This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft File: dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft (raw, json) Hash identifier: 9alR9ZXhkF99p7J+wZQSCEoncd8N9XiipXn2OERWJBs= Subject key identifier: 89:D2:DF:01:31:76:6E:C4:13:60:EC:1A:B5:7F:8D:FF:77:F8:B5:F0 Authority key identifier: 76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28 Certificate issuer: /CN=76d44d97653a06d846b2443535b83e8cbc39d928 Certificate serial: 019B3EA33ED4A22E077068833B6862F630BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft Manifest number: 03F7 Signing time: Sun 21 Dec 2025 02:00:44 +0000 Manifest this update: Sun 21 Dec 2025 02:00:44 +0000 Manifest next update: Mon 22 Dec 2025 02:00:44 +0000 Files and hashes: 1: BuJq75MR8DCU5hnHyoHSIDgc_Go.roa (hash: WYFNii4ePD8MQfSQILNRQNPBQSQiOXOjnZErIQSWojg=) 2: XwqfYEtRGpVmtxULo8IDWcyQXIY.roa (hash: Qx5i/G9uqQlJ2PX+MsevYGq69DXaRpp3PFojSyjEu/0=) 3: dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl (hash: 2LEmYhF6BeBmMtbSidNtM1RDfV04Ol9dR1Ozm5pNvvg=) 4: kuduuaUOyGakCO9Tn5rzfY0i8Hk.roa (hash: Q9PoN1sRWuaTY4KshxWn50PXqDpvKrsvU7VleCWrxSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:3e:d4:a2:2e:07:70:68:83:3b:68:62:f6:30:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76d44d97653a06d846b2443535b83e8cbc39d928 Validity Not Before: Dec 21 02:00:44 2025 GMT Not After : Dec 22 02:00:44 2025 GMT Subject: CN=89d2df0131766ec41360ec1ab57f8dff77f8b5f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d6:24:34:36:df:5b:8c:32:60:7e:47:d0:10: a3:c7:db:79:41:29:a3:ce:24:fc:44:d8:61:4e:37: 99:79:e4:52:b5:7b:5f:b9:ae:5c:61:2b:53:95:28: 1e:f8:3c:3a:38:be:e3:76:70:d6:b3:5d:7c:a5:d3: 11:59:d5:95:0b:53:36:b7:81:8c:b7:b6:ad:a8:12: be:a2:ed:31:88:ff:f2:1e:6b:90:94:05:35:62:47: 63:89:c9:7a:45:06:e4:43:4a:01:83:ae:b9:a6:2d: 2d:2b:14:46:2d:1d:c4:f8:6a:cf:2b:8e:32:c6:4f: cb:86:9b:e1:db:a9:6b:52:09:19:15:b8:07:b0:4d: c6:97:ab:6b:55:88:32:b0:43:1d:5e:23:9e:da:8a: cb:b1:e0:b7:e5:a3:5e:0f:dc:86:7f:ad:7c:ba:70: 61:46:79:fb:08:c1:10:5b:3b:f8:0d:2e:4c:c9:67: b6:0e:0c:ca:e2:2f:8d:4b:41:84:6b:e4:d4:ce:56: ce:83:1c:46:fb:24:4c:f8:65:30:dc:90:fd:68:9e: 40:51:81:4d:a2:59:80:af:a6:05:1c:70:73:9d:1c: 4e:d2:3e:75:3f:62:10:9d:dc:8b:0e:70:ee:9d:35: d6:bd:f5:1d:ee:94:79:67:7e:bd:06:b2:cf:4e:d3: 4f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D2:DF:01:31:76:6E:C4:13:60:EC:1A:B5:7F:8D:FF:77:F8:B5:F0 X509v3 Authority Key Identifier: