This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft File: dHnfUKMVAp6AqhlHr-EtselIYos.mft (raw, json) Hash identifier: yBJQ+0J7yeHkzSEZN4K3+BUsn3+0StemB2iG4yvte0Y= Subject key identifier: 28:77:98:40:D7:BD:EB:3E:6A:E3:CC:98:A8:2F:85:B3:63:3C:D1:E7 Authority key identifier: 74:79:DF:50:A3:15:02:9E:80:AA:19:47:AF:E1:2D:B1:E9:48:62:8B Certificate issuer: /CN=7479df50a315029e80aa1947afe12db1e948628b Certificate serial: 019AF2766A404200E1DE590EF695E7ADB1BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft Manifest number: 1065 Signing time: Sat 06 Dec 2025 07:00:37 +0000 Manifest this update: Sat 06 Dec 2025 07:00:37 +0000 Manifest next update: Sun 07 Dec 2025 07:00:37 +0000 Files and hashes: 1: KvOchdw6AYfLt261W6RR4KIthYY.roa (hash: WXdEqSkBC/gQsasA/7q/ZdUFdpwAbrzjieJX5Z97f4U=) 2: dHnfUKMVAp6AqhlHr-EtselIYos.crl (hash: 6C21JL2Wl88NjtFfinTxOVA5JbnN73Gq3GmMEGdJV3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft rsync://rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:6a:40:42:00:e1:de:59:0e:f6:95:e7:ad:b1:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7479df50a315029e80aa1947afe12db1e948628b Validity Not Before: Dec 6 07:00:37 2025 GMT Not After : Dec 7 07:00:37 2025 GMT Subject: CN=28779840d7bdeb3e6ae3cc98a82f85b3633cd1e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:01:b5:29:74:57:67:21:22:f9:af:f0:58:58: bf:35:74:1c:55:9e:a7:8e:b8:8e:6f:9f:5c:c9:fb: 21:74:1b:b1:9d:fa:41:ca:fe:67:ce:62:13:97:c9: 75:d5:c4:1d:e2:af:d5:ec:22:1c:69:80:da:eb:51: f9:da:a0:a1:1e:23:58:54:07:13:f5:6d:9f:55:44: c9:0c:c9:d0:a3:7e:b8:af:61:21:51:d4:c9:2a:cd: 48:15:9d:cf:4c:97:68:25:74:26:59:b3:54:5a:97: 01:e1:e0:35:cf:f2:b6:b2:c4:47:9c:10:37:fa:1c: 24:c7:54:07:ec:a0:07:52:bd:01:1c:1d:b3:db:93: 0e:f1:67:7c:99:3d:de:7a:58:80:9a:81:d7:40:4d: ac:b3:2f:48:28:1a:46:c3:c8:a4:50:7c:9a:e6:fe: 58:4a:c0:85:a3:a4:bc:fa:a6:57:2c:23:72:d1:8a: 1f:da:4d:ab:5c:58:ca:64:50:28:ba:24:34:1d:97: bb:53:0d:0f:94:4a:34:32:77:64:87:d5:d1:fe:1f: 22:86:45:2d:d5:70:fa:c9:53:63:e9:88:c2:bb:50: 68:de:5c:fa:32:df:63:39:ef:45:c1:e5:de:e0:11: e3:19:7c:45:c8:c7:be:63:c8:6f:df:56:e1:73:9a: 89:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:77:98:40:D7:BD:EB:3E:6A:E3:CC:98:A8:2F:85:B3:63:3C:D1:E7 X509v3 Authority Key Identifier: keyid:74:79:DF:50:A3:15:02:9E:80:AA:19:47:AF:E1:2D:B1:E9:48:62:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHnfUKMVAp6AqhlHr-EtselIYos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/16735d-6658-4b6f-a261-97ba37345aa8/1/dHnfUKMVAp6AqhlHr-EtselIYos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ee:3b:86:82:d8:cd:06:1f:60:9b:e6:77:19:64:26:e0:9a: 