This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft File: dKjYRykGwgOKrshMez5Wwglr6GA.mft (raw, json) Hash identifier: AeDwJVNSxG0VHnJhaRHSySv2P9YlDt2m/xh8LvRaleY= Subject key identifier: 41:AA:62:F0:07:D5:B5:B6:79:84:8D:14:C1:99:F3:2D:27:A3:99:F6 Authority key identifier: 74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60 Certificate issuer: /CN=74a8d8472906c2038aaec84c7b3e56c2096be860 Certificate serial: 019AF577A04BF014B648B4D69DAE721B411B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft Manifest number: 147A Signing time: Sat 06 Dec 2025 21:00:48 +0000 Manifest this update: Sat 06 Dec 2025 21:00:48 +0000 Manifest next update: Sun 07 Dec 2025 21:00:48 +0000 Files and hashes: 1: 8JHdroSmFbW7TogZWDAIS298pfo.roa (hash: goVtVxuEC9QAmF+Kz0vzUzxl+/V8u83qUjrsL0jlHNw=) 2: dKjYRykGwgOKrshMez5Wwglr6GA.crl (hash: xXRBO5eWpJRiVYoOtnzSD4ArxugJxDzwzNR+iCQVOuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:a0:4b:f0:14:b6:48:b4:d6:9d:ae:72:1b:41:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a8d8472906c2038aaec84c7b3e56c2096be860 Validity Not Before: Dec 6 21:00:48 2025 GMT Not After : Dec 7 21:00:48 2025 GMT Subject: CN=41aa62f007d5b5b679848d14c199f32d27a399f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b9:cc:e3:d2:a4:ab:2b:3e:85:7e:89:72:fb: c2:e7:b2:e3:94:d4:ff:98:87:74:03:d5:1f:93:a8: 30:56:45:de:d4:e5:73:bd:8d:12:25:09:dd:f0:bf: d5:d0:ca:74:74:f3:7f:9a:fb:5f:ba:2e:24:9e:fa: 53:f4:52:b8:67:91:ec:84:ce:bb:43:bd:f2:c3:1c: b1:c6:d7:c1:c5:c9:2d:85:37:78:6c:e3:de:5a:e8: d3:62:1b:03:3a:68:32:8a:72:7d:b7:ed:2b:bf:9b: 83:e1:37:6d:2d:48:10:b7:c3:a1:77:52:1b:c9:e4: 2a:6c:49:15:be:9b:e5:07:ba:30:6d:a6:0f:d9:95: f0:bd:ec:0c:b7:d6:a3:dc:07:da:d2:0e:0e:91:03: 6b:b2:af:e2:1e:c7:b8:dc:41:09:f0:49:ec:bb:5c: 14:6d:a7:11:40:56:9f:e5:53:7f:c6:b2:49:02:b6: 0b:ed:1b:26:9f:fe:40:eb:b8:25:35:c8:f7:69:73: 62:ea:bc:45:34:ac:32:09:b5:d1:94:b1:ff:f4:89: e5:67:fc:a7:fe:e0:46:49:3e:ff:e2:e4:fb:2f:bf: a6:53:75:5c:71:87:0f:d4:46:e5:a8:01:47:cf:1c: e1:a5:ab:b2:b9:da:f8:a6:f0:0b:5c:64:52:9c:ae: 14:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AA:62:F0:07:D5:B5:B6:79:84:8D:14:C1:99:F3:2D:27:A3:99:F6 X509v3 Authority Key Identifier: keyid:74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ac:a2:70:d4:c3:ba:00:fa:db:64:46:4b:14:62:76:9b:db: 05:b8:35:56:ee:91:1e:df:a3:c1:ba:db:b6:28:f2:23:b9:d2: 