This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft File: dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft (raw, json) Hash identifier: 6t71CAWW4NkIrMnxrdHm9XmmZrKfNalKQIMfII60JEM= Subject key identifier: 8D:A3:8E:DD:5C:27:D7:0B:BD:03:F5:B8:3B:04:E8:2F:FD:7C:EA:24 Authority key identifier: 74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9 Certificate issuer: /CN=749d8a4328930b938fa86018b1e447ee4d8da8f9 Certificate serial: 019AF1D205A81C1177AE2529297D652E2AC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft Manifest number: D9 Signing time: Sat 06 Dec 2025 04:01:04 +0000 Manifest this update: Sat 06 Dec 2025 04:01:04 +0000 Manifest next update: Sun 07 Dec 2025 04:01:04 +0000 Files and hashes: 1: 9aSGIa-WEC1bN7Ni4E8-efLmGGQ.roa (hash: 9siiR4LDQpp3LbxItU8xD6C1s0IOvLTqKZo+clC6imU=) 2: dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl (hash: rW5I2lltk5LOrr0wOwQyyzfauLMJeBGKcr9tR5XNl+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:05:a8:1c:11:77:ae:25:29:29:7d:65:2e:2a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749d8a4328930b938fa86018b1e447ee4d8da8f9 Validity Not Before: Dec 6 04:01:04 2025 GMT Not After : Dec 7 04:01:04 2025 GMT Subject: CN=8da38edd5c27d70bbd03f5b83b04e82ffd7cea24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5d:2d:07:51:f9:93:8b:5e:91:49:0c:7d:fe: a2:be:31:1a:58:e8:14:d1:17:9e:3d:9e:f6:48:6e: 88:7d:09:ce:ac:ef:93:3d:55:5f:7d:b1:50:af:fe: 71:a0:7d:97:ab:e8:de:46:18:b4:8d:5f:cd:88:fe: ba:ef:41:18:f6:5a:28:21:07:a5:9f:b1:3d:51:38: a6:12:b0:a5:6b:d1:61:de:4a:b4:79:09:21:5e:2d: 2c:2c:5f:62:32:91:c2:6f:ec:68:03:0f:2b:3a:05: e1:86:26:9e:58:c3:15:8a:d5:29:d6:18:93:1d:09: 35:89:44:71:fe:c5:ec:60:ae:6d:d9:70:01:e6:a7: 24:55:a9:da:a9:ff:e0:b2:39:61:85:84:a5:cf:b1: 8f:8b:82:0f:25:63:58:54:11:16:fb:7b:65:0f:32: 84:6e:22:2d:ee:b3:70:8f:71:31:15:01:11:a9:49: 1b:4e:16:28:e6:53:7a:49:33:9b:38:cd:7e:89:f3: cd:8f:46:11:ea:37:6c:88:2a:16:4e:53:36:25:af: 60:e4:41:10:74:c2:86:96:c7:99:a2:89:ae:2a:29: e5:bd:94:d3:dc:69:dc:2d:75:ae:c1:de:48:6d:36: 59:d7:de:26:5d:a8:f6:51:31:4b:fc:c3:9c:a4:4f: 2d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A3:8E:DD:5C:27:D7:0B:BD:03:F5:B8:3B:04:E8:2F:FD:7C:EA:24 X509v3 Authority Key Identifier: keyid:74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:c2:da:b4:e8:40:b2:84:a4:69:19:d9:02:8f:f1:28:43:20: