This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft File: dpjJmefwST7jZjTokrN8nzv5QH0.mft (raw, json) Hash identifier: TrXB3HKTMzIBnCCqapuQv1uqn0UIHlkbDGdZWD0HWxo= Subject key identifier: ED:22:79:AA:5C:74:62:BC:65:8E:B2:4E:94:18:EA:6D:7B:2C:B7:B7 Authority key identifier: 76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D Certificate issuer: /CN=7698c999e7f0493ee36634e892b37c9f3bf9407d Certificate serial: 019B2C9D7B6D581F63436FA6470820A244FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 14:01:16 +0000 Manifest this update: Wed 17 Dec 2025 14:01:16 +0000 Manifest next update: Thu 18 Dec 2025 14:01:16 +0000 Files and hashes: 1: OevXGO9big2d2JK12PRdEUk2MPE.roa (hash: FmOYT06hQMPm9dCUUJxlovK9qL/uV14wUJ4HLBabvxQ=) 2: dpjJmefwST7jZjTokrN8nzv5QH0.crl (hash: azn8MTBpK/Pz0GEAdJP75QUR0MAJkcaT4XBDJpO3FmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:7b:6d:58:1f:63:43:6f:a6:47:08:20:a2:44:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7698c999e7f0493ee36634e892b37c9f3bf9407d Validity Not Before: Dec 17 14:01:16 2025 GMT Not After : Dec 18 14:01:16 2025 GMT Subject: CN=ed2279aa5c7462bc658eb24e9418ea6d7b2cb7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f1:96:9c:30:bd:b3:ed:ae:b7:cc:4e:bd:f2: 61:7b:b8:f4:2b:8f:42:d6:bb:a6:35:21:d2:f8:f7: 19:90:ed:89:7c:48:ec:76:5d:07:2b:02:c9:3b:91: e6:b0:12:22:60:1c:2b:e3:c2:d5:ab:6f:3a:d2:0b: 63:09:e5:fb:64:ee:8e:c2:56:bb:46:de:83:91:c4: 2c:5a:e1:75:41:e7:08:12:92:27:b0:e8:74:55:aa: 8e:f1:52:cd:f9:d8:1d:23:cd:65:8a:48:22:8d:4e: 5c:a5:ca:19:34:ab:10:34:8c:01:78:72:f8:cd:b1: 4b:0e:1b:d6:49:c3:49:1f:2d:e9:93:fa:85:40:5a: aa:06:c4:88:c3:a3:e2:c5:7c:4d:8b:4e:dd:06:4f: 3d:62:2e:30:f8:48:2f:d7:4b:80:04:37:0e:bc:57: 51:58:2b:a5:a4:e1:a1:58:06:79:82:7d:c6:a7:b2: 2d:65:7e:9e:9f:56:0f:93:99:be:e6:94:7f:73:c8: 92:d4:68:90:bb:4e:2a:f5:ca:d3:7d:94:32:3e:6b: a3:8a:eb:f4:72:cc:10:03:2a:b4:4c:d5:1a:b9:f0: 1d:15:82:c0:f7:75:3a:ee:42:fe:63:98:1e:67:8b: 58:d8:27:ef:82:16:69:a2:6b:63:f0:53:d7:d9:49: 81:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:22:79:AA:5C:74:62:BC:65:8E:B2:4E:94:18:EA:6D:7B:2C:B7:B7 X509v3 Authority Key Identifier: keyid:76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e3:53:24:01:25:dc:c7:f5:c2:d3:66:6c:e4:c6:b4:5f:8b: 2d:1b:c3:b8:a4:19:e6:15:8c:d8:8e:2e:3b:6f:7a:02:b5:8a: 