This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft File: dB4rNVUHc-BTeX92TS4h1l5kKMc.mft (raw, json) Hash identifier: aI2K/rymktdag9wJviB5+maFZ0Mj8x7IMchFLg2cpGE= Subject key identifier: 28:2D:16:CB:00:B4:24:20:F2:1B:4E:CE:ED:8A:94:F6:89:2B:D8:19 Authority key identifier: 74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7 Certificate issuer: /CN=741e2b35550773e053797f764d2e21d65e6428c7 Certificate serial: 019B311F344771207FE9613D5A695A8FE607 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft Manifest number: 02E2 Signing time: Thu 18 Dec 2025 11:01:27 +0000 Manifest this update: Thu 18 Dec 2025 11:01:27 +0000 Manifest next update: Fri 19 Dec 2025 11:01:27 +0000 Files and hashes: 1: F9mCTEFo2VHLyLNCvGdkZm7NM54.roa (hash: 0GDWpQx7XDKg8YLSvTng54oqtSqIqPi0Fb+po6xzWT8=) 2: dB4rNVUHc-BTeX92TS4h1l5kKMc.crl (hash: acJasejrBpe1HHViuAbB55pZI1cmhKIqxHAFdlG9py8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1f:34:47:71:20:7f:e9:61:3d:5a:69:5a:8f:e6:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=741e2b35550773e053797f764d2e21d65e6428c7 Validity Not Before: Dec 18 11:01:27 2025 GMT Not After : Dec 19 11:01:27 2025 GMT Subject: CN=282d16cb00b42420f21b4eceed8a94f6892bd819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9a:88:2a:e1:dc:c8:da:7d:55:f9:f4:7d:d4: b3:f2:70:34:1a:72:ec:ba:6f:2a:6d:07:69:95:19: 5e:3f:84:9e:ec:3c:51:1c:c6:0a:0f:ef:8e:fb:b7: 4b:27:29:6c:ce:24:2f:33:a4:09:dd:fa:6d:61:8d: d4:fa:1a:d5:fb:eb:ae:0a:e9:2b:a5:d2:5d:52:ae: 96:6e:96:23:c2:81:a9:56:4a:2c:a8:3c:a9:29:1f: 30:4f:b9:e4:c0:e7:f9:39:8f:f6:df:6a:37:9d:5e: b9:67:97:9c:30:fe:57:a2:17:9d:94:fe:63:f0:7c: b4:a5:fa:a7:c4:bd:46:dc:9c:a1:a4:6d:0f:ef:82: 20:e6:3c:a0:3a:57:ab:d9:c1:7a:7f:77:5e:40:4f: 72:c6:74:88:ac:7e:1d:e2:d8:a5:9c:db:ea:7d:f6: 81:fb:ab:e1:37:d4:f7:02:fa:99:da:bb:28:fd:ef: 77:ba:9c:d0:be:97:0c:d0:28:49:7a:20:57:67:ea: 36:ae:93:ad:1d:7f:89:b4:ca:1c:b2:70:92:c4:99: a8:43:33:9f:65:2b:51:5c:d4:12:8b:bf:25:0c:2a: 67:cb:92:f2:b2:6e:0c:da:65:f1:2a:45:da:ef:16: 1d:86:83:94:e6:02:c6:d7:73:9a:98:b6:aa:8a:d3: 09:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2D:16:CB:00:B4:24:20:F2:1B:4E:CE:ED:8A:94:F6:89:2B:D8:19 X509v3 Authority Key Identifier: keyid:74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:17:81:c0:3d:59:07:73:02:5b:87:ee:72:59:dd:c8:27:38: 8b:c4:fa:9d:80:6a:6d:ff:fd:e6:0a:da:af:0d:7d:30:6e:65: 