This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft File: dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft (raw, json) Hash identifier: ekfPzY86KZ84nnq92zD9YU+JBFYMqqWL1KWgcwzuN9I= Subject key identifier: 5B:36:95:D3:FE:D9:76:21:1A:0A:42:35:7A:4C:BA:3B:EB:2B:9D:2F Authority key identifier: 74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64 Certificate issuer: /CN=749ea3b1e58ba060b41fc2a078f6016264759664 Certificate serial: 019B405C2A0AF191AF9080771C908EA503FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 10:02:20 +0000 Manifest this update: Sun 21 Dec 2025 10:02:20 +0000 Manifest next update: Mon 22 Dec 2025 10:02:20 +0000 Files and hashes: 1: 8ufIDITsiM6oD6O8MQCNfNFjxSc.roa (hash: 8hR826cHBgGmwXj/DW4UGY4gM4QS8fSh6KW7UDD9poY=) 2: dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl (hash: mh89GSpWSWz9lxWbzkPT755G4NioyDp5vSPdLLjucEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:2a:0a:f1:91:af:90:80:77:1c:90:8e:a5:03:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749ea3b1e58ba060b41fc2a078f6016264759664 Validity Not Before: Dec 21 10:02:20 2025 GMT Not After : Dec 22 10:02:20 2025 GMT Subject: CN=5b3695d3fed976211a0a42357a4cba3beb2b9d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:93:fe:75:f2:92:d0:cc:8e:f3:ab:c4:0e:69: b2:8c:f8:69:77:f5:7e:ff:ad:d5:2c:99:22:20:e4: b7:e8:13:1c:04:a6:e7:55:22:43:ad:70:f3:9f:5d: d6:36:73:f6:6c:58:96:51:69:07:aa:13:56:b9:bd: a2:85:35:c9:32:20:08:9d:51:51:d6:e4:bd:b5:b7: d5:f0:88:fd:87:8a:a0:c9:86:54:4d:52:62:a8:2f: 27:75:71:d8:49:a9:11:3a:fb:92:36:87:43:5e:11: 17:ee:5c:dc:43:46:31:d1:4a:5b:f2:0c:a7:48:5b: c4:df:18:9b:ae:73:7d:96:c1:47:fc:8d:aa:b2:ea: 41:d3:b7:93:d6:7d:2b:de:54:46:08:ae:51:f0:48: 40:20:46:0e:a3:6f:ad:a1:fd:c0:2c:60:cd:d2:92: 40:bd:3c:74:0d:b7:19:02:08:77:48:27:ae:27:8e: 24:62:99:66:65:ea:e4:26:8d:8c:1d:a6:ed:59:d9: 82:25:1b:04:1e:04:80:bf:f0:df:6d:33:e9:cb:c3: 2a:54:1f:75:94:5e:f0:5b:35:61:f2:34:cc:0e:b5: d1:3a:e9:26:a2:6f:a9:e4:09:12:40:ef:f1:8f:09: 79:d9:3b:f4:60:fe:5f:72:a0:33:19:c1:3e:9e:71: 9a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:36:95:D3:FE:D9:76:21:1A:0A:42:35:7A:4C:BA:3B:EB:2B:9D:2F X509v3 Authority Key Identifier: keyid:74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:5f:cf:98:df:82:97:a2:9d:3d:c5:f1:da:b9:cb:f1:0c:0a: 42:02:60:50:c7:d8:bd:31:51:ae:b6:6e:32:40:d3:f3:63:a1: 