQ+S02uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2Q4YWE0MzgzNTA0YTMxYWZmNGIwMDY4MTBhMDZiY2Yw MzA1YWUwHhcNMjUxMjA2MDMwMDQ3WhcNMjUxMjA3MDMwMDQ3WjAzMTEwLwYDVQQD Eyg0ZGM5OTRiNTZjNzI4ODE0MDdjYmEzMzFkMGNkMTNlYzU2ZjI5ZTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszlMSdAIfoa29yUKHHM0FbT0+uDx cLh/Z34k/HaoB7cZo2HtvMylwRAqCUM/1CoL2LxdxkMin4aQExlrrDQs9ZGd5+jr DMxaPxuxqnDrL/D4ZGNaGCJCKqLnu/DKAosx9YEF9+8+4/XIogWyOIW7NCBWHlZV LScYcC6QO797Hs8xtWJ5JXcCQoKJdRm1o93gj2T7BI0U+u2DVd60zBpBh6mjE63h tsX7H7+FS9eKdJyQhRkgzah5P0vTJHkW61hrQp4i3aUaAzMqT/p9O+iStyVdQLAR 1rGMImuG/1ze7cUQjAwb2Y8KispQOiaQilGBAt6MSvINIBxI9imSQi/p5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3JlLVscogUB8ujMdDNE+xW8p4LMB8GA1UdIwQY MBaAFHw9iqQ4NQSjGv9LAGgQoGvPAwWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQyS3BEZzFCS01hXzBzQWFCQ2dhODhEQmE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hNDJlOTQtMTViNy00MjcyLTllYjAt OTlkYjIxMjQ0ZWRmLzEvZkQyS3BEZzFCS01hXzBzQWFCQ2dhODhEQmE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9hNDJlOTQtMTViNy00MjcyLTllYjAtOTlkYjIxMjQ0ZWRm LzEvZkQyS3BEZzFCS01hXzBzQWFCQ2dhODhEQmE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLcBFVJr RxOeWIXyIRF2fiA+wjZHRK1IXTHi46H2cLv7Nxie1RVBMCw5/0qe54ww16ZkpgfH HBiZWBMWslv06eEHxBNoLZs6omLfeDqU3JmXt7L5IYQMY22XgCTJAShzZA4ngPJc YRVq+tidOBaxkoCMFYXUEKxlu7jzvmFOEaX1SKl40xyjkiQbVpwR0KjgSv0DtZ1i sO4mkHQQmrdzB6zk9NyOzCVCSKFanuKmkWT4yn39vJpRN/ODl9INJXKCzjXhrcFe 8S/GbRJoXrGozGm+gq9aW2IeTrXFPhO1sWn0XSKDD5n1vKL1G5hmEHjhRKPX699A 1TDwrqoW52TxGg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:10 2025 by rpki-client