This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft File: dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft (raw, json) Hash identifier: Nbc4lLlKfs6JpmTKFiru7u2gwnO++54Cf9ZXviEHWv8= Subject key identifier: 7A:12:8B:74:84:AA:5F:45:EC:1D:24:B7:66:2B:F0:7B:02:AC:E3:43 Authority key identifier: 74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64 Certificate issuer: /CN=749ea3b1e58ba060b41fc2a078f6016264759664 Certificate serial: 019AF31D1726FCECE37624A6C4AF58A05F43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:02:41 +0000 Manifest this update: Sat 06 Dec 2025 10:02:41 +0000 Manifest next update: Sun 07 Dec 2025 10:02:41 +0000 Files and hashes: 1: 8ufIDITsiM6oD6O8MQCNfNFjxSc.roa (hash: 8hR826cHBgGmwXj/DW4UGY4gM4QS8fSh6KW7UDD9poY=) 2: dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl (hash: xptquN1XO2WKJOZDtK5Vzwz4Q0Hw3gQ3Mph5SVRa+eg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:17:26:fc:ec:e3:76:24:a6:c4:af:58:a0:5f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749ea3b1e58ba060b41fc2a078f6016264759664 Validity Not Before: Dec 6 10:02:41 2025 GMT Not After : Dec 7 10:02:41 2025 GMT Subject: CN=7a128b7484aa5f45ec1d24b7662bf07b02ace343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cb:0f:5a:9d:92:ef:93:cf:d7:92:32:f2:b9: a8:fa:02:87:ff:b9:cf:62:a8:e9:7a:3b:da:36:ef: 00:da:88:db:04:b7:a6:90:c4:d6:87:d4:82:2d:d8: 7e:f0:ad:17:d1:d0:3d:6b:5a:93:64:5c:2e:bb:63: da:3c:a6:5f:99:40:8f:f3:94:15:a2:07:91:90:dc: 07:0d:8c:54:ce:74:80:a4:a6:4a:45:5e:2e:1f:ed: c9:cd:1e:49:58:00:6b:10:8a:32:18:66:44:de:db: 37:ce:06:3f:12:f6:14:a2:99:dc:a0:06:db:c6:dc: b2:43:52:ad:28:3b:89:2a:03:32:7b:c9:ba:0a:19: 2f:49:42:ac:f8:30:aa:eb:e7:49:e6:b6:bd:2b:53: c8:29:57:dc:7d:39:6d:18:1e:aa:8c:26:9f:bc:71: 46:b7:6b:68:03:d9:8c:25:6a:4a:c3:7a:4a:10:70: df:f4:85:73:db:6e:44:68:2c:07:9c:d5:a4:38:f5: b1:fa:58:4d:7a:0c:2a:cd:a6:e5:67:40:14:ef:08: 2b:f1:76:3d:d1:a2:7b:96:90:85:6a:9e:45:ba:e4: b5:c6:15:88:29:25:0f:88:81:e7:5e:84:b6:85:21: 1f:9c:38:fe:86:9f:d8:56:41:89:36:a9:16:45:ff: eb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:12:8B:74:84:AA:5F:45:EC:1D:24:B7:66:2B:F0:7B:02:AC:E3:43 X509v3 Authority Key Identifier: keyid:74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:99:e5:af:52:f5:7d:bc:23:37:52:c7:67:33:40:8c:a6:76: d0:cd:12:bd:6c:67:68:50:bd:ed:1b:06:0d:84:32:fb:0a:d8: 