This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft File: dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft (raw, json) Hash identifier: 42Oe3RsJJlEFcjXJWQbna4IFU/U8ejj9dfjw5biRZLU= Subject key identifier: 7A:B4:9A:50:D4:A5:B5:E4:9D:E2:FF:97:BF:2E:10:06:5E:77:9C:D4 Authority key identifier: 74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC Certificate issuer: /CN=747bb7c24505b6f58f94817d7c8d5376756d37fc Certificate serial: 019B59E3C7064424C86EB75E9BEB356A8CA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft Manifest number: 07B5 Signing time: Fri 26 Dec 2025 09:00:58 +0000 Manifest this update: Fri 26 Dec 2025 09:00:58 +0000 Manifest next update: Sat 27 Dec 2025 09:00:58 +0000 Files and hashes: 1: Akagd0l7QO9OvkucPctZVYCXA9M.roa (hash: IhMY55O2zxdfLlGwJcA2GKoYXI6fuVYr/yI0EHnUALg=) 2: dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl (hash: s0YXTRcIPCzCf8KG1dVNouECz+2hDJ888R25wQwhQxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:c7:06:44:24:c8:6e:b7:5e:9b:eb:35:6a:8c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=747bb7c24505b6f58f94817d7c8d5376756d37fc Validity Not Before: Dec 26 09:00:58 2025 GMT Not After : Dec 27 09:00:58 2025 GMT Subject: CN=7ab49a50d4a5b5e49de2ff97bf2e10065e779cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:88:45:35:07:d9:53:a7:97:e2:1c:1a:67:e6: d4:37:87:7f:95:17:6c:81:07:a3:94:e3:cb:c2:3f: df:36:12:3a:06:a1:67:52:a6:a4:1f:46:8e:72:15: 60:30:2a:96:07:01:64:42:f5:a5:71:7c:27:bf:20: 62:e8:f9:48:28:a4:06:94:df:9d:1b:55:1c:bf:1e: 6b:aa:35:a6:37:b2:72:16:29:12:c8:80:80:ee:af: 30:65:4e:1f:4b:22:7c:d4:17:97:f1:84:21:88:03: dd:80:36:9a:56:d7:4b:24:89:81:fe:5d:27:d5:4c: c2:56:a8:29:3b:bf:14:d9:08:1c:ee:7c:e9:93:72: f6:78:8a:32:67:4f:33:82:c1:f8:f8:fe:88:d7:2e: 1e:7d:ca:8a:a7:b0:7b:5d:5f:7d:bc:3b:84:a9:98: 7e:3b:43:8b:95:7f:cd:23:0e:1e:fa:91:57:89:e5: d0:a5:70:c7:80:25:90:ae:d9:b4:f1:aa:02:0a:0e: 64:6b:84:e9:01:92:be:c2:dc:ac:34:17:00:98:d0: 99:26:80:61:7a:59:0c:1a:20:98:47:ed:46:9f:57: 9d:04:b3:46:c5:8b:be:61:fc:19:7c:8f:b7:fd:bf: 18:43:f0:56:cf:42:fa:4d:37:7a:61:80:e4:18:5d: 25:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B4:9A:50:D4:A5:B5:E4:9D:E2:FF:97:BF:2E:10:06:5E:77:9C:D4 X509v3 Authority Key Identifier: keyid:74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:eb:28:36:14:c8:6d:f6:89:23:2a:3a:d4:9f:e1:6d:35:11: 