This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft File: dPs6a3_CjoZ05hHLCYB28OTFV8I.mft (raw, json) Hash identifier: Eltug4AB7pG0MpVYiBy0K5sOWtES/B3+I+899sY4PkI= Subject key identifier: 97:6D:6D:8A:6B:F5:A5:B3:CF:88:6E:35:BE:E9:00:E5:B2:FF:B5:DD Authority key identifier: 74:FB:3A:6B:7F:C2:8E:86:74:E6:11:CB:09:80:76:F0:E4:C5:57:C2 Certificate issuer: /CN=74fb3a6b7fc28e8674e611cb098076f0e4c557c2 Certificate serial: 019AF0BF9E95762019E38B96531F6BF9B255 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft Manifest number: 1766 Signing time: Fri 05 Dec 2025 23:01:21 +0000 Manifest this update: Fri 05 Dec 2025 23:01:21 +0000 Manifest next update: Sat 06 Dec 2025 23:01:21 +0000 Files and hashes: 1: EbZ-PzExvsrKZ1aOLdbMth19YQY.roa (hash: Y23B6h9Jehv4hPRBbE1Q/MgzAwC8F0dy1/k/s/bejkY=) 2: dPs6a3_CjoZ05hHLCYB28OTFV8I.crl (hash: Db3C7k6Mwf0xv92IYEgMpix4G4Fq2tdQp9Z12BoZQCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:9e:95:76:20:19:e3:8b:96:53:1f:6b:f9:b2:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74fb3a6b7fc28e8674e611cb098076f0e4c557c2 Validity Not Before: Dec 5 23:01:21 2025 GMT Not After : Dec 6 23:01:21 2025 GMT Subject: CN=976d6d8a6bf5a5b3cf886e35bee900e5b2ffb5dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8d:b3:6f:ce:69:b2:5c:ad:04:a4:bf:3a:8b: 80:13:1e:85:a5:22:2f:26:45:91:5d:f0:29:54:36: 72:22:78:7f:c5:bc:19:04:77:a3:65:f4:a8:8c:c4: 18:14:8c:e9:c9:de:ef:76:1b:57:f0:44:61:ad:e7: 0b:bd:fc:53:13:72:40:cd:78:9e:2d:7a:b7:f2:f1: b6:a6:d9:c8:1e:40:92:2f:ca:39:69:07:2c:a3:34: 4e:c2:a7:5e:da:5f:77:d3:ce:01:44:fe:70:1b:18: bc:99:76:17:ee:86:e1:60:7c:c5:31:b8:9a:bf:a0: 07:80:df:f6:4f:41:5c:77:f3:ba:d2:2d:4e:f1:3b: cf:75:a3:c0:3e:e6:52:63:66:84:c9:2e:d8:88:5e: 1e:ff:84:8e:cd:04:b2:78:73:47:44:ab:ec:10:e5: 71:83:0f:66:59:61:20:ab:83:ee:b7:a4:ae:e0:bf: 65:d3:38:4f:79:58:ec:cb:0f:14:50:28:00:e5:dd: e0:87:f2:36:fc:59:30:8a:c8:76:75:ee:99:ea:66: 4d:e1:2c:22:f4:23:1f:a9:3d:2c:63:5c:a0:fa:5b: f2:23:01:35:84:9e:fe:ac:62:26:56:c7:de:d9:79: 61:b0:e6:8b:84:d3:98:57:74:33:26:82:87:a3:63: 10:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:6D:6D:8A:6B:F5:A5:B3:CF:88:6E:35:BE:E9:00:E5:B2:FF:B5:DD X509v3 Authority Key Identifier: keyid:74:FB:3A:6B:7F:C2:8E:86:74:E6:11:CB:09:80:76:F0:E4:C5:57:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:b4:f0:78:d7:21:af:6e:ca:db:fc:b6:37:8b:e3:63:81:aa: 