This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft File: 29weM6UtreAbUtkXC8KbjCjZi2w.mft (raw, json) Hash identifier: HYFeWBhySZS6Gq2oQLK2+1U8DLnS9NQV51LX5vnii0c= Subject key identifier: D2:C9:90:BC:C3:B9:45:88:42:C0:64:9A:A2:97:9B:90:69:C0:4B:FF Authority key identifier: DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C Certificate issuer: /CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c Certificate serial: 019B3F11701CFD807CC56034F9A26D8213D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft Manifest number: 0204 Signing time: Sun 21 Dec 2025 04:01:05 +0000 Manifest this update: Sun 21 Dec 2025 04:01:05 +0000 Manifest next update: Mon 22 Dec 2025 04:01:05 +0000 Files and hashes: 1: 29weM6UtreAbUtkXC8KbjCjZi2w.crl (hash: lB867fvU3ghAm74zScvcGNYKEsg6UH3hiutOCg/gdoU=) 2: B1LqaZUhsUfUDpN-9vYGCP2m0g8.roa (hash: QrKbpCe6SJ2ZphzaQI2EN0WS9Q27CgrmTnBcyr8V/oE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:70:1c:fd:80:7c:c5:60:34:f9:a2:6d:82:13:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c Validity Not Before: Dec 21 04:01:05 2025 GMT Not After : Dec 22 04:01:05 2025 GMT Subject: CN=d2c990bcc3b9458842c0649aa2979b9069c04bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:2b:3e:68:d3:44:e3:cb:5a:59:ad:f9:6b: d1:13:2e:b4:96:79:de:04:40:fa:28:9f:a4:f0:1a: ba:4a:98:5b:b9:78:ca:38:47:cc:91:69:94:a7:25: 72:ec:df:b3:e5:ae:9b:f5:6f:e9:99:f0:bb:c3:6b: 5f:1d:a8:cd:4e:e1:2d:8b:23:da:68:99:33:30:96: b6:af:46:3e:75:96:c5:06:55:79:16:20:e6:76:e9: 54:bd:bc:1b:77:b0:db:96:ab:0e:c2:5b:da:ed:39: 75:92:7b:8f:1c:d6:46:bc:4c:d5:bf:2c:d9:f8:84: 82:32:11:8e:b6:a3:48:75:92:d2:40:98:96:c5:f9: d4:16:35:28:69:86:c6:e3:d3:e2:c1:3f:b9:fc:e6: 4f:12:f9:bb:38:62:6c:47:75:43:c5:ab:9c:7a:27: 4c:ab:34:f0:72:2b:25:49:ee:67:46:90:63:d3:d3: 48:2e:ea:49:35:ef:85:84:52:29:49:58:85:03:35: 5d:7a:92:87:33:85:31:e6:a5:8c:de:31:cd:a0:6c: 4e:0f:91:1b:df:2e:f9:ed:00:4a:c9:3b:b6:90:40: e4:71:44:70:aa:4e:53:8b:5e:4d:c2:b5:44:45:9f: 1f:2e:ad:5d:f1:5e:0f:a9:07:96:55:8e:2a:7e:69: 99:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C9:90:BC:C3:B9:45:88:42:C0:64:9A:A2:97:9B:90:69:C0:4B:FF X509v3 Authority Key Identifier: keyid:DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:64:48:46:95:92:89:e1:c1:e2:a3:1b:89:8e:3d:1a:1e:9d: 30:27:22:e2:bf:4b:8c:5f:74:34:fa:a7:8b:c8:0a:7b:5a:e7: 