This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft File: dHWiyViPxpXSdUKD3NPRI9H3eBE.mft (raw, json) Hash identifier: eK/T8iIS/URLnMnKQb8R1dEot8et6tJg4VGJ6zbAdl4= Subject key identifier: C3:2B:EF:F3:7F:17:64:7E:56:0C:0D:EF:6F:FE:D7:F1:60:E5:FF:2C Authority key identifier: 74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11 Certificate issuer: /CN=7475a2c9588fc695d2754283dcd3d123d1f77811 Certificate serial: 019B3D5A6CC79307E0C20CE07A986C724720 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 20:01:34 +0000 Manifest this update: Sat 20 Dec 2025 20:01:34 +0000 Manifest next update: Sun 21 Dec 2025 20:01:34 +0000 Files and hashes: 1: byfAz36QPO1zWRGDAvBxGCJUgUc.roa (hash: cj5k9JTRqENUIcOxIhQN0l2jcQzpbWQBrAEBDWIt2vI=) 2: dHWiyViPxpXSdUKD3NPRI9H3eBE.crl (hash: PggTaCrs57TRT14+v5mcwlZkHtAYB17CuIeAY83pmec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:6c:c7:93:07:e0:c2:0c:e0:7a:98:6c:72:47:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7475a2c9588fc695d2754283dcd3d123d1f77811 Validity Not Before: Dec 20 20:01:34 2025 GMT Not After : Dec 21 20:01:34 2025 GMT Subject: CN=c32beff37f17647e560c0def6ffed7f160e5ff2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:da:eb:60:4e:02:6b:68:e1:71:12:7a:ff:e8: c7:82:8e:68:95:ea:b1:43:fa:79:0f:7b:97:dd:c0: 3f:0b:a3:68:a9:1c:12:57:85:a7:b5:5f:9d:1c:d8: f4:35:26:e6:c9:ef:b9:3a:68:0c:d0:73:38:c6:7a: ce:1f:5d:33:0a:67:51:41:be:b0:d5:64:36:13:aa: 9e:ac:e9:ab:45:3a:f5:48:e6:ad:1e:28:7c:9f:a5: 2a:3f:b3:5e:bd:c2:50:e1:e8:5f:81:20:88:e7:8d: c4:e5:f5:79:e1:59:0f:e1:46:bb:af:a4:a7:41:d1: 13:42:9e:2e:c8:38:e6:d7:7c:56:57:c8:24:9a:06: 11:88:09:26:3a:27:ba:dc:a5:ff:d0:f6:25:14:29: ec:f2:2f:11:a6:6a:59:fa:33:68:3f:0b:37:7f:53: 1d:a8:5c:a6:0e:d8:32:1c:7e:6f:ca:22:82:4f:61: 03:d0:bb:7a:aa:91:82:33:8b:33:15:73:ce:1d:ac: 2b:d5:41:9f:fb:36:d6:18:bb:a4:77:48:d2:e7:21: dd:44:79:c3:f6:22:b0:40:44:4a:7d:48:98:3a:bc: 10:c4:bc:a2:1e:8a:ee:34:d3:aa:11:a8:3d:99:01: a4:40:b0:62:f4:21:ab:55:a9:03:e6:a5:5b:8f:27: 95:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2B:EF:F3:7F:17:64:7E:56:0C:0D:EF:6F:FE:D7:F1:60:E5:FF:2C X509v3 Authority Key Identifier: keyid:74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ee:98:cc:e0:9f:00:48:ca:34:b7:7e:80:e0:67:64:6e:32: ae:2c:a4:a9:5b:f8:1e:72:28:2e:55:27:84:94:0c:68:2a:db: 