84:8c:3d:e0:4e:b6:69:6d:99:73:89:d9:89:a1:81:0e:31:07: 32:49:cc:1a:ad:22:4a:3d:9e:9a:53:7f:ca:33:42:40:2b:ca: 1a:35:da:e9:33:9e:c9:7d:a8:54:08:9f:05:29:65:63:b8:bd: 4a:c0:56:f8:fc:49:79:a6:37:46:f5:a7:43:9f:d8:96:2d:64: f3:1c:d9:e3:0c:b8:50:f2:d5:de:bc:c5:e2:f8:96:d9:94:ec: ef:ea:39:9d:f7:4e:23:5e:dd:85:67:b9:94:7a:55:2f:01:8e: e4:97:3b:2d:a0:3b:48:79:e9:e2:05:1b:e3:ef:fa:46:c7:a6: b1:8a:98:19:42:c8:d6:25:ec:53:63:e1:93:2f:ab:61:f2:e1: e2:39:de:ca:82:b5:00:66:d9:56:2c:c2:90:11:ef:1b:6b:5d: 71:37:62:fe:3d:a9:b3:1e:f2:5a:af:87:b3:1c:e5:03:df:59: ff:49:44:d9:cd:df:7e:04:f9:5d:8f:f0:a6:80:af:c1:12:59: ad:44:b6:69:89:a9:ec:3a:b1:a5:1f:de:e4:09:00:a1:d1:2f: f0:12:2a:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHRcm/OzjdiSmxK9YoF9DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OWVhM2IxZTU4YmEwNjBiNDFmYzJhMDc4ZjYwMTYyNjQ3 NTk2NjQwHhcNMjUxMjA2MTAwMjQxWhcNMjUxMjA3MTAwMjQxWjAzMTEwLwYDVQQD Eyg3YTEyOGI3NDg0YWE1ZjQ1ZWMxZDI0Yjc2NjJiZjA3YjAyYWNlMzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MsPWp2S75PP15Iy8rmo+gKH/7nP YqjpejvaNu8A2ojbBLemkMTWh9SCLdh+8K0X0dA9a1qTZFwuu2PaPKZfmUCP85QV ogeRkNwHDYxUznSApKZKRV4uH+3JzR5JWABrEIoyGGZE3ts3zgY/EvYUopncoAbb xtyyQ1KtKDuJKgMye8m6ChkvSUKs+DCq6+dJ5ra9K1PIKVfcfTltGB6qjCafvHFG t2toA9mMJWpKw3pKEHDf9IVz225EaCwHnNWkOPWx+lhNegwqzablZ0AU7wgr8XY9 0aJ7lpCFap5FuuS1xhWIKSUPiIHnXoS2hSEfnDj+hp/YVkGJNqkWRf/r3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHoSi3SEql9F7B0kt2Yr8HsCrONDMB8GA1UdIwQY MBaAFHSeo7Hli6BgtB/CoHj2AWJkdZZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEo2anNlV0xvR0MwSDhLZ2VQWUJZbVIxbG1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84NjI0NmEtZjAzMy00ZTQ4LWI3ZGQt MmY0MjQyYTEzZDAwLzEvZEo2anNlV0xvR0MwSDhLZ2VQWUJZbVIxbG1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy84NjI0NmEtZjAzMy00ZTQ4LWI3ZGQtMmY0MjQyYTEzZDAw LzEvZEo2anNlV0xvR0MwSDhLZ2VQWUJZbVIxbG1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZnlr1L1 fbwjN1LHZzNAjKZ20M0SvWxnaFC97RsGDYQy+wrYhIw94E62aW2Zc4nZiaGBDjEH MknMGq0iSj2emlN/yjNCQCvKGjXa6TOeyX2oVAifBSllY7i9SsBW+PxJeaY3RvWn Q5/Yli1k8xzZ4wy4UPLV3rzF4viW2ZTs7+o5nfdOI17dhWe5lHpVLwGO5Jc7LaA7 SHnp4gUb4+/6RsemsYqYGULI1iXsU2Phky+rYfLh4jneyoK1AGbZVizCkBHvG2td cTdi/j2psx7yWq+HsxzlA99Z/0lE2c3ffgT5XY/wpoCvwRJZrUS2aYmp7DqxpR/e 5AkAodEv8BIqVg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:48:16 2025 by rpki-client