This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft File: dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json) Hash identifier: bFlzWw5en5ol1CniPP2z4Yr6tafIPe5MXW+oq6qMb5g= Subject key identifier: 4A:3C:6F:8F:82:B5:FE:E1:5A:BD:13:65:51:A4:62:95:AE:5A:58:8A Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F Certificate issuer: /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f Certificate serial: 019B38A1D70330EEFAC217EAB654F099B8AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft Manifest number: 0D86 Signing time: Fri 19 Dec 2025 22:01:29 +0000 Manifest this update: Fri 19 Dec 2025 22:01:29 +0000 Manifest next update: Sat 20 Dec 2025 22:01:29 +0000 Files and hashes: 1: XVHW13An0H4R0lwafXi_5n-GjRQ.roa (hash: avC9Et5bzaaQctHEh7eFVRP1BlhGCdMVJW4eggq0SuY=) 2: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: nUYb6eDnCslbUppNM6+0eWiZNqpuP4PVu6H9xxG8wN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:d7:03:30:ee:fa:c2:17:ea:b6:54:f0:99:b8:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f Validity Not Before: Dec 19 22:01:29 2025 GMT Not After : Dec 20 22:01:29 2025 GMT Subject: CN=4a3c6f8f82b5fee15abd136551a46295ae5a588a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:96:45:d3:ab:19:fb:41:66:2a:a2:6e:36:7a: 40:3a:0f:e2:f7:fc:9d:40:86:08:8b:92:00:8b:44: b8:59:bb:26:31:29:5e:0f:41:99:12:3a:fa:82:96: 24:30:68:55:94:5b:19:e2:db:40:a9:f1:1f:76:12: bb:e5:56:d5:d8:7f:77:ae:9e:a5:79:6c:ec:66:71: 82:29:c6:85:ce:8f:c1:b1:01:74:6e:f3:fd:1f:ae: 3b:0d:7a:90:bc:88:c8:e8:43:44:e4:a4:ae:f1:e6: 33:b6:63:b8:82:9f:db:b2:d2:bb:19:81:08:34:9a: 94:92:ff:d6:b8:ed:dd:2d:e4:bb:69:ef:48:13:c9: fa:79:86:90:9c:45:51:a0:2e:f1:0a:8d:49:43:4e: 75:15:95:e9:61:4d:0e:c5:d4:70:e2:0f:ca:d4:c1: 7c:50:f8:a2:52:06:70:ce:8d:09:c5:3b:aa:a3:35: 46:b0:83:8f:4d:0e:69:c9:fb:03:bb:3a:49:77:95: 3d:8d:4c:08:da:df:95:e2:a4:85:0c:60:d1:bf:c3: 71:e5:d2:dc:d1:8b:a9:90:7a:86:7d:db:b9:25:3c: 2b:9a:7d:79:af:b3:ae:2e:51:7e:94:0c:ea:f5:89: ce:00:48:0d:92:99:eb:9c:a7:01:ef:43:bc:db:6e: 13:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3C:6F:8F:82:B5:FE:E1:5A:BD:13:65:51:A4:62:95:AE:5A:58:8A X509v3 Authority Key Identifier: keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:18:5c:0c:ea:f8:21:f5:70:6c:c4:59:02:67:b0:29:95:67: 0a:12:ba:a7:33:d1:4d:ed:71:6e:5f:65:7a:6f:d2:8f:4f:e7: 