This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft File: dPgamLSHAgyYEF1jE7zWneUKwXs.mft (raw, json) Hash identifier: bLFEXjO+Hmh/lQquIbPGtNw4SLcGh7//9qnCq2cHIGw= Subject key identifier: C2:29:BB:72:F5:C7:BC:2D:CA:C6:68:A4:96:FF:21:D3:BE:10:D1:04 Authority key identifier: 74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B Certificate issuer: /CN=74f81a98b487020c98105d6313bcd69de50ac17b Certificate serial: 019B35D6F3EB7EA06EC0EA03AC5E997DB129 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft Manifest number: 03CD Signing time: Fri 19 Dec 2025 09:00:38 +0000 Manifest this update: Fri 19 Dec 2025 09:00:38 +0000 Manifest next update: Sat 20 Dec 2025 09:00:38 +0000 Files and hashes: 1: 7-iGt4e7trCrvhjbqw5ailuotG8.roa (hash: cy0FH1gqtKBfDPhq2ot6+GUFGCM2/G1KgLpKIId8UGA=) 2: dPgamLSHAgyYEF1jE7zWneUKwXs.crl (hash: xAP2I/3D0w/hNWIeOV24/rcMCG9yXC8RlWQSE8BHvAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d6:f3:eb:7e:a0:6e:c0:ea:03:ac:5e:99:7d:b1:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74f81a98b487020c98105d6313bcd69de50ac17b Validity Not Before: Dec 19 09:00:38 2025 GMT Not After : Dec 20 09:00:38 2025 GMT Subject: CN=c229bb72f5c7bc2dcac668a496ff21d3be10d104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6b:69:dd:58:c3:35:3e:97:68:87:fc:dd:6b: f3:56:b3:00:91:a8:1d:d7:36:96:a1:c7:24:bf:6b: da:00:4b:e1:3a:5a:8c:b1:44:da:b0:05:83:d5:3f: 2f:12:b8:26:95:27:c0:80:d1:d8:02:3a:8e:99:62: 09:83:0f:15:a1:0f:ae:94:6a:88:a2:6a:ec:84:1d: 9e:ce:6e:1d:73:1f:3b:e1:04:f9:11:0a:27:26:ee: a1:94:fe:3d:68:f8:82:c2:46:dd:a1:7d:b8:73:61: 27:51:3a:9b:45:23:9f:91:47:07:a0:24:9e:ae:44: e1:f1:af:cf:3d:ed:60:c0:bf:28:a1:97:88:28:6a: a6:1a:75:ab:7f:5f:42:12:a5:e4:78:5d:2f:7f:43: 8e:ba:26:fb:c5:9d:0f:fb:30:8f:dd:94:2f:88:3a: 5c:6b:de:12:1c:99:c0:cd:00:e6:ec:76:f8:03:38: 89:37:2a:e1:60:fc:d7:4b:09:94:27:11:16:f6:a2: 5f:df:03:13:f9:3f:95:b7:b0:61:d3:2a:63:52:78: 0f:26:60:ab:ed:3a:5d:88:0f:75:04:b7:ee:f6:1c: 49:06:7b:9d:db:1f:5a:55:a9:4d:7e:fa:74:01:79: e7:13:23:c2:75:2f:08:40:50:b1:79:07:ca:12:f8: 62:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:29:BB:72:F5:C7:BC:2D:CA:C6:68:A4:96:FF:21:D3:BE:10:D1:04 X509v3 Authority Key Identifier: keyid:74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:37:e5:26:67:94:3e:28:97:69:5c:62:8a:32:ba:e2:66:36: 02:af:21:18:57:ab:b0:ff:f8:0a:78:d4:99:72:51:dc:3a:ce: 