This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft File: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft (raw, json) Hash identifier: DA4a+eX0dPXj8fi2o7ytFa/8JKcfV3+FhFh+Z1Ow5Fw= Subject key identifier: 21:D7:2F:21:1F:79:4A:4B:C7:41:3E:70:CA:70:61:15:9F:76:26:0A Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC Certificate issuer: /CN=776405e0283743cf52180d5b13812dfba3ded7fc Certificate serial: 019AF540C3530D47C22F82602E8459D2214F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 20:00:53 +0000 Manifest this update: Sat 06 Dec 2025 20:00:53 +0000 Manifest next update: Sun 07 Dec 2025 20:00:53 +0000 Files and hashes: 1: 8sj8akoHRTPz11r3jLvMNT_NbaE.roa (hash: P2s2WOOKeXdgHhsxpLmfEClu5cRmFqEQjIJDZyeuzkg=) 2: WGokscrqIFlveSQ3XENDC_qxhbE.roa (hash: +LF+EeNcjsZJ5uw2CKGcqJlYFeUGcZcbeYs75HR4O74=) 3: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl (hash: 7PxLOuvNB5fIumSuTUTWwjak4UPcc9HMTx++gFNFowA=) 4: dnAa52jzMLokgprr8j83t7M0O7A.roa (hash: RXb076NQLFmuO+ZHzSd4Sn5TggUypoGBas2+Hq6jEsg=) 5: wIY_dvatExTHxCY_kuzX-QET3Ok.roa (hash: kjV0Ojugy4LwLs+YAfKt1FqrpFMJ2uDqQ/zPE3W7Ris=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:c3:53:0d:47:c2:2f:82:60:2e:84:59:d2:21:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc Validity Not Before: Dec 6 20:00:53 2025 GMT Not After : Dec 7 20:00:53 2025 GMT Subject: CN=21d72f211f794a4bc7413e70ca7061159f76260a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9c:51:dd:d9:24:f3:25:89:71:9f:95:db:d3: 16:f0:74:d8:dc:fc:17:56:df:a6:87:7f:8e:54:fe: ae:9d:05:3a:82:e9:80:31:2b:e5:68:39:e5:50:d0: 93:ec:b4:83:e9:0b:62:a9:7f:31:31:14:ca:af:c4: 9a:89:fb:dd:e2:9a:c5:93:a5:0c:2b:fc:2c:1a:a9: 45:0b:b1:15:97:1d:db:21:8f:2e:0f:fa:cc:c0:b9: a0:fd:66:20:ae:62:bb:01:58:08:e6:68:e9:a8:2c: 64:2a:2b:31:58:06:38:f0:74:fe:ca:e3:25:2d:95: 7e:ee:95:60:1f:83:dc:a7:8d:13:82:48:76:c0:22: 75:02:61:f0:1c:27:d3:0b:f2:80:4c:78:ff:98:be: 24:4a:5b:af:52:f6:65:c8:b4:55:31:b3:f7:1d:cd: e4:b8:2f:cb:32:7b:fb:a5:d4:62:53:71:72:a1:86: 65:92:2f:b3:4e:b8:4f:fd:35:b0:37:db:aa:3e:94: 6b:24:3e:bb:12:e9:3c:a1:5e:6f:9e:28:b3:81:00: d9:86:25:03:2e:ad:e8:ca:33:0f:26:fb:5d:66:fc: ab:cf:11:63:f1:45:5b:a1:77:68:26:8a:f0:e8:28: e1:b2:e9:37:f6:b9:8a:6b:93:39:b8:c7:5e:af:7d: 89:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D7:2F:21:1F:79:4A:4B:C7:41:3E:70:CA:70:61:15:9F:76:26:0A X509v3 Authority Key Identifier: keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:59:23:f0:9c:a9:d3:8e:b1:a2:2e:3d:60:0e:87:87:18:0f: 