This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft File: dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft (raw, json) Hash identifier: ogLWrsdqjGwEHSZkRXNGJZnkXD7+vAGa8XMXDq/5caE= Subject key identifier: A4:73:2C:1C:67:8A:62:E1:49:4C:6D:A8:90:E4:33:1D:B6:CB:3C:61 Authority key identifier: 75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7 Certificate issuer: /CN=756fba46634d22b93db1bf46ec5a8d665e62dac7 Certificate serial: 019AF42E5EF34E650D2814C639B83CEF88B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft Manifest number: 0BCD Signing time: Sat 06 Dec 2025 15:01:10 +0000 Manifest this update: Sat 06 Dec 2025 15:01:10 +0000 Manifest next update: Sun 07 Dec 2025 15:01:10 +0000 Files and hashes: 1: Zeibnx0jQfHrKCngsBYyNBtyCY8.roa (hash: 1tTIgh7rGioAClAEx5jMHBx5r9sM7mmraGPRQnv9pR0=) 2: dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl (hash: 1+mpa0x272Az7ZgMO6Vz+ULewd//5JC7n7MTUEqJx+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:5e:f3:4e:65:0d:28:14:c6:39:b8:3c:ef:88:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=756fba46634d22b93db1bf46ec5a8d665e62dac7 Validity Not Before: Dec 6 15:01:10 2025 GMT Not After : Dec 7 15:01:10 2025 GMT Subject: CN=a4732c1c678a62e1494c6da890e4331db6cb3c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a2:fd:7b:dc:aa:35:7b:c9:a4:fa:45:ab:90: 37:35:8e:b0:d9:f4:8c:b3:16:54:dd:45:d5:19:82: a1:de:19:8a:c2:2e:66:9a:50:a8:9a:f1:6e:7c:c1: 91:95:3d:31:d9:88:d1:33:37:b4:9b:e4:15:df:28: 7c:11:b3:80:7b:15:50:54:53:c9:12:14:03:b7:1b: 8a:4d:24:a9:08:86:2d:33:8f:3e:4f:b2:0d:b1:3b: d6:69:2d:9c:1b:f5:3d:94:98:34:70:da:b1:30:78: 1a:7b:60:ef:69:30:56:7e:42:ec:f9:04:c0:a0:29: 9b:6b:d6:b5:56:cd:32:1a:04:b2:b7:bf:26:c4:0f: 32:36:30:a9:39:1b:32:a7:91:94:40:60:b1:4e:49: a4:a1:d5:6f:29:84:8c:5e:b3:19:64:f1:6b:a3:4e: 37:5e:5f:1c:a3:d7:8a:1f:70:46:34:3c:af:1a:bf: bf:f6:2d:f2:1f:a2:fd:e2:6a:d7:6e:62:1e:59:64: 8d:f3:12:62:90:dd:9a:01:56:ca:a8:54:ab:8a:35: 53:d7:01:19:97:66:5a:30:3b:14:b3:d6:fb:0f:cd: f2:20:9f:d0:ec:a8:ce:e0:c0:73:57:57:49:8d:f8: 27:3e:60:71:9c:36:17:25:f4:cd:91:27:4e:c4:19: 86:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:73:2C:1C:67:8A:62:E1:49:4C:6D:A8:90:E4:33:1D:B6:CB:3C:61 X509v3 Authority Key Identifier: keyid:75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f7:b0:11:d9:2b:86:a4:93:a3:fc:de:df:0f:14:fa:3a:31: