This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft File: dNnAc7T3BpfiF1walV9sqMOmJGs.mft (raw, json) Hash identifier: DKbMiAJhuEFZlp9dujcXMIcIf8LKe51oNkvuEltgrNU= Subject key identifier: AF:7A:27:86:31:3D:1A:98:AA:07:98:82:34:EC:C6:9E:C9:00:96:38 Authority key identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B Certificate issuer: /CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b Certificate serial: 019B53ABF7283F27F7F873232ACC434DED2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft Manifest number: 10FF Signing time: Thu 25 Dec 2025 04:02:17 +0000 Manifest this update: Thu 25 Dec 2025 04:02:17 +0000 Manifest next update: Fri 26 Dec 2025 04:02:17 +0000 Files and hashes: 1: Jr22ey1N2NwAUwk5_MnoxmPuMXY.roa (hash: 35l8sKB3wVTvVWmpyHsbhQyl9RJrjRSgJU8YSXiR6gw=) 2: dNnAc7T3BpfiF1walV9sqMOmJGs.crl (hash: zZ3SG9pFwKVu9rHKk6dNLwJjLvX0Bo0ibE4ZLJbACVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:f7:28:3f:27:f7:f8:73:23:2a:cc:43:4d:ed:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b Validity Not Before: Dec 25 04:02:17 2025 GMT Not After : Dec 26 04:02:17 2025 GMT Subject: CN=af7a2786313d1a98aa07988234ecc69ec9009638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b3:fb:f9:c4:a6:09:b7:56:e9:1a:84:be:af: a9:96:69:a2:47:90:66:da:a0:39:72:bd:3d:1e:23: ec:73:9a:81:bb:c9:0f:a3:46:51:1f:17:97:3d:85: 18:ac:4f:30:9e:ca:e2:2a:9a:54:b8:85:c0:6a:18: 7f:93:13:b2:9e:d9:cc:a1:5f:8e:24:69:72:7b:2d: 98:65:25:cb:af:dc:0d:02:3b:bc:ac:27:9f:c2:d8: 6a:5a:ef:b2:22:49:a6:1e:04:dc:64:15:03:dd:3f: 3b:2f:5d:1c:b7:a2:15:fe:35:d9:8b:49:9c:ce:a5: db:11:80:dd:da:35:f6:5f:97:41:ea:aa:95:d8:f6: 3a:53:b9:bc:70:f0:33:2c:1f:62:23:a1:46:6b:b6: 4f:60:b8:08:b5:52:93:e6:ab:8a:9e:31:c3:5d:be: f7:bb:73:c1:58:4e:0b:36:c5:30:47:7f:06:f5:1b: f4:36:40:39:3f:22:ec:42:7c:bc:28:d0:06:01:c7: 03:f9:15:7c:3c:24:cf:02:ed:3a:5b:27:17:45:50: 42:d6:73:a0:74:24:f0:16:22:ec:33:44:cc:e1:c2: 9c:22:81:0a:80:18:eb:5a:df:c8:a8:0d:73:37:ff: 56:01:42:ab:70:f8:c6:68:92:4e:8f:98:4f:d7:fe: 63:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7A:27:86:31:3D:1A:98:AA:07:98:82:34:EC:C6:9E:C9:00:96:38 X509v3 Authority Key Identifier: keyid:74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:20:95:9e:53:07:c5:df:47:78:1d:2a:47:e4:f7:f2:71:fd: 4c:98:39:0d:03:b3:b6:e9:ce:37:97:68:55:3c:a8:c6:b3:af: 