This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft File: dAThbzM9iWUMZhOsbJXTSNxLeVA.mft (raw, json) Hash identifier: gXpD2lpStCcpV7O0vfumliujhoEAukJBs9s9F2V/jIk= Subject key identifier: 5C:CB:7F:28:83:86:6E:70:67:7D:C5:F4:2F:82:40:C8:BD:65:8A:69 Authority key identifier: 74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50 Certificate issuer: /CN=7404e16f333d89650c6613ac6c95d348dc4b7950 Certificate serial: 019B3EA396847046F42F540FC6F50D93C214 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft Manifest number: 0313 Signing time: Sun 21 Dec 2025 02:01:06 +0000 Manifest this update: Sun 21 Dec 2025 02:01:06 +0000 Manifest next update: Mon 22 Dec 2025 02:01:06 +0000 Files and hashes: 1: USYf1bw7MHizcISPSt3QDNx57-c.roa (hash: hlppK+U0LprItNasoWls7BUhYE5DrUbPlgUCcoN0Ou8=) 2: dAThbzM9iWUMZhOsbJXTSNxLeVA.crl (hash: J7/Mxrliixao4Fqm79aUIkpVrB5FCCiLrbyCPF09+Us=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:96:84:70:46:f4:2f:54:0f:c6:f5:0d:93:c2:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7404e16f333d89650c6613ac6c95d348dc4b7950 Validity Not Before: Dec 21 02:01:06 2025 GMT Not After : Dec 22 02:01:06 2025 GMT Subject: CN=5ccb7f2883866e70677dc5f42f8240c8bd658a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:41:61:0e:73:94:60:f9:ec:c5:08:fe:fa:fb: 56:92:dd:02:3c:a2:3a:67:08:7e:e0:f6:14:b2:18: 2b:8f:f5:ec:72:6e:5f:c1:14:d5:e2:55:14:b9:8b: da:a6:90:e4:03:24:d3:9f:37:16:eb:e3:d1:3d:06: a8:57:21:ac:65:47:7e:ff:c7:ff:5d:33:93:0d:59: 57:f0:37:a5:6b:96:89:07:88:df:c5:57:31:b4:ea: 4f:26:82:16:35:72:37:af:9b:a8:91:5d:68:17:88: 2c:29:b2:84:bf:bd:8f:a0:d5:67:03:fd:fe:6b:f0: ee:3e:08:7c:32:93:5c:b2:a0:8e:d4:7e:f9:e8:ee: 79:94:b8:38:d6:00:c8:0e:72:be:29:02:f4:72:23: 3b:f5:5d:3e:2a:ed:b4:48:ca:fa:71:6f:60:03:99: 1f:ef:ff:d7:88:fd:70:3e:bf:ee:c8:db:62:e7:d4: 66:97:12:21:98:87:1e:9c:49:0a:34:d1:1e:84:14: 8b:f4:22:1d:9a:51:e4:d5:d7:80:9f:b7:ef:f3:41: f6:1e:e6:08:2a:2e:7a:5c:b0:f5:b1:f3:35:2f:63: 7b:a6:3d:68:35:49:b3:c9:65:f0:1e:a5:cb:f6:e0: 36:b4:76:4a:e5:83:4e:9e:f7:3e:31:58:3e:ba:4e: 60:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CB:7F:28:83:86:6E:70:67:7D:C5:F4:2F:82:40:C8:BD:65:8A:69 X509v3 Authority Key Identifier: keyid:74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:07:38:2e:82:98:3d:a4:59:4a:ac:ae:e3:e3:6d:0c:68:d4: c7:b9:10:76:bb:79:fd:df:75:f0:ef:64:66:cc:99:74:61:db: 