This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json) Hash identifier: NsnlW2gp577ARfNfospuTe14gm+H+h2ZHODGHA39xig= Subject key identifier: 7D:24:A1:43:9A:C6:73:19:34:6C:BD:BF:67:92:D2:D9:FC:97:F4:A0 Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb Certificate serial: 019B2D0C7612223AE96670375CEDA7B463E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft Manifest number: 153F Signing time: Wed 17 Dec 2025 16:02:29 +0000 Manifest this update: Wed 17 Dec 2025 16:02:29 +0000 Manifest next update: Thu 18 Dec 2025 16:02:29 +0000 Files and hashes: 1: O2QrsRpu21AzPFWSKx6-icFIuDk.roa (hash: yYvXQaBaDt2Fw+c7tWeP9pRQ80CLvEe29rG4qx33m94=) 2: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: xq4QaYY36kX60juRFOiUmDSsocaVVaEfr/NxWl+2rq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:76:12:22:3a:e9:66:70:37:5c:ed:a7:b4:63:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb Validity Not Before: Dec 17 16:02:29 2025 GMT Not After : Dec 18 16:02:29 2025 GMT Subject: CN=7d24a1439ac67319346cbdbf6792d2d9fc97f4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fd:94:e1:2c:75:4b:75:b2:0a:75:f4:cb:ad: ac:0e:22:20:6f:6f:cd:3a:8a:1e:69:67:46:0a:5a: 65:08:97:c6:2c:93:35:16:f4:4a:b7:76:cb:b9:34: 36:d6:d6:17:c2:c3:78:2e:41:25:03:df:65:ec:76: bd:20:5a:0b:2e:6f:7d:f5:e7:5f:ff:da:49:4d:1d: dd:d6:16:0f:c2:f8:95:c3:f2:f8:2e:f4:e6:17:31: 1a:8c:8c:d4:5a:f4:86:66:bd:e8:5c:e7:17:43:87: 0c:62:ab:4c:a5:b4:12:97:72:ff:07:da:31:69:f7: 76:51:9d:b6:6f:d3:72:81:93:46:b8:9a:dd:91:95: d9:94:ad:77:2a:5c:4f:66:bf:55:38:f5:c5:e1:2e: 1a:1a:e6:4b:23:a6:a6:11:53:d5:65:c6:b4:f9:c4: 58:79:4e:39:44:30:ef:f2:0f:73:a6:e2:e5:9e:83: 86:c2:43:a5:7f:d9:2e:cf:87:45:c9:ca:28:12:b4: 47:29:a8:fa:f8:61:d2:5d:61:62:20:db:e6:ae:1f: 66:a2:a4:53:54:62:4b:e1:86:d6:13:d3:41:86:73: 0d:6d:3e:64:c7:7a:aa:c2:0d:5e:87:4a:40:29:25: 9a:ff:56:54:5c:8f:ef:71:4a:b0:2b:28:ca:54:01: 3f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:24:A1:43:9A:C6:73:19:34:6C:BD:BF:67:92:D2:D9:FC:97:F4:A0 X509v3 Authority Key Identifier: keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:f9:33:e0:4b:68:08:81:73:05:42:35:0a:ca:18:55:76:56: 84:9a:b7:64:bc:db:bc:70:95:b0:e8:ff:6e:89:23:73:07:ba: a9:00:51:f1:c9:e9:6f:30:0b:82:39:d1:06:4a:e0:c9:ca:81: c7:5a:d1:5f:1a:b8:f4:22:87:f4:6e:f8:ef:83:92:74:bd:75: a5:d0:90:9a:e3:8c:eb:47:f6:54:6b:33:22:9a:22:fe:45:9b: 1d:6d:74:b4:92:06:eb:c5:9e:6a:d5:d5:7b:cd:70:4d:39:e2: de:1f:da:28:04:ff:20:3d:ff:bd:d2:c2:33:53:5d:3a:3a:0c: a6:76:c7:14:97:5c:0a:e0:00:69:a1:96:68:40:d3:71:e7:9b: a3:b7:c0:1e:84:49:86:95:74:eb:c9:e0:dc:16:fb:d7:8a:0b: 1d:fe:6d:30:68:9b:cd:50:26:53:3d:f1:57:ac:97:b2:a1:ce: c2:fa:e5:51:30:76:5f:89:98:5b:a9:d5:54:8e:da:66:dd:de: b4:b1:ad:32:cd:20:30:10:cc:79:e2:34:7f:34:b6:f2:0b:70: e9:4d:fb:02:e9:93:ef:5d:5c:b6:74:06:fa:bc:d6:ce:5f:3f: 34:91:4b:9c:a8:fa:31:47:df:79:16:0c:bc:2a:d0:65:26:3e: c1:31:a7:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDHYSIjrpZnA3XO2ntGPkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZDAzMjUyOGJiMWQxNTk3NjZjZDc5ZGU0Nzg2ZGNkOTYy YTFmYmIwHhcNMjUxMjE3MTYwMjI5WhcNMjUxMjE4MTYwMjI5WjAzMTEwLwYDVQQD Eyg3ZDI0YTE0MzlhYzY3MzE5MzQ2Y2JkYmY2NzkyZDJkOWZjOTdmNGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf2U4Sx1S3WyCnX0y62sDiIgb2/N OooeaWdGClplCJfGLJM1FvRKt3bLuTQ21tYXwsN4LkElA99l7Ha9IFoLLm999edf /9pJTR3d1hYPwviVw/L4LvTmFzEajIzUWvSGZr3oXOcXQ4cMYqtMpbQSl3L/B9ox afd2UZ22b9NygZNGuJrdkZXZlK13KlxPZr9VOPXF4S4aGuZLI6amEVPVZca0+cRY eU45RDDv8g9zpuLlnoOGwkOlf9kuz4dFycooErRHKaj6+GHSXWFiINvmrh9moqRT VGJL4YbWE9NBhnMNbT5kx3qqwg1eh0pAKSWa/1ZUXI/vcUqwKyjKVAE/pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0koUOaxnMZNGy9v2eS0tn8l/SgMB8GA1UdIwQY MBaAFHTQMlKLsdFZdmzXneR4bc2WKh+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWE0MjItYTc5MS00ZGNmLTkwZmIt MmM5MTI3YWI0OGMzLzEvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWE0MjItYTc5MS00ZGNmLTkwZmItMmM5MTI3YWI0OGMz LzEvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4fkz4Eto CIFzBUI1CsoYVXZWhJq3ZLzbvHCVsOj/bokjcwe6qQBR8cnpbzALgjnRBkrgycqB x1rRXxq49CKH9G7474OSdL11pdCQmuOM60f2VGszIpoi/kWbHW10tJIG68WeatXV e81wTTni3h/aKAT/ID3/vdLCM1NdOjoMpnbHFJdcCuAAaaGWaEDTceebo7fAHoRJ hpV068ng3Bb714oLHf5tMGibzVAmUz3xV6yXsqHOwvrlUTB2X4mYW6nVVI7aZt3e tLGtMs0gMBDMeeI0fzS28gtw6U37AumT711ctnQG+rzWzl8/NJFLnKj6MUffeRYM vCrQZSY+wTGnwg== -----END CERTIFICATE-----Generated at Wed Dec 17 21:02:24 2025 by rpki-client