This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft File: dFYQDLNjsOFKnzhOeowc-aO4W_M.mft (raw, json) Hash identifier: CAuqR65o/pCINJd6Zf8fhHSINl/b+WDHsImfvw+haIw= Subject key identifier: 0E:CF:29:5B:E7:3B:A4:12:DB:DF:B8:5E:00:E8:7F:DB:C3:EC:28:5D Authority key identifier: 74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3 Certificate issuer: /CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3 Certificate serial: 019AF0889AEC755CA9DBB8242785080A17ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft Manifest number: 1080 Signing time: Fri 05 Dec 2025 22:01:15 +0000 Manifest this update: Fri 05 Dec 2025 22:01:15 +0000 Manifest next update: Sat 06 Dec 2025 22:01:15 +0000 Files and hashes: 1: 6APrd79kmuyNwpex626uNLGMIX0.roa (hash: 7Zm/lOFTt+AfdsIxcjvvrXgteW7mXkxvg9D1ZZh9It8=) 2: dFYQDLNjsOFKnzhOeowc-aO4W_M.crl (hash: EmBTcd9Va4XYbp99cgeMbC2SLfrdeGorwih3Rno5aYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:9a:ec:75:5c:a9:db:b8:24:27:85:08:0a:17:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3 Validity Not Before: Dec 5 22:01:15 2025 GMT Not After : Dec 6 22:01:15 2025 GMT Subject: CN=0ecf295be73ba412dbdfb85e00e87fdbc3ec285d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d9:1a:ed:9e:35:62:93:7f:e5:6d:3f:6a:4d: 96:11:80:a4:1b:ad:18:26:7d:17:87:94:98:e5:73: b6:e1:b8:0c:e3:5c:76:ba:9c:1e:3e:f1:d6:cd:76: 58:6f:e1:8f:ff:12:71:fe:2c:68:33:65:51:65:54: 96:7f:79:86:26:fe:65:46:d2:62:48:ac:6a:e6:08: 9e:ae:40:5a:cd:43:de:da:5b:ee:d2:f4:5c:fb:99: 5b:8f:ec:19:61:45:34:4a:c7:1e:52:18:8e:c6:14: f6:cb:45:ad:28:be:aa:4a:b9:b4:4e:8e:3e:93:5e: 57:b4:05:b9:12:87:8e:c0:3a:01:09:c7:7e:7f:9f: 2d:96:55:64:e6:23:d7:bf:4b:a9:8c:2b:86:1c:e7: 5a:98:98:48:17:6f:aa:5b:06:49:25:7a:a2:9a:82: ca:04:c0:7c:86:7f:b1:50:37:d4:d5:ff:bb:b4:ed: a3:ed:e7:5e:03:a8:26:36:51:14:40:89:32:50:47: 5f:a2:f6:5f:57:88:93:b2:5c:95:60:08:d6:a4:dd: b5:bf:2f:57:33:e0:ab:d3:75:1c:ab:ff:d0:16:ae: a2:88:8c:79:a6:ac:be:d8:2f:24:2b:2f:3f:7c:41: 1b:06:87:4e:fc:10:8a:c7:88:92:8c:8c:22:56:57: b0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CF:29:5B:E7:3B:A4:12:DB:DF:B8:5E:00:E8:7F:DB:C3:EC:28:5D X509v3 Authority Key Identifier: keyid:74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b1:8e:e0:6b:39:aa:cb:18:d2:55:cd:19:37:eb:c9:2c:d5: 13:57:36:51:78:1c:44:01:77:9e:ed:4d:62:de:05:55:6f:20: 