This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft File: Dh8fRS7maY6Z38tOP1rus7wlA4U.mft (raw, json) Hash identifier: v19k9HuBHt7SaTb9HZsEUFUBDY3Leq3kCSY9vgzMzuo= Subject key identifier: 2C:86:72:F3:76:E8:46:DC:FA:A0:D7:62:C2:30:F3:B9:72:D6:DE:1C Authority key identifier: 0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85 Certificate issuer: /CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385 Certificate serial: 019AF2772363DDF7B0FDBB522A5829C6E301 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft Manifest number: 115C Signing time: Sat 06 Dec 2025 07:01:25 +0000 Manifest this update: Sat 06 Dec 2025 07:01:25 +0000 Manifest next update: Sun 07 Dec 2025 07:01:25 +0000 Files and hashes: 1: 69j8k9W_Kz202mE3W0ylnRGyMyQ.roa (hash: VQv9gDwWX0bKpqI6qovNd6HvrIeep8UuZ4eE64gS7zI=) 2: Dh8fRS7maY6Z38tOP1rus7wlA4U.crl (hash: 1CYxLlsoOEAOEA+9xyaMzTull2IRopBgg5NnxDKLEF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:23:63:dd:f7:b0:fd:bb:52:2a:58:29:c6:e3:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385 Validity Not Before: Dec 6 07:01:25 2025 GMT Not After : Dec 7 07:01:25 2025 GMT Subject: CN=2c8672f376e846dcfaa0d762c230f3b972d6de1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ff:f8:ee:d1:78:b2:af:55:57:36:3b:8c:b7: 84:70:56:27:37:d1:cc:66:36:1e:31:d0:c5:89:f2: 55:c0:38:79:09:d3:ce:43:54:0f:ea:1f:56:e2:ac: 1e:97:fb:69:00:8b:8c:c6:ac:7c:26:07:cd:14:b8: c6:22:38:98:ea:84:01:69:fe:e5:0f:c9:db:16:99: e0:35:9a:87:fd:77:74:bf:17:be:b5:02:e6:04:08: db:8b:6b:14:55:de:4e:d2:89:ca:cd:cb:5a:c3:27: bb:6e:83:7e:fc:4d:a1:75:4c:3d:90:87:ba:a3:4f: 0d:8f:9f:62:8c:4d:11:8c:3c:5b:70:b2:8a:58:c9: ab:c8:0f:56:f4:be:63:86:0a:ea:fe:4b:88:a6:94: 0f:02:76:1b:67:56:6e:a5:1e:55:05:69:1a:6b:a5: 2b:be:f6:99:12:78:53:70:7a:d1:0c:d6:98:f0:35: 0c:c4:fa:19:55:0c:96:9d:80:5d:e0:cc:fe:13:4a: ff:39:ce:2b:6f:c4:71:0d:2a:5c:77:be:00:a4:a0: 90:23:d1:ee:5c:5d:3a:14:5b:37:d7:2a:40:32:04: c8:35:d9:17:e2:f2:e1:6e:31:7c:95:b7:e9:24:08: 14:d5:c3:76:3a:91:93:84:72:26:45:2a:61:72:f3: 64:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:86:72:F3:76:E8:46:DC:FA:A0:D7:62:C2:30:F3:B9:72:D6:DE:1C X509v3 Authority Key Identifier: keyid:0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:48:cd:ec:db:56:2d:bc:9f:2e:03:ed:df:4a:21:eb:1f:07: 79:15:a1:41:83:2c:3e:48:0c:21:85:88:aa:59:ca:a6:40:42: 