keyid:76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:51:25:f0:f6:a7:d3:20:62:46:b4:da:21:16:42:50:e6:96: 34:31:55:c6:7e:cb:04:53:09:80:ae:ea:6c:e5:6c:b0:cc:ce: 86:e0:4e:7d:85:a1:96:7c:d1:ad:9d:30:20:b5:c0:4d:81:f4: d5:3d:34:9c:5a:7b:bc:d6:ef:44:be:a9:ac:86:1b:52:35:2c: 65:21:8c:fb:ab:62:52:5a:e0:69:75:c0:00:4e:a8:07:5c:6c: 2b:87:96:5f:18:f0:f6:e6:f5:f1:4d:3f:82:2c:ce:f2:ea:db: 4f:a6:b9:5f:31:74:f4:db:ed:8f:d6:ff:db:64:81:39:3c:6e: aa:18:b0:5b:ca:0e:74:78:c9:75:87:e4:60:81:6f:21:85:60: bf:c0:17:30:3c:15:61:80:30:09:94:aa:25:ee:79:19:ae:98: b1:ce:6d:54:e2:85:6f:7b:7b:af:cd:e2:5a:e4:ad:8f:6e:e4: e4:82:5a:58:cd:ee:1c:ed:ab:18:a4:07:60:09:81:7f:bc:a7: 0b:99:59:69:14:79:df:22:84:9b:37:3f:63:f3:89:18:33:e5: 14:3b:bb:63:d5:3d:b5:28:59:68:b1:54:3b:fa:4e:13:0a:39: e7:a4:e4:d2:6d:13:7d:61:79:fa:fa:c4:28:42:c3:18:2d:d8: f9:e0:97:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+oz7Uoi4HcGiDO2hi9jC9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZDQ0ZDk3NjUzYTA2ZDg0NmIyNDQzNTM1YjgzZThjYmMz OWQ5MjgwHhcNMjUxMjIxMDIwMDQ0WhcNMjUxMjIyMDIwMDQ0WjAzMTEwLwYDVQQD Eyg4OWQyZGYwMTMxNzY2ZWM0MTM2MGVjMWFiNTdmOGRmZjc3ZjhiNWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9YkNDbfW4wyYH5H0BCjx9t5QSmj ziT8RNhhTjeZeeRStXtfua5cYStTlSge+Dw6OL7jdnDWs118pdMRWdWVC1M2t4GM t7atqBK+ou0xiP/yHmuQlAU1Ykdjicl6RQbkQ0oBg665pi0tKxRGLR3E+GrPK44y xk/Lhpvh26lrUgkZFbgHsE3Gl6trVYgysEMdXiOe2orLseC35aNeD9yGf618unBh Rnn7CMEQWzv4DS5MyWe2DgzK4i+NS0GEa+TUzlbOgxxG+yRM+GUw3JD9aJ5AUYFN olmAr6YFHHBznRxO0j51P2IQndyLDnDunTXWvfUd7pR5Z369BrLPTtNPuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInS3wExdm7EE2DsGrV/jf93+LXwMB8GA1UdIwQY MBaAFHbUTZdlOgbYRrJENTW4Poy8OdkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHRSTmwyVTZCdGhHc2tRMU5iZy1qTHc1MlNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi82YTMwNjktYWQzYy00Mzg4LWIxZTgt MGMyN2FkYjc1Y2RmLzEvZHRSTmwyVTZCdGhHc2tRMU5iZy1qTHc1MlNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi82YTMwNjktYWQzYy00Mzg4LWIxZTgtMGMyN2FkYjc1Y2Rm LzEvZHRSTmwyVTZCdGhHc2tRMU5iZy1qTHc1MlNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFEl8Pan 0yBiRrTaIRZCUOaWNDFVxn7LBFMJgK7qbOVssMzOhuBOfYWhlnzRrZ0wILXATYH0 1T00nFp7vNbvRL6prIYbUjUsZSGM+6tiUlrgaXXAAE6oB1xsK4eWXxjw9ub18U0/ gizO8urbT6a5XzF09Nvtj9b/22SBOTxuqhiwW8oOdHjJdYfkYIFvIYVgv8AXMDwV YYAwCZSqJe55Ga6Ysc5tVOKFb3t7r83iWuStj27k5IJaWM3uHO2rGKQHYAmBf7yn C5lZaRR53yKEmzc/Y/OJGDPlFDu7Y9U9tShZaLFUO/pOEwo556Tk0m0TfWF5+vrE KELDGC3Y+eCXnQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:12:44 2025 by rpki-client