This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft File: dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft (raw, json) Hash identifier: fNRaNTaQH7r9KMzPBT9kWHm0tE8xqsr6rxnVPZ8e7HI= Subject key identifier: E3:E7:EF:9A:ED:E8:4C:F9:E4:18:2A:C8:EA:50:ED:01:29:E6:3B:B2 Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8 Certificate issuer: /CN=74ae941a681c1586379e07247dcc19f3f41035d8 Certificate serial: 019B5D5454FD7AC204CDF66EA3E74A1B3676 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft Manifest number: 0F37 Signing time: Sat 27 Dec 2025 01:02:46 +0000 Manifest this update: Sat 27 Dec 2025 01:02:46 +0000 Manifest next update: Sun 28 Dec 2025 01:02:46 +0000 Files and hashes: 1: DvoMmaNQLR-F0c_ZQLqJj27XJNw.asa (hash: mEX2A8L8N6B6jxBchbjmo4MApYmBl5md4ZvzoDkGIHk=) 2: aRphps94ueev9_cb0Fbr1t6EWos.roa (hash: qY/6yr4D72wfd0je0UgbA5pXBnLSwy4IbEDXkYKHi6c=) 3: dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl (hash: yF6isftR7xSdo/vSIfG1yCEqdWKC+/MvEElQhXtIYn4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:54:54:fd:7a:c2:04:cd:f6:6e:a3:e7:4a:1b:36:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8 Validity Not Before: Dec 27 01:02:46 2025 GMT Not After : Dec 28 01:02:46 2025 GMT Subject: CN=e3e7ef9aede84cf9e4182ac8ea50ed0129e63bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:41:e2:ec:41:12:0d:a6:ee:56:51:eb:d3:bb: df:5e:0d:d2:72:8e:c6:18:d5:75:c9:8f:98:91:af: 0a:24:aa:f6:f9:2a:1e:6c:6c:0a:88:0a:c7:33:d0: ff:55:35:b1:d8:a3:18:c6:16:cc:94:53:7c:9c:b4: 43:17:5b:4a:8e:69:90:b8:ae:01:87:a2:87:ed:e3: cd:1a:94:15:47:c3:f5:74:f7:ae:4a:cb:2c:08:fd: d0:a1:d0:0f:89:2f:48:67:ee:d3:d9:9d:f0:c9:9f: 3d:e9:d9:25:9a:82:d5:2c:95:bd:79:57:66:ab:ea: 19:67:80:da:95:54:a9:2d:66:ac:47:90:99:c4:0e: 51:2e:19:5c:05:32:d4:6b:f6:f8:8c:be:d9:00:dc: 17:f9:db:1a:f9:38:20:95:c1:5e:e2:3c:fe:52:76: 8c:03:d7:21:37:42:83:9f:a4:36:06:ca:d7:8f:09: 34:8f:4d:43:c1:6f:3d:dd:7b:79:fa:6f:67:d4:6a: 8c:cb:db:ef:d4:aa:92:c1:69:d9:cc:f1:98:9f:56: 16:fe:ec:85:b8:54:2a:05:bc:46:5f:e6:0d:90:53: 11:a2:56:30:b9:e3:78:b1:ab:57:e7:7e:79:01:5a: 59:85:df:9a:6f:ad:a5:53:ed:6a:8f:8a:f4:97:ee: 5b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E7:EF:9A:ED:E8:4C:F9:E4:18:2A:C8:EA:50:ED:01:29:E6:3B:B2 X509v3 Authority Key Identifier: keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:a8:94:14:b4:b7:84:92:48:39:3f:7c:48:57:69:99:85:ac: 