4e:92:a8:15:24:a4:3d:ca:b4:cb:b1:43:2e:04:e7:2e:47:84: 79:34:4b:54:22:64:14:1c:cd:c6:51:7b:7a:b2:62:02:cc:d4: 8f:0a:03:4b:c4:21:c3:6e:b6:40:59:38:73:0b:33:e4:ae:5a: 04:df:5b:86:59:e6:55:32:5b:e9:9a:78:b2:f5:e4:9b:be:8d: 23:37:cb:45:96:44:d0:d6:7d:af:40:3b:76:d1:b6:ba:31:7e: b4:80:9b:ce:e8:d0:b7:d0:c0:14:97:e0:3b:5c:c6:43:27:c3: 94:48:45:1e:91:51:e2:68:ba:7f:3e:cc:68:60:4c:00:7a:79: 0f:fc:c2:dd:0b:36:bf:bf:8f:16:6a:a9:2f:57:37:73:d3:62: 3b:8c:6e:44:92:86:2d:af:d9:43:db:ce:f2:ea:47:e5:1f:ad: 57:79:95:50:e8:fd:2d:65:9e:8b:2f:72:6a:49:3b:d0:dc:59: 31:bc:78:7e:51:a8:11:93:23:b9:82:c8:a2:aa:93:a3:df:07: ab:39:30:0e:64:8d:c6:bc:e8:35:d4:dc:e4:aa:98:fd:0c:3b: 26:31:e0:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq/coPyf3+HMjKsxDTe0rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZDljMDczYjRmNzA2OTdlMjE3NWMxYTk1NWY2Y2E4YzNh NjI0NmIwHhcNMjUxMjI1MDQwMjE3WhcNMjUxMjI2MDQwMjE3WjAzMTEwLwYDVQQD EyhhZjdhMjc4NjMxM2QxYTk4YWEwNzk4ODIzNGVjYzY5ZWM5MDA5NjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrP7+cSmCbdW6RqEvq+plmmiR5Bm 2qA5cr09HiPsc5qBu8kPo0ZRHxeXPYUYrE8wnsriKppUuIXAahh/kxOyntnMoV+O JGlyey2YZSXLr9wNAju8rCefwthqWu+yIkmmHgTcZBUD3T87L10ct6IV/jXZi0mc zqXbEYDd2jX2X5dB6qqV2PY6U7m8cPAzLB9iI6FGa7ZPYLgItVKT5quKnjHDXb73 u3PBWE4LNsUwR38G9Rv0NkA5PyLsQny8KNAGAccD+RV8PCTPAu06WycXRVBC1nOg dCTwFiLsM0TM4cKcIoEKgBjrWt/IqA1zN/9WAUKrcPjGaJJOj5hP1/5jVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK96J4YxPRqYqgeYgjTsxp7JAJY4MB8GA1UdIwQY MBaAFHTZwHO09waX4hdcGpVfbKjDpiRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE5uQWM3VDNCcGZpRjF3YWxWOXNxTU9tSkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85Y2QxZDctMzRlNy00N2MxLTg0ODQt YzE5MTQxMGRjODg5LzEvZE5uQWM3VDNCcGZpRjF3YWxWOXNxTU9tSkdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi85Y2QxZDctMzRlNy00N2MxLTg0ODQtYzE5MTQxMGRjODg5 LzEvZE5uQWM3VDNCcGZpRjF3YWxWOXNxTU9tSkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSCVnlMH xd9HeB0qR+T38nH9TJg5DQOztunON5doVTyoxrOvTpKoFSSkPcq0y7FDLgTnLkeE eTRLVCJkFBzNxlF7erJiAszUjwoDS8Qhw262QFk4cwsz5K5aBN9bhlnmVTJb6Zp4 svXkm76NIzfLRZZE0NZ9r0A7dtG2ujF+tICbzujQt9DAFJfgO1zGQyfDlEhFHpFR 4mi6fz7MaGBMAHp5D/zC3Qs2v7+PFmqpL1c3c9NiO4xuRJKGLa/ZQ9vO8upH5R+t V3mVUOj9LWWeiy9yakk70NxZMbx4flGoEZMjuYLIoqqTo98HqzkwDmSNxrzoNdTc 5KqY/Qw7JjHgGg== -----END CERTIFICATE-----Generated at Thu Dec 25 08:35:37 2025 by rpki-client