This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json) Hash identifier: TEIRdzWFP3K12GSExtWQcG7RFn7CeWnq+HF0wYf61F4= Subject key identifier: 91:47:44:37:C8:93:47:77:B4:60:05:DD:05:DC:0D:5C:5B:67:E9:2B Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51 Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451 Certificate serial: 019B52CF57E2F74D21E7F425F96FFA68923F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft Manifest number: 1798 Signing time: Thu 25 Dec 2025 00:01:18 +0000 Manifest this update: Thu 25 Dec 2025 00:01:18 +0000 Manifest next update: Fri 26 Dec 2025 00:01:18 +0000 Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: AlCnhldIZmtbUMN4vL2m+HTKGYFwcVJKO3k2mAcZdEY=) 2: 9jFcc2sIX-Fs3ktxs-58gEPmasY.roa (hash: HePH1DofBb+MqG0ob+GiLGVr062e3DxtUkrb0KPep7A=) 3: H91ljrtEOQ88LobyOBXsYKfsM_I.roa (hash: OrACEmPH7XE22MmlMeWAN/5nVKUIlnVGt10JM2JOUl8=) 4: fcd14E2UvKzJ6kaKcrYKQVlljT8.roa (hash: KoJteDfILqkEJ6UJs3cPi3xqWQVLa33IGp0XJE/3JLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:cf:57:e2:f7:4d:21:e7:f4:25:f9:6f:fa:68:92:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451 Validity Not Before: Dec 25 00:01:18 2025 GMT Not After : Dec 26 00:01:18 2025 GMT Subject: CN=91474437c8934777b46005dd05dc0d5c5b67e92b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d6:03:6f:18:f0:74:c1:c6:33:ff:3a:87:cb: cd:a0:46:64:3b:49:d4:45:5c:0e:8c:a0:7d:ff:f0: 27:0a:47:4e:c7:ec:5d:72:cc:ac:6a:f2:7e:72:48: 04:90:90:0c:19:a2:9c:10:e4:2b:37:b9:14:80:a4: ca:67:a6:6e:80:7b:66:d4:0e:d5:d0:e7:74:1d:d2: ba:39:83:d2:06:03:0a:48:85:86:fb:66:b7:d9:4a: 1e:88:9b:83:2e:62:c4:3a:2b:7a:fd:05:8f:a9:d3: b3:ec:cc:68:0f:e3:fa:44:6c:3a:fd:df:4c:04:da: 38:9a:48:3d:d7:40:b3:c0:de:b3:ad:a0:9a:aa:e0: dc:c9:b7:60:7f:64:8c:1f:23:a3:8f:05:29:52:70: ef:e1:c0:41:1c:dd:04:91:9a:bd:04:b4:0a:d9:b0: cd:65:b7:b8:40:d0:b6:e4:1c:8e:37:a1:7f:b1:ca: 83:a2:f3:ab:76:d7:1a:98:3a:0c:91:43:cc:0a:87: 32:a2:92:0a:c9:9e:2b:07:ea:45:c4:4e:49:9d:a3: 25:48:5d:e4:f9:9f:e8:51:6c:fd:8e:36:cb:d2:5d: 48:6e:63:52:4f:a4:cc:15:8c:ab:b3:f8:f4:e4:33: e5:1e:32:c4:55:87:19:a7:d0:ef:1e:42:d4:5c:09: 1d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:47:44:37:C8:93:47:77:B4:60:05:DD:05:DC:0D:5C:5B:67:E9:2B X509v3 Authority Key Identifier: keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b1:e4:fe:7d:70:17:28:da:24:8f:aa:01:0c:02:0b:38:1d: 