9d:49:92:5e:6c:41:6e:75:94:16:d2:c4:7f:de:1c:a6:e3:40: 91:fa:3c:7d:9c:bc:1b:54:d7:9a:4d:53:e5:2a:1d:9d:a6:e4: 50:cc:a6:4b:78:a6:08:7e:a2:7a:07:75:fc:83:84:95:fc:66: 1e:5d:18:53:30:fa:69:0d:fa:c8:5c:34:71:0f:29:63:c8:fb: 5b:94:3e:c2:49:fb:89:64:89:0f:66:da:d4:de:f0:20:ca:26: 10:3b:f4:53:5c:56:12:b1:21:cd:4d:99:da:2a:f6:1f:e1:b2: c4:10:ca:0d:fb:8c:e7:f8:e9:47:3f:b0:74:2b:48:c2:d8:8e: 86:89:a1:73:b3:95:08:f5:6b:43:09:d1:0b:b5:7f:a8:47:0c: f7:65:e6:2a:19:ae:36:cf:18:4d:9c:bf:2d:df:8b:09:e7:e5: e0:7a:03:50:db:ab:ef:16:28:19:ca:42:45:4d:4c:0c:5e:76: 2b:90:81:dd:7a:b7:90:9e:fd:12:5f:72:59:77:b9:3d:a0:07: 0c:06:26:cf:41:85:ea:17:c4:7d:3a:4f:5f:d1:aa:b6:48:8f: 4d:e4:ef:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXCoK8ZGvkIB3HJCOpQP6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OWVhM2IxZTU4YmEwNjBiNDFmYzJhMDc4ZjYwMTYyNjQ3 NTk2NjQwHhcNMjUxMjIxMTAwMjIwWhcNMjUxMjIyMTAwMjIwWjAzMTEwLwYDVQQD Eyg1YjM2OTVkM2ZlZDk3NjIxMWEwYTQyMzU3YTRjYmEzYmViMmI5ZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JP+dfKS0MyO86vEDmmyjPhpd/V+ /63VLJkiIOS36BMcBKbnVSJDrXDzn13WNnP2bFiWUWkHqhNWub2ihTXJMiAInVFR 1uS9tbfV8Ij9h4qgyYZUTVJiqC8ndXHYSakROvuSNodDXhEX7lzcQ0Yx0Upb8gyn SFvE3xibrnN9lsFH/I2qsupB07eT1n0r3lRGCK5R8EhAIEYOo2+tof3ALGDN0pJA vTx0DbcZAgh3SCeuJ44kYplmZerkJo2MHabtWdmCJRsEHgSAv/DfbTPpy8MqVB91 lF7wWzVh8jTMDrXROukmom+p5AkSQO/xjwl52Tv0YP5fcqAzGcE+nnGaBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFs2ldP+2XYhGgpCNXpMujvrK50vMB8GA1UdIwQY MBaAFHSeo7Hli6BgtB/CoHj2AWJkdZZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEo2anNlV0xvR0MwSDhLZ2VQWUJZbVIxbG1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84NjI0NmEtZjAzMy00ZTQ4LWI3ZGQt MmY0MjQyYTEzZDAwLzEvZEo2anNlV0xvR0MwSDhLZ2VQWUJZbVIxbG1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy84NjI0NmEtZjAzMy00ZTQ4LWI3ZGQtMmY0MjQyYTEzZDAw LzEvZEo2anNlV0xvR0MwSDhLZ2VQWUJZbVIxbG1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFl/PmN+C l6KdPcXx2rnL8QwKQgJgUMfYvTFRrrZuMkDT82OhnUmSXmxBbnWUFtLEf94cpuNA kfo8fZy8G1TXmk1T5SodnabkUMymS3imCH6iegd1/IOElfxmHl0YUzD6aQ36yFw0 cQ8pY8j7W5Q+wkn7iWSJD2ba1N7wIMomEDv0U1xWErEhzU2Z2ir2H+GyxBDKDfuM 5/jpRz+wdCtIwtiOhomhc7OVCPVrQwnRC7V/qEcM92XmKhmuNs8YTZy/Ld+LCefl 4HoDUNur7xYoGcpCRU1MDF52K5CB3Xq3kJ79El9yWXe5PaAHDAYmz0GF6hfEfTpP X9GqtkiPTeTvpg== -----END CERTIFICATE-----Generated at Sun Dec 21 14:11:17 2025 by rpki-client