18:93:f9:b5:bd:94:6b:9e:18:cc:82:83:89:df:b3:25:97:ea: cb:e2:d9:2b:8d:3b:ea:4d:32:28:79:86:8e:ab:13:b4:ce:74: dc:27:2c:b7:8c:6f:8a:c1:5a:9d:f8:a6:b7:34:3e:d3:96:2f: 09:06:03:2a:75:9e:5e:e2:80:c8:c6:13:63:74:bb:cd:b3:65: 89:31:8b:5e:40:7e:5e:00:0e:8d:50:14:6a:50:08:57:94:e2: 3a:83:f6:1c:6c:7f:58:35:3f:f6:28:2c:b6:85:a0:ef:88:71: 4f:b1:96:74:60:57:c2:53:f6:ef:d0:82:a8:e1:6c:19:2c:3b: 1c:c4:c2:04:91:0d:0c:49:f0:0a:5c:7c:10:31:73:0c:9c:bc: fc:22:18:48:f2:15:04:7e:5c:fa:87:27:c0:b7:df:d3:6e:28: 04:38:93:ee:6a:c6:14:9c:31:d3:e9:cd:9f:42:81:cc:2f:7f: 30:61:64:ce:17:8f:40:f3:7a:29:a0:8d:13:3f:0d:4a:b4:77: bd:b2:78:a3:f6:39:db:7e:40:52:25:7b:c7:02:d6:d9:4e:0b: ca:c8:71:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHzRHcSB/6WE9Wmlaj+YHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MWUyYjM1NTUwNzczZTA1Mzc5N2Y3NjRkMmUyMWQ2NWU2 NDI4YzcwHhcNMjUxMjE4MTEwMTI3WhcNMjUxMjE5MTEwMTI3WjAzMTEwLwYDVQQD EygyODJkMTZjYjAwYjQyNDIwZjIxYjRlY2VlZDhhOTRmNjg5MmJkODE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJqIKuHcyNp9Vfn0fdSz8nA0GnLs um8qbQdplRleP4Se7DxRHMYKD++O+7dLJylsziQvM6QJ3fptYY3U+hrV++uuCukr pdJdUq6WbpYjwoGpVkosqDypKR8wT7nkwOf5OY/232o3nV65Z5ecMP5XohedlP5j 8Hy0pfqnxL1G3JyhpG0P74Ig5jygOler2cF6f3deQE9yxnSIrH4d4tilnNvqffaB +6vhN9T3AvqZ2rso/e93upzQvpcM0ChJeiBXZ+o2rpOtHX+JtMocsnCSxJmoQzOf ZStRXNQSi78lDCpny5Lysm4M2mXxKkXa7xYdhoOU5gLG13OamLaqitMJSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgtFssAtCQg8htOzu2KlPaJK9gZMB8GA1UdIwQY MBaAFHQeKzVVB3PgU3l/dk0uIdZeZCjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEI0ck5WVUhjLUJUZVg5MlRTNGgxbDVrS01jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82YjQxZjUtYjdjNS00MzM0LTlmYmYt YjM4YTZmMjIwZTYzLzEvZEI0ck5WVUhjLUJUZVg5MlRTNGgxbDVrS01jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82YjQxZjUtYjdjNS00MzM0LTlmYmYtYjM4YTZmMjIwZTYz LzEvZEI0ck5WVUhjLUJUZVg5MlRTNGgxbDVrS01jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEReBwD1Z B3MCW4fuclndyCc4i8T6nYBqbf/95grarw19MG5lGJP5tb2Ua54YzIKDid+zJZfq y+LZK4076k0yKHmGjqsTtM503Ccst4xvisFanfimtzQ+05YvCQYDKnWeXuKAyMYT Y3S7zbNliTGLXkB+XgAOjVAUalAIV5TiOoP2HGx/WDU/9igstoWg74hxT7GWdGBX wlP279CCqOFsGSw7HMTCBJENDEnwClx8EDFzDJy8/CIYSPIVBH5c+ocnwLff024o BDiT7mrGFJwx0+nNn0KBzC9/MGFkzhePQPN6KaCNEz8NSrR3vbJ4o/Y5235AUiV7 xwLW2U4Lyshx9w== -----END CERTIFICATE-----Generated at Thu Dec 18 20:34:51 2025 by rpki-client