77:b4:5d:6b:ab:c1:e6:98:bd:67:b6:6d:4d:10:80:a6:84:74: 5d:25:8f:7a:9c:bd:c1:42:dd:0e:2b:7c:71:fa:ec:e1:c0:1d: 00:ee:1e:27:6c:ab:95:6c:6b:a4:b7:d4:a4:04:cc:25:0a:95: 61:78:58:39:f6:90:7c:df:fb:da:11:3a:09:64:10:af:46:c7: 64:79:56:04:5c:bf:c4:b4:32:cd:c4:d9:94:82:d9:93:c8:3c: 81:b3:33:f4:e0:dd:7b:d9:87:9b:4a:1c:64:67:ea:8d:ca:27: 06:e4:bb:3b:e2:d8:f1:ad:bd:3d:f6:9c:4d:f7:ec:4e:77:0e: 01:70:39:89:33:98:f8:05:9f:16:05:11:a1:90:d5:47:ad:b7: 5f:d3:05:22:ac:28:80:85:48:80:2e:d0:11:a3:00:22:9f:23: 23:fa:e4:70:16:2d:d4:b1:f3:15:2e:f0:ef:bc:b8:11:ec:2e: dd:7a:42:7a:df:0d:90:66:9c:d7:35:4d:0d:93:a9:78:86:9c: 53:42:18:53:a6:37:6f:2b:f1:ce:c4:1b:c7:ed:95:54:aa:4f: fe:81:5c:48:e0:17:3d:7c:7d:13:2f:88:c2:51:1c:38:00:be: 74:a5:df:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ48cGRCTIbrdem+s1aoyhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0N2JiN2MyNDUwNWI2ZjU4Zjk0ODE3ZDdjOGQ1Mzc2NzU2 ZDM3ZmMwHhcNMjUxMjI2MDkwMDU4WhcNMjUxMjI3MDkwMDU4WjAzMTEwLwYDVQQD Eyg3YWI0OWE1MGQ0YTViNWU0OWRlMmZmOTdiZjJlMTAwNjVlNzc5Y2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYhFNQfZU6eX4hwaZ+bUN4d/lRds gQejlOPLwj/fNhI6BqFnUqakH0aOchVgMCqWBwFkQvWlcXwnvyBi6PlIKKQGlN+d G1Ucvx5rqjWmN7JyFikSyICA7q8wZU4fSyJ81BeX8YQhiAPdgDaaVtdLJImB/l0n 1UzCVqgpO78U2Qgc7nzpk3L2eIoyZ08zgsH4+P6I1y4efcqKp7B7XV99vDuEqZh+ O0OLlX/NIw4e+pFXieXQpXDHgCWQrtm08aoCCg5ka4TpAZK+wtysNBcAmNCZJoBh elkMGiCYR+1Gn1edBLNGxYu+YfwZfI+3/b8YQ/BWz0L6TTd6YYDkGF0lEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHq0mlDUpbXkneL/l78uEAZed5zUMB8GA1UdIwQY MBaAFHR7t8JFBbb1j5SBfXyNU3Z1bTf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEh1M3drVUZ0dldQbElGOWZJMVRkblZ0Tl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xN2E2MjEtZWRhZS00YTliLTg0NTUt ZmNjMDA5MWZlOWU2LzEvZEh1M3drVUZ0dldQbElGOWZJMVRkblZ0Tl93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xN2E2MjEtZWRhZS00YTliLTg0NTUtZmNjMDA5MWZlOWU2 LzEvZEh1M3drVUZ0dldQbElGOWZJMVRkblZ0Tl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANusoNhTI bfaJIyo61J/hbTURd7Rda6vB5pi9Z7ZtTRCApoR0XSWPepy9wULdDit8cfrs4cAd AO4eJ2yrlWxrpLfUpATMJQqVYXhYOfaQfN/72hE6CWQQr0bHZHlWBFy/xLQyzcTZ lILZk8g8gbMz9ODde9mHm0ocZGfqjconBuS7O+LY8a29PfacTffsTncOAXA5iTOY +AWfFgURoZDVR623X9MFIqwogIVIgC7QEaMAIp8jI/rkcBYt1LHzFS7w77y4Eewu 3XpCet8NkGac1zVNDZOpeIacU0IYU6Y3byvxzsQbx+2VVKpP/oFcSOAXPXx9Ey+I wlEcOAC+dKXf6g== -----END CERTIFICATE-----Generated at Fri Dec 26 11:00:31 2025 by rpki-client