This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json) Hash identifier: tykoCdBTNlJmJUh5Cv9Tc231Ebyr3vGsBDEiUoFBFG0= Subject key identifier: 8F:9A:AB:58:B3:A5:CD:16:F8:21:C2:0C:A8:16:54:76:87:C4:9C:CF Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb Certificate serial: 019AF31CD0AAA336400D3586FC96A72A9564 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft Manifest number: 1521 Signing time: Sat 06 Dec 2025 10:02:23 +0000 Manifest this update: Sat 06 Dec 2025 10:02:23 +0000 Manifest next update: Sun 07 Dec 2025 10:02:23 +0000 Files and hashes: 1: O2QrsRpu21AzPFWSKx6-icFIuDk.roa (hash: yYvXQaBaDt2Fw+c7tWeP9pRQ80CLvEe29rG4qx33m94=) 2: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: dBw1sYD8dAV4AHWchwW2N2YdjZj1U5pjXkagkAK7MVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:d0:aa:a3:36:40:0d:35:86:fc:96:a7:2a:95:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb Validity Not Before: Dec 6 10:02:23 2025 GMT Not After : Dec 7 10:02:23 2025 GMT Subject: CN=8f9aab58b3a5cd16f821c20ca816547687c49ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:55:2b:db:01:77:df:21:72:0b:b3:b8:c9:a1: e7:ae:a1:60:c1:af:19:20:0d:69:5a:e0:77:5d:b3: c7:60:45:4e:64:2f:44:88:cd:47:4b:c5:c9:02:71: 8b:85:e7:c4:08:ec:89:62:d8:c9:bf:c0:1f:05:b8: 4c:40:e8:2d:74:63:43:af:24:bb:35:27:88:25:5f: da:cc:f3:8b:5a:9a:6a:04:33:ed:da:70:98:9a:79: b4:cb:9f:bb:f0:54:9e:1c:14:3e:65:62:c7:47:d2: e0:a8:2b:a8:f1:a5:08:d8:32:21:ae:08:ba:20:ab: 94:6d:32:a9:1a:3b:67:9d:38:c2:1b:be:14:b7:d5: cb:60:0e:30:ff:df:65:7a:92:4e:2d:85:53:1b:ac: 04:28:70:87:17:a5:98:47:04:54:5c:8b:b9:2b:81: f8:5b:30:6b:56:26:30:88:d8:cb:97:b1:85:42:13: 31:33:30:7c:2d:b0:90:c4:47:98:67:65:b2:90:ad: f5:83:f7:70:2e:0d:a2:32:ed:70:98:f1:4a:ff:3f: d4:3d:ea:8f:f6:23:7b:40:4a:0b:95:4b:91:df:d3: ed:fe:d1:18:44:a5:81:8c:48:a4:09:66:02:6c:fe: ec:95:5b:11:55:49:81:f7:ce:bc:a5:81:1e:bc:bd: 0e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9A:AB:58:B3:A5:CD:16:F8:21:C2:0C:A8:16:54:76:87:C4:9C:CF X509v3 Authority Key Identifier: keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ee:bc:bf:49:88:99:1b:9b:e3:18:62:1f:cb:a3:36:28:e7:ed: 43:c1:04:4d:b4:f9:43:54:7d:05:a0:a1:4c:d5:66:45:96:f8: 58:ed:42:09:2b:13:25:10:de:12:54:8d:b3:dc:cf:0b:5b:8a: 42:4f:b2:26:29:cb:cd:a5:cc:33:41:20:f9:b1:da:ad:af:14: 54:2b:a9:50:10:8c:15:f9:9c:4b:ab:1f:1d:39:16:63:f9:c7: ec:42:71:93:48:e5:11:cf:89:d0:31:36:0a:f8:32:b5:0c:f5: 75:25:c9:c7:4c:e1:29:36:f6:0a:49:82:96:2f:86:0e:6a:d2: 64:4b:16:ad:d4:c4:e0:01:dc:87:dc:a4:5c:bf:88:56:3e:0b: aa:61:af:65:23:a8:bb:d6:a2:53:c0:43:e3:43:76:09:90:89: 05:82:ee:ab:dd:86:17:11:ea:5e:3f:48:0a:11:0e:fd:87:52: 5b:0b:ff:11:4e:3f:aa:22:cb:2d:b1:19:c5:b8:82:fd:4a:21: 0a:7c:3d:a6:96:ae:7e:36:3b:36:9b:e5:37:de:d7:02:4a:d4: 91:ff:6a:bd:47:23:80:e0:81:2a:9b:79:66:85:9f:19:00:5f: e5:82:0d:18:26:81:88:23:2d:97:e5:94:52:b0:e5:6c:11:7c: 4c:b4:47:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHNCqozZADTWG/JanKpVkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZDAzMjUyOGJiMWQxNTk3NjZjZDc5ZGU0Nzg2ZGNkOTYy YTFmYmIwHhcNMjUxMjA2MTAwMjIzWhcNMjUxMjA3MTAwMjIzWjAzMTEwLwYDVQQD Eyg4ZjlhYWI1OGIzYTVjZDE2ZjgyMWMyMGNhODE2NTQ3Njg3YzQ5Y2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFUr2wF33yFyC7O4yaHnrqFgwa8Z IA1pWuB3XbPHYEVOZC9EiM1HS8XJAnGLhefECOyJYtjJv8AfBbhMQOgtdGNDryS7 NSeIJV/azPOLWppqBDPt2nCYmnm0y5+78FSeHBQ+ZWLHR9LgqCuo8aUI2DIhrgi6 IKuUbTKpGjtnnTjCG74Ut9XLYA4w/99lepJOLYVTG6wEKHCHF6WYRwRUXIu5K4H4 WzBrViYwiNjLl7GFQhMxMzB8LbCQxEeYZ2WykK31g/dwLg2iMu1wmPFK/z/UPeqP 9iN7QEoLlUuR39Pt/tEYRKWBjEikCWYCbP7slVsRVUmB9868pYEevL0OEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+aq1izpc0W+CHCDKgWVHaHxJzPMB8GA1UdIwQY MBaAFHTQMlKLsdFZdmzXneR4bc2WKh+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWE0MjItYTc5MS00ZGNmLTkwZmIt MmM5MTI3YWI0OGMzLzEvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWE0MjItYTc5MS00ZGNmLTkwZmItMmM5MTI3YWI0OGMz LzEvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7ry/SYiZ G5vjGGIfy6M2KOftQ8EETbT5Q1R9BaChTNVmRZb4WO1CCSsTJRDeElSNs9zPC1uK Qk+yJinLzaXMM0Eg+bHara8UVCupUBCMFfmcS6sfHTkWY/nH7EJxk0jlEc+J0DE2 CvgytQz1dSXJx0zhKTb2CkmCli+GDmrSZEsWrdTE4AHch9ykXL+IVj4LqmGvZSOo u9aiU8BD40N2CZCJBYLuq92GFxHqXj9IChEO/YdSWwv/EU4/qiLLLbEZxbiC/Uoh Cnw9ppaufjY7NpvlN97XAkrUkf9qvUcjgOCBKpt5ZoWfGQBf5YINGCaBiCMtl+WU UrDlbBF8TLRHRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:38:37 2025 by rpki-client