25:b2:22:97:2b:32:ea:8c:55:e3:41:54:f7:d4:2b:c7:4e:f6: a3:ef:78:e6:02:11:87:b4:e7:3b:72:ca:72:00:d7:2a:80:09: 20:77:8b:d3:35:79:60:a0:04:ed:ed:d1:78:ba:e6:70:30:e0: 8d:5a:ba:f0:5f:12:7c:0d:73:5f:86:81:e1:81:2f:50:c9:3c: 3d:57:04:c4:a7:4c:31:cd:35:3a:c1:82:21:f0:d4:e4:05:ce: 46:05:c3:40:f6:2b:30:2b:4d:25:86:79:2e:a2:84:03:80:cf: 00:2d:bb:a5:39:82:25:53:6c:53:f9:07:dc:36:2e:7e:3e:91: 97:22:ce:ed:4e:0f:0e:09:90:27:db:aa:c1:0f:40:a8:e8:97: 4c:e8:78:7a:48:6a:e3:16:80:87:e2:ee:8b:28:d8:ed:89:49: 43:06:eb:ea:df:04:fa:a7:31:a2:95:9e:97:a9:20:76:c8:4f: 3f:92:b1:26:77:a9:be:80:a3:a6:22:25:19:6f:92:cf:7e:70: 31:3c:2e:3d:cf:d7:3b:65:8f:b8:b6:dc:0c:d9:29:a8:4c:7d: 58:2c:71:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d6BL8BS2SLTWna5yG0EbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YThkODQ3MjkwNmMyMDM4YWFlYzg0YzdiM2U1NmMyMDk2 YmU4NjAwHhcNMjUxMjA2MjEwMDQ4WhcNMjUxMjA3MjEwMDQ4WjAzMTEwLwYDVQQD Eyg0MWFhNjJmMDA3ZDViNWI2Nzk4NDhkMTRjMTk5ZjMyZDI3YTM5OWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrnM49Kkqys+hX6JcvvC57LjlNT/ mId0A9Ufk6gwVkXe1OVzvY0SJQnd8L/V0Mp0dPN/mvtfui4knvpT9FK4Z5HshM67 Q73ywxyxxtfBxckthTd4bOPeWujTYhsDOmgyinJ9t+0rv5uD4TdtLUgQt8Ohd1Ib yeQqbEkVvpvlB7owbaYP2ZXwvewMt9aj3Afa0g4OkQNrsq/iHse43EEJ8Ensu1wU bacRQFaf5VN/xrJJArYL7Rsmn/5A67glNcj3aXNi6rxFNKwyCbXRlLH/9InlZ/yn /uBGST7/4uT7L7+mU3VccYcP1EblqAFHzxzhpauyudr4pvALXGRSnK4UzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGqYvAH1bW2eYSNFMGZ8y0no5n2MB8GA1UdIwQY MBaAFHSo2EcpBsIDiq7ITHs+VsIJa+hgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEtqWVJ5a0d3Z09LcnNoTWV6NVd3Z2xyNkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kNGQ1MTktZTc3NC00MTVhLTkzYWIt Mzk1NmU1NmMxODM1LzEvZEtqWVJ5a0d3Z09LcnNoTWV6NVd3Z2xyNkdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9kNGQ1MTktZTc3NC00MTVhLTkzYWItMzk1NmU1NmMxODM1 LzEvZEtqWVJ5a0d3Z09LcnNoTWV6NVd3Z2xyNkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKyicNTD ugD622RGSxRidpvbBbg1Vu6RHt+jwbrbtijyI7nSJbIilysy6oxV40FU99Qrx072 o+945gIRh7TnO3LKcgDXKoAJIHeL0zV5YKAE7e3ReLrmcDDgjVq68F8SfA1zX4aB 4YEvUMk8PVcExKdMMc01OsGCIfDU5AXORgXDQPYrMCtNJYZ5LqKEA4DPAC27pTmC JVNsU/kH3DYufj6RlyLO7U4PDgmQJ9uqwQ9AqOiXTOh4ekhq4xaAh+LuiyjY7YlJ Qwbr6t8E+qcxopWel6kgdshPP5KxJnepvoCjpiIlGW+Sz35wMTwuPc/XO2WPuLbc DNkpqEx9WCxxEg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:02:14 2025 by rpki-client