This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json) Hash identifier: kvX+CBwE9Hm2rrF22oD+dqvjNCncAMW9GvclDXqxf1U= Subject key identifier: 9C:4A:FF:E7:1B:5C:1D:7C:38:8F:C6:5C:74:E5:E1:94:6C:A1:CE:E8 Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a Certificate serial: 019B6B0E1067D59C8C70268B243DABFE63B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft Manifest number: 0807 Signing time: Mon 29 Dec 2025 17:00:42 +0000 Manifest this update: Mon 29 Dec 2025 17:00:42 +0000 Manifest next update: Tue 30 Dec 2025 17:00:42 +0000 Files and hashes: 1: R0kpMB4FLa57YlT9gQTxUhUxTi4.roa (hash: v4gil0pPlLS8kPjffYF1yPMZ2JnOTspISeu5FIjRwfg=) 2: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: jcSmnY29Vv+JSJXO14ewPiU/KWTj9V6NOP+3m+1RBiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:0e:10:67:d5:9c:8c:70:26:8b:24:3d:ab:fe:63:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a Validity Not Before: Dec 29 17:00:42 2025 GMT Not After : Dec 30 17:00:42 2025 GMT Subject: CN=9c4affe71b5c1d7c388fc65c74e5e1946ca1cee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cc:49:23:5e:f8:3e:3c:c9:f3:78:57:3f:0e: b6:68:00:c8:07:12:ad:ba:93:84:b5:42:d2:81:93: c6:62:39:8d:ae:0b:1e:00:19:76:18:6c:94:ee:b3: c1:7f:da:1f:71:19:a7:45:70:4f:d3:1a:5a:9c:14: 82:e9:d9:2d:19:3d:bf:c3:d4:33:96:42:5f:c8:27: 5d:24:bb:4b:bd:0f:af:1b:79:d4:80:dd:8b:40:c5: 6f:90:ea:bd:0a:57:00:17:7f:0f:e5:1f:50:df:c5: 3a:6c:d6:ae:d3:91:80:7b:f7:28:db:9a:b4:ac:a1: 47:e7:49:82:27:ac:47:2d:db:8f:03:83:96:50:26: 2e:59:20:67:4e:c5:f7:23:64:02:c4:aa:8b:30:0f: b8:8e:c7:4d:ad:9f:41:c6:e9:b6:92:9c:b7:ce:02: 53:68:d3:bf:54:94:35:24:e6:01:df:1d:c7:79:23: ea:13:bc:89:b8:95:38:16:bb:21:38:00:39:11:a2: 1a:42:e4:b8:1f:49:d4:0e:d2:be:83:5f:78:1a:60: 08:7a:c6:33:c1:4d:6c:97:02:cd:ef:ca:ce:11:f4: af:26:e8:06:8d:65:64:10:4d:42:d0:e3:ca:5f:05: 62:04:d3:d6:6f:b5:2f:48:55:91:a8:2a:17:4e:0f: d3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4A:FF:E7:1B:5C:1D:7C:38:8F:C6:5C:74:E5:E1:94:6C:A1:CE:E8 X509v3 Authority Key Identifier: keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:c6:f0:91:89:4c:3d:fc:5c:25:6e:21:1c:ff:d3:fc:1c:94: 36:59:9a:10:4e:b8:88:65:f7:9a:5c:00:fc:b6:10:37:91:15: e6:89:56:82:43:8f:96:82:5d:fa:59:16:dc:c0:3c:24:25:88: b9:f1:22:23:a0:20:a0:91:22:c2:04:b4:63:2c:64:91:85:4f: 2c:b3:8f:3c:b0:6a:19:e9:74:77:e7:2b:73:49:44:e8:21:c8: c9:6f:4b:22:2f:c6:f3:87:40:cf:38:36:2f:14:50:4c:2d:81: 68:74:04:3e:a9:72:5b:89:a8:bf:54:cc:06:67:a6:70:07:0b: c3:24:d8:e3:3c:3e:17:ee:08:65:d9:75:7c:07:fd:b0:f0:47: 32:7d:b5:50:07:4e:8e:3f:e8:b8:25:4e:66:94:16:a9:2e:d5: 44:15:91:80:03:1f:a4:42:b2:f0:07:f2:b1:3a:e7:16:3a:da: 32:1b:d1:82:25:c8:95:c0:9c:b0:67:8c:4c:96:fe:9d:b7:54: 52:c2:03:bf:7e:5d:39:5e:24:69:a2:30:74:f2:12:dd:c3:6d: 04:74:7a:d0:02:c2:26:45:a2:c3:e1:75:8b:a2:11:fc:5a:a2: 69:d4:96:99:1b:cc:ef:47:f5:ef:19:f5:49:d4:8d:7c:c0:88: 83:5d:18:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrDhBn1ZyMcCaLJD2r/mO2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjM2FiNTVkNTc1MDljYmZhZTc5OGJkNzFhYWEyM2IzNDQ0 ZDhlNWEwHhcNMjUxMjI5MTcwMDQyWhcNMjUxMjMwMTcwMDQyWjAzMTEwLwYDVQQD Eyg5YzRhZmZlNzFiNWMxZDdjMzg4ZmM2NWM3NGU1ZTE5NDZjYTFjZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosxJI174PjzJ83hXPw62aADIBxKt upOEtULSgZPGYjmNrgseABl2GGyU7rPBf9ofcRmnRXBP0xpanBSC6dktGT2/w9Qz lkJfyCddJLtLvQ+vG3nUgN2LQMVvkOq9ClcAF38P5R9Q38U6bNau05GAe/co25q0 rKFH50mCJ6xHLduPA4OWUCYuWSBnTsX3I2QCxKqLMA+4jsdNrZ9Bxum2kpy3zgJT aNO/VJQ1JOYB3x3HeSPqE7yJuJU4FrshOAA5EaIaQuS4H0nUDtK+g194GmAIesYz wU1slwLN78rOEfSvJugGjWVkEE1C0OPKXwViBNPWb7UvSFWRqCoXTg/ThwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxK/+cbXB18OI/GXHTl4ZRsoc7oMB8GA1UdIwQY MBaAFPw6tV1XUJy/rnmL1xqqI7NETY5aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYt MGM0NTIxOGU3OTgxLzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYtMGM0NTIxOGU3OTgx LzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsbwkYlM PfxcJW4hHP/T/ByUNlmaEE64iGX3mlwA/LYQN5EV5olWgkOPloJd+lkW3MA8JCWI ufEiI6AgoJEiwgS0YyxkkYVPLLOPPLBqGel0d+crc0lE6CHIyW9LIi/G84dAzzg2 LxRQTC2BaHQEPqlyW4mov1TMBmemcAcLwyTY4zw+F+4IZdl1fAf9sPBHMn21UAdO jj/ouCVOZpQWqS7VRBWRgAMfpEKy8AfysTrnFjraMhvRgiXIlcCcsGeMTJb+nbdU UsIDv35dOV4kaaIwdPIS3cNtBHR60ALCJkWiw+F1i6IR/FqiadSWmRvM70f17xn1 SdSNfMCIg10YuA== -----END CERTIFICATE-----Generated at Mon Dec 29 22:39:10 2025 by rpki-client