This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft File: _74lZWXhwnxLJlYBkOmXgoaoK1I.mft (raw, json) Hash identifier: M/x4+/ltb/sYOyh3yIScPYjk0URgv7jpENVcnjtKoGg= Subject key identifier: 41:EA:F2:EC:E2:D6:4B:B7:6D:5D:C6:FB:03:AC:FC:42:13:E2:93:FB Authority key identifier: FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52 Certificate issuer: /CN=ffbe256565e1c27c4b26560190e9978286a82b52 Certificate serial: 019AF3523A248EB476DDE3952C6E4E93E747 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 11:00:43 +0000 Manifest this update: Sat 06 Dec 2025 11:00:43 +0000 Manifest next update: Sun 07 Dec 2025 11:00:43 +0000 Files and hashes: 1: 6uqfHy5orm23cTKFvyLzjaOscrk.roa (hash: eSkR1Rx3FREDyMUFDl/Eczx/rYW2EV6fDcTDwEKXsM0=) 2: QHm-ELioCU7VmYr3xnJI2hFroko.roa (hash: NmW3C8NKCGbqhRm0Xt94BQ/c4oqnG0YmYAOJMru4dYw=) 3: _74lZWXhwnxLJlYBkOmXgoaoK1I.crl (hash: rfg5N67nNzvePizxu2FX7JjPCYTqf3jeSRUDl7Qf4rI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:3a:24:8e:b4:76:dd:e3:95:2c:6e:4e:93:e7:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffbe256565e1c27c4b26560190e9978286a82b52 Validity Not Before: Dec 6 11:00:43 2025 GMT Not After : Dec 7 11:00:43 2025 GMT Subject: CN=41eaf2ece2d64bb76d5dc6fb03acfc4213e293fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a8:6b:67:61:c6:8d:26:a8:0c:72:88:51:6d: ba:8e:99:e7:9f:6a:c4:c6:c2:32:10:38:a0:88:3a: c7:fc:65:77:ad:4c:cb:47:3c:54:cd:e0:c1:ec:e3: 93:7b:82:fb:13:b2:89:70:94:db:04:d1:84:dd:99: d4:fa:ba:02:3f:f1:eb:45:e4:7e:1c:ce:44:53:f4: 74:4f:71:54:e0:2c:af:a1:32:2b:40:97:76:6b:db: 07:07:3b:c4:c0:82:8e:1d:9e:31:97:33:2d:ba:14: 92:bf:27:84:47:97:02:e4:c7:a0:c9:2a:df:34:57: 8f:1b:bd:8a:2b:51:fd:58:cd:5a:df:8d:e1:79:66: f1:29:5c:fd:e6:07:3d:16:32:dd:97:a3:ad:95:f0: 04:79:74:9a:5e:96:18:38:26:da:6a:4a:43:fc:72: fa:c0:d9:a8:75:49:2e:72:41:9a:c4:c0:e1:53:ee: 24:6b:2d:70:84:3e:0d:38:86:1b:de:81:64:4a:df: 00:57:83:fd:85:0b:9a:ce:9a:cd:be:9a:29:4f:e4: 21:a9:48:9b:43:68:dd:bf:07:23:7c:3d:2d:fc:dd: a3:46:e7:86:20:29:a9:84:1c:df:8e:c9:6c:4c:a0: 6b:6a:81:6f:0c:1a:63:5a:e5:a4:e0:ae:92:99:42: 09:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EA:F2:EC:E2:D6:4B:B7:6D:5D:C6:FB:03:AC:FC:42:13:E2:93:FB X509v3 Authority Key Identifier: keyid:FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:db:ea:79:63:53:1e:b1:bc:6a:66:71:88:60:1c:13:94:a5: 92:c6:aa:33:c7:da:0d:ee:1e:0c:e3:39:9a:0c:83:07:e5:37: