This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft File: _dD9aMG2tWm598SBOsEt7Wrl6Ks.mft (raw, json) Hash identifier: s99uVehFpcSTwcEf74l7xWe1el4dx+NkoyI1CBewfE4= Subject key identifier: 06:35:41:AB:5E:C3:E7:8B:D5:B5:05:47:F1:24:3A:09:61:3A:0F:38 Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab Certificate serial: 019AF276CB4A8A5F46813371E7CDF4B265B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft Manifest number: 0C03 Signing time: Sat 06 Dec 2025 07:01:02 +0000 Manifest this update: Sat 06 Dec 2025 07:01:02 +0000 Manifest next update: Sun 07 Dec 2025 07:01:02 +0000 Files and hashes: 1: 9-QqvBY1hUAnRzJQw44a_LiZwk0.roa (hash: Wiz9RtceWsVgYPfDCWScaw54WuSutaiOATQ7EKmFaHA=) 2: _dD9aMG2tWm598SBOsEt7Wrl6Ks.crl (hash: AfjCTH1zVO+Vu+WA4cKivKRBWC8mb6d0A0SUrsKgbHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:cb:4a:8a:5f:46:81:33:71:e7:cd:f4:b2:65:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab Validity Not Before: Dec 6 07:01:02 2025 GMT Not After : Dec 7 07:01:02 2025 GMT Subject: CN=063541ab5ec3e78bd5b50547f1243a09613a0f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:64:95:31:8b:5f:c7:6d:13:05:54:74:ac:5d: 06:d6:65:e9:a9:50:9a:04:1f:57:de:5f:46:f9:04: ac:a7:e2:99:ed:04:37:06:a4:6f:ef:77:ea:e0:f6: cd:12:72:64:9d:40:b2:aa:7a:f8:49:62:fa:55:f5: 37:05:31:e0:11:88:5d:8c:bc:8d:44:32:2f:38:9f: a8:cd:85:39:bd:5d:34:96:70:44:b6:13:04:18:89: b3:04:68:10:bc:17:65:b3:38:52:c6:7e:80:b8:9b: 0e:19:3d:ec:aa:b8:42:b6:1e:b2:13:a6:5b:9d:6d: d1:36:1c:9a:f2:f6:3d:e3:eb:9d:7f:91:6f:5f:f5: 22:11:fa:61:25:a0:c3:57:41:27:bc:50:c8:27:e8: 2d:00:bc:07:99:08:d0:8e:fe:6d:31:1a:9f:2c:eb: 6b:f7:51:4e:ac:a3:f0:79:90:15:66:e9:a8:2d:a6: b4:a1:11:72:38:f9:7f:03:ce:0c:0a:65:e2:e0:39: 78:2b:43:b8:b3:d6:33:80:e1:ca:9b:00:7d:28:59: 18:6e:dc:b0:c7:05:32:a5:5e:3f:60:c0:58:5f:ac: 6d:5a:bb:74:bf:a0:d7:98:a9:80:0e:59:58:a1:da: da:e2:54:f7:57:07:a0:3c:be:46:75:ce:a5:d4:0c: e7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:35:41:AB:5E:C3:E7:8B:D5:B5:05:47:F1:24:3A:09:61:3A:0F:38 X509v3 Authority Key Identifier: keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:77:30:7c:a8:b3:d0:52:f0:1a:8f:44:44:50:b3:cc:55:b1: 1a:0c:11:c5:d2:1e:ad:d1:d9:de:d8:04:2c:f6:f1:8b:a7:34: 86:85:57:f6:e2:9c:eb:5b:ef:04:ae:b8:a6:f5:5b:d7:54:90: 32:cb:04:5c:fc:be:da:46:3a:8d:2c:b5:3a:36:97:8c:ed:92: 7b:34:d3:ae:f2:e3:29:7c:b5:fd:ad:93:8c:e0:8d:50:16:46: 33:bb:fb:59:28:d6:34:5b:38:8e:f1:58:8c:a7:aa:06:9d:da: 38:07:41:08:5d:61:92:61:eb:2c:48:65:e3:f7:80:db:ff:ca: b9:99:f9:38:a6:44:34:3d:f9:8c:bf:35:36:02:d1:2c:33:fb: 0c:a1:1f:6a:04:d3:dc:6f:de:8b:6d:97:48:06:19:c4:4a:58: 1d:92:2e:56:19:d0:9b:99:d8:4b:8f:7f:68:41:d4:72:90:fe: 91:c6:7c:bb:b3:65:e3:4b:81:f4:fb:27:bc:3e:6a:cd:15:7e: f7:d2:02:4a:40:47:30:3f:cc:80:a0:2c:d1:80:16:b5:9e:62: 87:06:6a:b8:22:ab:b1:cb:02:d0:06:3a:f0:15:2b:40:91:bc: 8b:01:1d:ff:bf:af:01:6d:58:b1:b7:ac:57:1f:b7:7f:7e:08: 15:5e:65:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydstKil9GgTNx5830smWwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDBmZDY4YzFiNmI1NjliOWY3YzQ4MTNhYzEyZGVkNmFl NWU4YWIwHhcNMjUxMjA2MDcwMTAyWhcNMjUxMjA3MDcwMTAyWjAzMTEwLwYDVQQD EygwNjM1NDFhYjVlYzNlNzhiZDViNTA1NDdmMTI0M2EwOTYxM2EwZjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGSVMYtfx20TBVR0rF0G1mXpqVCa BB9X3l9G+QSsp+KZ7QQ3BqRv73fq4PbNEnJknUCyqnr4SWL6VfU3BTHgEYhdjLyN RDIvOJ+ozYU5vV00lnBEthMEGImzBGgQvBdlszhSxn6AuJsOGT3sqrhCth6yE6Zb nW3RNhya8vY94+udf5FvX/UiEfphJaDDV0EnvFDIJ+gtALwHmQjQjv5tMRqfLOtr 91FOrKPweZAVZumoLaa0oRFyOPl/A84MCmXi4Dl4K0O4s9YzgOHKmwB9KFkYbtyw xwUypV4/YMBYX6xtWrt0v6DXmKmADllYodra4lT3VwegPL5Gdc6l1AznVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAY1Qatew+eL1bUFR/EkOglhOg84MB8GA1UdIwQY MBaAFP3Q/WjBtrVpuffEgTrBLe1q5eirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUt NWNjZjZmNGI3OTIwLzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUtNWNjZjZmNGI3OTIw LzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt3cwfKiz 0FLwGo9ERFCzzFWxGgwRxdIerdHZ3tgELPbxi6c0hoVX9uKc61vvBK64pvVb11SQ MssEXPy+2kY6jSy1OjaXjO2SezTTrvLjKXy1/a2TjOCNUBZGM7v7WSjWNFs4jvFY jKeqBp3aOAdBCF1hkmHrLEhl4/eA2//KuZn5OKZEND35jL81NgLRLDP7DKEfagTT 3G/ei22XSAYZxEpYHZIuVhnQm5nYS49/aEHUcpD+kcZ8u7Nl40uB9PsnvD5qzRV+ 99ICSkBHMD/MgKAs0YAWtZ5ihwZquCKrscsC0AY68BUrQJG8iwEd/7+vAW1Ysbes Vx+3f34IFV5lSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:40 2025 by rpki-client