20:64:3c:13:94:0b:84:32:44:bb:31:fe:75:4d:e0:23:66:b6: f2:aa:08:25:6b:4f:b3:29:dd:b8:87:34:67:b2:1f:10:1f:67: 91:a5:ee:18:97:59:60:34:76:a1:28:d0:c1:dd:54:f4:bd:b5: f8:8b:37:7c:73:dc:21:8d:6a:c0:bf:e9:3d:03:0a:d4:9b:d6: cd:be:ae:fc:ef:ff:53:e8:aa:fc:d7:01:79:5e:29:b4:ea:44: 35:be:ff:8c:1b:1a:c3:41:b7:a4:f2:9e:70:f0:21:05:34:d3: a9:bb:48:57:47:52:98:36:18:cd:a5:a3:a0:dc:7d:7b:e6:4a: 2e:3e:c5:36:ef:5d:a3:fc:cc:62:19:a7:62:bc:22:c7:f1:25: 41:99:a9:b1:32:8c:9b:6c:82:48:ed:17:0b:f0:ee:52:a8:cc: 40:c6:5c:54:21:0a:f9:9c:95:fa:8c:7c:c9:ba:76:89:c5:4f: 37:10:7f:fb:06:44:af:cf:a9:5a:0d:74:35:54:23:e6:f4:c9: 88:2c:bc:f5:9f:46:2b:ab:b3:ad:d8:24:8d:b1:5b:a1:b1:95: 14:1d:09:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyNj3few/btSKlgpxuMBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMWYxZjQ1MmVlNjY5OGU5OWRmY2I0ZTNmNWFlZWIzYmMy NTAzODUwHhcNMjUxMjA2MDcwMTI1WhcNMjUxMjA3MDcwMTI1WjAzMTEwLwYDVQQD EygyYzg2NzJmMzc2ZTg0NmRjZmFhMGQ3NjJjMjMwZjNiOTcyZDZkZTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv/47tF4sq9VVzY7jLeEcFYnN9HM ZjYeMdDFifJVwDh5CdPOQ1QP6h9W4qwel/tpAIuMxqx8JgfNFLjGIjiY6oQBaf7l D8nbFpngNZqH/Xd0vxe+tQLmBAjbi2sUVd5O0onKzctawye7boN+/E2hdUw9kIe6 o08Nj59ijE0RjDxbcLKKWMmryA9W9L5jhgrq/kuIppQPAnYbZ1ZupR5VBWkaa6Ur vvaZEnhTcHrRDNaY8DUMxPoZVQyWnYBd4Mz+E0r/Oc4rb8RxDSpcd74ApKCQI9Hu XF06FFs31ypAMgTINdkX4vLhbjF8lbfpJAgU1cN2OpGThHImRSphcvNk1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyGcvN26Ebc+qDXYsIw87ly1t4cMB8GA1UdIwQY MBaAFA4fH0Uu5mmOmd/LTj9a7rO8JQOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGg4ZlJTN21hWTZaMzh0T1AxcnVzN3dsQTRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84MGY3NGUtYzlkNS00YWEzLWJhZDct YjE5ZmJhMDNjMDZmLzEvRGg4ZlJTN21hWTZaMzh0T1AxcnVzN3dsQTRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC84MGY3NGUtYzlkNS00YWEzLWJhZDctYjE5ZmJhMDNjMDZm LzEvRGg4ZlJTN21hWTZaMzh0T1AxcnVzN3dsQTRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoUjN7NtW LbyfLgPt30oh6x8HeRWhQYMsPkgMIYWIqlnKpkBCIGQ8E5QLhDJEuzH+dU3gI2a2 8qoIJWtPsynduIc0Z7IfEB9nkaXuGJdZYDR2oSjQwd1U9L21+Is3fHPcIY1qwL/p PQMK1JvWzb6u/O//U+iq/NcBeV4ptOpENb7/jBsaw0G3pPKecPAhBTTTqbtIV0dS mDYYzaWjoNx9e+ZKLj7FNu9do/zMYhmnYrwix/ElQZmpsTKMm2yCSO0XC/DuUqjM QMZcVCEK+ZyV+ox8ybp2icVPNxB/+wZEr8+pWg10NVQj5vTJiCy89Z9GK6uzrdgk jbFbobGVFB0JIA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:59 2025 by rpki-client