4d:65:26:cb:87:ba:f0:ad:0f:4e:9e:c7:13:e6:07:b2:ae:95: a9:9e:8e:ca:67:c7:c3:79:2a:c4:89:df:de:8c:67:98:b7:42: e2:93:79:0e:57:50:bd:08:49:b8:35:da:16:4c:45:f4:f2:2d: 22:f5:9d:86:cc:e1:e4:08:81:1a:0d:df:9b:fa:73:40:ae:37: bf:92:97:f7:81:4c:e6:d5:64:4f:91:5e:a9:ce:fc:77:06:d7: 48:2c:18:3e:7c:ea:ce:b3:8a:b8:7d:6d:f2:66:f4:9a:b7:6d: 1b:0c:16:e2:69:d5:c0:2d:4a:09:d5:87:bc:a3:0b:dd:a3:f5: 50:45:d1:4d:b6:ac:13:8b:0e:87:e2:88:bf:be:01:f5:ca:b4: 0c:ad:25:e3:be:06:11:e2:a7:f2:12:d4:44:95:21:db:20:98: 9b:b3:ab:5f:4e:28:00:25:06:42:03:52:0a:89:46:dc:1b:8e: 88:c6:5a:10:b5:58:16:c3:b9:73:44:2c:95:7e:8a:b5:11:8f: 99:1d:03:d2:59:f9:ce:cf:60:2c:e8:9b:2f:6b:37:66:52:ce: b9:95:56:52:f8:ed:6c:56:59:b7:be:9a:f0:9e:28:81:45:c4: a4:43:9e:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSz1fi900h5/Ql+W/6aJI/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZDdmYzUwNTQ4Mjg3ZGVhZWE3Y2U5MjA5OWU0N2EwNGE3 MGQ0NTEwHhcNMjUxMjI1MDAwMTE4WhcNMjUxMjI2MDAwMTE4WjAzMTEwLwYDVQQD Eyg5MTQ3NDQzN2M4OTM0Nzc3YjQ2MDA1ZGQwNWRjMGQ1YzViNjdlOTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9YDbxjwdMHGM/86h8vNoEZkO0nU RVwOjKB9//AnCkdOx+xdcsysavJ+ckgEkJAMGaKcEOQrN7kUgKTKZ6ZugHtm1A7V 0Od0HdK6OYPSBgMKSIWG+2a32UoeiJuDLmLEOit6/QWPqdOz7MxoD+P6RGw6/d9M BNo4mkg910CzwN6zraCaquDcybdgf2SMHyOjjwUpUnDv4cBBHN0EkZq9BLQK2bDN Zbe4QNC25ByON6F/scqDovOrdtcamDoMkUPMCocyopIKyZ4rB+pFxE5JnaMlSF3k +Z/oUWz9jjbL0l1IbmNST6TMFYyrs/j05DPlHjLEVYcZp9DvHkLUXAkd6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFHRDfIk0d3tGAF3QXcDVxbZ+krMB8GA1UdIwQY MBaAFNvX/FBUgoferqfOkgmeR6BKcNRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjlmOFVGU0NoOTZ1cDg2U0NaNUhvRXB3MUZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82MDZlYTktNDgzNC00YjYzLTllMGEt ZjI1NjA0YzRiZTgyLzEvMjlmOFVGU0NoOTZ1cDg2U0NaNUhvRXB3MUZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS82MDZlYTktNDgzNC00YjYzLTllMGEtZjI1NjA0YzRiZTgy LzEvMjlmOFVGU0NoOTZ1cDg2U0NaNUhvRXB3MUZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarHk/n1w FyjaJI+qAQwCCzgdTWUmy4e68K0PTp7HE+YHsq6VqZ6OymfHw3kqxInf3oxnmLdC 4pN5DldQvQhJuDXaFkxF9PItIvWdhszh5AiBGg3fm/pzQK43v5KX94FM5tVkT5Fe qc78dwbXSCwYPnzqzrOKuH1t8mb0mrdtGwwW4mnVwC1KCdWHvKML3aP1UEXRTbas E4sOh+KIv74B9cq0DK0l474GEeKn8hLURJUh2yCYm7OrX04oACUGQgNSColG3BuO iMZaELVYFsO5c0QslX6KtRGPmR0D0ln5zs9gLOibL2s3ZlLOuZVWUvjtbFZZt76a 8J4ogUXEpEOeeg== -----END CERTIFICATE-----Generated at Thu Dec 25 06:22:25 2025 by rpki-client