This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft File: rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft (raw, json) Hash identifier: 4bDkvJSiTJolGD+JSy2rXw1+LJBkb7dKaaf92cmixUo= Subject key identifier: 38:71:AF:BB:9E:C1:E5:CE:71:12:F0:F5:D7:F6:F3:67:9B:19:1A:B6 Authority key identifier: AC:32:87:56:DE:CE:8F:29:F9:7F:41:B8:1A:08:7D:B5:24:E1:59:B7 Certificate issuer: /CN=ac328756dece8f29f97f41b81a087db524e159b7 Certificate serial: 019B484B4E3502741C08F53BA148F02215D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft Manifest number: 13D9 Signing time: Mon 22 Dec 2025 23:00:53 +0000 Manifest this update: Mon 22 Dec 2025 23:00:53 +0000 Manifest next update: Tue 23 Dec 2025 23:00:53 +0000 Files and hashes: 1: KhThgn0FLgtxgLmV5WuQd88UjJs.roa (hash: UVyvP36EKpZylxYZtY94LC7cB1Xoy48Pim7visCwDUs=) 2: rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl (hash: nbvsAw2AHQi9iCbvheXpLM2qBSNP/5QXveEzORrUvK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:4e:35:02:74:1c:08:f5:3b:a1:48:f0:22:15:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac328756dece8f29f97f41b81a087db524e159b7 Validity Not Before: Dec 22 23:00:53 2025 GMT Not After : Dec 23 23:00:53 2025 GMT Subject: CN=3871afbb9ec1e5ce7112f0f5d7f6f3679b191ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c3:64:17:ee:b3:6c:d9:6f:2c:2c:a8:82:3e: f7:12:03:e8:1b:4d:32:5d:00:41:31:4e:15:4b:5a: ef:51:a6:14:aa:11:af:ab:e9:ea:bc:72:1c:0d:df: 53:a7:6f:de:03:56:b5:97:27:b0:86:f4:78:24:d9: 1e:8b:ae:22:66:fe:4c:0f:61:64:ed:e8:d8:ae:98: fa:0f:e8:1f:a5:b6:56:77:04:9d:ff:38:53:f4:d3: 36:d7:fc:b0:2a:2e:81:48:95:12:18:d3:45:f9:52: 30:a4:c4:e6:51:81:65:c5:97:3a:d0:d8:e5:5d:cd: 8d:f0:74:b0:d8:03:09:4e:a1:a4:b6:e8:8c:76:85: f9:81:d7:29:9d:06:17:27:ea:1b:1b:42:e5:6c:7f: f7:46:4a:07:18:3b:d3:ad:ad:d4:94:07:65:ea:f4: a0:b3:ee:99:d6:f7:52:42:96:64:f9:2e:a8:01:3d: 0d:50:64:3c:b9:7a:8b:aa:da:88:e6:13:c3:a1:2e: c5:01:f9:e7:47:f5:c9:84:31:ed:16:be:a6:45:29: b5:d7:25:e4:58:4e:b9:52:e3:d6:a6:d6:4c:dd:75: d1:c9:c1:36:f5:3d:97:72:72:2a:58:73:a6:65:b5: 56:66:31:54:1a:8e:06:92:0e:1b:57:80:7b:80:20: e6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:71:AF:BB:9E:C1:E5:CE:71:12:F0:F5:D7:F6:F3:67:9B:19:1A:B6 X509v3 Authority Key Identifier: keyid:AC:32:87:56:DE:CE:8F:29:F9:7F:41:B8:1A:08:7D:B5:24:E1:59:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:72:c6:14:01:74:49:f0:d4:45:71:ea:89:72:88:24:9c:f2: 