This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft File: dXFLWBraGW41UcCM52JDvgWLROs.mft (raw, json) Hash identifier: NxfQKuGQSD2hZ1flxpDRL+vsaivnG6yliLCTugpZ+1g= Subject key identifier: 86:13:5D:A7:0F:BC:C2:1B:24:47:B3:11:48:8F:2E:AD:DF:1A:78:A5 Authority key identifier: 75:71:4B:58:1A:DA:19:6E:35:51:C0:8C:E7:62:43:BE:05:8B:44:EB Certificate issuer: /CN=75714b581ada196e3551c08ce76243be058b44eb Certificate serial: 019B5E65544E8935C2B34A2FC456E231B2B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXFLWBraGW41UcCM52JDvgWLROs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft Manifest number: 1798 Signing time: Sat 27 Dec 2025 06:00:57 +0000 Manifest this update: Sat 27 Dec 2025 06:00:57 +0000 Manifest next update: Sun 28 Dec 2025 06:00:57 +0000 Files and hashes: 1: 0dwLJQRpdsuNfuiofPA4PjO0U8c.roa (hash: xvhwiBzc6sj9frR0O87jctOS5dj3sqKjh7OcpHO4MQo=) 2: dXFLWBraGW41UcCM52JDvgWLROs.crl (hash: Ovz/pB1rGOPcXWNw7lgYbMuXYqTIp/SytKJD1ujjIEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft rsync://rpki.ripe.net/repository/DEFAULT/dXFLWBraGW41UcCM52JDvgWLROs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:65:54:4e:89:35:c2:b3:4a:2f:c4:56:e2:31:b2:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75714b581ada196e3551c08ce76243be058b44eb Validity Not Before: Dec 27 06:00:57 2025 GMT Not After : Dec 28 06:00:57 2025 GMT Subject: CN=86135da70fbcc21b2447b311488f2eaddf1a78a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c7:d7:ac:bc:fb:22:b3:63:5a:c6:86:56:61: 86:a0:63:cb:58:6e:85:f0:8d:b6:1c:ec:08:81:a7: 6e:db:0f:20:dd:03:46:f6:89:61:ef:8b:78:fc:49: 10:24:ca:df:7c:84:28:7f:c6:1b:03:55:19:5a:6c: a7:43:4e:0d:75:9f:e0:6d:70:c1:37:63:ab:b5:8c: ef:a7:b7:18:28:3c:16:f8:93:75:a0:7f:15:2d:c9: 88:ab:47:23:12:ad:95:d2:b4:9c:dd:66:79:2f:8e: 5a:f6:85:c2:fa:a2:5c:ab:7d:fa:b2:92:f4:95:f9: 00:95:f6:cc:26:b7:06:ee:4f:fb:c5:a9:f7:6c:a8: ce:d9:31:24:21:54:82:4f:2a:ab:82:6e:7e:5a:26: 07:fe:06:ed:46:96:43:3c:51:a7:0e:d9:e6:42:49: 36:60:a1:ac:ee:3b:1c:af:e3:09:70:93:2d:b3:47: 4d:5d:42:b1:b7:ac:b8:1c:7d:31:57:89:0d:1e:bc: 6a:7e:f7:d0:5e:65:40:7a:26:04:ff:69:1e:46:8d: 87:f6:ba:c3:f3:0e:a5:36:77:8c:53:9c:4f:07:3d: 44:c3:91:51:ce:ff:d2:c4:fd:37:c7:68:6e:ba:12: de:25:be:10:05:7e:48:01:ae:0c:57:5b:c2:28:47: ea:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:13:5D:A7:0F:BC:C2:1B:24:47:B3:11:48:8F:2E:AD:DF:1A:78:A5 X509v3 Authority Key Identifier: keyid:75:71:4B:58:1A:DA:19:6E:35:51:C0:8C:E7:62:43:BE:05:8B:44:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXFLWBraGW41UcCM52JDvgWLROs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:a4:71:4c:46:8a:4f:a1:91:0f:87:88:a8:34:08:11:77:fd: 1e:95:52:03:f2:0c:f5:28:e8:ce:c8:3c:13:1d:81:00:2a:b1: a1:5e:7f:db:91:a8:e0:c1:f7:26:b3:d0:03:87:ae:ff:ed:a5: 86:75:86:0d:1b:41:fa:45:a4:90:14:c2:8f:0f:6c:04:dc:a5: f2:74:1b:ed:f6:66:cc:d8:3c:f1:f5:84:06:38:f0:d1:ea:a0: a2:d8:6f:b1:c8:6d:bc:aa:7a:4a:f5:50:c7:d4:4d:da:2c:1f: bf:02:47:b7:02:44:42:a1:8d:11:6b:5d:c4:16:e6:fd:ff:4b: 77:87:32:aa:f4:51:b6:fb:28:59:57:32:8e:be:26:32:b9:b9: 17:2a:4b:ba:16:78:56:48:e4:47:84:aa:cc:2f:ab:1b:c3:3f: 7d:2d:5d:48:1a:a9:2e:ad:3d:a3:a1:ec:10:76:b9:7d:5b:3e: 73:4d:8a:f0:42:48:9e:ec:53:e1:b1:2c:c6:f5:0a:de:87:f1: 6a:46:7d:ce:a7:e2:9a:0c:95:26:f4:56:48:10:7a:9d:16:53: 7f:23:ed:a0:d7:49:e4:b8:08:4f:0f:31:24:d5:d7:5c:84:02: 58:5a:42:91:20:6c:8b:52:38:d9:9f:22:36:ac:7f:2b:be:c3: 83:2b:3a:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZteZVROiTXCs0ovxFbiMbK3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NzE0YjU4MWFkYTE5NmUzNTUxYzA4Y2U3NjI0M2JlMDU4 YjQ0ZWIwHhcNMjUxMjI3MDYwMDU3WhcNMjUxMjI4MDYwMDU3WjAzMTEwLwYDVQQD Eyg4NjEzNWRhNzBmYmNjMjFiMjQ0N2IzMTE0ODhmMmVhZGRmMWE3OGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsfXrLz7IrNjWsaGVmGGoGPLWG6F 8I22HOwIgadu2w8g3QNG9olh74t4/EkQJMrffIQof8YbA1UZWmynQ04NdZ/gbXDB N2OrtYzvp7cYKDwW+JN1oH8VLcmIq0cjEq2V0rSc3WZ5L45a9oXC+qJcq336spL0 lfkAlfbMJrcG7k/7xan3bKjO2TEkIVSCTyqrgm5+WiYH/gbtRpZDPFGnDtnmQkk2 YKGs7jscr+MJcJMts0dNXUKxt6y4HH0xV4kNHrxqfvfQXmVAeiYE/2keRo2H9rrD 8w6lNneMU5xPBz1Ew5FRzv/SxP03x2huuhLeJb4QBX5IAa4MV1vCKEfqcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYTXacPvMIbJEezEUiPLq3fGnilMB8GA1UdIwQY MBaAFHVxS1ga2hluNVHAjOdiQ74Fi0TrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFhGTFdCcmFHVzQxVWNDTTUySkR2Z1dMUk9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zOWQyMjYtNzJiZi00OTBlLTlmMTYt MDczZmJiZTExMWU1LzEvZFhGTFdCcmFHVzQxVWNDTTUySkR2Z1dMUk9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zOWQyMjYtNzJiZi00OTBlLTlmMTYtMDczZmJiZTExMWU1 LzEvZFhGTFdCcmFHVzQxVWNDTTUySkR2Z1dMUk9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqRxTEaK T6GRD4eIqDQIEXf9HpVSA/IM9Sjozsg8Ex2BACqxoV5/25Go4MH3JrPQA4eu/+2l hnWGDRtB+kWkkBTCjw9sBNyl8nQb7fZmzNg88fWEBjjw0eqgothvschtvKp6SvVQ x9RN2iwfvwJHtwJEQqGNEWtdxBbm/f9Ld4cyqvRRtvsoWVcyjr4mMrm5FypLuhZ4 VkjkR4SqzC+rG8M/fS1dSBqpLq09o6HsEHa5fVs+c02K8EJInuxT4bEsxvUK3ofx akZ9zqfimgyVJvRWSBB6nRZTfyPtoNdJ5LgITw8xJNXXXIQCWFpCkSBsi1I42Z8i Nqx/K77Dgys6rA== -----END CERTIFICATE-----Generated at Sat Dec 27 07:03:34 2025 by rpki-client