This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json) Hash identifier: XlMlWf9En0ILESZEK17e5GSsJmJ3AsBUPfuABy7tO6o= Subject key identifier: DB:E2:6F:1A:29:25:F3:2C:63:AA:FC:6B:9F:1E:5F:0A:C3:F7:76:35 Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb Certificate serial: 019B638C49938A2889BB4AEC511869C6E634 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft Manifest number: 0608 Signing time: Sun 28 Dec 2025 06:01:36 +0000 Manifest this update: Sun 28 Dec 2025 06:01:36 +0000 Manifest next update: Mon 29 Dec 2025 06:01:36 +0000 Files and hashes: 1: 59Mn6Fq_ztW3ZpObO3_epXiDhpk.roa (hash: cp+rR6j5Vo4FlHwAzBmhQ3KTx+zcyZnQHkQLzqefDBI=) 2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: grNqZ0A0HQ0QiT/WahQAwDv4Ced7VyI3JfDIMFqWEBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:8c:49:93:8a:28:89:bb:4a:ec:51:18:69:c6:e6:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb Validity Not Before: Dec 28 06:01:36 2025 GMT Not After : Dec 29 06:01:36 2025 GMT Subject: CN=dbe26f1a2925f32c63aafc6b9f1e5f0ac3f77635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ee:94:4f:bf:0b:05:65:d6:02:ff:f9:3d:69: ae:ea:a1:64:d1:26:69:56:db:e9:3d:64:26:5d:4e: 34:22:c1:b0:42:c0:03:c0:f4:82:fb:d9:5d:64:d4: 7e:a1:15:ac:8d:da:36:f6:87:d4:97:68:32:c9:4e: e8:74:22:19:ee:3c:49:c5:f9:e6:6b:19:1c:1b:c8: 22:f5:a8:27:bd:b8:7b:a9:84:30:db:af:1f:0e:c5: d6:11:81:06:f2:e4:3b:11:aa:0b:6b:62:d5:11:53: ef:5e:61:13:19:68:7d:49:7b:92:b1:9c:0a:be:c9: 8a:e9:f2:9d:e0:90:19:1d:7c:c6:0a:a5:9a:4b:60: f5:09:50:e6:e0:b8:6e:0e:81:f8:14:63:da:7f:e5: 32:b5:68:d7:f9:82:0d:37:ef:6e:1b:b2:69:ff:8e: b2:29:dd:14:df:57:57:0a:eb:12:d6:15:b6:cb:5e: 81:37:a1:ef:d2:e0:23:36:84:a1:2e:12:c5:e7:90: 5f:4f:7c:29:36:0f:64:7e:04:91:19:39:dc:aa:e4: 5b:a4:b3:29:7c:c0:a2:48:04:8e:44:41:a6:9d:71: 1a:8c:01:c0:9c:16:f2:be:70:26:b9:d3:21:ac:f0: 68:58:d6:0d:76:25:91:07:a6:0f:f7:02:e0:a7:33: c7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E2:6F:1A:29:25:F3:2C:63:AA:FC:6B:9F:1E:5F:0A:C3:F7:76:35 X509v3 Authority Key Identifier: keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:42:be:31:5f:e9:46:85:ac:44:60:78:07:87:e6:83:db:48: 4c:4e:53:f0:ab:15:29:be:06:fe:15:29:98:0a:6f:87:c2:5e: 18:fe:ec:53:64:af:5b:30:ea:7a:a5:15:34:22:bd:5b:83:6d: af:32:a3:7d:e3:e4:18:85:61:70:92:31:56:05:57:40:60:b6: da:34:4e:85:8b:d8:1e:9d:62:2a:e4:2e:fc:f4:79:72:7e:ea: 0e:4d:52:1f:53:73:7b:d6:0f:30:ca:6c:e2:aa:e9:1a:bb:50: 43:46:b8:0d:bc:94:ef:01:de:a9:11:81:b7:f7:71:52:d8:5d: 98:74:bb:42:ad:d9:79:5f:9f:05:7d:97:e0:1f:bf:2e:1c:95: 9e:a5:05:eb:b2:c9:59:85:4e:67:7a:29:a7:75:4c:22:dd:6a: ca:46:38:93:93:8d:d5:43:54:fd:19:60:ea:45:3b:96:e2:b3: 2f:07:33:17:d4:3d:04:77:5e:d3:b5:b7:b3:30:d7:27:e9:e3: ca:d8:d5:b1:8c:53:a5:c1:1d:e3:78:a5:f0:80:00:ce:db:65: 57:9c:9f:e6:5f:65:e5:ab:e4:30:9c:29:be:da:f1:c9:7d:fc: ce:aa:f8:c5:51:27:49:bf:0c:63:23:86:13:78:e9:52:20:5a: 94:34:ed:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjjEmTiiiJu0rsURhpxuY0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NzVkNTNkYjgyMmQyNWRiODI3ZDAzNzdjYmViMDZkMmNh NDFhY2IwHhcNMjUxMjI4MDYwMTM2WhcNMjUxMjI5MDYwMTM2WjAzMTEwLwYDVQQD EyhkYmUyNmYxYTI5MjVmMzJjNjNhYWZjNmI5ZjFlNWYwYWMzZjc3NjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO6UT78LBWXWAv/5PWmu6qFk0SZp VtvpPWQmXU40IsGwQsADwPSC+9ldZNR+oRWsjdo29ofUl2gyyU7odCIZ7jxJxfnm axkcG8gi9agnvbh7qYQw268fDsXWEYEG8uQ7EaoLa2LVEVPvXmETGWh9SXuSsZwK vsmK6fKd4JAZHXzGCqWaS2D1CVDm4LhuDoH4FGPaf+UytWjX+YINN+9uG7Jp/46y Kd0U31dXCusS1hW2y16BN6Hv0uAjNoShLhLF55BfT3wpNg9kfgSRGTncquRbpLMp fMCiSASOREGmnXEajAHAnBbyvnAmudMhrPBoWNYNdiWRB6YP9wLgpzPHtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvibxopJfMsY6r8a58eXwrD93Y1MB8GA1UdIwQY MBaAFHV11T24ItJduCfQN3y+sG0spBrLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFhYVlBiZ2kwbDI0SjlBM2ZMNndiU3lrR3NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mN2YwZjItNDc5ZS00ZjAzLWJhYTIt MDYxZWQ5MzcxNDc1LzEvZFhYVlBiZ2kwbDI0SjlBM2ZMNndiU3lrR3NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9mN2YwZjItNDc5ZS00ZjAzLWJhYTItMDYxZWQ5MzcxNDc1 LzEvZFhYVlBiZ2kwbDI0SjlBM2ZMNndiU3lrR3NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0K+MV/p RoWsRGB4B4fmg9tITE5T8KsVKb4G/hUpmApvh8JeGP7sU2SvWzDqeqUVNCK9W4Nt rzKjfePkGIVhcJIxVgVXQGC22jROhYvYHp1iKuQu/PR5cn7qDk1SH1Nze9YPMMps 4qrpGrtQQ0a4DbyU7wHeqRGBt/dxUthdmHS7Qq3ZeV+fBX2X4B+/LhyVnqUF67LJ WYVOZ3opp3VMIt1qykY4k5ON1UNU/Rlg6kU7luKzLwczF9Q9BHde07W3szDXJ+nj ytjVsYxTpcEd43il8IAAzttlV5yf5l9l5avkMJwpvtrxyX38zqr4xVEnSb8MYyOG E3jpUiBalDTtLg== -----END CERTIFICATE-----Generated at Sun Dec 28 07:29:18 2025 by rpki-client