This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft File: dhrP1knI7q2FUZQngfoW9o29EPM.mft (raw, json) Hash identifier: HR8UONzkdcyoO3GwdZnq8lmMgSoaU48/011EHUsfgDw= Subject key identifier: 5F:0E:F0:CF:AB:39:79:9A:27:2B:2A:A3:D8:A4:65:D1:C5:C1:D3:55 Authority key identifier: 76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3 Certificate issuer: /CN=761acfd649c8eead8551942781fa16f68dbd10f3 Certificate serial: 019AF464F06242041C5D11FA0C7937469937 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 16:00:47 +0000 Manifest this update: Sat 06 Dec 2025 16:00:47 +0000 Manifest next update: Sun 07 Dec 2025 16:00:47 +0000 Files and hashes: 1: UdkvXpXGLdhITVh5jtCCMBnxb7M.roa (hash: HifSo99m/eGKn8WJh44GwrCR837RJMUrmbV81B/JjSg=) 2: dhrP1knI7q2FUZQngfoW9o29EPM.crl (hash: ZP/TGK/6yOlc4bdugVU+vCQeSJI533hi5H5KH6+b/E0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:f0:62:42:04:1c:5d:11:fa:0c:79:37:46:99:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=761acfd649c8eead8551942781fa16f68dbd10f3 Validity Not Before: Dec 6 16:00:47 2025 GMT Not After : Dec 7 16:00:47 2025 GMT Subject: CN=5f0ef0cfab39799a272b2aa3d8a465d1c5c1d355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:28:0b:e6:5d:2a:b9:3c:c0:08:40:38:98:dd: 2e:6b:df:db:df:e1:bc:c1:89:73:13:a7:1c:bb:6e: 4d:14:8c:41:ab:e6:a1:c6:54:9a:74:49:37:fa:14: be:9a:86:2c:e7:8b:37:ca:ed:4e:b8:22:30:1c:58: c6:c0:bf:11:c6:37:95:8e:34:76:ae:d9:69:4f:b6: c5:d0:1f:fc:20:64:53:e7:0c:32:ea:e4:6b:25:1b: a3:71:3f:52:d0:99:a6:2b:3b:b4:f1:53:f4:6b:e5: c2:ac:ee:ec:c2:14:6b:fb:58:10:d2:e4:cc:64:0a: 49:b2:7b:59:31:fb:a0:68:0e:9a:fc:43:1b:da:a7: ce:b0:c6:d7:d5:b3:f6:11:32:09:59:51:0d:89:e1: 56:06:5f:14:97:b0:81:9d:c0:62:e1:bd:45:fe:a8: 3f:5d:8f:d2:bb:95:0a:00:95:c5:1d:45:c7:9d:ee: 79:7e:00:85:79:3e:0d:db:64:82:13:3d:06:72:92: da:e7:12:32:e0:7f:94:14:f6:da:aa:24:45:d6:7a: d4:38:f9:df:eb:d5:3a:c3:9c:66:c1:20:d3:c0:94: 48:d0:ad:e9:e9:b5:42:6c:a8:12:97:ed:d1:9b:9f: 1e:cf:35:89:0b:6c:cd:0c:eb:5d:94:ee:d3:e9:55: c9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0E:F0:CF:AB:39:79:9A:27:2B:2A:A3:D8:A4:65:D1:C5:C1:D3:55 X509v3 Authority Key Identifier: keyid:76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:11:3c:17:2b:d3:32:25:f9:96:35:bf:de:d9:90:bd:12:5a: 52:f3:ef:ee:19:f7:cb:40:71:96:9b:41:5d:97:90:5e:a9:5c: