This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json) Hash identifier: xxy/avKLkZXynLm7dRKlVV9adR2d5WbH305J/eOMEyM= Subject key identifier: BA:99:20:53:57:12:8C:E2:7C:E1:FB:85:B5:09:35:A3:1A:1F:07:16 Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Certificate serial: 019B3BD9CF033149E3BBFCACEE563B1E93E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft Manifest number: 1177 Signing time: Sat 20 Dec 2025 13:01:28 +0000 Manifest this update: Sat 20 Dec 2025 13:01:28 +0000 Manifest next update: Sun 21 Dec 2025 13:01:28 +0000 Files and hashes: 1: QKE5A2-VWyd3J0DRrfMQlK1fMX8.roa (hash: fb4kqhQuHHEA1R522FziGZUhpgN31KA7VLx4uSTZ7+0=) 2: QibsYMI2HzBANNUyuh3X_SXi7C8.roa (hash: J+6lvfhlLdmu7GB6QikI0qn006fBR9guwOXMkwXCaOk=) 3: XeENoq2HuB6omGApVd7MyU5r1TA.roa (hash: epvaDIj9ho9XW3OqF0eBT6eF6xWMid+XMsTU4k7CI2s=) 4: Yrj8M2QKm85FgqezvTNKupJvfRM.roa (hash: 19NO01gkKNfH49H88V9pcdpwsCQD2Y7XMbrn6a7gp8I=) 5: dcRF9U3L6DhFSWTZEdsiTMS3P2o.roa (hash: ES6jEJ/RK/dO83oihrvVXwCUZSvWJGm8C1RK/nM0bYI=) 6: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: zMNL4fvOPb96gK5LWv++BGn3KsJ8xILxLMifgGSVfzU=) 7: eaH07OW5KOtKpWvHksqObMQWq4E.roa (hash: /p/ujtYI0LrIojxA4eFgMakt3BjMBgIlLRM6Y1JhEgo=) 8: fKdatG9WcJc5WVUN6pdVKIOjMnQ.roa (hash: kqSOLzeO/Lml0iGRyiBotGsiuI6Y4hQbc4VPC8laBE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:cf:03:31:49:e3:bb:fc:ac:ee:56:3b:1e:93:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Validity Not Before: Dec 20 13:01:28 2025 GMT Not After : Dec 21 13:01:28 2025 GMT Subject: CN=ba99205357128ce27ce1fb85b50935a31a1f0716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bf:c7:56:9f:be:d3:23:3d:2c:ed:c6:61:2c: 7b:66:c5:d0:01:6b:65:a7:55:d2:10:2b:b4:c1:a5: 68:bd:c2:58:00:a7:92:f2:3b:c9:3c:17:f3:78:fb: af:59:c7:c8:c4:e4:40:09:55:a2:70:5c:d6:55:38: 7d:24:ee:d0:b4:13:99:6e:28:e4:4c:a4:3a:f4:a6: 5b:b1:b4:79:7c:45:82:3c:00:b8:ae:c6:e9:32:1f: 70:e0:c3:5d:de:4b:04:ea:65:d5:9a:69:f2:49:76: 9e:df:94:ac:ac:61:de:29:b4:8f:e0:c1:73:5c:7f: 16:72:25:73:ee:52:f4:87:13:1b:b2:83:e3:a6:8a: 78:7e:12:2e:0c:53:6d:8f:ed:01:c3:04:b3:56:cc: cd:84:c5:2b:db:05:f2:ca:22:a1:9f:d9:68:e1:4f: 92:4f:17:7d:98:2e:26:4f:69:e7:b6:d1:58:d7:ac: 95:3f:1b:fc:c2:35:1b:d2:08:18:6d:89:7e:96:19: 40:59:35:e5:27:8b:45:db:b3:87:92:66:70:a6:50: c3:77:e8:e3:bb:08:95:3c:b9:d6:7a:a4:01:aa:79: 1f:34:c0:ee:44:b0:e6:0a:70:5c:f9:c9:66:a6:43: 