f1:5f:f6:8a:73:06:c2:96:ef:27:d3:f1:0e:c3:0b:03:e3:5f: b7:e3:eb:a2:88:fe:df:29:86:96:0a:f8:5b:22:e1:c6:d1:98: fd:9b:57:e7:14:88:2e:a4:77:7e:77:bb:33:5e:9c:58:f8:a0: 2e:22:38:9d:41:c9:a7:9a:71:b1:7f:bd:21:e9:7c:71:69:8a: 13:d5:11:f1:ef:8b:e3:01:d9:41:b8:f9:0e:8e:68:85:6f:2a: ed:e5:ff:04:23:f9:7c:61:f6:89:75:93:11:fa:16:cc:94:bb: 51:72:dc:bd:c5:78:c6:67:b5:38:b7:f9:82:25:11:20:18:9d: 96:3d:94:29:ff:61:55:94:9f:4c:92:bb:aa:af:d7:05:48:22: 76:29:4d:94:17:e9:84:d9:2a:0e:7e:59:dc:72:67:e9:49:2a: ae:c5:4e:04:59:c0:18:52:7f:db:61:74:8c:83:a3:1e:c3:cc: d3:91:31:fa:61:46:74:ed:4a:1f:32:74:67:ac:1a:66:55:1b: e5:5f:99:85:7b:4e:08:b2:b8:b7:2e:21:cb:25:71:9d:91:93: 61:5d:80:00:41:9b:8c:49:f4:a8:cc:ee:9b:8d:47:ee:b9:d1: 75:c4:d1:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gWoHBF3riUpKX1lLirBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OWQ4YTQzMjg5MzBiOTM4ZmE4NjAxOGIxZTQ0N2VlNGQ4 ZGE4ZjkwHhcNMjUxMjA2MDQwMTA0WhcNMjUxMjA3MDQwMTA0WjAzMTEwLwYDVQQD Eyg4ZGEzOGVkZDVjMjdkNzBiYmQwM2Y1YjgzYjA0ZTgyZmZkN2NlYTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4V0tB1H5k4tekUkMff6ivjEaWOgU 0ReePZ72SG6IfQnOrO+TPVVffbFQr/5xoH2Xq+jeRhi0jV/NiP6670EY9looIQel n7E9UTimErCla9Fh3kq0eQkhXi0sLF9iMpHCb+xoAw8rOgXhhiaeWMMVitUp1hiT HQk1iURx/sXsYK5t2XAB5qckVanaqf/gsjlhhYSlz7GPi4IPJWNYVBEW+3tlDzKE biIt7rNwj3ExFQERqUkbThYo5lN6STObOM1+ifPNj0YR6jdsiCoWTlM2Ja9g5EEQ dMKGlseZoomuKinlvZTT3GncLXWuwd5IbTZZ194mXaj2UTFL/MOcpE8tyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2jjt1cJ9cLvQP1uDsE6C/9fOokMB8GA1UdIwQY MBaAFHSdikMokwuTj6hgGLHkR+5Njaj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEoyS1F5aVRDNU9QcUdBWXNlUkg3azJOcVBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zZmEyMTctODVmNS00ZjE5LWI5MWUt MDg4OWUzZWNkMWY2LzEvZEoyS1F5aVRDNU9QcUdBWXNlUkg3azJOcVBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8zZmEyMTctODVmNS00ZjE5LWI5MWUtMDg4OWUzZWNkMWY2 LzEvZEoyS1F5aVRDNU9QcUdBWXNlUkg3azJOcVBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsLatOhA soSkaRnZAo/xKEMg8V/2inMGwpbvJ9PxDsMLA+Nft+Prooj+3ymGlgr4WyLhxtGY /ZtX5xSILqR3fne7M16cWPigLiI4nUHJp5pxsX+9Iel8cWmKE9UR8e+L4wHZQbj5 Do5ohW8q7eX/BCP5fGH2iXWTEfoWzJS7UXLcvcV4xme1OLf5giURIBidlj2UKf9h VZSfTJK7qq/XBUgidilNlBfphNkqDn5Z3HJn6UkqrsVOBFnAGFJ/22F0jIOjHsPM 05Ex+mFGdO1KHzJ0Z6waZlUb5V+ZhXtOCLK4ty4hyyVxnZGTYV2AAEGbjEn0qMzu m41H7rnRdcTRiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:25 2025 by rpki-client