This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft File: dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft (raw, json) Hash identifier: bbbthmnHBYnd41YLI3RbtSkP1SBoiw2X7YTm25sVV/s= Subject key identifier: D4:10:BC:C8:81:20:1F:28:47:4D:EE:BE:DB:DB:BD:3E:D4:C4:19:22 Authority key identifier: 74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4 Certificate issuer: /CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4 Certificate serial: 019AF208DBD78E66A2ED9F928AFC33CA4614 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: NVfSq2DY4cD3_FemKxq3kFWdNbQ.roa (hash: FrMf82dKiOwRXnPTbOvJcW2xGJFytZk+POr0sPYgteE=) 2: dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl (hash: xnty8VOmMBiiRnNYXrjcG5rMNUmeflLZzbwh0Hs3la8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:db:d7:8e:66:a2:ed:9f:92:8a:fc:33:ca:46:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4 Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=d410bcc881201f28474deebedbdbbd3ed4c41922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c6:09:f6:76:7c:ed:00:6c:9d:7b:5b:ed:44: b9:2c:2d:52:0d:c1:57:f5:15:ba:57:5a:15:f0:4d: fe:49:9e:73:25:7b:77:e5:bf:ba:cf:a4:30:c2:e2: c5:7b:c0:3f:90:62:8e:02:43:2e:8f:d8:69:cc:c9: 08:ca:d7:a8:3f:21:76:e9:4f:ea:52:7d:01:15:14: 26:25:95:ab:82:e0:86:ae:cc:de:f0:b8:7c:2d:2b: 84:e5:e9:b1:f2:ac:09:9e:b6:a1:2f:83:16:2b:8a: ab:f4:1d:a6:07:8c:c5:fa:ff:af:4f:2e:4a:bf:6e: dc:21:ac:0a:00:21:1a:69:bb:a5:80:15:d9:06:3d: 30:22:04:d5:7e:1d:18:a5:ec:32:6b:f6:ee:da:e9: 9f:bc:f2:2a:8b:87:18:02:e3:83:96:56:67:2e:82: 9b:5e:39:6a:55:c7:64:e5:09:a2:da:c7:dc:69:7b: 9b:8b:ac:3f:ad:88:1a:d2:15:53:a4:dc:5f:45:c7: e0:aa:a1:9f:28:b9:a8:48:44:9b:eb:6b:88:54:f0: e9:7f:e1:8c:b1:d9:28:bc:46:36:c6:2d:72:cb:b4: 43:66:3c:e4:b8:03:b1:28:b5:e0:0f:e8:34:04:39: 5f:ce:cf:4f:96:57:77:e9:93:6a:bb:73:2a:48:75: 5a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:10:BC:C8:81:20:1F:28:47:4D:EE:BE:DB:DB:BD:3E:D4:C4:19:22 X509v3 Authority Key Identifier: keyid:74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:58:97:ac:43:88:a9:5b:98:87:58:ae:e1:a9:cb:55:b1:43: a8:52:41:fc:80:ca:fe:50:30:78:aa:b6:83:68:cd:56:c9:51: f8:b1:28:5f:e3:c3:85:44:1c:ea:c0:5a:2f:ca:11:ff:d0:64: d2:de:7a:89:3d:27:6b:9a:85:7f:a5:79:20:57:be:03:41:d9: 65:4a:6b:79:8e:fb:3d:61:e0:d3:1e:41:65:df:0c:74:26:5e: d4:df:d7:0f:42:98:e9:b1:10:80:63:56:35:60:e9:f6:8a:e7: 0b:9e:b6:5a:ba:ff:1a:75:f0:cd:6c:04:35:df:6f:ee:dd:6b: 4a:fe:fd:53:33:8e:34:64:cd:19:ff:57:1a:43:42:8b:be:1a: 37:93:99:c3:71:09:84:d3:0a:c4:77:ce:29:64:1b:0f:e9:31: 4d:a9:c0:3d:d8:11:78:b9:8a:ee:59:15:8a:b0:15:53:92:c3: 39:10:ef:5d:cc:5a:1f:ab:54:f1:ea:2b:7c:35:3a:1b:47:5b: f7:52:3f:47:e0:c6:5b:ef:79:7a:8c:3f:c2:4e:94:33:a0:f4: f7:ec:3f:84:ba:a8:e4:f7:d4:42:7e:13:a6:92:fa:ca:17:f2: 9e:7f:74:ac:29:cf:e5:40:61:4c:96:85:59:fc:84:3f:06:64: 9b:a8:61:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNvXjmai7Z+SivwzykYUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NzBkZmMwYmI1Y2UwNmQ4NmRmMjRmZTNjYWE0YjRlZjM0 MTc4ZjQwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD EyhkNDEwYmNjODgxMjAxZjI4NDc0ZGVlYmVkYmRiYmQzZWQ0YzQxOTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcYJ9nZ87QBsnXtb7US5LC1SDcFX 9RW6V1oV8E3+SZ5zJXt35b+6z6QwwuLFe8A/kGKOAkMuj9hpzMkIyteoPyF26U/q Un0BFRQmJZWrguCGrsze8Lh8LSuE5emx8qwJnrahL4MWK4qr9B2mB4zF+v+vTy5K v27cIawKACEaabulgBXZBj0wIgTVfh0Ypewya/bu2umfvPIqi4cYAuODllZnLoKb XjlqVcdk5Qmi2sfcaXubi6w/rYga0hVTpNxfRcfgqqGfKLmoSESb62uIVPDpf+GM sdkovEY2xi1yy7RDZjzkuAOxKLXgD+g0BDlfzs9Plld36ZNqu3MqSHValwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQQvMiBIB8oR03uvtvbvT7UxBkiMB8GA1UdIwQY MBaAFHRw38C7XOBtht8k/jyqS07zQXj0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEhEZndMdGM0RzJHM3lULVBLcExUdk5CZVBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8wYzYxMTEtNThmNy00Yjc1LWJjYWIt OTBiYzQ2MjRjN2IyLzEvZEhEZndMdGM0RzJHM3lULVBLcExUdk5CZVBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8wYzYxMTEtNThmNy00Yjc1LWJjYWItOTBiYzQ2MjRjN2Iy LzEvZEhEZndMdGM0RzJHM3lULVBLcExUdk5CZVBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANViXrEOI qVuYh1iu4anLVbFDqFJB/IDK/lAweKq2g2jNVslR+LEoX+PDhUQc6sBaL8oR/9Bk 0t56iT0na5qFf6V5IFe+A0HZZUpreY77PWHg0x5BZd8MdCZe1N/XD0KY6bEQgGNW NWDp9ornC562Wrr/GnXwzWwENd9v7t1rSv79UzOONGTNGf9XGkNCi74aN5OZw3EJ hNMKxHfOKWQbD+kxTanAPdgReLmK7lkVirAVU5LDORDvXcxaH6tU8eorfDU6G0db 91I/R+DGW+95eow/wk6UM6D09+w/hLqo5PfUQn4TppL6yhfynn90rCnP5UBhTJaF WfyEPwZkm6hhqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:46 2025 by rpki-client