This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft File: dLQqbeTgH8MSUNG74yIoEEbuYao.mft (raw, json) Hash identifier: jt1MgFEsM7Sf0LIKUse6Pc6mqpBgQNxEyGI3mMZ6HMw= Subject key identifier: C2:66:B6:65:E2:6E:F1:42:5C:A6:35:57:53:23:A2:19:B7:06:85:D6 Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA Certificate issuer: /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa Certificate serial: 019B3C7DC7EF0A26272C8BC027321CFDE5F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft Manifest number: 122B Signing time: Sat 20 Dec 2025 16:00:34 +0000 Manifest this update: Sat 20 Dec 2025 16:00:34 +0000 Manifest next update: Sun 21 Dec 2025 16:00:34 +0000 Files and hashes: 1: Lgun1kUgKuu9jlLCkgKdcwux9To.roa (hash: lGBfmzCEfkvZzXJZAi/9+uOmPeLs0qMduHpdLInrHEE=) 2: dLQqbeTgH8MSUNG74yIoEEbuYao.crl (hash: SeEpwr3nxvPxgE5jHS7t7Qmd9G3hYie2s4zqyaqzPhA=) 3: jSoECDBgi6VXYwcb2Ry0gxkfevA.roa (hash: IB9PwzbzFSot/avb9nPz1wMhdqqmWhuiYKAtdM5DSM0=) 4: qi0gnQ2A8mtm5nYWriDtU7TmQuc.roa (hash: uJnkHGGJ2XDTIlw0+Vcce7p4k0hUULEaSnw534z2SoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:c7:ef:0a:26:27:2c:8b:c0:27:32:1c:fd:e5:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa Validity Not Before: Dec 20 16:00:34 2025 GMT Not After : Dec 21 16:00:34 2025 GMT Subject: CN=c266b665e26ef1425ca635575323a219b70685d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:b8:b2:72:0c:d3:37:2f:3f:c8:aa:e1:26: 5b:ec:d0:85:a9:57:98:b1:ae:73:b1:f9:ca:14:16: 4c:85:0d:4f:43:a3:1e:e5:c0:ed:e7:b5:ba:c6:81: 62:dc:8d:5f:92:9f:4a:38:60:3e:39:c0:b6:cc:50: 0e:23:9d:6e:1e:23:0b:cd:48:68:1e:5e:8c:9e:9a: 8d:96:bb:1e:60:06:6f:86:e8:6d:24:76:9a:99:f2: 84:cd:17:07:6c:ce:5b:48:9b:89:bf:3f:28:5f:5f: e4:6c:87:90:1f:5c:13:49:74:72:a8:f3:bb:90:06: 45:76:35:41:a9:e6:45:6a:4e:c6:d6:36:cd:7f:c1: 9d:35:7e:1a:90:df:82:ae:e4:f5:07:4a:dd:0c:fe: 81:11:da:78:b4:b4:a0:6a:98:6d:82:76:95:04:00: 29:41:4e:04:e9:81:3c:d9:4a:96:2c:8e:64:63:5e: 2f:49:cb:bb:28:5c:d4:ea:d8:68:93:df:6a:f4:ef: 2d:d0:33:36:cc:8b:f6:bd:62:75:58:e6:fe:f3:04: 74:41:34:90:19:11:bd:52:d8:d7:7e:c8:8a:7c:39: df:d6:06:30:46:40:5a:5b:46:2a:dd:a4:39:22:5a: a2:36:b8:db:20:cb:5f:4b:cd:2e:c8:a2:b1:89:ff: fc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:66:B6:65:E2:6E:F1:42:5C:A6:35:57:53:23:A2:19:B7:06:85:D6 X509v3 Authority Key Identifier: keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:8c:cc:3c:2d:0e:57:8c:25:81:9a:6c:36:dc:0c:51:d3:61: ed:cf:08:74:32:a7:fe:51:aa:9f:fe:65:05:44:1b:57:03:03: d7:e6:55:95:21:c6:8e:73:96:f8:df:0e:6a:5c:23:66:f5:56: 17:0d:ca:bc:72:cb:3e:dc:79:a2:17:e7:71:94:60:f6:c6:f4: f7:dc:2e:9d:f4:c3:fb:9a:14:99:d6:b0:2d:95:d3:b5:be:1d: 81:4f:71:8c:61:b6:c5:af:a2:2f:05:32:69:50:b0:3a:c2:72: 34:de:7c:c2:3e:42:ef:86:4e:2d:8b:57:a0:37:97:d1:dc:2c: ec:f8:10:bf:72:55:12:aa:b8:7b:7e:34:56:d3:31:bb:bb:bb: c8:ac:f3:b9:83:ad:91:56:75:51:99:e2:b5:9b:c5:f7:c0:cd: 74:78:a7:29:20:c5:2c:c8:9c:1f:df:b5:1c:ff:da:98:90:67: a8:7f:f1:0e:69:2b:f5:4b:99:ff:0d:bf:32:e9:24:11:25:bd: e7:61:08:ad:51:ad:70:c4:a5:53:0f:e0:9d:bc:ca:1f:8c:a6: ba:e6:f7:ea:1a:68:c8:e2:da:91:2a:66:a6:69:23:d8:b9:08: 3d:d8:04:3f:70:19:35:75:88:31:c5:0e:52:22:db:73:a8:83: a5:95:da:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fcfvCiYnLIvAJzIc/eX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YjQyYTZkZTRlMDFmYzMxMjUwZDFiYmUzMjIyODEwNDZl ZTYxYWEwHhcNMjUxMjIwMTYwMDM0WhcNMjUxMjIxMTYwMDM0WjAzMTEwLwYDVQQD EyhjMjY2YjY2NWUyNmVmMTQyNWNhNjM1NTc1MzIzYTIxOWI3MDY4NWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpm4snIM0zcvP8iq4SZb7NCFqVeY sa5zsfnKFBZMhQ1PQ6Me5cDt57W6xoFi3I1fkp9KOGA+OcC2zFAOI51uHiMLzUho Hl6MnpqNlrseYAZvhuhtJHaamfKEzRcHbM5bSJuJvz8oX1/kbIeQH1wTSXRyqPO7 kAZFdjVBqeZFak7G1jbNf8GdNX4akN+CruT1B0rdDP6BEdp4tLSgaphtgnaVBAAp QU4E6YE82UqWLI5kY14vScu7KFzU6thok99q9O8t0DM2zIv2vWJ1WOb+8wR0QTSQ GRG9UtjXfsiKfDnf1gYwRkBaW0Yq3aQ5IlqiNrjbIMtfS80uyKKxif/8AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJmtmXibvFCXKY1V1Mjohm3BoXWMB8GA1UdIwQY MBaAFHS0Km3k4B/DElDRu+MiKBBG7mGqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9lNTU1NmMtY2ZlYS00OTcyLWFhZjgt MTdhMWRjZGNjNmUwLzEvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9lNTU1NmMtY2ZlYS00OTcyLWFhZjgtMTdhMWRjZGNjNmUw LzEvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIzMPC0O V4wlgZpsNtwMUdNh7c8IdDKn/lGqn/5lBUQbVwMD1+ZVlSHGjnOW+N8OalwjZvVW Fw3KvHLLPtx5ohfncZRg9sb099wunfTD+5oUmdawLZXTtb4dgU9xjGG2xa+iLwUy aVCwOsJyNN58wj5C74ZOLYtXoDeX0dws7PgQv3JVEqq4e340VtMxu7u7yKzzuYOt kVZ1UZnitZvF98DNdHinKSDFLMicH9+1HP/amJBnqH/xDmkr9UuZ/w2/MukkESW9 52EIrVGtcMSlUw/gnbzKH4ymuub36hpoyOLakSpmpmkj2LkIPdgEP3AZNXWIMcUO UiLbc6iDpZXabA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:45:41 2025 by rpki-client