This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft File: dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft (raw, json) Hash identifier: Rnxrm+f1X2hDVVl6TRFxyM3E+24qhFMGvJdttKGVDj8= Subject key identifier: 27:15:0E:A9:71:4B:D0:F0:F3:D7:F7:EC:74:53:C9:F0:B1:06:44:31 Authority key identifier: 74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC Certificate issuer: /CN=747bb7c24505b6f58f94817d7c8d5376756d37fc Certificate serial: 019B6F21E3B44487C405F89709A35AF81CA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft Manifest number: 07C0 Signing time: Tue 30 Dec 2025 12:00:50 +0000 Manifest this update: Tue 30 Dec 2025 12:00:50 +0000 Manifest next update: Wed 31 Dec 2025 12:00:50 +0000 Files and hashes: 1: Akagd0l7QO9OvkucPctZVYCXA9M.roa (hash: IhMY55O2zxdfLlGwJcA2GKoYXI6fuVYr/yI0EHnUALg=) 2: dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl (hash: 0598W3oZjsR2+v6RqcMgTCsqwgc29qqEzt8SfUcrqhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:21:e3:b4:44:87:c4:05:f8:97:09:a3:5a:f8:1c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=747bb7c24505b6f58f94817d7c8d5376756d37fc Validity Not Before: Dec 30 12:00:50 2025 GMT Not After : Dec 31 12:00:50 2025 GMT Subject: CN=27150ea9714bd0f0f3d7f7ec7453c9f0b1064431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:70:40:c7:a1:39:77:49:e6:d1:a9:28:fa:0d: e5:6c:83:7b:cf:1b:4b:e2:20:53:65:d8:9b:be:ac: 37:cb:fb:05:72:8b:25:6f:dc:20:3d:25:ad:26:7d: b8:07:84:00:f9:cc:77:24:b4:bc:ba:df:1d:86:d7: 07:9d:30:79:87:2d:93:4f:c3:0d:82:97:1c:46:19: 24:46:97:53:d1:f7:a1:dd:fd:5a:a4:b6:3b:1c:75: 47:c5:b2:a4:22:de:82:30:44:79:36:1e:49:d1:33: 98:db:39:ba:78:45:51:ce:c1:ce:a3:f2:bd:46:3b: e2:c5:28:ff:d1:d3:52:54:3f:05:76:54:95:08:55: ac:94:1f:8d:92:b0:f0:b2:16:39:6f:99:41:d2:20: fd:79:39:40:91:28:51:4d:54:61:ed:29:8e:69:18: e7:87:9b:a6:c4:ff:e2:33:7e:f3:e6:2e:b5:3d:27: 53:97:79:c8:37:38:6f:7f:15:e3:43:65:5c:88:f7: 36:81:11:34:ca:f3:42:6b:cc:25:dd:db:58:6b:f0: 07:99:72:55:cc:40:23:a4:71:00:b8:96:e4:94:da: 59:43:e0:47:da:e7:51:e4:b3:cd:fc:64:58:64:b4: 81:78:3d:19:df:d5:d3:23:ee:ee:65:97:85:3f:59: 2c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:15:0E:A9:71:4B:D0:F0:F3:D7:F7:EC:74:53:C9:F0:B1:06:44:31 X509v3 Authority Key Identifier: keyid:74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:7f:e4:82:42:bf:0e:31:a6:d6:b4:f7:16:8b:82:02:cb:ed: