This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft File: dtS8ie60qcifEAXqrSJ8EyXtFWI.mft (raw, json) Hash identifier: UwE5XLuYzn456GhR9Zy2tv640Qo4s+Wq3Da1vTom7sY= Subject key identifier: 25:48:7B:B0:55:7E:ED:06:4E:82:0B:6A:02:69:0C:07:35:D2:D9:49 Authority key identifier: 76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62 Certificate issuer: /CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562 Certificate serial: 019B38D859375E255DAE1B7AEE2D02A58092 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft Manifest number: 0AA1 Signing time: Fri 19 Dec 2025 23:01:01 +0000 Manifest this update: Fri 19 Dec 2025 23:01:01 +0000 Manifest next update: Sat 20 Dec 2025 23:01:01 +0000 Files and hashes: 1: NK0rJz3IZ4C5eNe7s0HqRjPk3Dw.roa (hash: /8QWQq6fZMs0B3BMqZFvUPnGx8SrCOd225/E1rIxmuE=) 2: ZsJKFxXmo7OPgqm-sYXIzxvA6qU.roa (hash: IBfv0VOpf12GHCCld3i7ENCZlrb/HEkRLIfqN7c44Ds=) 3: dtS8ie60qcifEAXqrSJ8EyXtFWI.crl (hash: 11w2sX+8DSeC3x0SDZm4/21Bj5qvVyNa3aLB06GT5xc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:59:37:5e:25:5d:ae:1b:7a:ee:2d:02:a5:80:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562 Validity Not Before: Dec 19 23:01:01 2025 GMT Not After : Dec 20 23:01:01 2025 GMT Subject: CN=25487bb0557eed064e820b6a02690c0735d2d949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cd:e7:1d:b3:c6:3d:94:d5:4d:d0:81:61:23: 5b:7f:df:62:19:e5:df:48:3a:96:fa:87:8c:f0:4e: 0a:60:ee:0c:1f:55:9a:86:44:73:e9:65:36:f0:18: 0d:23:fe:88:a6:03:ac:6a:1d:be:f3:61:3e:c5:82: fb:20:b7:ef:26:ea:bd:be:a3:b1:94:8e:9f:bd:5f: 39:ae:10:62:90:87:93:b4:6e:d8:56:98:46:37:39: 57:01:6f:9d:c0:b7:97:dd:29:b8:77:f4:2d:12:45: cc:2d:f9:68:cf:a5:19:44:be:9b:fb:a0:f8:c3:e5: ae:89:cf:59:91:ee:f9:21:de:88:c6:1d:3b:cb:8d: d8:a6:4a:f2:1b:77:4d:28:0c:3f:10:bc:40:1f:9f: d6:2c:43:5f:31:1c:a9:10:56:9d:94:a5:f2:ef:31: 27:5a:04:40:df:e1:36:68:c7:11:5b:b0:99:50:29: 67:88:07:7c:91:dc:67:bc:ae:d3:26:98:c2:53:94: 40:fb:66:84:33:11:7c:d4:41:59:a6:5d:0a:2f:40: 73:61:38:c6:10:5f:94:7f:b2:7f:66:63:bf:e0:77: a5:48:01:01:62:ae:45:c3:6e:99:66:8b:be:d4:0e: a9:f9:1d:d5:02:63:21:12:1a:f7:16:d0:05:6d:c5: 87:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:48:7B:B0:55:7E:ED:06:4E:82:0B:6A:02:69:0C:07:35:D2:D9:49 X509v3 Authority Key Identifier: keyid:76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:33:32:46:88:30:1d:15:fa:d7:a0:02:67:64:ab:5d:3d:69: eb:da:1f:fd:44:3b:34:0a:29:48:2e:bd:0d:7b:03:38:db:ee: 33:24:83:d2:47:39:4a:a9:78:63:1a:09:2a:13:8c:1c:ae:17: 92:73:c1:59:63:96:f1:5e:17:f9:f9:de:58:ea:67:b1:e7:00: 38:fc:c3:0f:b4:4c:a5:91:6a:48:18:a7:10:2e:07:25:2a:60: e2:a0:a7:22:56:7d:c7:21:4e:d2:83:28:58:0e:fd:aa:9f:a8: ec:62:7a:35:0d:42:0f:8a:aa:aa:03:9b:30:44:1b:29:07:ab: 04:b1:5a:b0:39:51:f6:60:86:48:41:5e:0a:20:78:db:7a:bd: 14:11:76:ec:55:99:95:e1:56:03:55:51:00:5e:c8:06:e7:0c: 3e:a5:7c:5a:42:1a:b8:5b:df:90:70:c3:53:69:af:96:11:9d: 28:35:5d:86:6c:95:f8:1b:8b:9f:66:8e:06:2b:85:05:ce:b4: 78:38:18:24:e8:dc:f4:ad:be:95:a4:28:33:b8:10:42:68:d9: 02:c8:af:d8:9f:4c:eb:4c:44:43:a6:7f:e1:46:1b:4e:dd:1c: 51:1f:03:60:29:96:3f:5b:e0:8e:61:1f:36:c4:a7:c4:ba:29: 04:c7:ec:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42Fk3XiVdrht67i0CpYCSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZDRiYzg5ZWViNGE5Yzg5ZjEwMDVlYWFkMjI3YzEzMjVl ZDE1NjIwHhcNMjUxMjE5MjMwMTAxWhcNMjUxMjIwMjMwMTAxWjAzMTEwLwYDVQQD EygyNTQ4N2JiMDU1N2VlZDA2NGU4MjBiNmEwMjY5MGMwNzM1ZDJkOTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM3nHbPGPZTVTdCBYSNbf99iGeXf SDqW+oeM8E4KYO4MH1WahkRz6WU28BgNI/6IpgOsah2+82E+xYL7ILfvJuq9vqOx lI6fvV85rhBikIeTtG7YVphGNzlXAW+dwLeX3Sm4d/QtEkXMLfloz6UZRL6b+6D4 w+Wuic9Zke75Id6Ixh07y43YpkryG3dNKAw/ELxAH5/WLENfMRypEFadlKXy7zEn WgRA3+E2aMcRW7CZUClniAd8kdxnvK7TJpjCU5RA+2aEMxF81EFZpl0KL0BzYTjG EF+Uf7J/ZmO/4HelSAEBYq5Fw26ZZou+1A6p+R3VAmMhEhr3FtAFbcWHdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVIe7BVfu0GToILagJpDAc10tlJMB8GA1UdIwQY MBaAFHbUvInutKnInxAF6q0ifBMl7RViMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHRTOGllNjBxY2lmRUFYcXJTSjhFeVh0RldJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYjM2NzMtNzQxOS00OWQ4LWI2ZjYt MDkxZjdmOWI5NzYxLzEvZHRTOGllNjBxY2lmRUFYcXJTSjhFeVh0RldJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mYjM2NzMtNzQxOS00OWQ4LWI2ZjYtMDkxZjdmOWI5NzYx LzEvZHRTOGllNjBxY2lmRUFYcXJTSjhFeVh0RldJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTMyRogw HRX616ACZ2SrXT1p69of/UQ7NAopSC69DXsDONvuMySD0kc5Sql4YxoJKhOMHK4X knPBWWOW8V4X+fneWOpnsecAOPzDD7RMpZFqSBinEC4HJSpg4qCnIlZ9xyFO0oMo WA79qp+o7GJ6NQ1CD4qqqgObMEQbKQerBLFasDlR9mCGSEFeCiB423q9FBF27FWZ leFWA1VRAF7IBucMPqV8WkIauFvfkHDDU2mvlhGdKDVdhmyV+BuLn2aOBiuFBc60 eDgYJOjc9K2+laQoM7gQQmjZAsiv2J9M60xEQ6Z/4UYbTt0cUR8DYCmWP1vgjmEf NsSnxLopBMfsgg== -----END CERTIFICATE-----Generated at Sat Dec 20 06:31:51 2025 by rpki-client