78:ea:8f:98:77:6e:a5:4c:b5:06:ef:57:96:e7:8c:42:ac:16: 2f:11:5c:14:27:c8:83:fb:a9:38:3b:4f:42:f3:e4:d1:cb:60: ba:bd:8e:e8:64:3c:46:5d:86:23:bd:0a:df:5e:46:25:00:17: e7:30:2c:97:74:73:dd:c5:6e:dd:9a:5d:3d:40:c2:ed:e4:17: cd:f4:49:c8:2f:2e:cb:8a:f3:2c:95:d7:b3:d3:33:d5:25:91: 9e:08:5e:f5:c4:7b:2f:ff:e6:9e:b3:23:f4:40:e1:58:e6:ac: b2:70:35:56:a6:c3:cf:2c:80:4f:89:b5:0e:49:36:cd:8a:97: 8e:78:63:c1:88:7a:b4:a3:89:6d:b3:e1:06:b8:5a:dd:cb:97: df:56:0c:f3:d1:51:e8:42:8c:2f:90:3c:81:76:90:8e:c5:8b: 56:93:e3:17:c1:6d:4d:94:80:26:88:48:f0:ca:37:ec:d6:9a: 33:02:4f:40:54:da:8a:95:e2:3c:06:ba:8c:1e:bb:c1:b1:ac: 6b:53:8f:31:a0:b4:dc:50:b8:47:7c:a1:91:c4:fe:04:cf:28: bc:51:bc:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o5aEcEb0L1QPxvUNk8IUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MDRlMTZmMzMzZDg5NjUwYzY2MTNhYzZjOTVkMzQ4ZGM0 Yjc5NTAwHhcNMjUxMjIxMDIwMTA2WhcNMjUxMjIyMDIwMTA2WjAzMTEwLwYDVQQD Eyg1Y2NiN2YyODgzODY2ZTcwNjc3ZGM1ZjQyZjgyNDBjOGJkNjU4YTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikFhDnOUYPnsxQj++vtWkt0CPKI6 Zwh+4PYUshgrj/Xscm5fwRTV4lUUuYvappDkAyTTnzcW6+PRPQaoVyGsZUd+/8f/ XTOTDVlX8Dela5aJB4jfxVcxtOpPJoIWNXI3r5uokV1oF4gsKbKEv72PoNVnA/3+ a/DuPgh8MpNcsqCO1H756O55lLg41gDIDnK+KQL0ciM79V0+Ku20SMr6cW9gA5kf 7//XiP1wPr/uyNti59RmlxIhmIcenEkKNNEehBSL9CIdmlHk1deAn7fv80H2HuYI Ki56XLD1sfM1L2N7pj1oNUmzyWXwHqXL9uA2tHZK5YNOnvc+MVg+uk5glwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzLfyiDhm5wZ33F9C+CQMi9ZYppMB8GA1UdIwQY MBaAFHQE4W8zPYllDGYTrGyV00jcS3lQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEFUaGJ6TTlpV1VNWmhPc2JKWFRTTnhMZVZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xNTMyYzYtYTJmNS00OGU2LWIwMzct MThjNWViZWYyN2E4LzEvZEFUaGJ6TTlpV1VNWmhPc2JKWFRTTnhMZVZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xNTMyYzYtYTJmNS00OGU2LWIwMzctMThjNWViZWYyN2E4 LzEvZEFUaGJ6TTlpV1VNWmhPc2JKWFRTTnhMZVZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQc4LoKY PaRZSqyu4+NtDGjUx7kQdrt5/d918O9kZsyZdGHbeOqPmHdupUy1Bu9XlueMQqwW LxFcFCfIg/upODtPQvPk0ctgur2O6GQ8Rl2GI70K315GJQAX5zAsl3Rz3cVu3Zpd PUDC7eQXzfRJyC8uy4rzLJXXs9Mz1SWRnghe9cR7L//mnrMj9EDhWOassnA1VqbD zyyAT4m1Dkk2zYqXjnhjwYh6tKOJbbPhBrha3cuX31YM89FR6EKML5A8gXaQjsWL VpPjF8FtTZSAJohI8Mo37NaaMwJPQFTaipXiPAa6jB67wbGsa1OPMaC03FC4R3yh kcT+BM8ovFG8SA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:09:00 2025 by rpki-client