5f:cd:bd:f3:53:33:7b:f7:de:e7:05:8c:6b:e6:97:35:5e:f8: f6:14:23:ed:2b:ff:f7:a4:aa:88:a7:ce:de:70:4c:db:92:26: 0f:cf:f9:b2:ab:ab:f4:f0:dd:b7:1f:c1:b5:d3:29:06:7f:61: 78:45:8c:3a:c7:94:15:01:eb:24:60:28:58:20:d1:53:f7:8b: f7:20:43:26:91:0e:97:34:06:1b:4d:b8:72:5d:aa:3b:33:38: 61:56:b1:4f:f0:51:3b:76:ca:15:4e:d4:5d:cd:e6:88:a5:15: 3d:84:91:9a:ac:a0:10:e2:04:16:fc:c3:42:d2:7b:88:42:d3: 27:cc:cb:47:1d:0b:3f:a7:4a:e0:55:2e:64:be:03:5b:21:80: 1a:97:ad:d8:0e:5a:7b:9d:ab:28:27:7c:17:c0:a0:f2:79:63: cd:e6:1a:43:07:f0:75:5b:8b:21:cf:df:a1:e9:aa:e7:d6:ff: 60:9e:1c:a7:6a:3c:82:49:3d:d7:cd:4c:0b:11:7a:72:71:35: 83:e1:3e:7b:e6:72:d7:56:6a:44:15:ea:42:65:c4:a1:ec:b0: f7:8f:58:e6:12:8c:32:1a:38:8c:68:50:b6:b8:d1:03:c2:6f: a2:8a:c0:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QMNTDUfCL4JgLoRZ0iFPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NjQwNWUwMjgzNzQzY2Y1MjE4MGQ1YjEzODEyZGZiYTNk ZWQ3ZmMwHhcNMjUxMjA2MjAwMDUzWhcNMjUxMjA3MjAwMDUzWjAzMTEwLwYDVQQD EygyMWQ3MmYyMTFmNzk0YTRiYzc0MTNlNzBjYTcwNjExNTlmNzYyNjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZxR3dkk8yWJcZ+V29MW8HTY3PwX Vt+mh3+OVP6unQU6gumAMSvlaDnlUNCT7LSD6QtiqX8xMRTKr8Saifvd4prFk6UM K/wsGqlFC7EVlx3bIY8uD/rMwLmg/WYgrmK7AVgI5mjpqCxkKisxWAY48HT+yuMl LZV+7pVgH4Pcp40Tgkh2wCJ1AmHwHCfTC/KATHj/mL4kSluvUvZlyLRVMbP3Hc3k uC/LMnv7pdRiU3FyoYZlki+zTrhP/TWwN9uqPpRrJD67Euk8oV5vniizgQDZhiUD Lq3oyjMPJvtdZvyrzxFj8UVboXdoJorw6Cjhsuk39rmKa5M5uMder32JFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHXLyEfeUpLx0E+cMpwYRWfdiYKMB8GA1UdIwQY MBaAFHdkBeAoN0PPUhgNWxOBLfuj3tf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDJRRjRDZzNRODlTR0ExYkU0RXQtNlBlMV93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8zNjM1ODYtOWI4MC00NTdiLWJkZjAt NmNhNTJlMDI5Y2JlLzEvZDJRRjRDZzNRODlTR0ExYkU0RXQtNlBlMV93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8zNjM1ODYtOWI4MC00NTdiLWJkZjAtNmNhNTJlMDI5Y2Jl LzEvZDJRRjRDZzNRODlTR0ExYkU0RXQtNlBlMV93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1kj8Jyp 046xoi49YA6HhxgPX82981Mze/fe5wWMa+aXNV749hQj7Sv/96SqiKfO3nBM25Im D8/5squr9PDdtx/BtdMpBn9heEWMOseUFQHrJGAoWCDRU/eL9yBDJpEOlzQGG024 cl2qOzM4YVaxT/BRO3bKFU7UXc3miKUVPYSRmqygEOIEFvzDQtJ7iELTJ8zLRx0L P6dK4FUuZL4DWyGAGpet2A5ae52rKCd8F8Cg8nljzeYaQwfwdVuLIc/foemq59b/ YJ4cp2o8gkk9181MCxF6cnE1g+E+e+Zy11ZqRBXqQmXEoeyw949Y5hKMMho4jGhQ trjRA8JvoorAnA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:18:12 2025 by rpki-client