96:a8:34:47:d1:a7:fb:5c:3e:67:56:93:0c:1c:fd:e9:ba:99: 5f:81:4c:32:2c:ba:bf:3a:81:2c:0d:e2:88:5d:9d:43:cc:a5: 5f:9f:bb:b9:42:99:f7:30:74:e4:91:6c:71:4e:a9:b8:87:d4: 67:a6:8f:fa:07:0a:c0:5e:4c:8a:f7:1c:14:ca:66:2f:d3:e0: d4:e2:a0:0f:5c:78:e2:78:3f:7c:05:eb:ef:2a:ba:36:bd:0d: 9e:44:95:66:4c:f7:ad:e6:cc:30:72:45:81:95:22:c0:20:ef: f2:3f:3c:0b:67:e0:56:7e:ea:41:3d:f8:00:88:52:fc:30:9a: 5e:73:c7:4b:b3:24:2a:ed:07:10:ff:0c:a0:bc:ac:6a:60:c2: 64:35:44:e3:e2:18:78:00:84:9a:e3:eb:b2:55:5e:f4:35:07: 1b:9f:b8:03:40:82:50:d1:ae:e5:c4:b9:5b:47:cd:c9:c1:af: 98:0e:69:9d:66:46:6b:57:63:2f:a1:0e:eb:bc:22:fc:70:ca: 0d:0f:c1:05:25:8a:75:16:5c:a7:ea:af:24:bf:3a:32:26:ba: 0a:66:9a:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11vPrfqBuwOoDrF6ZfbEpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZjgxYTk4YjQ4NzAyMGM5ODEwNWQ2MzEzYmNkNjlkZTUw YWMxN2IwHhcNMjUxMjE5MDkwMDM4WhcNMjUxMjIwMDkwMDM4WjAzMTEwLwYDVQQD EyhjMjI5YmI3MmY1YzdiYzJkY2FjNjY4YTQ5NmZmMjFkM2JlMTBkMTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmtp3VjDNT6XaIf83WvzVrMAkagd 1zaWocckv2vaAEvhOlqMsUTasAWD1T8vErgmlSfAgNHYAjqOmWIJgw8VoQ+ulGqI omrshB2ezm4dcx874QT5EQonJu6hlP49aPiCwkbdoX24c2EnUTqbRSOfkUcHoCSe rkTh8a/PPe1gwL8ooZeIKGqmGnWrf19CEqXkeF0vf0OOuib7xZ0P+zCP3ZQviDpc a94SHJnAzQDm7Hb4AziJNyrhYPzXSwmUJxEW9qJf3wMT+T+Vt7Bh0ypjUngPJmCr 7TpdiA91BLfu9hxJBnud2x9aValNfvp0AXnnEyPCdS8IQFCxeQfKEvhilQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIpu3L1x7wtysZopJb/IdO+ENEEMB8GA1UdIwQY MBaAFHT4Gpi0hwIMmBBdYxO81p3lCsF7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFBnYW1MU0hBZ3lZRUYxakU3elduZVVLd1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODI5ODMtMjRiYy00ZWUxLWFkMzYt MDFlNzEzMWFlMWRlLzEvZFBnYW1MU0hBZ3lZRUYxakU3elduZVVLd1hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODI5ODMtMjRiYy00ZWUxLWFkMzYtMDFlNzEzMWFlMWRl LzEvZFBnYW1MU0hBZ3lZRUYxakU3elduZVVLd1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzflJmeU PiiXaVxiijK64mY2Aq8hGFersP/4CnjUmXJR3DrOlqg0R9Gn+1w+Z1aTDBz96bqZ X4FMMiy6vzqBLA3iiF2dQ8ylX5+7uUKZ9zB05JFscU6puIfUZ6aP+gcKwF5Mivcc FMpmL9Pg1OKgD1x44ng/fAXr7yq6Nr0NnkSVZkz3rebMMHJFgZUiwCDv8j88C2fg Vn7qQT34AIhS/DCaXnPHS7MkKu0HEP8MoLysamDCZDVE4+IYeACEmuPrslVe9DUH G5+4A0CCUNGu5cS5W0fNycGvmA5pnWZGa1djL6EO67wi/HDKDQ/BBSWKdRZcp+qv JL86Mia6Cmaa3g== -----END CERTIFICATE-----Generated at Fri Dec 19 13:33:17 2025 by rpki-client