cc:20:a1:2c:fc:8c:c5:50:17:01:c6:7c:8f:53:94:ae:f9:55: b5:68:20:e0:5b:33:79:8c:7a:30:c7:6a:6c:a7:03:32:2f:a4: e6:6c:64:80:2c:44:41:83:3e:2a:ed:8d:e2:67:d1:0f:19:90: 88:c1:bf:5f:f2:3d:29:a2:9b:78:98:6e:53:ca:07:a7:c8:f0: ab:a2:99:3d:b6:24:44:b8:ab:a2:e5:24:56:b9:ae:ac:9a:d4: ee:80:7b:f1:f8:ff:82:00:36:55:77:7f:c4:5c:fa:40:cd:16: 28:9c:e8:c0:9d:4f:4f:aa:ab:91:cd:07:cd:36:f0:9e:1d:47: cf:13:3d:d7:3e:64:92:e5:e8:95:d1:3b:f3:49:cb:f6:04:34: da:bb:43:a3:f4:8d:09:ce:0f:ea:ee:77:6e:ba:23:58:33:12: c5:7b:0c:e7:25:fe:95:b0:9f:62:12:50:16:07:4c:a9:ca:25: 95:de:4e:b3:d6:2c:6f:7e:cc:3f:bd:ab:61:79:a9:54:dd:1c: 91:4e:7b:25:10:f8:42:7a:e7:c6:b6:09:16:68:2e:b5:3e:35: c0:3e:1e:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUjokjrR23eOVLG5Ok+dHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYmUyNTY1NjVlMWMyN2M0YjI2NTYwMTkwZTk5NzgyODZh ODJiNTIwHhcNMjUxMjA2MTEwMDQzWhcNMjUxMjA3MTEwMDQzWjAzMTEwLwYDVQQD Eyg0MWVhZjJlY2UyZDY0YmI3NmQ1ZGM2ZmIwM2FjZmM0MjEzZTI5M2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqhrZ2HGjSaoDHKIUW26jpnnn2rE xsIyEDigiDrH/GV3rUzLRzxUzeDB7OOTe4L7E7KJcJTbBNGE3ZnU+roCP/HrReR+ HM5EU/R0T3FU4CyvoTIrQJd2a9sHBzvEwIKOHZ4xlzMtuhSSvyeER5cC5MegySrf NFePG72KK1H9WM1a343heWbxKVz95gc9FjLdl6OtlfAEeXSaXpYYOCbaakpD/HL6 wNmodUkuckGaxMDhU+4kay1whD4NOIYb3oFkSt8AV4P9hQuazprNvpopT+QhqUib Q2jdvwcjfD0t/N2jRueGICmphBzfjslsTKBraoFvDBpjWuWk4K6SmUIJSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHq8uzi1ku3bV3G+wOs/EIT4pP7MB8GA1UdIwQY MBaAFP++JWVl4cJ8SyZWAZDpl4KGqCtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzc0bFpXWGh3bnhMSmxZQmtPbVhnb2FvSzFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yN2M5MjgtMDJmZS00MDUyLTlkNjUt YjFmYzIwODNjOTA2LzEvXzc0bFpXWGh3bnhMSmxZQmtPbVhnb2FvSzFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8yN2M5MjgtMDJmZS00MDUyLTlkNjUtYjFmYzIwODNjOTA2 LzEvXzc0bFpXWGh3bnhMSmxZQmtPbVhnb2FvSzFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx9vqeWNT HrG8amZxiGAcE5SlksaqM8faDe4eDOM5mgyDB+U3zCChLPyMxVAXAcZ8j1OUrvlV tWgg4FszeYx6MMdqbKcDMi+k5mxkgCxEQYM+Ku2N4mfRDxmQiMG/X/I9KaKbeJhu U8oHp8jwq6KZPbYkRLirouUkVrmurJrU7oB78fj/ggA2VXd/xFz6QM0WKJzowJ1P T6qrkc0HzTbwnh1HzxM91z5kkuXoldE780nL9gQ02rtDo/SNCc4P6u53brojWDMS xXsM5yX+lbCfYhJQFgdMqcolld5Os9Ysb37MP72rYXmpVN0ckU57JRD4QnrnxrYJ FmgutT41wD4eYA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:30:40 2025 by rpki-client