This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft File: dAThbzM9iWUMZhOsbJXTSNxLeVA.mft (raw, json) Hash identifier: PYcNrBMYBhdNZP3T75fXJqfRN7Z0rq3YXyUeGV8qewQ= Subject key identifier: 1B:C2:E9:14:49:55:0F:82:F2:38:C1:B8:F6:F7:A2:73:6F:67:13:07 Authority key identifier: 74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50 Certificate issuer: /CN=7404e16f333d89650c6613ac6c95d348dc4b7950 Certificate serial: 019AF54095CD4C6AC1E01206B1D3C9633FF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft Manifest number: 02ED Signing time: Sat 06 Dec 2025 20:00:41 +0000 Manifest this update: Sat 06 Dec 2025 20:00:41 +0000 Manifest next update: Sun 07 Dec 2025 20:00:41 +0000 Files and hashes: 1: USYf1bw7MHizcISPSt3QDNx57-c.roa (hash: hlppK+U0LprItNasoWls7BUhYE5DrUbPlgUCcoN0Ou8=) 2: dAThbzM9iWUMZhOsbJXTSNxLeVA.crl (hash: RBuEWNl13JIozl4PzoJBEFY4FVvqJeK1/NO1ZWU+VgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:95:cd:4c:6a:c1:e0:12:06:b1:d3:c9:63:3f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7404e16f333d89650c6613ac6c95d348dc4b7950 Validity Not Before: Dec 6 20:00:41 2025 GMT Not After : Dec 7 20:00:41 2025 GMT Subject: CN=1bc2e91449550f82f238c1b8f6f7a2736f671307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a5:64:b9:36:22:99:ea:bc:3b:f5:ee:e8:ac: 59:29:36:9e:4c:1d:41:f5:39:32:4f:8a:5e:9f:b8: b2:07:e6:3f:34:b8:f4:ad:7b:2b:f2:b1:0d:d5:21: ab:ed:00:bc:97:9a:ab:4a:f4:9c:f2:9d:e9:2b:f6: 84:a0:05:74:6c:f1:1b:57:4b:8d:90:42:fa:5f:7b: 89:5b:5a:fb:26:e0:1d:32:d7:1a:39:33:4a:49:44: 23:91:c7:d4:9d:fc:05:d8:79:24:48:19:43:c6:28: 90:f2:f9:89:16:9d:cf:6b:4d:fa:4e:03:c1:60:13: b4:76:a3:b1:27:b7:b7:b7:32:84:ec:40:99:4b:05: 83:c4:cf:3e:a0:a0:c8:5b:99:96:52:a5:ea:33:d5: 2d:25:41:6a:80:18:b1:40:22:15:88:5b:58:7f:c6: 5a:3f:63:90:db:0b:30:e4:70:b1:76:9a:0a:5d:5c: 9f:38:4b:4d:a4:97:f1:96:ae:7f:ab:e8:63:90:6b: 6e:7b:02:e5:df:b4:ee:97:6e:da:04:3a:97:48:22: 2c:08:1d:87:ff:4a:fd:76:c0:1b:8c:56:8f:33:51: a4:7e:00:d3:e9:3b:35:d8:f4:71:e6:bf:4a:04:c6: ec:35:8e:1c:56:b2:48:14:19:a8:76:21:11:a4:f5: cb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C2:E9:14:49:55:0F:82:F2:38:C1:B8:F6:F7:A2:73:6F:67:13:07 X509v3 Authority Key Identifier: keyid:74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:ef:64:76:25:16:1f:0b:90:8b:76:cc:eb:d4:8a:5e:c5:10: 9b:4d:06:7a:90:0e:82:84:cb:06:04:b0:d8:08:bd:65:50:fa: 