This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json) Hash identifier: xgX6SCAHakZJJN2CPCEEsXdvaH4bQxC1qXfvXH15y/Y= Subject key identifier: 17:CF:F8:6C:85:C5:7A:7F:05:31:72:40:95:91:40:FE:83:23:31:ED Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb Certificate serial: 019B36B46415B32D8D590473D0B1A55EDE5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft Manifest number: 1544 Signing time: Fri 19 Dec 2025 13:02:30 +0000 Manifest this update: Fri 19 Dec 2025 13:02:30 +0000 Manifest next update: Sat 20 Dec 2025 13:02:30 +0000 Files and hashes: 1: O2QrsRpu21AzPFWSKx6-icFIuDk.roa (hash: yYvXQaBaDt2Fw+c7tWeP9pRQ80CLvEe29rG4qx33m94=) 2: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: pVpuY2jWYQfLCu71qeEsbaP1kknGl4ibHAHo8Ewnv8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:64:15:b3:2d:8d:59:04:73:d0:b1:a5:5e:de:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb Validity Not Before: Dec 19 13:02:30 2025 GMT Not After : Dec 20 13:02:30 2025 GMT Subject: CN=17cff86c85c57a7f05317240959140fe832331ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:80:2a:7d:d9:ed:35:26:ae:ba:c3:a2:15:83: 0e:f4:dc:d8:2a:cf:6a:41:70:92:7e:16:2f:08:8c: 42:4c:fe:37:ce:65:9f:6d:e1:67:de:65:55:f7:fb: f6:63:82:cd:b7:b0:1a:e2:d6:af:08:0e:3f:f2:6c: 4c:9a:52:70:6d:23:ea:5a:2c:19:4f:9a:fa:5d:c0: d6:34:cb:eb:cb:c7:98:b8:91:61:d0:1c:09:7a:bc: c5:f7:e4:52:08:87:e5:ca:c1:c1:d7:94:44:64:4b: 08:11:6f:44:0b:53:50:d3:ad:00:ed:f4:9d:68:0e: 7f:b1:b8:bc:4d:b4:21:11:9f:5b:9e:69:8b:4b:64: 12:1a:48:3f:e4:5c:1f:fe:fe:65:66:ba:96:41:cb: 10:85:b5:32:c4:32:d2:d5:32:94:e8:95:fa:ff:6b: f7:59:d0:f5:ad:31:e4:92:53:f8:fd:76:ec:35:88: 45:28:2b:ec:d6:6e:77:12:62:4a:71:e8:3d:c9:9b: 40:cc:0a:53:aa:c3:5a:de:0d:84:ed:08:2a:72:25: 75:91:ef:42:70:1c:8a:1a:1c:f4:26:a1:bf:ba:65: 58:cb:20:66:69:3f:87:32:a8:f3:2c:82:2a:f5:35: 0d:88:03:18:13:f4:0e:a2:94:c1:ff:38:bc:4a:bf: 85:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CF:F8:6C:85:C5:7A:7F:05:31:72:40:95:91:40:FE:83:23:31:ED X509v3 Authority Key Identifier: keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:60:30:25:03:48:23:a4:8b:03:9a:3e:9c:b3:83:31:8d:72: 5f:ee:b5:70:10:91:50:7c:24:c1:14:06:29:7a:04:52:e6:6c: bb:35:4e:92:2b:e4:23:4c:69:65:2d:03:d2:02:e0:db:b1:64: 80:ad:4b:a7:07:a4:49:97:01:c3:1d:a8:b5:9e:11:f4:20:8d: cf:dd:af:6f:ba:40:ed:0a:9f:0c:75:47:e4:c4:20:20:0c:bb: 43:15:a6:b1:2a:02:12:3a:cc:64:bb:05:b6:c4:2d:da:38:c3: 63:9f:7d:2f:15:0c:c5:2c:b2:f5:92:4d:ff:ff:8e:fd:cd:22: 8c:22:43:a3:bf:e9:f9:3c:ca:46:0d:a7:ac:ae:34:03:e3:49: 2d:c3:54:09:a9:fd:c3:cf:14:0f:d3:cf:7c:62:4b:e1:48:7a: a6:a2:a9:29:24:4c:6c:b1:9b:81:69:d1:09:94:77:70:99:36: ed:b3:a4:53:77:a4:f8:0b:32:76:8b:78:91:a5:94:a2:91:36: 82:22:5b:a8:e0:ed:29:83:32:6f:d3:7f:1d:cf:95:3e:b0:0f: b1:f2:19:de:c2:a8:93:ca:b0:40:6b:99:c2:3d:1f:4c:8b:44: 3d:d2:5c:f8:a4:a3:8c:96:ce:18:3f:62:77:2c:1e:4a:d1:81: 06:b3:e1:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tGQVsy2NWQRz0LGlXt5eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZDAzMjUyOGJiMWQxNTk3NjZjZDc5ZGU0Nzg2ZGNkOTYy YTFmYmIwHhcNMjUxMjE5MTMwMjMwWhcNMjUxMjIwMTMwMjMwWjAzMTEwLwYDVQQD EygxN2NmZjg2Yzg1YzU3YTdmMDUzMTcyNDA5NTkxNDBmZTgzMjMzMWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIAqfdntNSauusOiFYMO9NzYKs9q QXCSfhYvCIxCTP43zmWfbeFn3mVV9/v2Y4LNt7Aa4tavCA4/8mxMmlJwbSPqWiwZ T5r6XcDWNMvry8eYuJFh0BwJerzF9+RSCIflysHB15REZEsIEW9EC1NQ060A7fSd aA5/sbi8TbQhEZ9bnmmLS2QSGkg/5Fwf/v5lZrqWQcsQhbUyxDLS1TKU6JX6/2v3 WdD1rTHkklP4/XbsNYhFKCvs1m53EmJKceg9yZtAzApTqsNa3g2E7QgqciV1ke9C cByKGhz0JqG/umVYyyBmaT+HMqjzLIIq9TUNiAMYE/QOopTB/zi8Sr+FIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfP+GyFxXp/BTFyQJWRQP6DIzHtMB8GA1UdIwQY MBaAFHTQMlKLsdFZdmzXneR4bc2WKh+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWE0MjItYTc5MS00ZGNmLTkwZmIt MmM5MTI3YWI0OGMzLzEvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWE0MjItYTc5MS00ZGNmLTkwZmItMmM5MTI3YWI0OGMz LzEvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAumAwJQNI I6SLA5o+nLODMY1yX+61cBCRUHwkwRQGKXoEUuZsuzVOkivkI0xpZS0D0gLg27Fk gK1LpwekSZcBwx2otZ4R9CCNz92vb7pA7QqfDHVH5MQgIAy7QxWmsSoCEjrMZLsF tsQt2jjDY599LxUMxSyy9ZJN//+O/c0ijCJDo7/p+TzKRg2nrK40A+NJLcNUCan9 w88UD9PPfGJL4Uh6pqKpKSRMbLGbgWnRCZR3cJk27bOkU3ek+Asydot4kaWUopE2 giJbqODtKYMyb9N/Hc+VPrAPsfIZ3sKok8qwQGuZwj0fTItEPdJc+KSjjJbOGD9i dyweStGBBrPhog== -----END CERTIFICATE-----Generated at Fri Dec 19 21:49:44 2025 by rpki-client