This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json) Hash identifier: VAcfmi7GXQmJnjbvR3VOX0ffEq5uH/d9TWOJvnhekbg= Subject key identifier: BA:0C:A1:70:62:B2:48:5A:CC:81:6A:77:55:28:AA:C2:77:6E:A3:45 Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92 Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992 Certificate serial: 019B6C20A05CA9E30DEF3EE6B61F86D0B658 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft Manifest number: 17A2 Signing time: Mon 29 Dec 2025 22:00:36 +0000 Manifest this update: Mon 29 Dec 2025 22:00:36 +0000 Manifest next update: Tue 30 Dec 2025 22:00:36 +0000 Files and hashes: 1: BzyRKVh8G6MxV92pq1WYXw5su3Y.asa (hash: 3hX1G/8KfCcJykl9PaVXJ9wMH1P2QICFRRtGllgYDUo=) 2: PUpM4VMV5RRi5tzTokF5lqr4ZZQ.roa (hash: 9xAG/+lXKPXOcRJWGmtvJdS/t7KdmtbF4dJ5vzXbJTA=) 3: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: eCuTfpWwrm4AUEKS5Pef++Q+ir0QP+RvHUD3POCkUJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 22:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:20:a0:5c:a9:e3:0d:ef:3e:e6:b6:1f:86:d0:b6:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992 Validity Not Before: Dec 29 22:00:36 2025 GMT Not After : Dec 30 22:00:36 2025 GMT Subject: CN=ba0ca17062b2485acc816a775528aac2776ea345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4c:bd:35:a3:18:44:b3:d8:80:f6:51:6d:7d: 30:a6:c9:01:01:9c:20:06:34:31:ff:88:bd:1d:3a: b7:75:a9:49:fd:d6:68:3d:c2:e3:06:96:eb:18:65: 86:62:d5:60:17:5a:61:93:37:03:20:f6:4a:19:f6: 7f:b6:30:b6:19:64:33:80:c2:90:98:de:0d:cf:a9: 52:87:71:f6:a0:3e:4c:8e:e0:e8:11:48:16:3c:7c: 18:bd:84:72:74:c8:bf:7a:98:71:1f:7b:2f:44:e1: 73:20:c8:83:c3:a5:2a:eb:8e:06:18:2a:f8:7d:2f: ee:b6:eb:a1:c4:50:72:df:44:b4:b5:e1:97:02:e3: f3:2c:17:07:37:df:6b:16:92:54:b1:23:7d:97:bd: 88:aa:22:50:65:be:54:bc:16:22:67:8e:29:30:1e: f0:15:80:70:8a:e0:a4:bf:a9:2e:1c:e2:14:6f:bf: 9b:44:33:e5:30:e4:7e:4a:a3:40:0d:22:52:51:4b: e2:9e:12:21:54:18:e5:62:74:38:00:7e:4a:18:b0: 37:a5:c1:9c:68:89:ac:73:76:2f:b3:e3:f2:fa:54: ab:e3:eb:77:fc:47:5c:0e:99:47:b1:46:2b:8f:e4: 21:d9:e7:dd:0c:cf:2b:85:53:f2:bb:99:d8:f6:59: 25:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0C:A1:70:62:B2:48:5A:CC:81:6A:77:55:28:AA:C2:77:6E:A3:45 X509v3 Authority Key Identifier: keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:3c:ec:c7:3e:4a:76:e5:07:f0:da:48:a3:bc:f6:26:c2:e3: 2d:6f:81:64:2a:70:61:98:74:1c:2f:57:89:cd:e0:a2:f0:15: 76:7d:4a:53:6e:c8:6c:14:2d:6f:88:0c:ce:63:84:42:02:4d: e7:25:c6:bc:5f:a6:c6:2f:59:8d:2c:6c:db:1a:8e:4e:a2:6b: ac:79:57:76:f3:76:3c:c2:9a:ed:62:79:18:43:67:29:5b:82: d0:dd:09:4d:46:e3:30:9f:98:cc:9e:ca:cd:4a:fb:f0:cf:50: 62:97:e3:50:70:ed:00:64:b8:6a:4d:dc:82:d5:26:90:60:66: 35:21:d5:b0:18:45:1f:3b:a5:98:91:4d:5a:1e:d3:4e:26:13: c5:11:cb:58:36:31:98:c1:19:e0:02:0f:f3:9b:26:57:21:e3: ba:0e:85:7d:14:d2:5c:29:0f:5f:35:f4:33:32:09:a2:5c:f4: 9f:57:6b:38:12:ba:00:ca:23:de:83:71:b1:34:47:f8:1a:0c: cd:60:13:8d:6b:1a:75:77:33:05:06:5b:df:0c:0b:50:32:b9: 70:d9:6e:47:b4:de:90:73:72:87:e8:07:0b:55:09:b5:9e:70: cc:54:04:fe:06:1a:8e:24:20:f7:06:01:e3:e1:a0:87:ee:3b: 5a:77:56:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsIKBcqeMN7z7mth+G0LZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NTA4MTBmMTNkZjhkOTAxOWYxNTdjMzZmYmQwZjZkYjk4 NjI5OTIwHhcNMjUxMjI5MjIwMDM2WhcNMjUxMjMwMjIwMDM2WjAzMTEwLwYDVQQD EyhiYTBjYTE3MDYyYjI0ODVhY2M4MTZhNzc1NTI4YWFjMjc3NmVhMzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ey9NaMYRLPYgPZRbX0wpskBAZwg BjQx/4i9HTq3dalJ/dZoPcLjBpbrGGWGYtVgF1phkzcDIPZKGfZ/tjC2GWQzgMKQ mN4Nz6lSh3H2oD5MjuDoEUgWPHwYvYRydMi/ephxH3svROFzIMiDw6Uq644GGCr4 fS/utuuhxFBy30S0teGXAuPzLBcHN99rFpJUsSN9l72IqiJQZb5UvBYiZ44pMB7w FYBwiuCkv6kuHOIUb7+bRDPlMOR+SqNADSJSUUvinhIhVBjlYnQ4AH5KGLA3pcGc aImsc3Yvs+Py+lSr4+t3/EdcDplHsUYrj+Qh2efdDM8rhVPyu5nY9lklfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoMoXBiskhazIFqd1UoqsJ3bqNFMB8GA1UdIwQY MBaAFHRQgQ8T342QGfFXw2+9D225himSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xMzM1ZDYtYjRkNi00YzgzLThiMGUt OGYyMTVjMDlhZTcyLzEvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8xMzM1ZDYtYjRkNi00YzgzLThiMGUtOGYyMTVjMDlhZTcy LzEvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDzsxz5K duUH8NpIo7z2JsLjLW+BZCpwYZh0HC9Xic3govAVdn1KU27IbBQtb4gMzmOEQgJN 5yXGvF+mxi9ZjSxs2xqOTqJrrHlXdvN2PMKa7WJ5GENnKVuC0N0JTUbjMJ+YzJ7K zUr78M9QYpfjUHDtAGS4ak3cgtUmkGBmNSHVsBhFHzulmJFNWh7TTiYTxRHLWDYx mMEZ4AIP85smVyHjug6FfRTSXCkPXzX0MzIJolz0n1drOBK6AMoj3oNxsTRH+BoM zWATjWsadXczBQZb3wwLUDK5cNluR7TekHNyh+gHC1UJtZ5wzFQE/gYajiQg9wYB 4+Ggh+47WndWZQ== -----END CERTIFICATE-----Generated at Tue Dec 30 03:16:52 2025 by rpki-client