2a:2a:95:60:b8:89:4a:98:43:b3:b8:3b:2f:ca:1a: 06:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:99:20:53:57:12:8C:E2:7C:E1:FB:85:B5:09:35:A3:1A:1F:07:16 X509v3 Authority Key Identifier: keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:18:67:24:fc:0b:75:b5:d2:0d:cd:08:db:67:6f:ac:34:61: bf:79:1d:d9:3b:fc:9d:f1:74:8f:e1:90:1a:bc:c4:7f:d4:29: 08:06:da:f4:dc:26:41:2d:44:a2:dd:c1:20:f6:b2:c3:3b:8e: 3e:c1:86:e9:98:4c:11:b1:ab:b5:1e:cf:3b:d4:31:dc:47:21: c0:8e:e8:64:f9:df:ba:71:83:f5:43:fc:60:7a:9f:d6:7e:cb: c8:f2:d0:b3:e8:c4:ff:d8:1f:2d:ca:8c:00:0c:cd:90:8a:91: a2:cb:a7:f3:ae:a1:b5:d1:70:76:a1:d8:b4:c5:43:71:0d:13: 58:d0:e5:3f:77:00:bd:5c:05:b6:2c:4c:54:33:5a:4f:2a:dd: 53:12:8e:2b:43:16:fd:02:6d:e5:ec:e8:fb:9c:2a:27:bc:5e: eb:60:6d:53:fd:df:00:ee:1f:53:36:28:06:ae:22:3f:f5:75: d8:99:83:6a:c8:16:56:48:f6:f3:9b:71:f3:9f:e8:b6:65:c0: 56:43:d7:36:53:90:3a:68:c4:ae:2f:9b:5e:65:13:6f:40:04: 1e:c1:e3:e4:88:bb:b6:97:89:ae:49:19:03:96:36:1a:ab:1b: 63:26:22:18:9f:0f:ce:4d:23:8f:9d:c9:ad:d5:d0:5a:d4:be: 25:bd:fa:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72c8DMUnju/ys7lY7HpPgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky MGMzZDkwHhcNMjUxMjIwMTMwMTI4WhcNMjUxMjIxMTMwMTI4WjAzMTEwLwYDVQQD EyhiYTk5MjA1MzU3MTI4Y2UyN2NlMWZiODViNTA5MzVhMzFhMWYwNzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr/HVp++0yM9LO3GYSx7ZsXQAWtl p1XSECu0waVovcJYAKeS8jvJPBfzePuvWcfIxORACVWicFzWVTh9JO7QtBOZbijk TKQ69KZbsbR5fEWCPAC4rsbpMh9w4MNd3ksE6mXVmmnySXae35SsrGHeKbSP4MFz XH8WciVz7lL0hxMbsoPjpop4fhIuDFNtj+0BwwSzVszNhMUr2wXyyiKhn9lo4U+S Txd9mC4mT2nnttFY16yVPxv8wjUb0ggYbYl+lhlAWTXlJ4tF27OHkmZwplDDd+jj uwiVPLnWeqQBqnkfNMDuRLDmCnBc+clmpkMqKpVguIlKmEOzuDsvyhoGiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqZIFNXEozifOH7hbUJNaMaHwcWMB8GA1UdIwQY MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt NGZiNTU5YjNiOWIzLzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxhnJPwL dbXSDc0I22dvrDRhv3kd2Tv8nfF0j+GQGrzEf9QpCAba9NwmQS1Eot3BIPaywzuO PsGG6ZhMEbGrtR7PO9Qx3EchwI7oZPnfunGD9UP8YHqf1n7LyPLQs+jE/9gfLcqM AAzNkIqRosun866htdFwdqHYtMVDcQ0TWNDlP3cAvVwFtixMVDNaTyrdUxKOK0MW /QJt5ezo+5wqJ7xe62BtU/3fAO4fUzYoBq4iP/V12JmDasgWVkj285tx85/otmXA VkPXNlOQOmjEri+bXmUTb0AEHsHj5Ii7tpeJrkkZA5Y2GqsbYyYiGJ8Pzk0jj53J rdXQWtS+Jb36ew== -----END CERTIFICATE-----Generated at Sat Dec 20 15:04:37 2025 by rpki-client