This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft File: dThqb64eVfV2pAW9dLfwjnpsRlM.mft (raw, json) Hash identifier: xm45Rqcn2w0I4cHOQFbx3LYUmMfz9zffeRotTD7ubt4= Subject key identifier: E2:FB:B5:4A:08:49:61:E5:BD:02:5E:24:A3:6C:2E:63:04:81:C4:9F Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53 Certificate issuer: /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653 Certificate serial: 019B2F9E1505C699EE672A931D31BC6D847C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft Manifest number: 0A2E Signing time: Thu 18 Dec 2025 04:00:47 +0000 Manifest this update: Thu 18 Dec 2025 04:00:47 +0000 Manifest next update: Fri 19 Dec 2025 04:00:47 +0000 Files and hashes: 1: RbCZ4FuBiM5bQVW3sP5PrxSE_ic.roa (hash: heyjJE1M941WJSvHrhTQkBoLwbj5RIQs9kFiPjSVnUw=) 2: VgQVNXTLznzmHsP79v3Zsr2IWwU.roa (hash: V8Zv8ak7cEH62i1TGjfWmCMowy8kun9bTSlwi87+E9s=) 3: dThqb64eVfV2pAW9dLfwjnpsRlM.crl (hash: ESSzD5fsVVWfFD/vANKFa3yCBNExwUXzfhUwaK9RnNs=) 4: rgad5_QrqjzIqPuzW_IRWvVFFb4.roa (hash: CW37KfuVvlCtejt5YGCTadY3jiqhfL5iQfoIqu008Bo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:15:05:c6:99:ee:67:2a:93:1d:31:bc:6d:84:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653 Validity Not Before: Dec 18 04:00:47 2025 GMT Not After : Dec 19 04:00:47 2025 GMT Subject: CN=e2fbb54a084961e5bd025e24a36c2e630481c49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ff:b8:b0:27:89:87:15:5b:df:70:60:a2:1c: 84:9a:89:93:58:9e:b0:a5:6a:7c:d1:1e:47:22:2c: 34:2f:50:c2:aa:89:d6:2a:52:a6:2e:06:22:da:9f: 86:82:24:64:a0:1b:62:e3:40:55:d4:9d:c4:4b:5b: f8:78:c9:90:66:68:d2:0b:d0:37:d2:9b:50:5a:11: 14:44:b4:86:c6:50:07:10:b4:e1:a5:5f:60:a8:c0: 19:59:8a:90:c1:28:c7:6e:d9:5b:3f:fc:a5:f2:79: 1e:4d:ec:ab:bc:50:08:91:95:82:98:df:f1:ed:8e: 27:34:43:b9:13:a4:c4:d5:8a:5f:31:52:3b:1b:c0: f5:2a:19:07:db:2f:8c:40:28:0f:ed:2d:48:a1:cc: c4:d5:74:82:07:73:63:c6:7d:a0:7a:25:c3:e0:9f: 2a:cd:9c:3d:9f:66:19:d3:3a:13:4a:0f:39:de:ec: 76:a8:64:a6:be:c3:de:24:2c:22:0f:d0:3b:bc:3f: ed:e7:6d:a7:f7:8c:a8:76:85:9f:9d:94:11:5d:4f: 37:29:34:1f:32:af:82:21:20:d8:c3:e7:dd:d6:a5: 78:eb:44:86:e8:c2:ba:55:89:15:99:99:0f:ca:40: fa:82:ba:78:93:0b:06:03:77:f9:ac:4e:92:f3:a0: 87:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FB:B5:4A:08:49:61:E5:BD:02:5E:24:A3:6C:2E:63:04:81:C4:9F X509v3 Authority Key Identifier: keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:57:f7:e1:ca:10:85:bc:3d:38:09:06:da:c3:75:29:70:a2: de:38:cd:1e:82:67:e3:0a:c8:37:8a:19:d5:68:bc:be:25:42: b8:d1:28:9a:e7:fa:cc:2a:e8:77:02:b2:b8:1f:1f:cf:4f:45: 73:a9:29:d8:75:f2:23:92:f4:35:7a:2f:ac:74:b4:18:59:44: 7b:aa:f7:55:4e:2f:ca:e0:17:61:00:1c:61:8e:85:6e:9d:cc: db:fa:ce:8d:fa:b7:58:3b:d6:43:6e:c9:82:d2:f0:3b:96:be: 7c:34:ae:be:79:d8:39:13:ae:c0:b6:61:a7:6c:5d:2f:8a:f9: ed:f0:8c:36:a7:c8:19:0f:f4:8d:28:06:66:3d:d1:cc:f1:3f: 0a:7c:c0:a8:24:42:62:28:cf:02:13:51:75:22:88:82:47:fd: f5:1d:5b:2c:b4:e7:0a:b9:ad:90:27:44:e3:6f:3d:20:35:75: 19:71:d3:cd:c1:06:76:9a:c6:c4:5e:4d:6f:a3:c0:de:a4:23: c4:34:34:df:7d:dc:0d:b2:fb:6a:fb:11:c4:9a:d4:a5:33:26: fd:97:2b:b4:ac:d9:7f:cf:24:39:ba:f1:6c:3a:e1:6a:e2:8e: 49:c9:f0:11:50:32:aa:7b:ea:c1:ec:7c:49:33:5d:2a:7d:5c: 1d:64:3c:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnhUFxpnuZyqTHTG8bYR8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1Mzg2YTZmYWUxZTU1ZjU3NmE0MDViZDc0YjdmMDhlN2E2 YzQ2NTMwHhcNMjUxMjE4MDQwMDQ3WhcNMjUxMjE5MDQwMDQ3WjAzMTEwLwYDVQQD EyhlMmZiYjU0YTA4NDk2MWU1YmQwMjVlMjRhMzZjMmU2MzA0ODFjNDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf+4sCeJhxVb33BgohyEmomTWJ6w pWp80R5HIiw0L1DCqonWKlKmLgYi2p+GgiRkoBti40BV1J3ES1v4eMmQZmjSC9A3 0ptQWhEURLSGxlAHELThpV9gqMAZWYqQwSjHbtlbP/yl8nkeTeyrvFAIkZWCmN/x 7Y4nNEO5E6TE1YpfMVI7G8D1KhkH2y+MQCgP7S1IoczE1XSCB3Njxn2geiXD4J8q zZw9n2YZ0zoTSg853ux2qGSmvsPeJCwiD9A7vD/t522n94yodoWfnZQRXU83KTQf Mq+CISDYw+fd1qV460SG6MK6VYkVmZkPykD6grp4kwsGA3f5rE6S86CHswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOL7tUoISWHlvQJeJKNsLmMEgcSfMB8GA1UdIwQY MBaAFHU4am+uHlX1dqQFvXS38I56bEZTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kOWEwMWMtNWM5MS00ZDAwLWEwOWEt Zjg3OTJmNTc3YjlhLzEvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9kOWEwMWMtNWM5MS00ZDAwLWEwOWEtZjg3OTJmNTc3Yjlh LzEvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVf34coQ hbw9OAkG2sN1KXCi3jjNHoJn4wrIN4oZ1Wi8viVCuNEomuf6zCrodwKyuB8fz09F c6kp2HXyI5L0NXovrHS0GFlEe6r3VU4vyuAXYQAcYY6Fbp3M2/rOjfq3WDvWQ27J gtLwO5a+fDSuvnnYOROuwLZhp2xdL4r57fCMNqfIGQ/0jSgGZj3RzPE/CnzAqCRC YijPAhNRdSKIgkf99R1bLLTnCrmtkCdE4289IDV1GXHTzcEGdprGxF5Nb6PA3qQj xDQ0333cDbL7avsRxJrUpTMm/ZcrtKzZf88kObrxbDrhauKOScnwEVAyqnvqwex8 STNdKn1cHWQ8lw== -----END CERTIFICATE-----Generated at Thu Dec 18 10:25:00 2025 by rpki-client