24:1c:6f:63:4d:5d:a4:79:6f:d3:10:a0:2f:ad:1b:c2:07:43: e5:67:ec:55:38:72:fd:a8:4c:fc:9c:d9:cb:3c:95:ec:bf:13: c8:72:fb:88:c8:f1:8d:c0:bd:0b:36:57:ab:09:3e:52:5a:a1: c7:1b:0a:47:91:d2:21:10:31:83:4c:3f:9b:fc:4e:61:a9:1c: ad:a6:b2:68:c9:2d:5b:95:e3:24:5e:ef:21:92:78:a6:bb:8f: c8:a1:e7:90:3f:3b:a6:27:61:65:84:20:01:f6:3b:53:48:20: 27:9d:c6:9b:ff:78:83:24:fe:1a:0c:30:ed:46:2a:e4:3e:c6: 76:08:56:70:57:1f:2f:d9:10:db:c0:20:85:9b:0c:23:7f:14: 6f:60:bf:a8:3d:8b:8b:77:30:2b:42:a8:47:d3:02:3f:53:b1: d9:28:da:84:fb:b3:27:96:22:3a:c6:77:34:57:bd:82:15:1c: 47:1b:ba:0b:42:e0:82:e3:99:af:3f:9f:ea:3f:5b:9a:be:43: a4:0e:6f:c8:a4:53:02:96:21:73:d6:22:49:a8:8e:7c:7c:9e: 76:03:4c:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4odcDMO76whfqtlTwmbisMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NWI2YzNjOWFiZGVkYjk2ZWIxZWYzZjdmN2ZhNzAwNTc1 MjJjN2YwHhcNMjUxMjE5MjIwMTI5WhcNMjUxMjIwMjIwMTI5WjAzMTEwLwYDVQQD Eyg0YTNjNmY4ZjgyYjVmZWUxNWFiZDEzNjU1MWE0NjI5NWFlNWE1ODhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5ZF06sZ+0FmKqJuNnpAOg/i9/yd QIYIi5IAi0S4WbsmMSleD0GZEjr6gpYkMGhVlFsZ4ttAqfEfdhK75VbV2H93rp6l eWzsZnGCKcaFzo/BsQF0bvP9H647DXqQvIjI6ENE5KSu8eYztmO4gp/bstK7GYEI NJqUkv/WuO3dLeS7ae9IE8n6eYaQnEVRoC7xCo1JQ051FZXpYU0OxdRw4g/K1MF8 UPiiUgZwzo0JxTuqozVGsIOPTQ5pyfsDuzpJd5U9jUwI2t+V4qSFDGDRv8Nx5dLc 0YupkHqGfdu5JTwrmn15r7OuLlF+lAzq9YnOAEgNkpnrnKcB70O8224TcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEo8b4+Ctf7hWr0TZVGkYpWuWliKMB8GA1UdIwQY MBaAFHRbbDyave25brHvP39/pwBXUix/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEZ0c1BKcTk3Ymx1c2U4X2YzLW5BRmRTTEg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83MWQ1MmYtN2UwNy00OWQxLWI5OWIt ZjcwZDVlZjg3NWMzLzEvZEZ0c1BKcTk3Ymx1c2U4X2YzLW5BRmRTTEg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC83MWQ1MmYtN2UwNy00OWQxLWI5OWItZjcwZDVlZjg3NWMz LzEvZEZ0c1BKcTk3Ymx1c2U4X2YzLW5BRmRTTEg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArxhcDOr4 IfVwbMRZAmewKZVnChK6pzPRTe1xbl9lem/Sj0/nJBxvY01dpHlv0xCgL60bwgdD 5WfsVThy/ahM/JzZyzyV7L8TyHL7iMjxjcC9CzZXqwk+UlqhxxsKR5HSIRAxg0w/ m/xOYakcraayaMktW5XjJF7vIZJ4pruPyKHnkD87pidhZYQgAfY7U0ggJ53Gm/94 gyT+Ggww7UYq5D7GdghWcFcfL9kQ28AghZsMI38Ub2C/qD2Li3cwK0KoR9MCP1Ox 2SjahPuzJ5YiOsZ3NFe9ghUcRxu6C0LgguOZrz+f6j9bmr5DpA5vyKRTApYhc9Yi SaiOfHyedgNM/Q== -----END CERTIFICATE-----Generated at Sat Dec 20 07:12:30 2025 by rpki-client