This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json) Hash identifier: XR+a97yXRH10kVrgk42hXDs40EqQKgvoHAnb+MBUupo= Subject key identifier: 67:A7:0B:2F:51:01:5D:71:8C:1A:92:AC:A0:03:3E:14:EB:77:E0:48 Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb Certificate serial: 019B3C7E4B11CF810E9D59594E4F38806C03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft Manifest number: 1547 Signing time: Sat 20 Dec 2025 16:01:08 +0000 Manifest this update: Sat 20 Dec 2025 16:01:08 +0000 Manifest next update: Sun 21 Dec 2025 16:01:08 +0000 Files and hashes: 1: O2QrsRpu21AzPFWSKx6-icFIuDk.roa (hash: yYvXQaBaDt2Fw+c7tWeP9pRQ80CLvEe29rG4qx33m94=) 2: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: L6Wi4qrvq8sw+94gM/uzt1hOahpwjNXtb3kq929TMmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:4b:11:cf:81:0e:9d:59:59:4e:4f:38:80:6c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb Validity Not Before: Dec 20 16:01:08 2025 GMT Not After : Dec 21 16:01:08 2025 GMT Subject: CN=67a70b2f51015d718c1a92aca0033e14eb77e048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f3:bb:a0:0d:64:3f:32:e2:55:71:2a:71:1e: 62:e5:31:bd:19:93:4d:e5:dc:40:11:ff:a1:ed:79: 80:20:30:69:97:3f:d9:01:68:6a:35:ec:4e:10:43: db:f1:33:3b:5d:93:6a:24:15:2d:0f:fd:41:a5:31: ef:0a:d5:ab:ea:18:d4:2b:db:be:cb:20:32:03:bf: 79:69:b4:89:4c:15:23:e7:4f:1f:bc:fb:c1:c9:b3: 2e:56:fa:6e:fb:f3:6d:f1:8a:3f:b2:c5:73:0e:c5: 60:29:6e:50:b2:3f:f9:a0:cf:6d:87:55:78:f7:30: 3d:c2:8f:aa:1a:55:3a:1e:d1:33:19:2c:bc:9c:9c: 17:87:ab:d1:bb:f8:47:b3:90:f1:39:d2:01:6a:8c: 9c:ac:60:af:c5:77:34:33:57:e8:ab:fb:ce:f2:4c: d5:39:d2:67:b4:5b:84:6b:d9:e5:df:84:c4:35:35: 2f:e7:90:9f:f5:97:9a:5b:73:b7:fd:8d:92:7e:71: 29:00:79:d7:35:f4:d6:cf:c2:8b:d8:a3:1a:5a:25: 99:4f:0c:cf:14:cf:98:a6:65:2d:c2:b0:7a:0e:05: b4:ea:75:2e:97:83:df:bd:20:ea:ec:70:45:aa:44: ef:aa:f3:e9:f7:30:07:7e:33:4c:de:a0:b0:05:da: 5c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A7:0B:2F:51:01:5D:71:8C:1A:92:AC:A0:03:3E:14:EB:77:E0:48 X509v3 Authority Key Identifier: keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:17:84:9f:21:39:a7:f5:6c:c3:45:5e:63:c1:2d:15:59:a2: 43:59:20:f3:76:21:2d:06:ec:61:d5:9c:46:ac:7e:8f:41:5b: e3:81:95:c7:fb:df:41:36:e0:e4:83:90:8f:cc:fb:54:0f:72: a6:1b:25:55:76:d9:89:62:a1:c4:6f:ae:77:ad:c1:8e:00:b0: b5:2b:0f:4f:26:78:b3:09:ac:20:33:2d:6f:73:2b:9d:21:75: f0:38:44:dc:8c:32:61:b1:29:46:36:ac:99:5a:dc:56:4f:33: cb:4c:cd:70:d5:ea:26:34:fd:0e:da:20:7b:96:0e:69:2f:e5: f7:22:59:64:74:2d:db:de:bc:86:16:10:07:8f:f3:41:a3:66: d0:f7:75:99:c2:06:90:de:25:89:0c:fb:14:aa:ce:0e:03:c8: 60:2e:e8:ae:36:74:5c:43:9f:c5:da:c3:5a:f3:ef:5d:fd:eb: 5d:e7:4d:0f:b0:46:ab:86:b5:2c:cf:38:af:3d:ee:39:ae:eb: d2:fb:e7:f3:b3:d0:0e:d7:f1:89:bb:6b:c4:cf:4a:70:5d:b9: c6:a1:b1:7f:03:23:25:52:2c:df:cc:27:f2:4a:54:97:d1:0a: 2b:c0:11:da:08:a4:93:43:1f:da:67:fb:5b:5d:59:79:69:ce: fd:73:f9:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fksRz4EOnVlZTk84gGwDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZDAzMjUyOGJiMWQxNTk3NjZjZDc5ZGU0Nzg2ZGNkOTYy YTFmYmIwHhcNMjUxMjIwMTYwMTA4WhcNMjUxMjIxMTYwMTA4WjAzMTEwLwYDVQQD Eyg2N2E3MGIyZjUxMDE1ZDcxOGMxYTkyYWNhMDAzM2UxNGViNzdlMDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfO7oA1kPzLiVXEqcR5i5TG9GZNN 5dxAEf+h7XmAIDBplz/ZAWhqNexOEEPb8TM7XZNqJBUtD/1BpTHvCtWr6hjUK9u+ yyAyA795abSJTBUj508fvPvBybMuVvpu+/Nt8Yo/ssVzDsVgKW5Qsj/5oM9th1V4 9zA9wo+qGlU6HtEzGSy8nJwXh6vRu/hHs5DxOdIBaoycrGCvxXc0M1foq/vO8kzV OdJntFuEa9nl34TENTUv55Cf9ZeaW3O3/Y2SfnEpAHnXNfTWz8KL2KMaWiWZTwzP FM+YpmUtwrB6DgW06nUul4PfvSDq7HBFqkTvqvPp9zAHfjNM3qCwBdpc/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGenCy9RAV1xjBqSrKADPhTrd+BIMB8GA1UdIwQY MBaAFHTQMlKLsdFZdmzXneR4bc2WKh+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWE0MjItYTc5MS00ZGNmLTkwZmIt MmM5MTI3YWI0OGMzLzEvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWE0MjItYTc5MS00ZGNmLTkwZmItMmM5MTI3YWI0OGMz LzEvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIheEnyE5 p/Vsw0VeY8EtFVmiQ1kg83YhLQbsYdWcRqx+j0Fb44GVx/vfQTbg5IOQj8z7VA9y phslVXbZiWKhxG+ud63BjgCwtSsPTyZ4swmsIDMtb3MrnSF18DhE3IwyYbEpRjas mVrcVk8zy0zNcNXqJjT9Dtoge5YOaS/l9yJZZHQt2968hhYQB4/zQaNm0Pd1mcIG kN4liQz7FKrODgPIYC7orjZ0XEOfxdrDWvPvXf3rXedND7BGq4a1LM84rz3uOa7r 0vvn87PQDtfxibtrxM9KcF25xqGxfwMjJVIs38wn8kpUl9EKK8AR2gikk0Mf2mf7 W11ZeWnO/XP52g== -----END CERTIFICATE-----Generated at Sat Dec 20 20:45:36 2025 by rpki-client