ff:59:5b:1b:61:79:c2:2a:10:0b:71:63:39:b6:49:d4:04:6a: 71:25:2b:8a:0b:b0:58:ec:22:ac:92:63:85:fa:f9:b0:50:26: a8:23:51:ed:4f:02:19:6a:e8:e7:fa:fa:00:a3:ee:f0:c2:42: 7a:0e:f9:0e:61:be:83:9a:99:a1:b8:1d:1e:da:24:d9:18:18: 2d:b1:23:e8:c0:3b:a8:3c:d5:37:7a:0e:eb:29:e4:56:a3:37: f1:4f:49:92:9d:64:40:87:64:10:99:9d:3c:b4:aa:75:78:3c: a4:e9:ce:ea:2b:b5:60:08:3e:0c:c0:14:00:5c:2f:e0:5c:0a: 82:aa:4b:0c:81:9b:52:b5:96:5e:97:a4:5b:1c:53:aa:c9:53: 24:0a:95:90:c2:59:fe:2d:6e:16:22:99:e0:64:d3:db:93:a5: 29:01:e9:55:d5:3f:b5:31:bb:ce:75:5e:73:b6:a4:2a:cd:1e: 0a:c2:fb:f5:2d:51:fb:14:58:57:2e:3a:8f:75:47:79:bb:8e: d9:ab:bb:80:aa:58:d4:26:d5:7e:35:f1:49:b4:8a:33:8b:4f: 61:14:2a:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZPBiQgQcXRH6DHk3Rpk3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MWFjZmQ2NDljOGVlYWQ4NTUxOTQyNzgxZmExNmY2OGRi ZDEwZjMwHhcNMjUxMjA2MTYwMDQ3WhcNMjUxMjA3MTYwMDQ3WjAzMTEwLwYDVQQD Eyg1ZjBlZjBjZmFiMzk3OTlhMjcyYjJhYTNkOGE0NjVkMWM1YzFkMzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyygL5l0quTzACEA4mN0ua9/b3+G8 wYlzE6ccu25NFIxBq+ahxlSadEk3+hS+moYs54s3yu1OuCIwHFjGwL8RxjeVjjR2 rtlpT7bF0B/8IGRT5wwy6uRrJRujcT9S0JmmKzu08VP0a+XCrO7swhRr+1gQ0uTM ZApJsntZMfugaA6a/EMb2qfOsMbX1bP2ETIJWVENieFWBl8Ul7CBncBi4b1F/qg/ XY/Su5UKAJXFHUXHne55fgCFeT4N22SCEz0GcpLa5xIy4H+UFPbaqiRF1nrUOPnf 69U6w5xmwSDTwJRI0K3p6bVCbKgSl+3Rm58ezzWJC2zNDOtdlO7T6VXJHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8O8M+rOXmaJysqo9ikZdHFwdNVMB8GA1UdIwQY MBaAFHYaz9ZJyO6thVGUJ4H6FvaNvRDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGhyUDFrbkk3cTJGVVpRbmdmb1c5bzI5RVBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC82ZjkyODMtYjRkNC00NGNkLWE2OWIt YzczMjAxZGY5OTk1LzEvZGhyUDFrbkk3cTJGVVpRbmdmb1c5bzI5RVBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC82ZjkyODMtYjRkNC00NGNkLWE2OWItYzczMjAxZGY5OTk1 LzEvZGhyUDFrbkk3cTJGVVpRbmdmb1c5bzI5RVBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxE8FyvT MiX5ljW/3tmQvRJaUvPv7hn3y0BxlptBXZeQXqlc/1lbG2F5wioQC3FjObZJ1ARq cSUriguwWOwirJJjhfr5sFAmqCNR7U8CGWro5/r6AKPu8MJCeg75DmG+g5qZobgd Htok2RgYLbEj6MA7qDzVN3oO6ynkVqM38U9Jkp1kQIdkEJmdPLSqdXg8pOnO6iu1 YAg+DMAUAFwv4FwKgqpLDIGbUrWWXpekWxxTqslTJAqVkMJZ/i1uFiKZ4GTT25Ol KQHpVdU/tTG7znVec7akKs0eCsL79S1R+xRYVy46j3VHebuO2au7gKpY1CbVfjXx SbSKM4tPYRQqLw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:04:47 2025 by rpki-client