This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft File: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft (raw, json) Hash identifier: aRqsfnGfpvsvUz3wEFXO1pw+Qe0v6PMbMhla/d5O320= Subject key identifier: BA:BD:CE:07:98:58:7B:F5:EB:B6:29:0B:A7:0D:C4:E1:EC:9A:B6:19 Authority key identifier: 74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E Certificate issuer: /CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e Certificate serial: 019B4023CEEE20BADB4D855A3A18B38AC569 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft Manifest number: 1060 Signing time: Sun 21 Dec 2025 09:00:47 +0000 Manifest this update: Sun 21 Dec 2025 09:00:47 +0000 Manifest next update: Mon 22 Dec 2025 09:00:47 +0000 Files and hashes: 1: aIw9rhpD5bOiIlZAqZVUvurijMA.roa (hash: PFhebNxm67g4lRCcJKkvR6KXhdlN0MJaxI0ObUyJSp4=) 2: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl (hash: DdL0TLxJ8whIrgjfkOF+0dTh8+klokCghbEranYk1gE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:23:ce:ee:20:ba:db:4d:85:5a:3a:18:b3:8a:c5:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e Validity Not Before: Dec 21 09:00:47 2025 GMT Not After : Dec 22 09:00:47 2025 GMT Subject: CN=babdce0798587bf5ebb6290ba70dc4e1ec9ab619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d1:1d:16:83:6f:32:f7:39:8a:ab:67:19:95: fe:5b:d9:21:30:bc:1f:8e:cc:58:75:7f:64:38:1d: a5:70:1c:ed:b6:e6:12:3a:83:53:e6:38:b9:96:ca: e1:84:39:31:92:bf:05:8b:c4:72:21:0e:3e:f5:98: 35:59:e7:9d:b9:7a:ab:5c:47:d0:ec:86:92:57:f4: de:a9:bd:b5:a8:2e:1a:5c:05:fc:20:7a:16:1b:02: 87:98:67:f5:c7:98:ce:11:df:6e:66:4f:9e:24:13: d4:b4:c7:54:6c:cc:39:e8:04:e8:3d:29:af:aa:7a: 5c:33:22:df:77:72:1b:5f:0a:e4:5a:17:a2:d0:e8: c5:79:f5:a2:13:f6:30:56:99:88:c5:c0:a5:a0:18: fe:71:60:9a:32:cf:17:36:89:aa:16:82:bc:4b:b8: 5d:2f:f8:c7:99:f7:8c:6a:8f:f6:bb:a5:31:df:64: b6:db:fd:3b:9c:94:c6:22:4f:5e:90:3d:8d:09:0c: 9d:e2:48:f6:4e:8c:b8:5b:d5:12:09:8c:e5:89:7b: a8:b6:74:69:94:6d:3a:7a:0d:a0:95:85:d2:38:cf: e3:8a:d2:4f:f4:f5:ec:53:7e:a3:1d:78:4d:25:b0: 65:53:e4:71:ab:33:83:23:b9:7d:a9:84:5a:de:1a: aa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BD:CE:07:98:58:7B:F5:EB:B6:29:0B:A7:0D:C4:E1:EC:9A:B6:19 X509v3 Authority Key Identifier: keyid:74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:2c:f3:cf:5d:40:52:33:a1:8c:67:a4:f9:a8:61:57:5f:36: 28:3f:56:f8:e5:77:bf:f6:61:64:ba:66:94:31:dd:1a:78:a4: