This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json) Hash identifier: eHN7gyEjPeCvec6i7Kd/YUlu8c87V79mN0mbbVyZ3H0= Subject key identifier: 4A:2F:41:C3:6D:11:7C:68:22:B2:D8:2C:30:CD:05:C5:35:18:14:FA Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77 Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77 Certificate serial: 019AF1D241C8CEBB804C1EF960BF3DF54402 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 04:01:19 +0000 Manifest this update: Sat 06 Dec 2025 04:01:19 +0000 Manifest next update: Sun 07 Dec 2025 04:01:19 +0000 Files and hashes: 1: WntKpaBL0rwf0OHtGIxbqp43a48.roa (hash: RD+6zKliyi529qWw5SlqL86NJOiZz+f7ljpnnMAUmvo=) 2: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: l+QWJ6tbarxrw4XscUVy8qo1d6TNOgGRIrn2M/E71i4=) 3: wGTkAR_0sF92lgaxXY9nSUR4GIc.roa (hash: eDBRIXJLntwza/xwaubebQOnZv9qj50gWoqkIryMxT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:41:c8:ce:bb:80:4c:1e:f9:60:bf:3d:f5:44:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77 Validity Not Before: Dec 6 04:01:19 2025 GMT Not After : Dec 7 04:01:19 2025 GMT Subject: CN=4a2f41c36d117c6822b2d82c30cd05c5351814fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c0:7c:f1:9e:b0:8a:40:07:79:2f:dd:7f:13: c1:7a:cd:3e:bc:96:60:31:01:9b:a4:9d:02:50:73: f2:9e:99:d3:6b:c8:da:8c:3c:10:b7:17:d6:13:8c: 02:9f:e6:21:74:c0:4e:43:6a:67:ee:a0:43:1f:5d: 2c:54:3c:69:c1:2f:6c:78:ff:39:8d:2c:7e:0f:0f: ad:a9:ce:e4:e4:08:78:ba:c2:2d:e2:84:3b:5c:59: 07:a8:18:84:35:fe:35:6e:b7:cd:02:ce:d7:df:9a: 7f:34:08:a7:00:c7:f0:bc:f5:07:6e:93:ea:2e:4a: 1a:2a:76:34:f8:b6:8c:2c:00:45:b4:af:16:78:75: 9b:38:1d:57:9e:a6:6b:93:39:5a:c6:8d:70:70:3c: 0a:5e:88:8b:33:f4:cc:f8:88:9c:60:d3:48:bc:03: 65:54:e9:57:e9:04:ce:37:25:29:8e:c5:86:ec:76: 17:45:21:4c:2b:59:1f:27:1e:00:a7:81:e5:bd:df: b7:f7:57:1c:13:24:62:41:77:3c:fc:f0:39:0b:19: cd:e7:f7:7d:4d:11:f1:43:70:6a:ea:97:1c:09:1f: e4:0f:76:7f:53:81:98:1b:77:7f:90:7a:dd:24:5b: f5:02:79:70:ce:97:2a:01:69:0f:56:e4:09:5e:2a: 5c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2F:41:C3:6D:11:7C:68:22:B2:D8:2C:30:CD:05:C5:35:18:14:FA X509v3 Authority Key Identifier: keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f1:ed:8f:e4:6b:a2:7e:cf:91:86:0e:2a:e4:e1:67:5e:e0:fd: ed:c4:b3:cb:10:94:3b:71:38:bf:77:ce:05:91:df:5a:f7:ae: 04:46:3a:f2:fc:fb:e3:ea:f6:b5:33:cc:34:02:87:97:00:14: b8:a9:78:c8:96:96:04:4d:54:58:dc:29:11:97:65:76:77:6e: 78:11:04:19:4a:c8:d5:b0:d2:30:c5:d2:83:43:0d:e7:19:08: ec:06:da:bb:4a:e0:b5:26:17:e2:ec:e0:41:c7:28:5b:79:3b: 0d:d3:c2:21:67:75:1f:1e:79:16:24:01:73:a7:39:da:7e:35: 71:a7:84:05:f3:51:ea:16:e1:e8:be:67:85:c3:1a:a4:98:75: 7e:98:e2:bd:c4:9d:a8:45:8f:36:f1:85:58:fa:db:33:fa:e1: 0b:35:dc:9d:6a:c6:a5:0e:21:a8:e4:91:bc:26:13:2c:cf:6d: c5:13:c3:b7:bc:f2:f2:b2:44:dc:71:2d:44:24:56:c7:a9:cd: a3:7a:80:86:3b:03:b5:14:a8:6d:35:84:f7:5c:4e:87:a9:ac: 31:db:bd:93:1f:60:38:8f:dc:52:a6:e7:22:e5:ae:a5:73:54: 0c:15:9d:a6:ae:f1:a7:cc:a5:af:a2:6d:ab:da:ac:3d:8d:5a: 72:95:96:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kHIzruATB75YL899UQCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ODBjZDRlNzRmMTg1YThmMWFkNDA1MjFiNjExYjc0ZDUx NmJmNzcwHhcNMjUxMjA2MDQwMTE5WhcNMjUxMjA3MDQwMTE5WjAzMTEwLwYDVQQD Eyg0YTJmNDFjMzZkMTE3YzY4MjJiMmQ4MmMzMGNkMDVjNTM1MTgxNGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMB88Z6wikAHeS/dfxPBes0+vJZg MQGbpJ0CUHPynpnTa8jajDwQtxfWE4wCn+YhdMBOQ2pn7qBDH10sVDxpwS9seP85 jSx+Dw+tqc7k5Ah4usIt4oQ7XFkHqBiENf41brfNAs7X35p/NAinAMfwvPUHbpPq LkoaKnY0+LaMLABFtK8WeHWbOB1XnqZrkzlaxo1wcDwKXoiLM/TM+IicYNNIvANl VOlX6QTONyUpjsWG7HYXRSFMK1kfJx4Ap4Hlvd+391ccEyRiQXc8/PA5CxnN5/d9 TRHxQ3Bq6pccCR/kD3Z/U4GYG3d/kHrdJFv1AnlwzpcqAWkPVuQJXipcZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEovQcNtEXxoIrLYLDDNBcU1GBT6MB8GA1UdIwQY MBaAFHeAzU508YWo8a1AUhthG3TVFr93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDRETlRuVHhoYWp4clVCU0cyRWJkTlVXdjNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9mZjU5ZjctYmZjMy00OTg5LThiOGQt ZTk4ZDA1MmNlYTdmLzEvZDRETlRuVHhoYWp4clVCU0cyRWJkTlVXdjNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9mZjU5ZjctYmZjMy00OTg5LThiOGQtZTk4ZDA1MmNlYTdm LzEvZDRETlRuVHhoYWp4clVCU0cyRWJkTlVXdjNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA8e2P5Gui fs+Rhg4q5OFnXuD97cSzyxCUO3E4v3fOBZHfWveuBEY68vz74+r2tTPMNAKHlwAU uKl4yJaWBE1UWNwpEZdldndueBEEGUrI1bDSMMXSg0MN5xkI7Abau0rgtSYX4uzg QccoW3k7DdPCIWd1Hx55FiQBc6c52n41caeEBfNR6hbh6L5nhcMapJh1fpjivcSd qEWPNvGFWPrbM/rhCzXcnWrGpQ4hqOSRvCYTLM9txRPDt7zy8rJE3HEtRCRWx6nN o3qAhjsDtRSobTWE91xOh6msMdu9kx9gOI/cUqbnIuWupXNUDBWdpq7xp8ylr6Jt q9qsPY1acpWWHw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:57 2025 by rpki-client