a1:a7:91:cd:24:4a:1a:71:63:67:9f:77:af:b6:b0:14:6c:bd: a4:be:75:2b:ec:59:d8:1a:7c:fe:20:87:97:77:3a:8d:16:ba: 86:7f:b3:19:71:f7:6b:61:65:54:bd:94:08:8b:92:3c:df:8d: 95:66:fc:0e:55:e2:58:37:28:3c:ee:da:ba:36:aa:8b:cc:d3: 3d:30:a7:ca:b7:69:7d:e8:ae:7c:da:6c:cd:fa:7c:75:f3:ac: bb:38:4a:28:21:b8:fc:3d:e5:f7:15:d6:07:2d:8b:d3:4f:c3: 3f:d5:bc:66:b5:51:fd:f1:85:49:2b:32:b4:d3:7b:15:c2:26: d8:91:d8:12:d6:89:39:bf:4a:01:a8:33:c2:c9:01:1f:e1:ef: 6f:d7:8a:ea:9b:0f:a6:d6:bc:60:e7:3e:b5:45:d2:60:e2:6b: 3a:45:a4:fd:97:63:b0:e0:be:d4:62:76:9f:89:b5:79:5c:fe: a4:7a:a5:0f:a6:b4:bb:7f:3d:39:fc:94:7f:ba:6a:bb:aa:f5: dd:58:d8:67:24:0e:00:03:a4:58:14:1a:f8:78:27:69:a9:ba: e1:63:0b:aa:55:66:cd:7a:fa:6d:36:5b:2b:8e:19:e5:20:9c: 1f:58:80:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvIeO0RIfEBfiXCaNa+BykMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0N2JiN2MyNDUwNWI2ZjU4Zjk0ODE3ZDdjOGQ1Mzc2NzU2 ZDM3ZmMwHhcNMjUxMjMwMTIwMDUwWhcNMjUxMjMxMTIwMDUwWjAzMTEwLwYDVQQD EygyNzE1MGVhOTcxNGJkMGYwZjNkN2Y3ZWM3NDUzYzlmMGIxMDY0NDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3BAx6E5d0nm0ako+g3lbIN7zxtL 4iBTZdibvqw3y/sFcoslb9wgPSWtJn24B4QA+cx3JLS8ut8dhtcHnTB5hy2TT8MN gpccRhkkRpdT0feh3f1apLY7HHVHxbKkIt6CMER5Nh5J0TOY2zm6eEVRzsHOo/K9 RjvixSj/0dNSVD8FdlSVCFWslB+NkrDwshY5b5lB0iD9eTlAkShRTVRh7SmOaRjn h5umxP/iM37z5i61PSdTl3nINzhvfxXjQ2VciPc2gRE0yvNCa8wl3dtYa/AHmXJV zEAjpHEAuJbklNpZQ+BH2udR5LPN/GRYZLSBeD0Z39XTI+7uZZeFP1ksZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcVDqlxS9Dw89f37HRTyfCxBkQxMB8GA1UdIwQY MBaAFHR7t8JFBbb1j5SBfXyNU3Z1bTf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEh1M3drVUZ0dldQbElGOWZJMVRkblZ0Tl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xN2E2MjEtZWRhZS00YTliLTg0NTUt ZmNjMDA5MWZlOWU2LzEvZEh1M3drVUZ0dldQbElGOWZJMVRkblZ0Tl93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xN2E2MjEtZWRhZS00YTliLTg0NTUtZmNjMDA5MWZlOWU2 LzEvZEh1M3drVUZ0dldQbElGOWZJMVRkblZ0Tl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGn/kgkK/ DjGm1rT3FouCAsvtoaeRzSRKGnFjZ593r7awFGy9pL51K+xZ2Bp8/iCHl3c6jRa6 hn+zGXH3a2FlVL2UCIuSPN+NlWb8DlXiWDcoPO7aujaqi8zTPTCnyrdpfeiufNps zfp8dfOsuzhKKCG4/D3l9xXWBy2L00/DP9W8ZrVR/fGFSSsytNN7FcIm2JHYEtaJ Ob9KAagzwskBH+Hvb9eK6psPpta8YOc+tUXSYOJrOkWk/ZdjsOC+1GJ2n4m1eVz+ pHqlD6a0u389OfyUf7pqu6r13VjYZyQOAAOkWBQa+Hgnaam64WMLqlVmzXr6bTZb K44Z5SCcH1iAOA== -----END CERTIFICATE-----Generated at Tue Dec 30 16:34:29 2025 by rpki-client