dc:1f:a1:80:97:d5:a4:d1:2f:7f:25:94:6c:af:29:92:c0:7d: 2a:40:ae:38:9e:76:49:11:3c:81:47:97:99:2b:ed:c9:50:01: cf:cc:1a:3c:8e:e9:a5:a1:06:4d:ee:54:61:a4:ff:cf:6f:c2: 68:e5:c3:e2:71:92:e9:5b:81:1e:c8:c7:5d:cc:ed:44:fd:e7: dc:72:a6:3b:34:60:b8:55:e2:97:55:2c:b7:3d:48:e0:89:85: 95:0b:44:b3:0b:00:79:d4:73:5e:04:3e:5f:d9:23:d6:12:58: 96:b9:8c:d2:20:ed:37:41:32:5f:3a:7e:4f:af:07:7f:10:8c: 37:5b:7f:72:9d:39:f2:bc:f9:ce:02:1d:44:8b:e5:d5:38:58: 7b:59:fa:e8:13:bd:9c:d6:8a:eb:57:cd:31:22:1a:9d:17:cf: fc:f2:21:56:6e:0d:b6:d0:5c:19:f3:57:8c:e3:17:b2:18:30: 9f:c8:35:3a:6a:e6:d3:e7:a3:2a:0b:54:9d:3d:0b:b6:b6:89: de:2f:00:6e:d2:0c:25:86:f0:c8:5c:a4:f7:99:74:08:54:5f: 50:c1:56:d0:67:63:77:9d:ba:b9:67:58:3b:44:a2:56:c3:71: 19:a0:ac:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Ll7zTmUNKBTGObg874i5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NmZiYTQ2NjM0ZDIyYjkzZGIxYmY0NmVjNWE4ZDY2NWU2 MmRhYzcwHhcNMjUxMjA2MTUwMTEwWhcNMjUxMjA3MTUwMTEwWjAzMTEwLwYDVQQD EyhhNDczMmMxYzY3OGE2MmUxNDk0YzZkYTg5MGU0MzMxZGI2Y2IzYzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKL9e9yqNXvJpPpFq5A3NY6w2fSM sxZU3UXVGYKh3hmKwi5mmlComvFufMGRlT0x2YjRMze0m+QV3yh8EbOAexVQVFPJ EhQDtxuKTSSpCIYtM48+T7INsTvWaS2cG/U9lJg0cNqxMHgae2DvaTBWfkLs+QTA oCmba9a1Vs0yGgSyt78mxA8yNjCpORsyp5GUQGCxTkmkodVvKYSMXrMZZPFro043 Xl8co9eKH3BGNDyvGr+/9i3yH6L94mrXbmIeWWSN8xJikN2aAVbKqFSrijVT1wEZ l2ZaMDsUs9b7D83yIJ/Q7KjO4MBzV1dJjfgnPmBxnDYXJfTNkSdOxBmGlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRzLBxnimLhSUxtqJDkMx22yzxhMB8GA1UdIwQY MBaAFHVvukZjTSK5PbG/RuxajWZeYtrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFctNlJtTk5Jcms5c2I5RzdGcU5abDVpMnNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iNjg0MjEtOTliMS00ODVlLWIyMTct ZDNhZGM3NDQ5MzkxLzEvZFctNlJtTk5Jcms5c2I5RzdGcU5abDVpMnNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9iNjg0MjEtOTliMS00ODVlLWIyMTctZDNhZGM3NDQ5Mzkx LzEvZFctNlJtTk5Jcms5c2I5RzdGcU5abDVpMnNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/ewEdkr hqSTo/ze3w8U+jox3B+hgJfVpNEvfyWUbK8pksB9KkCuOJ52SRE8gUeXmSvtyVAB z8waPI7ppaEGTe5UYaT/z2/CaOXD4nGS6VuBHsjHXcztRP3n3HKmOzRguFXil1Us tz1I4ImFlQtEswsAedRzXgQ+X9kj1hJYlrmM0iDtN0EyXzp+T68HfxCMN1t/cp05 8rz5zgIdRIvl1ThYe1n66BO9nNaK61fNMSIanRfP/PIhVm4NttBcGfNXjOMXshgw n8g1Omrm0+ejKgtUnT0LtraJ3i8AbtIMJYbwyFyk95l0CFRfUMFW0Gdjd526uWdY O0SiVsNxGaCslQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:14:28 2025 by rpki-client