57:6b:1e:77:74:51:dd:22:f6:03:86:9d:7e:d8:1c:67:3a:79: 06:e6:ce:2e:31:64:94:04:14:0b:ec:b2:16:ff:07:44:1f:d7: d6:e1:e9:fb:34:a6:00:0b:a1:80:1d:3f:96:b2:28:6d:be:be: 60:e5:2d:4d:ac:b7:08:9d:f7:8b:24:e7:ec:42:59:28:49:36: ca:81:7f:d8:8a:a6:3b:c9:63:3c:71:3c:91:88:b9:10:96:0b: 7d:ed:c3:6d:52:6f:b2:73:57:4f:d9:e3:c1:28:05:83:09:4e: 00:d4:a0:fb:72:92:21:bc:16:87:60:b2:b0:cb:eb:29:3b:67: 58:01:70:44:11:4c:3e:5f:03:68:3e:c8:4b:5e:cf:54:11:51: b1:74:39:35:ad:0b:a9:b2:5f:81:ab:10:1b:38:28:bb:76:82: e4:1a:32:1b:7e:ca:f9:c1:b2:fe:9c:a0:af:9b:4e:b6:76:05: 68:f0:c1:dc:57:3d:c6:66:66:68:ab:c7:32:2a:5f:d9:7c:29: 6e:75:a2:2d:41:b1:b8:81:11:b4:fb:a9:64:52:1f:41:cb:b6: 40:70:94:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiJrsdVyp27gkJ4UIChftMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NTYxMDBjYjM2M2IwZTE0YTlmMzg0ZTdhOGMxY2Y5YTNi ODViZjMwHhcNMjUxMjA1MjIwMTE1WhcNMjUxMjA2MjIwMTE1WjAzMTEwLwYDVQQD EygwZWNmMjk1YmU3M2JhNDEyZGJkZmI4NWUwMGU4N2ZkYmMzZWMyODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dka7Z41YpN/5W0/ak2WEYCkG60Y Jn0Xh5SY5XO24bgM41x2upwePvHWzXZYb+GP/xJx/ixoM2VRZVSWf3mGJv5lRtJi SKxq5gierkBazUPe2lvu0vRc+5lbj+wZYUU0SsceUhiOxhT2y0WtKL6qSrm0To4+ k15XtAW5EoeOwDoBCcd+f58tllVk5iPXv0upjCuGHOdamJhIF2+qWwZJJXqimoLK BMB8hn+xUDfU1f+7tO2j7edeA6gmNlEUQIkyUEdfovZfV4iTslyVYAjWpN21vy9X M+Cr03Ucq//QFq6iiIx5pqy+2C8kKy8/fEEbBodO/BCKx4iSjIwiVlewWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7PKVvnO6QS29+4XgDof9vD7ChdMB8GA1UdIwQY MBaAFHRWEAyzY7DhSp84TnqMHPmjuFvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEZZUURMTmpzT0ZLbnpoT2Vvd2MtYU80V19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xMmIzMmMtOTRhNi00OGJiLTg5NTYt ODk4OThiMmVkMTVlLzEvZEZZUURMTmpzT0ZLbnpoT2Vvd2MtYU80V19NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xMmIzMmMtOTRhNi00OGJiLTg5NTYtODk4OThiMmVkMTVl LzEvZEZZUURMTmpzT0ZLbnpoT2Vvd2MtYU80V19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObGO4Gs5 qssY0lXNGTfrySzVE1c2UXgcRAF3nu1NYt4FVW8gV2sed3RR3SL2A4adftgcZzp5 BubOLjFklAQUC+yyFv8HRB/X1uHp+zSmAAuhgB0/lrIobb6+YOUtTay3CJ33iyTn 7EJZKEk2yoF/2IqmO8ljPHE8kYi5EJYLfe3DbVJvsnNXT9njwSgFgwlOANSg+3KS IbwWh2CysMvrKTtnWAFwRBFMPl8DaD7IS17PVBFRsXQ5Na0LqbJfgasQGzgou3aC 5BoyG37K+cGy/pygr5tOtnYFaPDB3Fc9xmZmaKvHMipf2XwpbnWiLUGxuIERtPup ZFIfQcu2QHCUUA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:20 2025 by rpki-client