35:33:28:99:1d:88:82:ed:a8:a9:c7:9e:0a:ba:a0:a3:fc:a3: ed:64:9f:67:d2:b5:c9:67:d7:5e:6b:fb:cf:08:c3:32:56:9b: 0d:3c:cc:81:ac:ae:ff:d6:59:c1:d7:3d:43:92:7e:e5:ea:19: e1:16:08:cc:0d:40:54:90:2a:b9:25:02:0b:2f:c0:c5:1d:bf: 69:72:f2:90:c1:ff:47:4c:a7:e8:12:da:3f:ee:44:8b:5b:47: a0:ef:9b:9d:77:60:fa:0e:04:9c:b3:b7:a0:d3:06:58:7a:1d: 84:f4:0a:49:2e:c2:3d:b5:70:ac:ec:ea:e1:e5:97:7c:12:8e: 02:69:0a:20:51:9b:bb:2b:99:95:10:96:05:01:44:f9:0e:77: 58:53:95:c1:5c:88:bd:51:5e:00:d3:be:6d:6f:1a:e7:9e:96: cb:5f:cc:58:c5:a4:33:ef:b8:15:53:02:95:d7:b3:d8:c6:d5: 64:14:79:7a:f4:62:aa:33:47:0b:f0:26:1c:b8:f5:b3:b7:23: b3:d7:34:d6:01:c4:ba:6c:02:df:d1:e0:2f:86:ac:8e:e9:37: f7:da:c9:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EXAc/YB8xWA0+aJtghPZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZGMxZTMzYTUyZGFkZTAxYjUyZDkxNzBiYzI5YjhjMjhk OThiNmMwHhcNMjUxMjIxMDQwMTA1WhcNMjUxMjIyMDQwMTA1WjAzMTEwLwYDVQQD EyhkMmM5OTBiY2MzYjk0NTg4NDJjMDY0OWFhMjk3OWI5MDY5YzA0YmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx0rPmjTROPLWlmt+WvREy60lnne BED6KJ+k8Bq6SphbuXjKOEfMkWmUpyVy7N+z5a6b9W/pmfC7w2tfHajNTuEtiyPa aJkzMJa2r0Y+dZbFBlV5FiDmdulUvbwbd7DblqsOwlva7Tl1knuPHNZGvEzVvyzZ +ISCMhGOtqNIdZLSQJiWxfnUFjUoaYbG49PiwT+5/OZPEvm7OGJsR3VDxauceidM qzTwcislSe5nRpBj09NILupJNe+FhFIpSViFAzVdepKHM4Ux5qWM3jHNoGxOD5Eb 3y757QBKyTu2kEDkcURwqk5Ti15NwrVERZ8fLq1d8V4PqQeWVY4qfmmZsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLJkLzDuUWIQsBkmqKXm5BpwEv/MB8GA1UdIwQY MBaAFNvcHjOlLa3gG1LZFwvCm4wo2YtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjl3ZU02VXRyZUFiVXRrWEM4S2JqQ2paaTJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNDlmMWMtYzk0NS00N2M0LWJkZGMt ZWVjY2MyMGE4ZDIxLzEvMjl3ZU02VXRyZUFiVXRrWEM4S2JqQ2paaTJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kNDlmMWMtYzk0NS00N2M0LWJkZGMtZWVjY2MyMGE4ZDIx LzEvMjl3ZU02VXRyZUFiVXRrWEM4S2JqQ2paaTJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA12RIRpWS ieHB4qMbiY49Gh6dMCci4r9LjF90NPqni8gKe1rnNTMomR2Igu2oqceeCrqgo/yj 7WSfZ9K1yWfXXmv7zwjDMlabDTzMgayu/9ZZwdc9Q5J+5eoZ4RYIzA1AVJAquSUC Cy/AxR2/aXLykMH/R0yn6BLaP+5Ei1tHoO+bnXdg+g4EnLO3oNMGWHodhPQKSS7C PbVwrOzq4eWXfBKOAmkKIFGbuyuZlRCWBQFE+Q53WFOVwVyIvVFeANO+bW8a556W y1/MWMWkM++4FVMCldez2MbVZBR5evRiqjNHC/AmHLj1s7cjs9c01gHEumwC39Hg L4asjuk399rJQA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:42:04 2025 by rpki-client