This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft File: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft (raw, json) Hash identifier: MKJz3htU4HQdily3IrGnE8IG7ALr3mwi8pBozkdAuTI= Subject key identifier: 1D:6C:6C:21:B0:05:C8:C9:79:71:24:23:6A:B0:64:D9:D5:50:9B:49 Authority key identifier: 74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04 Certificate issuer: /CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04 Certificate serial: 019AF277140AD622B0C30DDF6A9BA5F23FED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 07:01:21 +0000 Manifest this update: Sat 06 Dec 2025 07:01:21 +0000 Manifest next update: Sun 07 Dec 2025 07:01:21 +0000 Files and hashes: 1: IVq_YZ1jGuMcDD4JRK3mmzzTW3o.roa (hash: sPByzBItFj1JqphVomCmYz50m1zlhsIta4Uhmwr6ALo=) 2: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl (hash: GIt8L6wY0RfWCTVE03SPpV54yCkloJ7mbe0BbPeSusQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:14:0a:d6:22:b0:c3:0d:df:6a:9b:a5:f2:3f:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04 Validity Not Before: Dec 6 07:01:21 2025 GMT Not After : Dec 7 07:01:21 2025 GMT Subject: CN=1d6c6c21b005c8c9797124236ab064d9d5509b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fd:0d:fe:39:d6:b5:de:a2:c6:0b:5b:9f:3d: 99:ea:4d:7f:f6:f1:09:90:53:78:19:bd:34:99:45: ba:ad:00:6c:9b:2c:a5:3b:c2:4c:c6:69:ac:d7:df: e6:b0:09:a5:1c:43:f0:8b:eb:cf:35:e0:29:a4:ae: e4:11:49:a1:29:c4:69:92:b7:ab:67:fd:26:23:18: 05:ae:04:66:a7:94:c2:97:a8:db:6e:b9:27:1b:15: 21:55:e7:97:28:04:d4:9e:23:47:40:a5:1e:d4:9a: 9f:f8:2b:4b:a4:19:10:f4:16:41:38:bb:88:9e:4d: 96:6f:1a:ba:53:3f:92:1f:8a:ae:1f:c3:e5:e3:8c: f9:91:26:fb:6c:70:10:df:cd:d1:29:e1:5b:26:36: fb:0a:e6:08:8b:da:73:e6:88:1d:ea:54:73:ce:af: ab:60:d7:57:32:d4:38:2d:97:f0:f4:89:00:76:b6: 24:26:e6:10:20:9e:a5:58:ad:03:d5:e3:2f:f4:f5: 5d:9d:b9:73:87:b3:c2:91:ed:a5:54:6a:78:54:f0: 26:71:64:0d:15:fc:bf:74:a6:07:c9:53:e5:76:3b: 83:dd:f2:02:5d:de:4d:61:31:47:92:73:92:f8:e5: 05:5a:ec:3a:28:2d:37:1f:89:7f:34:e6:52:8f:dc: 38:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6C:6C:21:B0:05:C8:C9:79:71:24:23:6A:B0:64:D9:D5:50:9B:49 X509v3 Authority Key Identifier: keyid:74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f3:99:b7:1f:a6:a6:e3:11:47:9f:51:20:cf:82:2e:99:c3: 0e:9f:85:59:ac:c2:0f:0d:eb:97:8b:9f:7b:52:67:9d:14:ed: 1b:43:63:a1:a0:86:29:bf:fe:37:43:f0:6f:86:75:bc:bd:56: ca:7b:6c:0b:12:61:44:b3:0a:1a:cd:8b:92:78:45:e3:66:9b: f2:ba:3c:c1:9f:a4:da:81:46:18:4b:f4:05:c6:27:c9:50:ad: 58:ae:64:a2:ed:54:54:64:42:56:bc:3d:87:42:b9:4f:43:0d: 2d:2b:3a:8c:cb:4c:d0:cd:8e:35:bf:0a:65:2a:fd:d4:26:c4: 1e:7b:fc:18:e4:1b:86:88:03:20:2c:5d:94:e6:cf:d4:e5:4e: ea:c5:93:d1:11:95:6d:0e:5a:86:38:07:1b:1b:53:7b:c7:4e: d7:08:59:f3:55:3d:b4:ef:6d:d6:25:73:7d:79:08:91:a6:06: fa:4e:61:86:67:98:14:9b:77:9d:01:c9:fb:7c:6f:ba:71:0d: 2b:c2:64:9a:4f:e8:9b:f7:a4:5a:38:a0:c7:c9:b3:fc:c5:59: 60:76:7a:b9:c0:ee:2b:d4:4f:b8:98:6d:f7:59:dd:e6:94:89: 98:d0:e8:27:5a:0c:2a:f9:f7:8b:21:8e:ec:5b:ea:e4:5e:fe: 0d:6f:06:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxQK1iKwww3fapul8j/tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZjkzNjljNmUyM2MxYmYwZGJlZDMwMWM3ZDAwYjRhM2Zk ZjBkMDQwHhcNMjUxMjA2MDcwMTIxWhcNMjUxMjA3MDcwMTIxWjAzMTEwLwYDVQQD EygxZDZjNmMyMWIwMDVjOGM5Nzk3MTI0MjM2YWIwNjRkOWQ1NTA5YjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov0N/jnWtd6ixgtbnz2Z6k1/9vEJ kFN4Gb00mUW6rQBsmyylO8JMxmms19/msAmlHEPwi+vPNeAppK7kEUmhKcRpkrer Z/0mIxgFrgRmp5TCl6jbbrknGxUhVeeXKATUniNHQKUe1Jqf+CtLpBkQ9BZBOLuI nk2Wbxq6Uz+SH4quH8Pl44z5kSb7bHAQ383RKeFbJjb7CuYIi9pz5ogd6lRzzq+r YNdXMtQ4LZfw9IkAdrYkJuYQIJ6lWK0D1eMv9PVdnblzh7PCke2lVGp4VPAmcWQN Ffy/dKYHyVPldjuD3fICXd5NYTFHknOS+OUFWuw6KC03H4l/NOZSj9w4EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1sbCGwBcjJeXEkI2qwZNnVUJtJMB8GA1UdIwQY MBaAFHT5NpxuI8G/Db7TAcfQC0o/3w0EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFBrMm5HNGp3YjhOdnRNQng5QUxTal9mRFFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iOWRjNGMtNjQzYS00MWI4LWE0NTkt MmI1MThhY2I3OGYzLzEvZFBrMm5HNGp3YjhOdnRNQng5QUxTal9mRFFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iOWRjNGMtNjQzYS00MWI4LWE0NTktMmI1MThhY2I3OGYz LzEvZFBrMm5HNGp3YjhOdnRNQng5QUxTal9mRFFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPPOZtx+m puMRR59RIM+CLpnDDp+FWazCDw3rl4ufe1JnnRTtG0NjoaCGKb/+N0Pwb4Z1vL1W yntsCxJhRLMKGs2LknhF42ab8ro8wZ+k2oFGGEv0BcYnyVCtWK5kou1UVGRCVrw9 h0K5T0MNLSs6jMtM0M2ONb8KZSr91CbEHnv8GOQbhogDICxdlObP1OVO6sWT0RGV bQ5ahjgHGxtTe8dO1whZ81U9tO9t1iVzfXkIkaYG+k5hhmeYFJt3nQHJ+3xvunEN K8Jkmk/om/ekWjigx8mz/MVZYHZ6ucDuK9RPuJht91nd5pSJmNDoJ1oMKvn3iyGO 7Fvq5F7+DW8GpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:43:42 2025 by rpki-client