77:b4:f4:27:b6:3b:5f:3d:68:7e:63:5d:01:a1:6d:51:d5:ba: be:02:40:ce:7f:aa:9b:20:05:2f:30:04:57:e9:60:c5:2b:91: 02:2e:af:cb:59:1a:33:5c:7e:96:79:c4:a9:91:63:bd:f2:06: 6b:4f:78:41:c8:69:25:c8:e1:96:7b:d5:1b:b8:70:3d:95:c2: 83:7d:a1:9d:6b:d0:9a:53:de:ab:c9:c3:1c:d3:93:f3:e5:da: d2:c7:be:3a:e2:76:e5:ae:36:08:bb:97:05:24:84:7b:73:ab: 86:b0:bd:61:ea:19:c3:25:da:f2:dc:27:5f:5d:51:df:21:25: 44:df:e5:00:7e:84:cd:53:35:a8:76:a2:7b:8d:b5:19:52:ec: 1c:56:45:a9:c3:a6:f3:80:f5:38:61:e5:f5:b1:a8:71:ef:eb: 11:56:1f:b5:cf:07:3c:a4:53:8f:80:d8:d0:68:a1:03:7b:f0: 1c:67:c8:3b:f9:99:ba:e8:ec:1c:7e:25:d0:78:74:27:30:68: 43:60:c6:15:30:3e:47:88:51:ab:ae:82:34:d3:7c:a2:4f:ed: 86:ef:6b:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WmzHkwfgwgzgephsckcgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NzVhMmM5NTg4ZmM2OTVkMjc1NDI4M2RjZDNkMTIzZDFm Nzc4MTEwHhcNMjUxMjIwMjAwMTM0WhcNMjUxMjIxMjAwMTM0WjAzMTEwLwYDVQQD EyhjMzJiZWZmMzdmMTc2NDdlNTYwYzBkZWY2ZmZlZDdmMTYwZTVmZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitrrYE4Ca2jhcRJ6/+jHgo5oleqx Q/p5D3uX3cA/C6NoqRwSV4WntV+dHNj0NSbmye+5OmgM0HM4xnrOH10zCmdRQb6w 1WQ2E6qerOmrRTr1SOatHih8n6UqP7NevcJQ4ehfgSCI543E5fV54VkP4Ua7r6Sn QdETQp4uyDjm13xWV8gkmgYRiAkmOie63KX/0PYlFCns8i8RpmpZ+jNoPws3f1Md qFymDtgyHH5vyiKCT2ED0Lt6qpGCM4szFXPOHawr1UGf+zbWGLukd0jS5yHdRHnD 9iKwQERKfUiYOrwQxLyiHoruNNOqEag9mQGkQLBi9CGrVakD5qVbjyeVXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMr7/N/F2R+VgwN72/+1/Fg5f8sMB8GA1UdIwQY MBaAFHR1oslYj8aV0nVCg9zT0SPR93gRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEhXaXlWaVB4cFhTZFVLRDNOUFJJOUgzZUJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yODk4ZTYtMGQ3OS00NTRlLWFiNTQt NDBiZTBjNDYzYjkwLzEvZEhXaXlWaVB4cFhTZFVLRDNOUFJJOUgzZUJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yODk4ZTYtMGQ3OS00NTRlLWFiNTQtNDBiZTBjNDYzYjkw LzEvZEhXaXlWaVB4cFhTZFVLRDNOUFJJOUgzZUJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+6YzOCf AEjKNLd+gOBnZG4yriykqVv4HnIoLlUnhJQMaCrbd7T0J7Y7Xz1ofmNdAaFtUdW6 vgJAzn+qmyAFLzAEV+lgxSuRAi6vy1kaM1x+lnnEqZFjvfIGa094QchpJcjhlnvV G7hwPZXCg32hnWvQmlPeq8nDHNOT8+Xa0se+OuJ25a42CLuXBSSEe3OrhrC9YeoZ wyXa8twnX11R3yElRN/lAH6EzVM1qHaie421GVLsHFZFqcOm84D1OGHl9bGoce/r EVYftc8HPKRTj4DY0GihA3vwHGfIO/mZuujsHH4l0Hh0JzBoQ2DGFTA+R4hRq66C NNN8ok/thu9r2w== -----END CERTIFICATE-----Generated at Sat Dec 20 21:33:57 2025 by rpki-client