8c:b6:ff:e3:b8:f3:86:ea:03:cf:60:c0:99:b4:f4:e1:7d:27: b9:24:2e:0c:55:ad:06:6b:22:35:88:a2:9d:65:96:7b:a4:72: ff:1d:2c:46:83:27:67:2b:c8:ea:1c:85:44:80:91:59:51:b2: d2:0f:15:65:2c:18:a5:8f:5a:98:98:b1:97:1a:fe:49:26:3a: cd:db:81:91:e4:10:d7:d9:14:79:9f:88:c3:34:48:94:f7:9b: 47:2d:18:f3:ca:10:5c:ad:a1:24:d4:8b:9f:67:0f:8a:8a:be: 87:d0:e1:d9:ae:9a:4c:d8:94:5d:57:bb:09:22:65:c6:44:80: 93:0b:04:dc:24:9c:38:38:64:25:72:25:67:e5:b7:2b:35:f0: 1d:dd:25:84:51:b2:48:f7:06:38:0d:9f:68:3f:58:d9:ff:4a: 62:14:53:9a:1a:19:9e:bd:a0:8a:37:8f:f2:d5:cc:c6:ba:0b: 96:34:82:00:6c:49:7e:7c:ee:37:d9:de:21:dd:2d:96:f6:66: ef:1d:1a:c7:02:f1:96:56:98:7c:23:7f:11:e2:ee:08:a2:7c: ea:4a:04:55:b4:f4:b4:f0:97:d7:4d:19:3e:5a:b4:4e:d0:51: f5:60:8e:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIS041AnQcCPU7oUjwIhXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMzI4NzU2ZGVjZThmMjlmOTdmNDFiODFhMDg3ZGI1MjRl MTU5YjcwHhcNMjUxMjIyMjMwMDUzWhcNMjUxMjIzMjMwMDUzWjAzMTEwLwYDVQQD EygzODcxYWZiYjllYzFlNWNlNzExMmYwZjVkN2Y2ZjM2NzliMTkxYWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsNkF+6zbNlvLCyogj73EgPoG00y XQBBMU4VS1rvUaYUqhGvq+nqvHIcDd9Tp2/eA1a1lyewhvR4JNkei64iZv5MD2Fk 7ejYrpj6D+gfpbZWdwSd/zhT9NM21/ywKi6BSJUSGNNF+VIwpMTmUYFlxZc60Njl Xc2N8HSw2AMJTqGktuiMdoX5gdcpnQYXJ+obG0LlbH/3RkoHGDvTra3UlAdl6vSg s+6Z1vdSQpZk+S6oAT0NUGQ8uXqLqtqI5hPDoS7FAfnnR/XJhDHtFr6mRSm11yXk WE65UuPWptZM3XXRycE29T2XcnIqWHOmZbVWZjFUGo4Gkg4bV4B7gCDmmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhxr7ueweXOcRLw9df282ebGRq2MB8GA1UdIwQY MBaAFKwyh1bezo8p+X9BuBoIfbUk4Vm3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckRLSFZ0N09qeW41ZjBHNEdnaDl0U1RoV2JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mYjc4YWQtOTE4ZS00NGMyLTk1MDEt MDI0YWQ0ZmIzNzA4LzEvckRLSFZ0N09qeW41ZjBHNEdnaDl0U1RoV2JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mYjc4YWQtOTE4ZS00NGMyLTk1MDEtMDI0YWQ0ZmIzNzA4 LzEvckRLSFZ0N09qeW41ZjBHNEdnaDl0U1RoV2JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3LGFAF0 SfDURXHqiXKIJJzyjLb/47jzhuoDz2DAmbT04X0nuSQuDFWtBmsiNYiinWWWe6Ry /x0sRoMnZyvI6hyFRICRWVGy0g8VZSwYpY9amJixlxr+SSY6zduBkeQQ19kUeZ+I wzRIlPebRy0Y88oQXK2hJNSLn2cPioq+h9Dh2a6aTNiUXVe7CSJlxkSAkwsE3CSc ODhkJXIlZ+W3KzXwHd0lhFGySPcGOA2faD9Y2f9KYhRTmhoZnr2gijeP8tXMxroL ljSCAGxJfnzuN9neId0tlvZm7x0axwLxllaYfCN/EeLuCKJ86koEVbT0tPCX100Z Plq0TtBR9WCOkw== -----END CERTIFICATE-----Generated at Tue Dec 23 05:34:08 2025 by rpki-client