This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft File: _0DYouqWdjaeboF2eUkOTlBcifM.mft (raw, json) Hash identifier: m7GyPth2SH1C2yX6Uzhv+iUkyb1+ZC5+N4XnoHbeFQE= Subject key identifier: 8D:D5:56:32:7D:D6:AD:39:6B:C5:96:CE:9B:0E:BF:01:2E:52:A7:FE Authority key identifier: FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3 Certificate issuer: /CN=ff40d8a2ea9676369e6e817679490e4e505c89f3 Certificate serial: 019AF27684229A61158E8DDA8E4D102DCD93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft Manifest number: 176B Signing time: Sat 06 Dec 2025 07:00:44 +0000 Manifest this update: Sat 06 Dec 2025 07:00:44 +0000 Manifest next update: Sun 07 Dec 2025 07:00:44 +0000 Files and hashes: 1: NfdXthzhZ_L34HPGrLUJ0q9-LtU.roa (hash: iAmQ4V4JG26ummlLKO90sg6lAyK0jGsDeoSWyDoF0l4=) 2: _0DYouqWdjaeboF2eUkOTlBcifM.crl (hash: QMwjf04tdtFE9qDZlb1wnJJKqUzN4u6RmGUqzvgFkoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:84:22:9a:61:15:8e:8d:da:8e:4d:10:2d:cd:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff40d8a2ea9676369e6e817679490e4e505c89f3 Validity Not Before: Dec 6 07:00:44 2025 GMT Not After : Dec 7 07:00:44 2025 GMT Subject: CN=8dd556327dd6ad396bc596ce9b0ebf012e52a7fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f3:a8:6b:3e:1f:9e:b1:4a:7b:0f:61:5a:a3: f6:44:cc:d9:fa:6b:ec:f1:88:fa:a3:87:83:9b:fb: 14:44:cc:43:38:e0:0c:6e:a2:58:00:0f:6a:9a:ee: cb:aa:4e:ee:cd:a5:8f:ff:02:7d:c1:58:4d:96:91: 33:2f:21:3d:75:6a:57:0e:2c:18:32:93:72:91:c0: ac:82:5f:38:c2:bf:c5:30:f2:c7:69:09:76:c7:47: 77:20:c3:16:60:e8:c1:5b:bb:32:af:eb:5f:90:f0: 80:d9:7f:51:87:21:48:10:50:b6:60:a0:16:fc:dc: 24:52:57:c2:79:bd:9a:58:82:fb:9e:aa:16:4b:60: b2:54:70:a3:16:8e:57:94:56:7d:3f:3c:20:8d:73: e2:f3:67:ff:c6:b1:e2:24:1f:85:83:eb:87:de:c3: 14:a9:95:62:f2:d0:d3:32:57:36:af:5e:0a:ae:63: bb:1f:6e:83:22:6c:09:8c:e8:ea:76:54:e8:78:fd: 55:ae:d6:a4:f8:fc:1b:39:31:3a:ae:b0:db:45:26: bb:17:b8:e4:5e:aa:0f:6e:53:9b:28:5e:9f:64:b4: 5a:b6:35:4b:57:4b:ce:ca:56:a4:f6:57:6e:5f:ae: e6:7b:27:7b:a8:b7:b9:2a:77:d8:d3:8e:20:94:1f: 88:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D5:56:32:7D:D6:AD:39:6B:C5:96:CE:9B:0E:BF:01:2E:52:A7:FE X509v3 Authority Key Identifier: keyid:FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:4a:b4:be:b1:e7:e0:50:45:84:1f:48:4d:50:cc:63:cf:ae: fb:77:66:57:52:77:0c:25:50:0a:ee:21:36:c6:6e:b6:f1:74: d4:dc:ee:4b:30:28:cc:f5:79:43:33:36:d0:3f:0d:8c:0d:9d: a4:fe:33:62:b3:dc:13:18:4f:d4:ef:0f:68:c8:0e:1a:7f:a9: 5b:76:6e:c6:0f:a4:a3:55:74:1e:0f:4c:d2:9e:4a:12:66:7d: 99:f5:a4:eb:6c:fd:00:40:41:e0:8b:c2:00:e1:81:e8:83:55: a5:af:cc:c5:95:2e:42:04:a1:2f:50:17:ac:4c:8f:2a:14:72: f5:b0:39:dd:24:c1:63:4d:66:46:f2:be:61:63:91:1f:47:fe: 23:ee:54:52:c6:0b:0e:2e:53:37:91:67:ac:dd:b8:85:3b:a5: dc:81:68:ba:dc:5a:b5:df:e6:d1:37:39:43:ef:1c:da:7b:ac: 19:02:8b:bf:45:dd:19:75:19:01:06:fd:76:fe:80:15:25:28: 77:05:32:2a:31:aa:92:1e:21:64:58:46:46:eb:f7:ad:d9:6d: 97:36:04:00:dc:d1:db:af:87:5a:49:29:ee:57:34:b4:71:6d: f9:5a:4d:f4:87:cf:1b:01:8d:c7:3b:a2:93:1c:c8:c8:32:cc: ee:85:c3:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoQimmEVjo3ajk0QLc2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDBkOGEyZWE5Njc2MzY5ZTZlODE3Njc5NDkwZTRlNTA1 Yzg5ZjMwHhcNMjUxMjA2MDcwMDQ0WhcNMjUxMjA3MDcwMDQ0WjAzMTEwLwYDVQQD Eyg4ZGQ1NTYzMjdkZDZhZDM5NmJjNTk2Y2U5YjBlYmYwMTJlNTJhN2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/Ooaz4fnrFKew9hWqP2RMzZ+mvs 8Yj6o4eDm/sURMxDOOAMbqJYAA9qmu7Lqk7uzaWP/wJ9wVhNlpEzLyE9dWpXDiwY MpNykcCsgl84wr/FMPLHaQl2x0d3IMMWYOjBW7syr+tfkPCA2X9RhyFIEFC2YKAW /NwkUlfCeb2aWIL7nqoWS2CyVHCjFo5XlFZ9PzwgjXPi82f/xrHiJB+Fg+uH3sMU qZVi8tDTMlc2r14KrmO7H26DImwJjOjqdlToeP1Vrtak+PwbOTE6rrDbRSa7F7jk XqoPblObKF6fZLRatjVLV0vOylak9lduX67meyd7qLe5KnfY044glB+ILQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3VVjJ91q05a8WWzpsOvwEuUqf+MB8GA1UdIwQY MBaAFP9A2KLqlnY2nm6BdnlJDk5QXInzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBEWW91cVdkamFlYm9GMmVVa09UbEJjaWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS83YWJmM2MtMjlmMy00M2M4LTk3OGUt YjA1MGMxMTI5MTI2LzEvXzBEWW91cVdkamFlYm9GMmVVa09UbEJjaWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS83YWJmM2MtMjlmMy00M2M4LTk3OGUtYjA1MGMxMTI5MTI2 LzEvXzBEWW91cVdkamFlYm9GMmVVa09UbEJjaWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkq0vrHn 4FBFhB9ITVDMY8+u+3dmV1J3DCVQCu4hNsZutvF01NzuSzAozPV5QzM20D8NjA2d pP4zYrPcExhP1O8PaMgOGn+pW3Zuxg+ko1V0Hg9M0p5KEmZ9mfWk62z9AEBB4IvC AOGB6INVpa/MxZUuQgShL1AXrEyPKhRy9bA53STBY01mRvK+YWORH0f+I+5UUsYL Di5TN5FnrN24hTul3IFoutxatd/m0Tc5Q+8c2nusGQKLv0XdGXUZAQb9dv6AFSUo dwUyKjGqkh4hZFhGRuv3rdltlzYEANzR26+HWkkp7lc0tHFt+VpN9IfPGwGNxzui kxzIyDLM7oXD2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:11 2025 by rpki-client