This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft File: dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json) Hash identifier: R0CdfL+kcaaVtMnGORZmUDHv1Ggo7d6ZaVMgBP2eUVY= Subject key identifier: C2:C0:7E:E8:58:D6:B8:A5:0F:17:B3:9B:B8:73:AD:B4:75:88:2C:EE Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b Certificate serial: 019B292FF37460FD7CA45AD3466A345D4496 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft Manifest number: 15A3 Signing time: Tue 16 Dec 2025 22:02:46 +0000 Manifest this update: Tue 16 Dec 2025 22:02:46 +0000 Manifest next update: Wed 17 Dec 2025 22:02:46 +0000 Files and hashes: 1: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: 0PINmFyu8F3GomLjv3zMZiUO+PkgbSH/dcc//Iz4Ffg=) 2: ecFLrFSYazGNpMwtdUC2GTyB7Ls.roa (hash: 9V1D5AZ/eHVRt4YDKcmTOE8v9iNuXaOV/i0Ye/mdU9E=) 3: zeZfDF6FQVXfyXUfk9yRfeoJZIA.roa (hash: DtxqGawsrFVZx4HNzS+S5CsdD6flwYPGqAxKv36rkJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2f:f3:74:60:fd:7c:a4:5a:d3:46:6a:34:5d:44:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b Validity Not Before: Dec 16 22:02:46 2025 GMT Not After : Dec 17 22:02:46 2025 GMT Subject: CN=c2c07ee858d6b8a50f17b39bb873adb475882cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:94:34:5d:aa:04:88:17:0e:2f:34:ff:9f: ae:b9:5d:ef:b9:66:e4:c1:5d:89:e3:33:69:4f:b1: 5f:f6:37:85:dc:c0:e0:14:a1:87:74:7b:4e:69:3d: 73:b8:60:61:e3:6f:89:91:ea:f0:c2:b8:fc:fc:5f: 5a:9f:54:01:b3:70:77:9d:bb:8d:7c:cd:d2:86:dd: 48:e8:3b:a2:25:7d:92:19:af:5c:52:c7:7a:9c:65: ab:13:b7:65:14:27:0c:1c:94:82:1c:ff:f8:86:54: 0e:3c:48:74:d4:bd:c5:fc:81:a4:7d:29:c1:f1:f3: 0f:d8:df:4b:65:88:dd:f5:f8:ab:eb:05:66:c4:77: 3d:06:3c:5e:8b:d7:9f:cf:06:e7:c3:42:af:f2:68: 37:83:9a:a6:d8:d6:09:1f:cf:66:87:c2:0c:f1:b8: fe:cc:15:df:2f:77:57:77:25:04:87:32:3e:79:52: c8:0d:e9:1c:ff:93:fa:b0:85:f3:24:4a:ec:5a:5a: 8b:cc:a2:76:93:b5:31:c1:31:ec:ee:08:40:ba:96: 5c:5b:d0:91:9e:2b:9f:83:ef:db:84:83:ae:f9:a4: 9e:ab:d4:1a:ea:56:a0:22:b8:93:10:0e:8e:a6:28: 7c:03:6f:85:39:9d:58:41:75:6e:6e:fa:a1:47:d2: 62:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C0:7E:E8:58:D6:B8:A5:0F:17:B3:9B:B8:73:AD:B4:75:88:2C:EE X509v3 Authority Key Identifier: keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:93:b1:d4:8c:4e:1f:09:f8:57:8a:7c:eb:71:3e:9e:93:85: fe:6e:71:01:4c:d0:e7:de:13:ac:94:28:ce:ca:93:33:89:72: 