73:da:49:6b:86:ce:17:e9:df:5e:86:0f:f5:04:3d:22:f6:87: 00:f3:96:e1:e0:ec:45:f7:32:9f:4f:87:4b:6a:07:74:ad:08: e7:a9:43:42:0f:dc:5b:1d:2c:74:52:15:c3:da:74:30:96:f9: ff:df:08:8d:b5:13:df:70:1e:27:0d:9b:a0:9f:7a:8e:2b:37: 47:00:fc:5a:f8:3e:76:72:99:84:bd:6e:0d:5a:68:cb:ed:a7: 5d:cc:92:ac:c2:9b:a2:9d:e9:f4:9e:0d:94:a4:dc:a9:2e:72: 2b:2d:59:65:e9:84:08:63:72:6d:2f:77:9c:ad:5a:4b:bb:de: ee:7f:22:0a:e6:e0:59:d0:0e:39:ea:4c:7a:e4:75:51:15:f6: 7f:14:6d:07:1f:7f:ce:61:55:ac:05:f8:9d:8f:d5:48:cb:2e: c6:2e:b0:3c:71:45:04:cc:fb:16:5e:61:b4:4c:dc:6d:ed:f9: 19:e9:59:41:42:72:a4:57:be:6b:f8:79:62:ac:91:e9:5b:17: 5c:7e:b8:5a:8f:e7:81:84:0f:93:65:17:3f:cd:af:d1:86:88: 92:70:54:03:d6:fa:ba:c4:af:f8:11:c5:4a:89:4f:fa:8f:49: 8c:4c:d0:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdVFT9esIEzfZuo+dKGzZ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YWU5NDFhNjgxYzE1ODYzNzllMDcyNDdkY2MxOWYzZjQx MDM1ZDgwHhcNMjUxMjI3MDEwMjQ2WhcNMjUxMjI4MDEwMjQ2WjAzMTEwLwYDVQQD EyhlM2U3ZWY5YWVkZTg0Y2Y5ZTQxODJhYzhlYTUwZWQwMTI5ZTYzYmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkHi7EESDabuVlHr07vfXg3Sco7G GNV1yY+Yka8KJKr2+SoebGwKiArHM9D/VTWx2KMYxhbMlFN8nLRDF1tKjmmQuK4B h6KH7ePNGpQVR8P1dPeuSsssCP3QodAPiS9IZ+7T2Z3wyZ896dklmoLVLJW9eVdm q+oZZ4DalVSpLWasR5CZxA5RLhlcBTLUa/b4jL7ZANwX+dsa+TgglcFe4jz+UnaM A9chN0KDn6Q2BsrXjwk0j01DwW893Xt5+m9n1GqMy9vv1KqSwWnZzPGYn1YW/uyF uFQqBbxGX+YNkFMRolYwueN4satX5355AVpZhd+ab62lU+1qj4r0l+5bfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPn75rt6Ez55BgqyOpQ7QEp5juyMB8GA1UdIwQY MBaAFHSulBpoHBWGN54HJH3MGfP0EDXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEs2VUdtZ2NGWVkzbmdja2Zjd1o4X1FRTmRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8xNGU0YzItOGE5OC00NTZlLTk2MTIt OTQyOWRhODdiZDUwLzEvZEs2VUdtZ2NGWVkzbmdja2Zjd1o4X1FRTmRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8xNGU0YzItOGE5OC00NTZlLTk2MTItOTQyOWRhODdiZDUw LzEvZEs2VUdtZ2NGWVkzbmdja2Zjd1o4X1FRTmRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKiUFLS3 hJJIOT98SFdpmYWsc9pJa4bOF+nfXoYP9QQ9IvaHAPOW4eDsRfcyn0+HS2oHdK0I 56lDQg/cWx0sdFIVw9p0MJb5/98IjbUT33AeJw2boJ96jis3RwD8Wvg+dnKZhL1u DVpoy+2nXcySrMKbop3p9J4NlKTcqS5yKy1ZZemECGNybS93nK1aS7ve7n8iCubg WdAOOepMeuR1URX2fxRtBx9/zmFVrAX4nY/VSMsuxi6wPHFFBMz7Fl5htEzcbe35 GelZQUJypFe+a/h5YqyR6VsXXH64Wo/ngYQPk2UXP82v0YaIknBUA9b6usSv+BHF SolP+o9JjEzQ5g== -----END CERTIFICATE-----Generated at Sat Dec 27 07:03:32 2025 by rpki-client