This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft File: dB4rNVUHc-BTeX92TS4h1l5kKMc.mft (raw, json) Hash identifier: IY4r2uwXMYusFmWT4X/kltLUHjvn6xvjaj0hiwKeHRI= Subject key identifier: 60:B3:24:D9:32:A5:A3:98:03:9F:7C:43:FF:CC:E2:2D:39:BE:BB:9B Authority key identifier: 74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7 Certificate issuer: /CN=741e2b35550773e053797f764d2e21d65e6428c7 Certificate serial: 019AF1644429CE0653E753D38257736813E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft Manifest number: 02C1 Signing time: Sat 06 Dec 2025 02:01:11 +0000 Manifest this update: Sat 06 Dec 2025 02:01:11 +0000 Manifest next update: Sun 07 Dec 2025 02:01:11 +0000 Files and hashes: 1: F9mCTEFo2VHLyLNCvGdkZm7NM54.roa (hash: 0GDWpQx7XDKg8YLSvTng54oqtSqIqPi0Fb+po6xzWT8=) 2: dB4rNVUHc-BTeX92TS4h1l5kKMc.crl (hash: L4EIk9/QivgmeNU23i2PbV5xoZq+TF+8VpPPoXqa/CQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:44:29:ce:06:53:e7:53:d3:82:57:73:68:13:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=741e2b35550773e053797f764d2e21d65e6428c7 Validity Not Before: Dec 6 02:01:11 2025 GMT Not After : Dec 7 02:01:11 2025 GMT Subject: CN=60b324d932a5a398039f7c43ffcce22d39bebb9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:75:98:36:6e:33:28:aa:19:94:a4:b8:03:0c: 94:6f:c7:c6:09:d2:b3:27:ff:2e:70:1a:d2:33:01: 47:6d:b8:c9:cb:53:6d:86:e8:92:9e:e4:ce:c4:17: 94:96:e2:64:62:85:37:d0:10:c0:45:21:17:91:f2: 8c:e4:bf:6d:ae:b3:52:fa:ef:50:b3:8f:95:78:27: 99:f2:41:19:61:71:2c:6a:11:7e:79:ab:08:df:5d: c1:a2:93:09:19:81:45:70:ef:5e:b1:45:65:10:d8: 3f:6b:e8:9a:12:b5:16:ac:dc:2b:c8:dc:90:a2:f9: 0f:e8:0a:f8:0d:c2:ce:8a:9b:93:21:a6:04:50:0f: c0:aa:e9:d3:81:b6:86:f3:2b:94:f9:9c:88:ba:47: 73:82:71:4d:03:5a:8e:23:da:d2:f1:b5:84:de:78: b5:56:6d:72:30:82:88:53:b3:e4:72:cc:26:a4:50: a6:d0:d5:5f:eb:e6:b3:5d:8c:8a:f1:10:1f:33:ff: d6:85:a5:e5:ac:18:e5:57:1e:42:3d:5c:88:12:92: c4:cb:75:f8:ab:fd:9b:2b:81:16:7d:86:61:c7:78: 3f:f4:58:ee:9d:37:09:a9:19:dd:4c:2d:07:05:26: bd:6e:5e:d4:02:4b:f0:a5:a7:e2:4f:09:8d:80:b1: 19:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B3:24:D9:32:A5:A3:98:03:9F:7C:43:FF:CC:E2:2D:39:BE:BB:9B X509v3 Authority Key Identifier: keyid:74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:11:55:b3:9f:a8:6c:70:7e:f1:2c:18:75:1e:ec:32:18:f3: c7:93:c4:72:a9:78:f5:12:8e:fb:27:32:a6:50:35:9e:82:d0: 