This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft File: dFkBtALUgvPW3Sko6oztLuts5BI.mft (raw, json) Hash identifier: vrn1sHLb8vr+7jNdFBXEmhRIstrtvOfGn/2o9o9kwZQ= Subject key identifier: D0:10:78:E5:52:9D:4A:C4:B2:8D:73:A7:7B:52:22:E3:BF:89:40:C4 Authority key identifier: 74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12 Certificate issuer: /CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412 Certificate serial: 019B2DE698D15E15D21EA7C0C92B79BD180C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 20:00:45 +0000 Manifest this update: Wed 17 Dec 2025 20:00:45 +0000 Manifest next update: Thu 18 Dec 2025 20:00:45 +0000 Files and hashes: 1: cx1g5onsIc-hAAu8dnSh1N5rp3U.roa (hash: CrKS5W6ytqqKToe/UhGDJrUzFXfuo+vTp+g8QhgmrYQ=) 2: dFkBtALUgvPW3Sko6oztLuts5BI.crl (hash: XcGb+SjfmWwfsNWbzyjFKGE07njmM0JJBSws1D1fvWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:e6:98:d1:5e:15:d2:1e:a7:c0:c9:2b:79:bd:18:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412 Validity Not Before: Dec 17 20:00:45 2025 GMT Not After : Dec 18 20:00:45 2025 GMT Subject: CN=d01078e5529d4ac4b28d73a77b5222e3bf8940c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:63:99:5e:6d:01:1d:3b:71:2d:dc:44:69:e4: 68:01:2a:8e:da:57:60:c3:f8:22:a0:f9:33:a0:d4: 3b:d9:df:44:c1:06:10:af:a0:86:d5:f8:a5:05:52: 41:f9:78:15:ae:b5:1d:14:e9:e9:e7:8d:08:2c:c4: 1e:5e:32:6e:70:48:1a:be:45:ff:a6:17:e5:f0:e4: c5:df:4e:3e:89:ec:12:38:15:c8:8c:20:4d:52:e1: f1:f8:da:7e:90:d3:f5:b4:92:af:98:ce:99:f7:ae: f4:5a:a6:89:cc:db:4c:99:6d:ab:20:0c:0f:5d:77: 55:79:19:33:86:43:ad:9a:2a:7a:57:cd:a9:70:53: 8f:0a:cc:0b:e0:c6:7e:2f:8d:87:fb:cc:c4:c0:fd: 67:0e:6b:98:f3:5c:40:d9:39:d0:55:35:85:25:c0: 69:21:75:5c:70:cd:ce:de:39:3a:21:ed:3f:bd:a9: fc:c7:c6:9e:af:21:70:45:5d:6a:3d:d2:c3:2f:d4: ab:f2:14:f6:4d:2a:9f:55:36:b2:df:bc:ba:dc:ef: 13:2d:c1:68:80:b7:85:15:91:78:84:9d:1b:44:5e: f5:75:4a:55:ca:7b:e9:0a:d1:48:f8:f8:fc:52:bf: 7a:71:07:92:31:1f:75:8d:7d:85:0e:98:dc:e1:a9: 2f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:10:78:E5:52:9D:4A:C4:B2:8D:73:A7:7B:52:22:E3:BF:89:40:C4 X509v3 Authority Key Identifier: keyid:74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d6:16:ab:33:57:24:a4:f2:cc:63:38:ff:dd:b0:40:4c:29: e0:99:54:d3:ca:bb:74:96:c4:81:6e:0f:07:2c:8a:33:73:34: 84:85:83:89:fc:59:87:1b:52:99:ee:f1:d0:6a:45:89:95:af: 2a:6c:47:d2:a1:47:9f:bf:7e:95:13:de:db:f0:83:83:a4:8b: 64:31:23:fe:6d:e4:a5:46:69:d0:c1:bc:a4:7a:9b:d0:f2:84: 9e:b7:12:51:46:11:b0:55:62:19:14:48:18:fc:23:44:17:99: bf:f2:33:b5:40:8f:ef:78:29:9a:27:d8:34:c8:8d:93:cc:fb: 35:24:35:26:e1:2d:c7:3d:4c:0f:c4:01:1d:7d:0b:b0:a6:b2: e7:70:e8:4b:60:4e:ec:b8:d3:8b:72:b8:4f:a0:8c:bc:85:0a: 03:06:15:76:64:7b:f6:57:86:b1:ff:a0:dc:f7:ae:a7:c3:0a: 85:75:a1:a9:2c:66:2a:86:1c:f2:e5:38:ba:1c:c0:ad:46:33: fc:9a:f7:e5:39:58:4b:21:6b:7a:52:ac:de:9b:e6:3d:e1:d6: 8b:2e:f6:e7:65:4c:02:a4:2d:2d:1d:95:95:15:b0:97:53:ce: 6d:85:72:46:8f:68:bc:04:77:16:d3:f1:61:8a:ae:31:b0:f6: 89:66:2c:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZst5pjRXhXSHqfAySt5vRgMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NTkwMWI0MDJkNDgyZjNkNmRkMjkyOGVhOGNlZDJlZWI2 Y2U0MTIwHhcNMjUxMjE3MjAwMDQ1WhcNMjUxMjE4MjAwMDQ1WjAzMTEwLwYDVQQD EyhkMDEwNzhlNTUyOWQ0YWM0YjI4ZDczYTc3YjUyMjJlM2JmODk0MGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2OZXm0BHTtxLdxEaeRoASqO2ldg w/gioPkzoNQ72d9EwQYQr6CG1filBVJB+XgVrrUdFOnp540ILMQeXjJucEgavkX/ phfl8OTF304+iewSOBXIjCBNUuHx+Np+kNP1tJKvmM6Z9670WqaJzNtMmW2rIAwP XXdVeRkzhkOtmip6V82pcFOPCswL4MZ+L42H+8zEwP1nDmuY81xA2TnQVTWFJcBp IXVccM3O3jk6Ie0/van8x8aeryFwRV1qPdLDL9Sr8hT2TSqfVTay37y63O8TLcFo gLeFFZF4hJ0bRF71dUpVynvpCtFI+Pj8Ur96cQeSMR91jX2FDpjc4akvBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAQeOVSnUrEso1zp3tSIuO/iUDEMB8GA1UdIwQY MBaAFHRZAbQC1ILz1t0pKOqM7S7rbOQSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ZmQ2ZGYtMzAxMi00ZTQ2LWJiZDgt ZDdjMzZlMTVjZjBlLzEvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84ZmQ2ZGYtMzAxMi00ZTQ2LWJiZDgtZDdjMzZlMTVjZjBl LzEvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAatYWqzNX JKTyzGM4/92wQEwp4JlU08q7dJbEgW4PByyKM3M0hIWDifxZhxtSme7x0GpFiZWv KmxH0qFHn79+lRPe2/CDg6SLZDEj/m3kpUZp0MG8pHqb0PKEnrcSUUYRsFViGRRI GPwjRBeZv/IztUCP73gpmifYNMiNk8z7NSQ1JuEtxz1MD8QBHX0LsKay53DoS2BO 7LjTi3K4T6CMvIUKAwYVdmR79leGsf+g3Peup8MKhXWhqSxmKoYc8uU4uhzArUYz /Jr35TlYSyFrelKs3pvmPeHWiy7252VMAqQtLR2VlRWwl1PObYVyRo9ovAR3FtPx YYquMbD2iWYs+A== -----END CERTIFICATE-----Generated at Thu Dec 18 05:46:53 2025 by rpki-client