This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft File: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft (raw, json) Hash identifier: mLf0ElmnVRgYEA0qCVJ+aZtjOuD+3H2MGIAkUQU3Btc= Subject key identifier: 1D:5F:35:C4:37:B0:57:39:46:57:8F:DE:15:8C:E5:A1:25:5E:C7:99 Authority key identifier: 74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E Certificate issuer: /CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e Certificate serial: 019B5D1B9987CD739B35F30F14D5191BED83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft Manifest number: 106F Signing time: Sat 27 Dec 2025 00:00:48 +0000 Manifest this update: Sat 27 Dec 2025 00:00:48 +0000 Manifest next update: Sun 28 Dec 2025 00:00:48 +0000 Files and hashes: 1: aIw9rhpD5bOiIlZAqZVUvurijMA.roa (hash: PFhebNxm67g4lRCcJKkvR6KXhdlN0MJaxI0ObUyJSp4=) 2: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl (hash: uMyhBQdT52HAeZb9B9TOczkPM5yhBfQo02Lzi1d3u0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:1b:99:87:cd:73:9b:35:f3:0f:14:d5:19:1b:ed:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e Validity Not Before: Dec 27 00:00:48 2025 GMT Not After : Dec 28 00:00:48 2025 GMT Subject: CN=1d5f35c437b0573946578fde158ce5a1255ec799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:0f:40:d8:30:11:92:e0:a5:7a:c3:b5:d4: 32:bc:f8:70:8d:eb:9e:67:85:d6:79:a8:95:60:03: 3a:02:10:5d:ab:d3:39:d8:2d:a2:99:97:6b:e3:fb: 81:03:3a:d8:c2:e1:18:7b:44:b7:2a:89:89:73:46: 80:26:e3:51:d1:03:fa:cf:9c:2f:6a:b8:9e:fe:00: 5e:df:09:04:84:d5:ff:99:c0:3e:b7:b6:e5:bf:80: 10:45:fb:e6:f6:d2:c0:ec:98:7a:8a:12:ca:9c:6f: 9c:c4:fc:3b:e4:64:3a:68:2b:13:c2:d5:e6:65:aa: 43:ad:10:58:3d:67:1f:69:75:9d:89:f1:c8:d2:a1: 41:df:56:d0:c4:e0:64:b1:6f:2a:42:56:a2:51:19: 50:84:55:ea:10:b4:63:44:4a:03:01:00:8f:1c:9b: 09:11:8b:8b:21:aa:01:be:38:84:76:e0:40:3e:a9: ba:b3:a7:9a:38:fd:4b:ef:d8:b0:ff:50:8d:76:bd: 2b:10:d9:fd:ca:d8:4e:cd:a7:ae:93:5e:28:40:94: 19:a0:df:08:9a:0a:32:c5:79:6f:93:bb:b4:53:a7: 60:ba:6c:ec:72:1a:98:cf:f7:47:af:10:fb:f5:14: 0b:15:54:91:fd:3e:20:eb:fc:a8:33:a5:71:c1:a4: b5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5F:35:C4:37:B0:57:39:46:57:8F:DE:15:8C:E5:A1:25:5E:C7:99 X509v3 Authority Key Identifier: keyid:74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:41:14:25:83:0e:87:a1:a5:d2:76:14:b2:7c:0c:ef:c7:69: 36:55:ab:64:9b:cf:8e:8b:f8:78:f8:a8:66:89:04:b9:41:7f: ec:de:9c:e4:c0:7e:15:d2:aa:6b:44:02:18:1c:b6:51:c4:1e: d6:38:dc:7f:27:f1:22:46:85:b7:9b:49:39:c3:7c:b3:22:22: f6:18:9f:0a:99:7e:8c:e8:71:57:b4:fe:29:9e:1e:02:14:02: 70:49:94:59:15:33:fa:0e:7b:9a:10:0d:cc:68:ec:cf:00:70: 45:1b:ba:75:bb:9b:2f:ba:1d:c1:fd:59:c6:14:8a:ae:22:76: c3:89:3a:80:c4:22:73:71:47:4c:a9:88:f5:bf:d6:f1:0e:7b: 95:f6:48:a4:aa:62:f5:39:6f:82:18:46:d6:ea:d0:a7:91:d3: 10:bb:31:02:49:9c:ac:b4:4b:75:84:14:64:8c:52:b1:58:86: 6b:3a:b4:d0:f8:cb:d4:ed:d7:27:67:25:00:13:63:fe:9c:51: 99:ba:9b:7b:42:8d:fd:cb:3d:9e:de:14:64:e9:c2:e9:44:70: 4c:15:29:68:eb:15:74:92:1e:f8:ca:a3:a0:a9:06:27:5c:46: a8:41:af:59:9c:80:de:0e:f0:c8:64:3a:d0:ab:41:d8:9d:fb: 94:6c:95:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdG5mHzXObNfMPFNUZG+2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YTU5YjdmYjRlMDM0ZjY3Nzc1ZjI4NzVlZmJmYzllZmYy NDdlOGUwHhcNMjUxMjI3MDAwMDQ4WhcNMjUxMjI4MDAwMDQ4WjAzMTEwLwYDVQQD EygxZDVmMzVjNDM3YjA1NzM5NDY1NzhmZGUxNThjZTVhMTI1NWVjNzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQwPQNgwEZLgpXrDtdQyvPhwjeue Z4XWeaiVYAM6AhBdq9M52C2imZdr4/uBAzrYwuEYe0S3KomJc0aAJuNR0QP6z5wv arie/gBe3wkEhNX/mcA+t7blv4AQRfvm9tLA7Jh6ihLKnG+cxPw75GQ6aCsTwtXm ZapDrRBYPWcfaXWdifHI0qFB31bQxOBksW8qQlaiURlQhFXqELRjREoDAQCPHJsJ EYuLIaoBvjiEduBAPqm6s6eaOP1L79iw/1CNdr0rENn9ythOzaeuk14oQJQZoN8I mgoyxXlvk7u0U6dgumzschqYz/dHrxD79RQLFVSR/T4g6/yoM6VxwaS1FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1fNcQ3sFc5RleP3hWM5aElXseZMB8GA1UdIwQY MBaAFHSlm3+04DT2d3Xyh177/J7/JH6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEtXYmY3VGdOUFozZGZLSFh2djhudjhrZm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yYjE5NWUtMGFiYS00N2Q0LThlM2It YWQzMmVmNDlkNDE5LzEvZEtXYmY3VGdOUFozZGZLSFh2djhudjhrZm80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8yYjE5NWUtMGFiYS00N2Q0LThlM2ItYWQzMmVmNDlkNDE5 LzEvZEtXYmY3VGdOUFozZGZLSFh2djhudjhrZm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckEUJYMO h6Gl0nYUsnwM78dpNlWrZJvPjov4ePioZokEuUF/7N6c5MB+FdKqa0QCGBy2UcQe 1jjcfyfxIkaFt5tJOcN8syIi9hifCpl+jOhxV7T+KZ4eAhQCcEmUWRUz+g57mhAN zGjszwBwRRu6dbubL7odwf1ZxhSKriJ2w4k6gMQic3FHTKmI9b/W8Q57lfZIpKpi 9TlvghhG1urQp5HTELsxAkmcrLRLdYQUZIxSsViGazq00PjL1O3XJ2clABNj/pxR mbqbe0KN/cs9nt4UZOnC6URwTBUpaOsVdJIe+MqjoKkGJ1xGqEGvWZyA3g7wyGQ6 0KtB2J37lGyVMQ== -----END CERTIFICATE-----Generated at Sat Dec 27 06:14:43 2025 by rpki-client