8a:78:f2:8a:ff:f0:73:4d:57:35:53:34:1f:b2:03:56:77:c9: 4f:f6:61:b0:1a:d0:4a:c6:42:1d:4f:da:71:7f:c7:0b:7e:ee: cb:75:9a:0d:7c:8d:7a:e9:fb:13:5b:7d:4d:c3:b6:92:7b:c8: 8d:66:d6:e2:56:34:6d:92:ab:ab:42:8d:0a:d9:f3:98:54:43: 2b:0a:1e:8c:95:32:91:02:d5:2b:c1:ec:ba:5e:b9:1b:9d:02: a3:b3:37:6c:c2:cd:1c:4a:a5:fb:54:27:07:5d:d5:44:75:6d: dc:f5:2c:d8:6f:5e:2d:b3:ef:6c:6f:f5:65:7b:48:42:30:6a: 46:24:ba:b4:e6:31:c0:96:a1:03:32:5a:ec:96:29:61:73:12: 6d:9c:24:6e:9b:6e:4b:7b:48:9c:5b:aa:5d:45:c0:14:b8:78: 7e:bd:54:dc:c1:03:68:ac:05:5f:28:42:fd:42:99:85:d6:a3: f4:e1:3f:5a:b6:45:78:9a:51:93:ad:01:97:78:5e:96:30:12: 6b:2a:27:0f:e7:5b:d7:82:26:19:4c:36:7c:97:28:ab:fa:ee: c8:eb:0b:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnXttWB9jQ2+mRwggokT9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OThjOTk5ZTdmMDQ5M2VlMzY2MzRlODkyYjM3YzlmM2Jm OTQwN2QwHhcNMjUxMjE3MTQwMTE2WhcNMjUxMjE4MTQwMTE2WjAzMTEwLwYDVQQD EyhlZDIyNzlhYTVjNzQ2MmJjNjU4ZWIyNGU5NDE4ZWE2ZDdiMmNiN2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfGWnDC9s+2ut8xOvfJhe7j0K49C 1rumNSHS+PcZkO2JfEjsdl0HKwLJO5HmsBIiYBwr48LVq2860gtjCeX7ZO6Owla7 Rt6DkcQsWuF1QecIEpInsOh0VaqO8VLN+dgdI81likgijU5cpcoZNKsQNIwBeHL4 zbFLDhvWScNJHy3pk/qFQFqqBsSIw6PixXxNi07dBk89Yi4w+Egv10uABDcOvFdR WCulpOGhWAZ5gn3Gp7ItZX6en1YPk5m+5pR/c8iS1GiQu04q9crTfZQyPmujiuv0 cswQAyq0TNUaufAdFYLA93U67kL+Y5geZ4tY2CfvghZpomtj8FPX2UmBdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0ieapcdGK8ZY6yTpQY6m17LLe3MB8GA1UdIwQY MBaAFHaYyZnn8Ek+42Y06JKzfJ87+UB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHBqSm1lZndTVDdqWmpUb2tyTjhuenY1UUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC85MTBiZDQtN2ZkYS00OTM0LWE0MDMt YjEzNmZlNDBkZjRkLzEvZHBqSm1lZndTVDdqWmpUb2tyTjhuenY1UUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC85MTBiZDQtN2ZkYS00OTM0LWE0MDMtYjEzNmZlNDBkZjRk LzEvZHBqSm1lZndTVDdqWmpUb2tyTjhuenY1UUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+NTJAEl 3Mf1wtNmbOTGtF+LLRvDuKQZ5hWM2I4uO296ArWKinjyiv/wc01XNVM0H7IDVnfJ T/ZhsBrQSsZCHU/acX/HC37uy3WaDXyNeun7E1t9TcO2knvIjWbW4lY0bZKrq0KN CtnzmFRDKwoejJUykQLVK8Hsul65G50Co7M3bMLNHEql+1QnB13VRHVt3PUs2G9e LbPvbG/1ZXtIQjBqRiS6tOYxwJahAzJa7JYpYXMSbZwkbptuS3tInFuqXUXAFLh4 fr1U3MEDaKwFXyhC/UKZhdaj9OE/WrZFeJpRk60Bl3heljASayonD+db14ImGUw2 fJcoq/ruyOsLpQ== -----END CERTIFICATE-----Generated at Wed Dec 17 18:13:11 2025 by rpki-client