5f:cd:ae:0c:af:7c:a0:27:c1:47:cd:e9:a4:ac:ce:4d:b7:5f: fe:af:31:95:1e:55:ef:1c:5e:41:59:b8:a2:b5:5f:e7:6a:a1: c7:37:d3:60:8b:80:06:fd:ff:eb:e0:d5:45:61:63:0b:8e:ef: 43:e9:b0:e5:4c:9d:a2:9a:68:cc:2d:d5:34:f2:08:02:64:34: 16:72:b8:3a:c6:5a:d0:2a:1e:64:12:d8:da:b2:09:4f:8a:f1: 19:a0:df:9f:46:41:d7:e1:68:3d:be:e1:68:77:7c:4c:9d:23: 8d:62:f1:83:bb:94:d0:d4:08:48:61:34:94:be:0d:0a:68:5f: 2a:cd:2f:0e:bf:7b:f3:b4:b1:e6:8b:34:0a:d9:92:4c:ac:0b: 83:b6:c1:37:b4:0d:9a:93:e4:2c:83:fd:be:8a:e5:3c:a4:c3: e5:8b:67:8f:86:b5:8a:18:7d:8e:a5:6c:2f:85:24:f1:28:26: 83:12:e6:a7:b1:65:a1:1b:9c:a5:5d:f7:a6:ee:e5:46:83:ae: b3:b7:fb:85:ed:d4:0c:84:95:b8:86:80:19:6b:e2:bf:45:c6: c0:e5:50:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QJXNTGrB4BIGsdPJYz/wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MDRlMTZmMzMzZDg5NjUwYzY2MTNhYzZjOTVkMzQ4ZGM0 Yjc5NTAwHhcNMjUxMjA2MjAwMDQxWhcNMjUxMjA3MjAwMDQxWjAzMTEwLwYDVQQD EygxYmMyZTkxNDQ5NTUwZjgyZjIzOGMxYjhmNmY3YTI3MzZmNjcxMzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKVkuTYimeq8O/Xu6KxZKTaeTB1B 9TkyT4pen7iyB+Y/NLj0rXsr8rEN1SGr7QC8l5qrSvSc8p3pK/aEoAV0bPEbV0uN kEL6X3uJW1r7JuAdMtcaOTNKSUQjkcfUnfwF2HkkSBlDxiiQ8vmJFp3Pa036TgPB YBO0dqOxJ7e3tzKE7ECZSwWDxM8+oKDIW5mWUqXqM9UtJUFqgBixQCIViFtYf8Za P2OQ2wsw5HCxdpoKXVyfOEtNpJfxlq5/q+hjkGtuewLl37Tul27aBDqXSCIsCB2H /0r9dsAbjFaPM1GkfgDT6Ts12PRx5r9KBMbsNY4cVrJIFBmodiERpPXLrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvC6RRJVQ+C8jjBuPb3onNvZxMHMB8GA1UdIwQY MBaAFHQE4W8zPYllDGYTrGyV00jcS3lQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEFUaGJ6TTlpV1VNWmhPc2JKWFRTTnhMZVZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xNTMyYzYtYTJmNS00OGU2LWIwMzct MThjNWViZWYyN2E4LzEvZEFUaGJ6TTlpV1VNWmhPc2JKWFRTTnhMZVZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xNTMyYzYtYTJmNS00OGU2LWIwMzctMThjNWViZWYyN2E4 LzEvZEFUaGJ6TTlpV1VNWmhPc2JKWFRTTnhMZVZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEu9kdiUW HwuQi3bM69SKXsUQm00GepAOgoTLBgSw2Ai9ZVD6X82uDK98oCfBR83ppKzOTbdf /q8xlR5V7xxeQVm4orVf52qhxzfTYIuABv3/6+DVRWFjC47vQ+mw5UydoppozC3V NPIIAmQ0FnK4OsZa0CoeZBLY2rIJT4rxGaDfn0ZB1+FoPb7haHd8TJ0jjWLxg7uU 0NQISGE0lL4NCmhfKs0vDr9787Sx5os0CtmSTKwLg7bBN7QNmpPkLIP9vorlPKTD 5Ytnj4a1ihh9jqVsL4Uk8SgmgxLmp7FloRucpV33pu7lRoOus7f7he3UDISVuIaA GWviv0XGwOVQzw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:31:42 2025 by rpki-client