e4:c8:17:7d:71:00:9e:fc:b9:25:c4:7f:65:10:bd:97:a5:f8: b8:dc:cc:93:5d:20:d9:9c:a0:f3:13:cc:0d:7b:d5:4d:9b:44: 25:15:c2:63:62:a7:63:74:fd:85:3e:f2:e1:a2:26:42:28:eb: 29:00:ee:12:10:40:29:9a:28:a6:e5:ec:b2:f6:93:9e:56:2f: 48:38:ce:92:5f:95:61:f9:8f:84:92:04:5a:2e:13:4f:be:86: 43:85:75:3b:e4:24:f9:5a:ff:e6:42:26:08:d5:e1:97:ad:b7: 2b:6b:b7:18:3e:ac:d6:44:f6:f8:a1:a6:18:43:c0:f4:e8:1a: d0:a3:81:e6:76:5a:ab:e3:d7:10:3e:7c:55:6b:ca:f7:d1:03: d1:f3:1d:cb:b0:c4:5f:58:a6:e8:4a:1e:94:cb:9d:e3:61:70: 64:75:1e:8b:ac:77:f0:b0:fd:ae:c7:8c:17:fc:1e:22:ab:f4: 7c:a9:84:1b:72:c3:c4:2d:d9:db:48:fe:03:da:45:03:c8:c0: 28:c1:3a:f1:cc:24:80:e6:44:c0:5a:76:82:86:09:3f:47:03: 51:80:ba:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAI87uILrbTYVaOhizisVpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YTU5YjdmYjRlMDM0ZjY3Nzc1ZjI4NzVlZmJmYzllZmYy NDdlOGUwHhcNMjUxMjIxMDkwMDQ3WhcNMjUxMjIyMDkwMDQ3WjAzMTEwLwYDVQQD EyhiYWJkY2UwNzk4NTg3YmY1ZWJiNjI5MGJhNzBkYzRlMWVjOWFiNjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNEdFoNvMvc5iqtnGZX+W9khMLwf jsxYdX9kOB2lcBzttuYSOoNT5ji5lsrhhDkxkr8Fi8RyIQ4+9Zg1WeeduXqrXEfQ 7IaSV/Teqb21qC4aXAX8IHoWGwKHmGf1x5jOEd9uZk+eJBPUtMdUbMw56AToPSmv qnpcMyLfd3IbXwrkWhei0OjFefWiE/YwVpmIxcCloBj+cWCaMs8XNomqFoK8S7hd L/jHmfeMao/2u6Ux32S22/07nJTGIk9ekD2NCQyd4kj2Toy4W9USCYzliXuotnRp lG06eg2glYXSOM/jitJP9PXsU36jHXhNJbBlU+RxqzODI7l9qYRa3hqqRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLq9zgeYWHv167YpC6cNxOHsmrYZMB8GA1UdIwQY MBaAFHSlm3+04DT2d3Xyh177/J7/JH6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEtXYmY3VGdOUFozZGZLSFh2djhudjhrZm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yYjE5NWUtMGFiYS00N2Q0LThlM2It YWQzMmVmNDlkNDE5LzEvZEtXYmY3VGdOUFozZGZLSFh2djhudjhrZm80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8yYjE5NWUtMGFiYS00N2Q0LThlM2ItYWQzMmVmNDlkNDE5 LzEvZEtXYmY3VGdOUFozZGZLSFh2djhudjhrZm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALizzz11A UjOhjGek+ahhV182KD9W+OV3v/ZhZLpmlDHdGnik5MgXfXEAnvy5JcR/ZRC9l6X4 uNzMk10g2Zyg8xPMDXvVTZtEJRXCY2KnY3T9hT7y4aImQijrKQDuEhBAKZoopuXs svaTnlYvSDjOkl+VYfmPhJIEWi4TT76GQ4V1O+Qk+Vr/5kImCNXhl623K2u3GD6s 1kT2+KGmGEPA9Oga0KOB5nZaq+PXED58VWvK99ED0fMdy7DEX1im6EoelMud42Fw ZHUei6x38LD9rseMF/weIqv0fKmEG3LDxC3Z20j+A9pFA8jAKME68cwkgOZEwFp2 goYJP0cDUYC6Tw== -----END CERTIFICATE-----Generated at Sun Dec 21 11:41:09 2025 by rpki-client