63:f9:22:b7:29:57:20:be:68:d1:a5:3d:f3:33:1b:37:e0:3b: 88:08:4a:27:4f:2f:2f:c1:15:24:47:ba:f0:65:a4:f6:f1:c9: 3f:4b:36:78:bf:45:c5:0e:ba:bd:38:fc:9f:7b:0b:cd:9e:2a: 3e:17:7c:e3:e5:ff:8e:6f:50:e2:87:4b:26:19:1c:b2:49:73: 08:ef:09:1d:f3:70:50:0c:90:b5:74:2e:a6:ce:7b:fc:6e:3c: 12:98:3b:42:a9:1a:fa:4a:0e:fa:17:ec:9f:74:27:54:20:bb: 2e:46:0f:b8:c9:6b:04:45:b4:4a:90:26:9e:00:90:94:8a:61: ef:64:e6:b4:b3:15:9e:59:d0:5a:3f:5c:26:aa:17:b6:69:ca: 30:6b:90:5f:d4:f6:b3:15:9a:f4:5c:8b:7b:40:ee:cd:fb:f1: 9e:8f:1b:d7:71:f6:61:ad:75:97:cd:75:98:77:03:5a:c4:38: 36:22:0c:39:76:cd:02:be:dd:8c:c6:da:7f:a9:af:01:9a:92: b2:b7:68:44:9b:05:89:b6:d3:3f:29:f9:c1:7c:bb:6f:cf:eb: 4b:fa:0e:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspL/N0YP18pFrTRmo0XUSWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZjFhNzYzNzQ1YzI1ZGFkMjhmNGE4MTE2Njg4ZTgyY2Ux MjAyOGIwHhcNMjUxMjE2MjIwMjQ2WhcNMjUxMjE3MjIwMjQ2WjAzMTEwLwYDVQQD EyhjMmMwN2VlODU4ZDZiOGE1MGYxN2IzOWJiODczYWRiNDc1ODgyY2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujuUNF2qBIgXDi80/5+uuV3vuWbk wV2J4zNpT7Ff9jeF3MDgFKGHdHtOaT1zuGBh42+Jkerwwrj8/F9an1QBs3B3nbuN fM3Sht1I6DuiJX2SGa9cUsd6nGWrE7dlFCcMHJSCHP/4hlQOPEh01L3F/IGkfSnB 8fMP2N9LZYjd9fir6wVmxHc9Bjxei9efzwbnw0Kv8mg3g5qm2NYJH89mh8IM8bj+ zBXfL3dXdyUEhzI+eVLIDekc/5P6sIXzJErsWlqLzKJ2k7UxwTHs7ghAupZcW9CR niufg+/bhIOu+aSeq9Qa6lagIriTEA6Opih8A2+FOZ1YQXVubvqhR9Ji9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLAfuhY1rilDxezm7hzrbR1iCzuMB8GA1UdIwQY MBaAFHXxp2N0XCXa0o9KgRZojoLOEgKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGZHblkzUmNKZHJTajBxQkZtaU9nczRTQW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85ODBlNjYtMzYzMS00ZmRlLThlMmQt Yzg0OWJjMGYzNTliLzEvZGZHblkzUmNKZHJTajBxQkZtaU9nczRTQW9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85ODBlNjYtMzYzMS00ZmRlLThlMmQtYzg0OWJjMGYzNTli LzEvZGZHblkzUmNKZHJTajBxQkZtaU9nczRTQW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipOx1IxO Hwn4V4p863E+npOF/m5xAUzQ594TrJQozsqTM4lyY/kitylXIL5o0aU98zMbN+A7 iAhKJ08vL8EVJEe68GWk9vHJP0s2eL9FxQ66vTj8n3sLzZ4qPhd84+X/jm9Q4odL JhkcsklzCO8JHfNwUAyQtXQups57/G48Epg7Qqka+koO+hfsn3QnVCC7LkYPuMlr BEW0SpAmngCQlIph72TmtLMVnlnQWj9cJqoXtmnKMGuQX9T2sxWa9FyLe0Duzfvx no8b13H2Ya11l811mHcDWsQ4NiIMOXbNAr7djMbaf6mvAZqSsrdoRJsFibbTPyn5 wXy7b8/rS/oOuQ== -----END CERTIFICATE-----Generated at Wed Dec 17 00:29:58 2025 by rpki-client