34:89:0d:f4:ce:9f:5a:f4:33:ca:24:ad:72:c8:44:0f:eb:9a: 36:c7:82:8f:5c:28:bd:0b:cf:62:cb:63:15:46:8c:bf:ec:df: a4:25:8d:67:ca:37:f3:c7:ec:08:ec:43:c2:d5:7c:47:b2:30: 93:36:07:e2:e1:94:be:4e:13:fd:7a:ac:a6:f9:c7:3c:31:c8: e4:91:4b:41:ee:71:3e:7b:08:ed:20:ef:33:54:d5:78:1b:cc: 52:24:9a:4c:dc:2c:9b:98:10:b6:92:70:2a:16:b3:2c:39:20: c3:e6:26:1d:aa:d2:0b:1e:ff:f2:5e:c0:3f:76:b3:11:24:f8: e1:95:9f:3a:e0:01:74:5e:58:b6:f0:1f:29:58:25:52:60:2f: 36:a1:1e:f6:e6:d2:5d:7e:c0:51:0f:07:49:9b:af:83:30:9d: f5:29:3c:25:b5:95:c9:17:b4:93:da:54:a7:a3:3e:72:9a:2b: bc:b6:c6:45:ff:f6:55:44:5c:e7:95:eb:16:26:42:2c:28:17: 31:25:4b:1d:e7:6b:4e:61:f4:f7:36:ac:bb:c8:d1:7b:fd:f7: cf:9f:3c:c4:22:50:02:cc:0e:d2:b9:1c:6d:75:b3:69:e3:5d: 73:ca:3f:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmpAQgDh3lkO9pXnrbG8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NzlkZjUwYTMxNTAyOWU4MGFhMTk0N2FmZTEyZGIxZTk0 ODYyOGIwHhcNMjUxMjA2MDcwMDM3WhcNMjUxMjA3MDcwMDM3WjAzMTEwLwYDVQQD EygyODc3OTg0MGQ3YmRlYjNlNmFlM2NjOThhODJmODViMzYzM2NkMWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAG1KXRXZyEi+a/wWFi/NXQcVZ6n jriOb59cyfshdBuxnfpByv5nzmITl8l11cQd4q/V7CIcaYDa61H52qChHiNYVAcT 9W2fVUTJDMnQo364r2EhUdTJKs1IFZ3PTJdoJXQmWbNUWpcB4eA1z/K2ssRHnBA3 +hwkx1QH7KAHUr0BHB2z25MO8Wd8mT3eeliAmoHXQE2ssy9IKBpGw8ikUHya5v5Y SsCFo6S8+qZXLCNy0Yof2k2rXFjKZFAouiQ0HZe7Uw0PlEo0Mndkh9XR/h8ihkUt 1XD6yVNj6YjCu1Bo3lz6Mt9jOe9FweXe4BHjGXxFyMe+Y8hv31bhc5qJpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCh3mEDXves+auPMmKgvhbNjPNHnMB8GA1UdIwQY MBaAFHR531CjFQKegKoZR6/hLbHpSGKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEhuZlVLTVZBcDZBcWhsSHItRXRzZWxJWW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNjczNWQtNjY1OC00YjZmLWEyNjEt OTdiYTM3MzQ1YWE4LzEvZEhuZlVLTVZBcDZBcWhsSHItRXRzZWxJWW9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNjczNWQtNjY1OC00YjZmLWEyNjEtOTdiYTM3MzQ1YWE4 LzEvZEhuZlVLTVZBcDZBcWhsSHItRXRzZWxJWW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALO47hoLY zQYfYJvmdxlkJuCaNIkN9M6fWvQzyiStcshED+uaNseCj1wovQvPYstjFUaMv+zf pCWNZ8o388fsCOxDwtV8R7IwkzYH4uGUvk4T/XqspvnHPDHI5JFLQe5xPnsI7SDv M1TVeBvMUiSaTNwsm5gQtpJwKhazLDkgw+YmHarSCx7/8l7AP3azEST44ZWfOuAB dF5YtvAfKVglUmAvNqEe9ubSXX7AUQ8HSZuvgzCd9Sk8JbWVyRe0k9pUp6M+cpor vLbGRf/2VURc55XrFiZCLCgXMSVLHedrTmH09zasu8jRe/33z588xCJQAswO0rkc bXWzaeNdc8o/HA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:56:35 2025 by rpki-client