This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft File: dFkBtALUgvPW3Sko6oztLuts5BI.mft (raw, json) Hash identifier: MUn3WESBBpp6kWhZGWGjqpeYSbvQRKWYHwE0FCChx6U= Subject key identifier: 3C:30:B7:EC:F6:7B:4E:E1:37:AD:82:9A:FE:4D:0F:57:52:21:3F:5B Authority key identifier: 74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12 Certificate issuer: /CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412 Certificate serial: 019B5297F69D3348736F58DA0638A08889E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 23:00:49 +0000 Manifest this update: Wed 24 Dec 2025 23:00:49 +0000 Manifest next update: Thu 25 Dec 2025 23:00:49 +0000 Files and hashes: 1: cx1g5onsIc-hAAu8dnSh1N5rp3U.roa (hash: CrKS5W6ytqqKToe/UhGDJrUzFXfuo+vTp+g8QhgmrYQ=) 2: dFkBtALUgvPW3Sko6oztLuts5BI.crl (hash: zkHkmLv4Fp6d/V86NBUCdcalhsKKlVvkNSXD49TfEBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:97:f6:9d:33:48:73:6f:58:da:06:38:a0:88:89:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412 Validity Not Before: Dec 24 23:00:49 2025 GMT Not After : Dec 25 23:00:49 2025 GMT Subject: CN=3c30b7ecf67b4ee137ad829afe4d0f5752213f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:47:7a:1d:e9:7e:68:44:ca:98:0b:18:71:75: fe:b9:77:89:e6:f4:d8:7f:60:07:10:cb:50:c1:3b: 1c:ab:90:05:d0:e4:95:d8:4e:05:c6:c6:d8:12:f0: 3d:2f:d0:16:df:ae:46:0e:a3:42:e2:5a:df:32:10: 88:6c:43:b8:e8:4d:73:37:9c:26:05:4c:b2:f0:8a: 0e:01:ad:52:3b:72:4e:55:f0:9b:d0:97:14:75:c6: 56:d1:0e:f2:c6:e2:1a:22:06:5c:94:8b:d1:1f:01: d4:92:c9:68:b4:66:c5:96:35:e1:5c:d9:0c:41:a7: ca:c8:5d:3a:96:dd:fa:96:f0:15:1d:52:bb:df:29: db:18:b0:7f:35:e1:32:d3:ea:81:6a:1f:30:e1:2c: 31:88:94:fa:4f:ca:aa:ca:8d:9e:a8:ee:07:b0:c6: fa:09:ad:b7:65:b4:c5:01:dc:cf:44:ab:a0:96:2a: b4:bf:62:6a:1a:ad:37:03:44:f2:c8:59:68:26:76: 88:f0:6d:12:e5:ab:ae:fa:f7:84:b3:c5:ce:bd:3b: 38:e6:ce:88:b5:b1:b3:9b:df:33:a2:5e:9c:97:61: 9c:76:f3:a3:bd:dd:2b:df:ea:10:76:e2:e5:d6:04: b2:6d:7c:85:58:ea:29:47:19:0d:37:b4:4b:39:f4: 7b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:30:B7:EC:F6:7B:4E:E1:37:AD:82:9A:FE:4D:0F:57:52:21:3F:5B X509v3 Authority Key Identifier: keyid:74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d0:0c:c2:34:02:f1:1e:8f:a4:54:bc:0f:ae:a9:26:49:0a: 16:4b:ef:38:2d:d3:48:a9:45:1d:58:64:9b:b9:2f:6f:6e:7c: c8:74:22:c3:2e:84:ac:28:71:45:f9:a8:dc:c0:c1:5a:a2:67: 8a:f1:17:3f:2a:af:5a:aa:5e:eb:d1:af:bb:66:74:c1:c1:d2: d9:c5:df:07:e0:e0:7f:6d:cb:61:75:de:83:27:dd:03:38:54: 92:90:8b:80:eb:8b:74:4a:0b:e2:d4:0e:55:26:f1:75:8e:2c: 28:fc:fd:e0:64:b0:16:84:74:81:73:fd:18:ad:9b:92:9c:35: 81:1b:4a:88:44:2b:ce:ac:7e:07:59:a9:ba:d5:3d:53:8b:0e: 5c:68:8c:0c:23:1e:1a:e1:67:1a:d4:36:bf:7e:65:59:0d:13: 32:ca:8a:f2:76:8a:a5:80:d4:b5:50:12:88:a3:6f:06:d9:e8: fc:9b:40:34:5a:e5:b9:40:f2:b8:88:7b:c7:1a:82:a1:3f:c7: bb:b3:25:85:d9:05:69:d0:db:bb:b8:5d:2f:10:9e:7b:e7:c7: a6:06:98:62:a9:eb:28:05:41:f1:ce:40:e2:68:cd:06:96:98: b3:1d:5d:34:5e:0d:42:8b:a9:34:d0:c9:3a:07:b4:e4:87:63: a2:90:3e:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSl/adM0hzb1jaBjigiIngMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NTkwMWI0MDJkNDgyZjNkNmRkMjkyOGVhOGNlZDJlZWI2 Y2U0MTIwHhcNMjUxMjI0MjMwMDQ5WhcNMjUxMjI1MjMwMDQ5WjAzMTEwLwYDVQQD EygzYzMwYjdlY2Y2N2I0ZWUxMzdhZDgyOWFmZTRkMGY1NzUyMjEzZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0d6Hel+aETKmAsYcXX+uXeJ5vTY f2AHEMtQwTscq5AF0OSV2E4FxsbYEvA9L9AW365GDqNC4lrfMhCIbEO46E1zN5wm BUyy8IoOAa1SO3JOVfCb0JcUdcZW0Q7yxuIaIgZclIvRHwHUkslotGbFljXhXNkM QafKyF06lt36lvAVHVK73ynbGLB/NeEy0+qBah8w4SwxiJT6T8qqyo2eqO4HsMb6 Ca23ZbTFAdzPRKugliq0v2JqGq03A0TyyFloJnaI8G0S5auu+veEs8XOvTs45s6I tbGzm98zol6cl2GcdvOjvd0r3+oQduLl1gSybXyFWOopRxkNN7RLOfR7rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwwt+z2e07hN62Cmv5ND1dSIT9bMB8GA1UdIwQY MBaAFHRZAbQC1ILz1t0pKOqM7S7rbOQSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ZmQ2ZGYtMzAxMi00ZTQ2LWJiZDgt ZDdjMzZlMTVjZjBlLzEvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84ZmQ2ZGYtMzAxMi00ZTQ2LWJiZDgtZDdjMzZlMTVjZjBl LzEvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNAMwjQC 8R6PpFS8D66pJkkKFkvvOC3TSKlFHVhkm7kvb258yHQiwy6ErChxRfmo3MDBWqJn ivEXPyqvWqpe69Gvu2Z0wcHS2cXfB+Dgf23LYXXegyfdAzhUkpCLgOuLdEoL4tQO VSbxdY4sKPz94GSwFoR0gXP9GK2bkpw1gRtKiEQrzqx+B1mputU9U4sOXGiMDCMe GuFnGtQ2v35lWQ0TMsqK8naKpYDUtVASiKNvBtno/JtANFrluUDyuIh7xxqCoT/H u7MlhdkFadDbu7hdLxCee+fHpgaYYqnrKAVB8c5A4mjNBpaYsx1dNF4NQoupNNDJ Oge05IdjopA+eA== -----END CERTIFICATE-----Generated at Thu Dec 25 05:13:23 2025 by rpki-client