This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft File: dLTNPt9SHfjsChURESctP7kbmcM.mft (raw, json) Hash identifier: erVH2izSY3g6Ut9iClJTUEbnvw2ZhnXsyUgcfyFpp5k= Subject key identifier: B6:57:0A:20:18:84:19:0B:E2:64:68:18:03:82:5E:37:54:B6:9D:EC Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3 Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3 Certificate serial: 019AF2099A670E7321A1F52A2F0B1D44B300 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft Manifest number: 1724 Signing time: Sat 06 Dec 2025 05:01:46 +0000 Manifest this update: Sat 06 Dec 2025 05:01:46 +0000 Manifest next update: Sun 07 Dec 2025 05:01:46 +0000 Files and hashes: 1: LSuon8oWpWCEq3s6Y32PD-sfbyI.roa (hash: tWReXrO3x7vvyGIzFOX4xPuvbMatyQpy9wyqNoMzptY=) 2: dLTNPt9SHfjsChURESctP7kbmcM.crl (hash: EpsSXiOopLh+dogVbxzoQjFtvmMBoFH5hsYj4SPCdGQ=) 3: hyarknq8b7RuIBM-YBqseStGpbs.roa (hash: Q8UycgtcBXykUE11/kKCtnDO8tk0NFq+ACIXZD0W+5A=) 4: qFCMzr1aTyDncgEMfMKtHZlAIvA.roa (hash: bllSYNros8BQdNxuVkEMmquNQHhaai0eIqAVCUsUK7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9a:67:0e:73:21:a1:f5:2a:2f:0b:1d:44:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3 Validity Not Before: Dec 6 05:01:46 2025 GMT Not After : Dec 7 05:01:46 2025 GMT Subject: CN=b6570a201884190be264681803825e3754b69dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2b:66:20:07:cf:02:af:be:10:d2:88:8d:c5: d2:4f:9b:21:51:76:7e:33:e5:89:c1:52:18:60:0d: b4:06:67:01:62:43:7a:4d:f6:46:e3:a4:7f:bb:94: 48:00:85:52:9f:c4:b8:cd:6c:60:5a:a5:16:70:43: 4e:22:5b:35:3f:48:25:31:09:f4:f0:bc:27:02:d0: ba:58:da:cb:22:e9:5b:9d:c2:ba:3d:b1:eb:63:cb: bb:97:b4:88:72:9a:43:77:6b:3d:fe:ce:dd:8b:f2: 0c:9d:c4:fe:a8:88:b4:d5:da:ce:87:e0:06:9c:c4: ca:1f:cf:d5:9a:32:cc:58:d6:f3:70:ee:67:c8:d3: 3d:70:d9:ef:29:15:04:d8:c0:5d:75:54:08:93:5a: d4:9c:df:cc:7f:5e:ed:2d:fb:da:f8:ff:2c:d3:6a: 90:4f:ac:75:79:91:a2:f3:cd:1b:d1:2d:f8:6a:73: 40:a0:d2:cf:6b:01:bc:89:76:01:f6:06:a9:ce:9e: 42:7f:83:9e:f7:98:e1:df:7b:d8:eb:34:54:08:89: 3d:7c:f1:3d:8c:e0:c3:c6:5e:63:df:04:24:51:7d: 50:5b:52:71:53:3c:2c:4f:14:01:23:be:c6:e6:49: 10:39:5d:56:58:b3:22:a0:ab:8f:42:d7:55:bf:e9: 0f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:57:0A:20:18:84:19:0B:E2:64:68:18:03:82:5E:37:54:B6:9D:EC X509v3 Authority Key Identifier: keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:48:e1:49:fa:72:bc:ad:3c:0b:e6:e5:5a:0d:43:e2:6c:31: 9a:06:f5:28:1e:20:66:ea:22:77:65:61:68:74:8b:8b:46:d3: ef:00:b0:85:b7:f9:2d:5e:30:2d:71:09:7e:d0:e6:0b:04:42: a4:33:bd:76:cb:70:4d:8b:cb:a1:98:f5:99:bb:48:11:5e:03: c0:79:61:cc:85:ea:0f:e4:2b:9f:1b:ac:76:ba:4d:5e:95:5a: cb:36:87:ea:8f:b9:e2:48:7b:c8:23:3e:d2:4f:17:97:64:4b: 19:14:77:08:98:06:23:89:da:5a:5b:17:8e:a4:4f:fb:21:98: b5:1c:bf:c6:cc:76:a9:82:e3:6c:03:12:75:43:d9:24:66:44: 9a:89:d8:4c:1e:b0:8c:71:17:08:23:0a:42:72:96:1f:f9:20: 0b:7d:6a:70:dc:dc:56:e8:5c:b2:76:62:3f:a3:a6:02:3e:4b: c3:e9:93:f9:c4:01:b5:aa:bd:0f:33:c7:c1:8b:2d:67:9d:cb: 22:45:31:2d:0f:1f:73:a1:5a:e1:dc:b4:9b:9c:0d:40:c5:5a: f9:6f:60:ca:7c:c4:87:06:57:30:96:c7:22:3e:28:11:57:c1: e7:49:d6:85:fc:b6:0e:35:17:66:34:8b:79:ee:f2:c7:92:40: 24:53:c2:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZpnDnMhofUqLwsdRLMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YjRjZDNlZGY1MjFkZjhlYzBhMTUxMTExMjcyZDNmYjkx Yjk5YzMwHhcNMjUxMjA2MDUwMTQ2WhcNMjUxMjA3MDUwMTQ2WjAzMTEwLwYDVQQD EyhiNjU3MGEyMDE4ODQxOTBiZTI2NDY4MTgwMzgyNWUzNzU0YjY5ZGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3itmIAfPAq++ENKIjcXST5shUXZ+ M+WJwVIYYA20BmcBYkN6TfZG46R/u5RIAIVSn8S4zWxgWqUWcENOIls1P0glMQn0 8LwnAtC6WNrLIulbncK6PbHrY8u7l7SIcppDd2s9/s7di/IMncT+qIi01drOh+AG nMTKH8/VmjLMWNbzcO5nyNM9cNnvKRUE2MBddVQIk1rUnN/Mf17tLfva+P8s02qQ T6x1eZGi880b0S34anNAoNLPawG8iXYB9gapzp5Cf4Oe95jh33vY6zRUCIk9fPE9 jODDxl5j3wQkUX1QW1JxUzwsTxQBI77G5kkQOV1WWLMioKuPQtdVv+kPvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZXCiAYhBkL4mRoGAOCXjdUtp3sMB8GA1UdIwQY MBaAFHS0zT7fUh347AoVEREnLT+5G5nDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMt ZTJhN2ZiODQ4MzE4LzEvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMtZTJhN2ZiODQ4MzE4 LzEvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUjhSfpy vK08C+blWg1D4mwxmgb1KB4gZuoid2VhaHSLi0bT7wCwhbf5LV4wLXEJftDmCwRC pDO9dstwTYvLoZj1mbtIEV4DwHlhzIXqD+QrnxusdrpNXpVayzaH6o+54kh7yCM+ 0k8Xl2RLGRR3CJgGI4naWlsXjqRP+yGYtRy/xsx2qYLjbAMSdUPZJGZEmonYTB6w jHEXCCMKQnKWH/kgC31qcNzcVuhcsnZiP6OmAj5Lw+mT+cQBtaq9DzPHwYstZ53L IkUxLQ8fc6Fa4dy0m5wNQMVa+W9gynzEhwZXMJbHIj4oEVfB50nWhfy2DjUXZjSL ee7yx5JAJFPCEA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:38 2025 by rpki-client