85:15:1d:07:04:83:41:ca:dc:2f:83:e0:a5:45:1f:2f:0e:cc: 55:98:2f:e1:b2:64:df:b3:88:1c:19:ad:aa:bd:76:7e:bd:b1: a4:3c:b5:bf:54:0b:f6:74:d6:43:2d:e1:30:46:cf:e3:ca:b7: d9:ff:bd:87:39:7b:22:9b:8d:51:30:63:f2:b7:21:a1:94:11: 84:25:0f:c0:21:0c:12:5c:a6:b8:60:63:a2:de:14:f5:04:08: c2:33:09:59:87:14:c4:99:e6:eb:9c:9a:1d:2b:49:dd:45:6e: 58:da:fd:86:26:67:fa:4f:30:46:67:27:e4:ce:59:b4:7a:f9: e7:4e:97:b0:51:05:46:00:ef:d4:f9:64:63:59:01:3d:fa:cb: 39:e4:7c:4b:9d:02:e7:8e:35:0c:ac:7b:61:77:d1:b4:e8:19: 4c:e6:e7:a1:14:ed:ac:7c:b3:bb:4c:77:57:fb:9d:9d:6c:6f: 79:48:f7:17:04:9e:73:62:3e:86:df:40:66:55:fc:5f:2a:cf: f4:4b:8c:74:ef:e8:e6:4e:4f:2d:31:97:d6:0d:54:56:ab:8a: 26:06:0a:50:7b:eb:66:16:0f:ce:14:72:6f:1d:47:24:67:9b: af:c8:9c:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv56VdiAZ44uWUx9r+bJVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZmIzYTZiN2ZjMjhlODY3NGU2MTFjYjA5ODA3NmYwZTRj NTU3YzIwHhcNMjUxMjA1MjMwMTIxWhcNMjUxMjA2MjMwMTIxWjAzMTEwLwYDVQQD Eyg5NzZkNmQ4YTZiZjVhNWIzY2Y4ODZlMzViZWU5MDBlNWIyZmZiNWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq42zb85pslytBKS/OouAEx6FpSIv JkWRXfApVDZyInh/xbwZBHejZfSojMQYFIzpyd7vdhtX8ERhrecLvfxTE3JAzXie LXq38vG2ptnIHkCSL8o5aQcsozROwqde2l93084BRP5wGxi8mXYX7obhYHzFMbia v6AHgN/2T0Fcd/O60i1O8TvPdaPAPuZSY2aEyS7YiF4e/4SOzQSyeHNHRKvsEOVx gw9mWWEgq4Put6Su4L9l0zhPeVjsyw8UUCgA5d3gh/I2/Fkwish2de6Z6mZN4Swi 9CMfqT0sY1yg+lvyIwE1hJ7+rGImVsfe2XlhsOaLhNOYV3QzJoKHo2MQhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdtbYpr9aWzz4huNb7pAOWy/7XdMB8GA1UdIwQY MBaAFHT7Omt/wo6GdOYRywmAdvDkxVfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFBzNmEzX0Nqb1owNWhITENZQjI4T1RGVjhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jYTBmNTUtNTc3NC00NWRlLWE2YzAt NzgyYzc4MGU3YzFjLzEvZFBzNmEzX0Nqb1owNWhITENZQjI4T1RGVjhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jYTBmNTUtNTc3NC00NWRlLWE2YzAtNzgyYzc4MGU3YzFj LzEvZFBzNmEzX0Nqb1owNWhITENZQjI4T1RGVjhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbTweNch r27K2/y2N4vjY4GqhRUdBwSDQcrcL4PgpUUfLw7MVZgv4bJk37OIHBmtqr12fr2x pDy1v1QL9nTWQy3hMEbP48q32f+9hzl7IpuNUTBj8rchoZQRhCUPwCEMElymuGBj ot4U9QQIwjMJWYcUxJnm65yaHStJ3UVuWNr9hiZn+k8wRmcn5M5ZtHr5506XsFEF RgDv1PlkY1kBPfrLOeR8S50C5441DKx7YXfRtOgZTObnoRTtrHyzu0x3V/udnWxv eUj3FwSec2I+ht9AZlX8XyrP9EuMdO/o5k5PLTGX1g1UVquKJgYKUHvrZhYPzhRy bx1HJGebr8icZg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:56 2025 by rpki-client