This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft File: dp1cUsMVfllF5mO5LtRALGBhbjs.mft (raw, json) Hash identifier: yarh6IPB5RbUZO0xpry78f64LaktRAhaKjB4QUaaVss= Subject key identifier: 86:07:08:B6:94:59:66:0F:73:95:E6:80:10:DF:93:4D:4F:69:3E:A5 Authority key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B Certificate issuer: /CN=769d5c52c3157e5945e663b92ed4402c60616e3b Certificate serial: 019B3CB4FDC8D5CF7757814B1F7702819B2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft Manifest number: 046C Signing time: Sat 20 Dec 2025 17:00:52 +0000 Manifest this update: Sat 20 Dec 2025 17:00:52 +0000 Manifest next update: Sun 21 Dec 2025 17:00:52 +0000 Files and hashes: 1: 08Xj6P3LiBkWV-XyPE1sfuebHwg.roa (hash: GOb53BquANot8lO8WUgTLWPiXo2ewEYSLTJKkoVM5kk=) 2: dp1cUsMVfllF5mO5LtRALGBhbjs.crl (hash: sEbsASztmu81AXIj1R9X9LF59Acp3EGY1uZJThXI5eA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:fd:c8:d5:cf:77:57:81:4b:1f:77:02:81:9b:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=769d5c52c3157e5945e663b92ed4402c60616e3b Validity Not Before: Dec 20 17:00:52 2025 GMT Not After : Dec 21 17:00:52 2025 GMT Subject: CN=860708b69459660f7395e68010df934d4f693ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d5:eb:52:1c:99:d7:5f:a6:fc:a6:71:c5:51: e4:59:82:4e:68:a1:eb:d5:64:4a:0f:65:5f:b7:bd: af:8e:59:f8:88:2a:91:00:51:22:dc:36:23:b5:0c: bc:06:5e:cf:e1:b3:ed:55:19:9d:2e:d0:a6:86:1b: 41:5f:b4:30:62:e5:33:66:74:c1:9e:93:07:4c:fe: 9d:4a:23:97:b5:41:d5:33:af:6d:34:e4:36:45:86: 02:a5:c4:cb:05:da:16:9e:f8:f5:6b:6a:d4:72:75: 36:b5:b2:c2:b3:05:b3:8c:16:8f:04:20:a6:bc:ec: e5:fe:d2:6c:33:fa:2a:dd:2c:2c:1a:b8:db:f5:ba: 1f:d8:ab:91:28:b3:c7:bc:d2:19:de:ce:92:79:be: 88:13:a1:0b:07:2c:5e:be:1a:54:d3:39:9a:18:76: 55:8f:e7:d7:3d:93:19:02:03:a6:ef:fd:79:33:41: 0c:32:2f:dc:40:d9:94:9b:f4:a9:aa:2b:7e:cb:fa: d9:82:be:2a:3e:96:29:f8:01:9d:30:93:c6:e0:dd: 37:8f:51:1f:d4:29:d2:39:ce:38:9c:53:09:bb:0a: 33:95:16:00:d3:0d:99:97:50:89:a6:f5:a3:c3:d3: fd:bd:4a:93:4c:09:19:18:45:d4:4c:9e:0a:0c:f6: 0d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:07:08:B6:94:59:66:0F:73:95:E6:80:10:DF:93:4D:4F:69:3E:A5 X509v3 Authority Key Identifier: keyid:76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:30:d6:6b:04:eb:50:9b:a8:e5:05:63:6e:2d:3e:c0:ac:b2: a9:5c:40:e1:d3:d3:8e:39:7f:1f:fd:e4:7c:f2:b7:7e:7b:b7: d0:5e:fa:59:f7:92:b4:8b:82:cd:69:6c:8d:3b:d0:58:8c:ff: 7d:5e:36:04:3e:99:a3:34:9e:a2:82:a0:d7:05:96:44:a5:74: 40:4a:d8:67:77:ef:04:ac:ac:3b:9b:7b:4d:ec:cf:0c:b6:25: 64:67:7b:c7:23:d4:91:e5:4d:4b:c7:2d:09:ae:21:33:84:3c: 15:b2:62:f1:e2:f4:89:1b:e2:2b:3d:62:6f:46:8b:84:13:ca: a9:8a:95:d7:82:90:63:93:7a:99:b4:5d:cf:bd:6e:01:9b:a9: 80:38:4a:1f:c0:4a:04:09:b1:d1:8d:8d:83:ac:39:c9:36:90: d1:18:29:ac:c8:88:28:b0:6a:91:41:49:66:c4:fa:89:ac:f3: da:a9:1e:f4:15:bf:2b:a1:45:30:e4:50:8e:89:c6:ad:cb:51: 51:cc:37:1d:f7:a1:6f:11:5b:bd:19:76:a0:b6:87:11:68:3f: 9f:30:70:1e:e9:f6:27:36:9b:77:9d:d8:01:15:a3:73:61:ce: 31:60:82:09:a5:cb:80:0d:fb:d4:84:ab:5a:ce:df:72:e0:05: 25:6e:80:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tP3I1c93V4FLH3cCgZsqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OWQ1YzUyYzMxNTdlNTk0NWU2NjNiOTJlZDQ0MDJjNjA2 MTZlM2IwHhcNMjUxMjIwMTcwMDUyWhcNMjUxMjIxMTcwMDUyWjAzMTEwLwYDVQQD Eyg4NjA3MDhiNjk0NTk2NjBmNzM5NWU2ODAxMGRmOTM0ZDRmNjkzZWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNXrUhyZ11+m/KZxxVHkWYJOaKHr 1WRKD2Vft72vjln4iCqRAFEi3DYjtQy8Bl7P4bPtVRmdLtCmhhtBX7QwYuUzZnTB npMHTP6dSiOXtUHVM69tNOQ2RYYCpcTLBdoWnvj1a2rUcnU2tbLCswWzjBaPBCCm vOzl/tJsM/oq3SwsGrjb9bof2KuRKLPHvNIZ3s6Seb6IE6ELByxevhpU0zmaGHZV j+fXPZMZAgOm7/15M0EMMi/cQNmUm/Spqit+y/rZgr4qPpYp+AGdMJPG4N03j1Ef 1CnSOc44nFMJuwozlRYA0w2Zl1CJpvWjw9P9vUqTTAkZGEXUTJ4KDPYNqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYHCLaUWWYPc5XmgBDfk01PaT6lMB8GA1UdIwQY MBaAFHadXFLDFX5ZReZjuS7UQCxgYW47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jYzY2YjItMTI2Ny00NTE2LWEzOWYt Mzc2YjQ5ZDUyZDdlLzEvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jYzY2YjItMTI2Ny00NTE2LWEzOWYtMzc2YjQ5ZDUyZDdl LzEvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTDWawTr UJuo5QVjbi0+wKyyqVxA4dPTjjl/H/3kfPK3fnu30F76WfeStIuCzWlsjTvQWIz/ fV42BD6ZozSeooKg1wWWRKV0QErYZ3fvBKysO5t7TezPDLYlZGd7xyPUkeVNS8ct Ca4hM4Q8FbJi8eL0iRviKz1ib0aLhBPKqYqV14KQY5N6mbRdz71uAZupgDhKH8BK BAmx0Y2Ng6w5yTaQ0RgprMiIKLBqkUFJZsT6iazz2qke9BW/K6FFMORQjonGrctR Ucw3HfehbxFbvRl2oLaHEWg/nzBwHun2Jzabd53YARWjc2HOMWCCCaXLgA371ISr Ws7fcuAFJW6Aqw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:42:28 2025 by rpki-client