This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft File: dp1cUsMVfllF5mO5LtRALGBhbjs.mft (raw, json) Hash identifier: 0izQhZxiA2Hol2FzX02EC4h8+gmtMLgC5E0GlwkGKNU= Subject key identifier: 16:5E:45:C0:68:44:E6:01:79:F0:C6:98:73:34:B0:1D:D6:31:A6:76 Authority key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B Certificate issuer: /CN=769d5c52c3157e5945e663b92ed4402c60616e3b Certificate serial: 019B4091BC5AB083F411F54816F3E95C64B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft Manifest number: 046E Signing time: Sun 21 Dec 2025 11:00:51 +0000 Manifest this update: Sun 21 Dec 2025 11:00:51 +0000 Manifest next update: Mon 22 Dec 2025 11:00:51 +0000 Files and hashes: 1: 08Xj6P3LiBkWV-XyPE1sfuebHwg.roa (hash: GOb53BquANot8lO8WUgTLWPiXo2ewEYSLTJKkoVM5kk=) 2: dp1cUsMVfllF5mO5LtRALGBhbjs.crl (hash: mRsQredIk1wdEutdasMT35PprUtZuPZgJUqGHEl+0+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:bc:5a:b0:83:f4:11:f5:48:16:f3:e9:5c:64:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=769d5c52c3157e5945e663b92ed4402c60616e3b Validity Not Before: Dec 21 11:00:51 2025 GMT Not After : Dec 22 11:00:51 2025 GMT Subject: CN=165e45c06844e60179f0c6987334b01dd631a676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:37:76:58:37:ec:26:98:17:f3:70:c7:0e:f9: e6:93:67:2f:ee:d5:1d:e3:f6:12:d2:e5:9d:18:16: 52:f8:5c:93:dc:b4:70:18:a0:78:cc:4c:6e:dd:64: 83:a2:5a:74:66:f2:60:d2:0b:3c:51:bc:2b:47:68: 17:46:bf:20:49:f6:ed:09:89:fb:09:d1:a2:be:b2: 03:bc:f0:39:c2:40:24:cc:1f:23:ab:e7:85:2b:71: 82:8f:6f:02:cf:29:0b:3f:40:2d:9e:a8:36:58:6e: 6b:15:13:37:ba:dd:62:68:03:58:70:27:6d:60:f0: b4:bb:48:e4:a3:16:7e:9c:31:0d:93:c5:f8:32:31: 23:3d:54:12:4b:f8:11:b8:ea:e7:a3:c7:5d:30:1d: c7:b1:78:51:1d:1e:ad:04:10:ee:54:f9:a1:1a:14: e5:5b:f0:b4:cf:dc:6a:5e:fd:ca:85:1c:c5:e6:80: ba:57:cf:04:2c:b5:66:87:28:c7:6b:a6:26:c9:31: 12:69:a4:e0:e6:98:28:df:77:f5:b3:6b:22:74:82: a6:fd:c6:7b:10:78:5d:83:ec:34:d9:3b:6f:81:e4: 58:56:7d:7b:ce:f2:3b:71:c8:6e:dd:a4:c9:3f:e1: 97:fc:d0:60:86:90:36:11:a3:b4:58:ad:28:b3:bb: 22:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:5E:45:C0:68:44:E6:01:79:F0:C6:98:73:34:B0:1D:D6:31:A6:76 X509v3 Authority Key Identifier: keyid:76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ad:22:f4:9d:01:a2:b5:84:a9:11:d6:29:d0:87:d5:31:ef: f4:14:61:19:68:cf:93:fc:90:17:e8:96:a7:6c:d1:fb:78:ce: d4:ad:d9:d3:8f:a8:a3:16:5e:22:cd:b2:0d:44:1e:c0:66:94: 7f:13:92:2c:a4:b4:7c:de:d5:01:fe:8f:bc:21:07:c6:1e:a9: 9d:9a:31:5f:36:f1:40:62:2d:98:4f:32:8a:bf:cd:4e:7d:68: 80:dd:b1:dc:52:7d:b9:02:f2:41:c4:15:7d:44:e4:c4:7a:91: 90:bf:f5:b3:4c:1c:39:80:1b:94:f6:dd:67:83:29:c8:bd:1c: 56:7d:95:b4:ac:5a:77:56:c8:e1:6b:6a:d6:0c:05:d9:4b:a3: 86:56:e4:90:ef:c4:cb:50:b8:d5:b3:63:09:1f:ff:ef:b8:56: 68:ea:36:77:95:cb:0f:0c:96:8c:d8:57:15:81:7d:ca:16:81: 80:29:13:8d:a3:2b:fa:84:34:12:3b:0d:fe:f4:d2:8e:f7:54: f2:f4:a3:af:37:ec:f0:b9:7c:c6:1e:a5:42:ec:64:d6:3c:5d: 18:60:ce:38:67:5f:64:40:8b:28:41:f7:75:ef:14:29:38:1e: 55:0d:e4:8a:f0:88:ee:04:40:2d:65:59:4b:eb:27:3d:1c:39: 27:c8:5e:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkbxasIP0EfVIFvPpXGS3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OWQ1YzUyYzMxNTdlNTk0NWU2NjNiOTJlZDQ0MDJjNjA2 MTZlM2IwHhcNMjUxMjIxMTEwMDUxWhcNMjUxMjIyMTEwMDUxWjAzMTEwLwYDVQQD EygxNjVlNDVjMDY4NDRlNjAxNzlmMGM2OTg3MzM0YjAxZGQ2MzFhNjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDd2WDfsJpgX83DHDvnmk2cv7tUd 4/YS0uWdGBZS+FyT3LRwGKB4zExu3WSDolp0ZvJg0gs8UbwrR2gXRr8gSfbtCYn7 CdGivrIDvPA5wkAkzB8jq+eFK3GCj28CzykLP0Atnqg2WG5rFRM3ut1iaANYcCdt YPC0u0jkoxZ+nDENk8X4MjEjPVQSS/gRuOrno8ddMB3HsXhRHR6tBBDuVPmhGhTl W/C0z9xqXv3KhRzF5oC6V88ELLVmhyjHa6YmyTESaaTg5pgo33f1s2sidIKm/cZ7 EHhdg+w02TtvgeRYVn17zvI7cchu3aTJP+GX/NBghpA2EaO0WK0os7siYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZeRcBoROYBefDGmHM0sB3WMaZ2MB8GA1UdIwQY MBaAFHadXFLDFX5ZReZjuS7UQCxgYW47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jYzY2YjItMTI2Ny00NTE2LWEzOWYt Mzc2YjQ5ZDUyZDdlLzEvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jYzY2YjItMTI2Ny00NTE2LWEzOWYtMzc2YjQ5ZDUyZDdl LzEvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATK0i9J0B orWEqRHWKdCH1THv9BRhGWjPk/yQF+iWp2zR+3jO1K3Z04+ooxZeIs2yDUQewGaU fxOSLKS0fN7VAf6PvCEHxh6pnZoxXzbxQGItmE8yir/NTn1ogN2x3FJ9uQLyQcQV fUTkxHqRkL/1s0wcOYAblPbdZ4MpyL0cVn2VtKxad1bI4Wtq1gwF2UujhlbkkO/E y1C41bNjCR//77hWaOo2d5XLDwyWjNhXFYF9yhaBgCkTjaMr+oQ0EjsN/vTSjvdU 8vSjrzfs8Ll8xh6lQuxk1jxdGGDOOGdfZECLKEH3de8UKTgeVQ3kivCI7gRALWVZ S+snPRw5J8he4A== -----END CERTIFICATE-----Generated at Sun Dec 21 17:20:18 2025 by rpki-client