6c:43:7f:ce:9f:ce:c2:7c:eb:b6:29:2d:c0:38:e4:b8:9a:13: 40:4b:06:58:0e:3d:ac:83:47:2c:10:1a:67:e4:37:4f:a4:56: e2:53:ce:e6:9a:27:7a:35:bc:5c:7c:62:72:80:33:e3:f3:fd: ad:2c:a9:d6:ef:68:20:5f:5d:47:cf:66:61:23:b4:23:a1:7b: 05:56:4e:59:aa:0f:84:1a:ec:d3:19:37:40:f6:70:12:7f:8a: 2e:0e:12:cf:0e:ae:a6:e4:4f:27:35:70:dc:f5:d3:be:ed:6e: 9b:84:56:aa:f1:e5:50:bc:f3:2a:b5:1a:c5:d7:e9:e4:37:a0: 1b:8e:c7:58:f2:f5:48:f4:e3:b8:55:42:8e:d5:9e:76:4b:6f: 05:e7:44:ab:9f:d6:60:47:98:75:c1:5e:a4:34:3b:96:87:f8: 21:ad:8d:20:d1:a8:69:2c:36:4b:e1:81:42:c0:60:21:44:ed: e9:e3:09:cf:b8:b2:39:1d:60:49:ac:44:c2:fc:85:03:1a:62: 53:a4:62:34:ca:ae:10:1a:56:48:da:04:0d:ff:c6:a0:df:9b: 58:62:83:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEQpzgZT51PTgldzaBPnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MWUyYjM1NTUwNzczZTA1Mzc5N2Y3NjRkMmUyMWQ2NWU2 NDI4YzcwHhcNMjUxMjA2MDIwMTExWhcNMjUxMjA3MDIwMTExWjAzMTEwLwYDVQQD Eyg2MGIzMjRkOTMyYTVhMzk4MDM5ZjdjNDNmZmNjZTIyZDM5YmViYjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHWYNm4zKKoZlKS4AwyUb8fGCdKz J/8ucBrSMwFHbbjJy1NthuiSnuTOxBeUluJkYoU30BDARSEXkfKM5L9trrNS+u9Q s4+VeCeZ8kEZYXEsahF+easI313BopMJGYFFcO9esUVlENg/a+iaErUWrNwryNyQ ovkP6Ar4DcLOipuTIaYEUA/AqunTgbaG8yuU+ZyIukdzgnFNA1qOI9rS8bWE3ni1 Vm1yMIKIU7PkcswmpFCm0NVf6+azXYyK8RAfM//WhaXlrBjlVx5CPVyIEpLEy3X4 q/2bK4EWfYZhx3g/9FjunTcJqRndTC0HBSa9bl7UAkvwpafiTwmNgLEZDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCzJNkypaOYA598Q//M4i05vrubMB8GA1UdIwQY MBaAFHQeKzVVB3PgU3l/dk0uIdZeZCjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEI0ck5WVUhjLUJUZVg5MlRTNGgxbDVrS01jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82YjQxZjUtYjdjNS00MzM0LTlmYmYt YjM4YTZmMjIwZTYzLzEvZEI0ck5WVUhjLUJUZVg5MlRTNGgxbDVrS01jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82YjQxZjUtYjdjNS00MzM0LTlmYmYtYjM4YTZmMjIwZTYz LzEvZEI0ck5WVUhjLUJUZVg5MlRTNGgxbDVrS01jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxFVs5+o bHB+8SwYdR7sMhjzx5PEcql49RKO+ycyplA1noLQbEN/zp/OwnzrtiktwDjkuJoT QEsGWA49rINHLBAaZ+Q3T6RW4lPO5ponejW8XHxicoAz4/P9rSyp1u9oIF9dR89m YSO0I6F7BVZOWaoPhBrs0xk3QPZwEn+KLg4Szw6upuRPJzVw3PXTvu1um4RWqvHl ULzzKrUaxdfp5DegG47HWPL1SPTjuFVCjtWedktvBedEq5/WYEeYdcFepDQ7lof4 Ia2NINGoaSw2S+GBQsBgIUTt6eMJz7iyOR1gSaxEwvyFAxpiU6RiNMquEBpWSNoE Df/GoN+bWGKDIg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:24 2025 by rpki-client