This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json) Hash identifier: ZhfwtkSM4BMo75ThH5K3ELBdVWNIwOLWX1KGYlXquv8= Subject key identifier: 85:E3:55:3A:6E:DE:CF:38:DE:0B:97:AE:EB:3C:29:43:93:D3:ED:19 Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22 Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922 Certificate serial: 019B5862DB28ED1DD9AD4B8E2B7F4DB1F7E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft Manifest number: 0F75 Signing time: Fri 26 Dec 2025 02:00:32 +0000 Manifest this update: Fri 26 Dec 2025 02:00:32 +0000 Manifest next update: Sat 27 Dec 2025 02:00:32 +0000 Files and hashes: 1: Fu0lK4Mcztssv3LosrHSeGC9v5I.roa (hash: u/9ObfX95800lVIP5yQNITdaQtRd2zqHQxCUamlQIjU=) 2: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: zWtlbbBrT102yZMu6uGafdyHmudlrCHfuw0oQ0yPaO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 02:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:62:db:28:ed:1d:d9:ad:4b:8e:2b:7f:4d:b1:f7:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922 Validity Not Before: Dec 26 02:00:32 2025 GMT Not After : Dec 27 02:00:32 2025 GMT Subject: CN=85e3553a6edecf38de0b97aeeb3c294393d3ed19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bd:a2:5a:cb:c8:84:a6:1c:80:e9:58:cd:79: a3:70:d7:34:f5:8b:02:16:57:ce:00:af:2c:07:77: 66:a6:a3:5b:b7:b2:e7:89:43:eb:22:ec:58:12:b8: 94:4b:e6:e5:86:a2:aa:30:43:a8:37:66:ec:f5:28: 53:1d:bd:b4:7c:4d:a3:13:e1:29:28:6f:9b:ee:80: 4c:05:62:81:06:dd:54:ab:a4:d6:65:43:62:f2:46: 09:a6:4d:d8:bc:68:da:b6:8b:35:6e:23:76:80:53: cb:68:6b:cb:14:37:59:28:c3:75:2c:4d:14:1d:a2: 06:33:9d:02:6f:65:a0:40:da:e8:4e:e0:1e:5b:31: a5:c9:62:bb:f1:aa:c0:49:16:8f:be:e4:c2:06:69: d1:80:97:eb:c0:65:68:5c:74:0f:1c:49:29:95:6e: 35:92:09:55:31:2a:ed:ce:fc:9c:68:4a:e8:24:a2: 04:f8:3f:f6:31:21:46:ce:f8:17:ca:49:b2:07:65: bf:df:02:32:87:b4:a2:ec:b5:d9:fd:6f:25:b5:a1: 6b:77:6c:a7:23:5f:b0:72:13:ad:c2:0c:65:47:c4: 8d:ae:e3:ee:cb:4f:2c:0b:39:29:2d:84:66:45:1d: 68:e6:6f:de:71:63:2c:50:24:7f:e9:4c:bd:3f:a8: 8a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E3:55:3A:6E:DE:CF:38:DE:0B:97:AE:EB:3C:29:43:93:D3:ED:19 X509v3 Authority Key Identifier: keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:73:2e:1c:09:22:5a:2a:f2:86:6a:d1:c5:e7:5a:f4:cd:17: 17:04:fd:0d:87:95:94:93:be:99:4f:ad:12:ad:7c:30:ce:53: 06:43:c5:98:24:d0:a9:75:cc:38:88:71:b9:1b:ff:65:fe:94: 22:19:79:cc:97:7d:fe:c8:21:0b:af:5e:73:cf:58:46:09:e7: 01:e6:fb:44:6c:c3:12:fb:50:3e:22:ad:34:05:3e:8d:cb:dc: 2d:7b:3b:96:51:bc:a5:c3:71:e9:9a:c9:d2:01:78:fc:f9:a9: 68:b1:9e:c4:65:61:ee:f3:ca:3b:c6:0c:4d:31:cd:2e:fb:ff: d8:15:47:57:da:4b:d2:c2:65:b6:83:d5:4c:dd:55:42:d6:eb: 01:a9:23:38:67:47:ca:e5:d6:3d:2b:bf:0f:70:a1:25:9c:4f: 1e:90:c8:6d:59:9c:94:d9:92:24:df:fb:88:32:9e:e6:34:b9: ac:ff:4f:7a:00:22:20:3d:fc:56:18:f8:0d:07:2b:10:15:31: 00:e2:0f:cc:6c:1e:f4:47:fc:aa:cd:43:c8:14:f9:d3:65:12: b4:e6:c6:71:85:7a:6f:9e:e7:a5:a6:22:34:74:55:ab:62:7c: 0d:71:92:27:17:e4:26:65:3b:67:69:80:a6:37:cf:f8:1f:15: 04:42:5a:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtYYtso7R3ZrUuOK39NsffnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MWJjZTI5YTM2Y2JkZTg5OGFjMDA3MDdkYjk1MTQzZjg2 YTc5MjIwHhcNMjUxMjI2MDIwMDMyWhcNMjUxMjI3MDIwMDMyWjAzMTEwLwYDVQQD Eyg4NWUzNTUzYTZlZGVjZjM4ZGUwYjk3YWVlYjNjMjk0MzkzZDNlZDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo72iWsvIhKYcgOlYzXmjcNc09YsC FlfOAK8sB3dmpqNbt7LniUPrIuxYEriUS+blhqKqMEOoN2bs9ShTHb20fE2jE+Ep KG+b7oBMBWKBBt1Uq6TWZUNi8kYJpk3YvGjatos1biN2gFPLaGvLFDdZKMN1LE0U HaIGM50Cb2WgQNroTuAeWzGlyWK78arASRaPvuTCBmnRgJfrwGVoXHQPHEkplW41 kglVMSrtzvycaEroJKIE+D/2MSFGzvgXykmyB2W/3wIyh7Si7LXZ/W8ltaFrd2yn I1+wchOtwgxlR8SNruPuy08sCzkpLYRmRR1o5m/ecWMsUCR/6Uy9P6iKBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXjVTpu3s843guXrus8KUOT0+0ZMB8GA1UdIwQY MBaAFHcbzimjbL3omKwAcH25UUP4ankiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kZDZlYTctYmRiOC00N2MzLTk2NGYt MmFmOTE3ODM4MmZiLzEvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9kZDZlYTctYmRiOC00N2MzLTk2NGYtMmFmOTE3ODM4MmZi LzEvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXMuHAki WiryhmrRxeda9M0XFwT9DYeVlJO+mU+tEq18MM5TBkPFmCTQqXXMOIhxuRv/Zf6U Ihl5zJd9/sghC69ec89YRgnnAeb7RGzDEvtQPiKtNAU+jcvcLXs7llG8pcNx6ZrJ 0gF4/PmpaLGexGVh7vPKO8YMTTHNLvv/2BVHV9pL0sJltoPVTN1VQtbrAakjOGdH yuXWPSu/D3ChJZxPHpDIbVmclNmSJN/7iDKe5jS5rP9PegAiID38Vhj4DQcrEBUx AOIPzGwe9Ef8qs1DyBT502UStObGcYV6b57npaYiNHRVq2J8DXGSJxfkJmU7Z2mA pjfP+B8VBEJa1A== -----END CERTIFICATE-----Generated at Fri Dec 26 07:53:25 2025 by rpki-client