This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json) Hash identifier: raFUqZPZ10jYNcpp4AIlHzwNeG7D20MbPO104dyl3io= Subject key identifier: 7A:B4:A7:A2:BA:89:5C:73:AB:B7:0B:08:DF:4E:42:0B:48:DF:FC:38 Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7 Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7 Certificate serial: 019B3A21AF03D91F2827D9B1F66E20650467 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft Manifest number: 1250 Signing time: Sat 20 Dec 2025 05:00:44 +0000 Manifest this update: Sat 20 Dec 2025 05:00:44 +0000 Manifest next update: Sun 21 Dec 2025 05:00:44 +0000 Files and hashes: 1: 1-jgtOPobXCJDbrHGNdmL9rzJbgM.roa (hash: uCWGxr32WWfEG1/b7Z2jim0tRFwDuOHUsX5k577/0+I=) 2: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: /rR1xnEBhTfitLobW5/5PEkyXS+skKU2W4v/Oj9ffmk=) 3: x3drftlfvyiEtkh0afmWcroU9Js.roa (hash: NILZn8jb2pSCwJZ594oMmV5sakNi3NDJXkj51QTnCsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:af:03:d9:1f:28:27:d9:b1:f6:6e:20:65:04:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7 Validity Not Before: Dec 20 05:00:44 2025 GMT Not After : Dec 21 05:00:44 2025 GMT Subject: CN=7ab4a7a2ba895c73abb70b08df4e420b48dffc38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:62:70:47:b7:4c:49:2b:04:1b:28:db:53:73: 5b:54:09:b6:44:f9:a1:25:85:39:a6:0f:43:4e:d3: fb:ba:50:d5:ab:6e:a0:59:16:7e:de:fa:96:fd:90: 7a:96:05:6f:06:84:3c:7a:dd:5d:56:30:2f:f0:85: ad:31:10:de:ad:a0:d3:21:d9:f9:cb:88:97:eb:82: 1b:21:ed:67:fe:63:e6:45:f2:09:1e:4b:42:01:3d: 45:77:64:9e:4f:5b:e2:e9:9b:b8:76:ea:7b:97:9a: 5a:f9:1c:e1:c6:fc:76:be:44:ac:53:e2:ff:2c:ed: ec:fc:0f:f7:d2:56:d1:a6:b4:8b:dd:0f:32:c9:3a: ce:3f:52:a6:76:12:79:54:92:75:11:8c:16:22:bd: da:64:c5:b2:f3:44:78:fb:d5:4e:41:79:0e:b1:c8: e8:9f:23:9d:0e:d6:8a:5c:db:bb:bc:b4:9f:b6:c9: 4b:86:22:07:4c:d3:e9:dc:98:3f:53:1d:83:bc:94: fd:69:c9:0a:35:c7:62:4a:d3:6e:80:91:ca:fc:37: fa:1c:43:55:6e:41:05:14:8f:7a:d5:b8:e9:b7:78: 2f:26:75:19:78:51:79:0e:bf:97:f9:af:2b:14:4f: 77:a5:21:59:97:68:ab:a2:4d:f8:7c:f2:e9:05:86: 7d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B4:A7:A2:BA:89:5C:73:AB:B7:0B:08:DF:4E:42:0B:48:DF:FC:38 X509v3 Authority Key Identifier: keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a2:11:4d:0f:6a:28:6a:dc:b5:6e:08:b7:38:2b:e3:5b:7c: e8:0d:39:d9:b4:1f:06:04:0b:23:ec:b6:f0:02:ef:89:fb:43: d2:77:b3:0d:6c:a4:79:24:0c:ad:90:7a:10:e8:d3:e0:14:e0: 8f:45:68:8f:91:7c:4e:0d:17:18:22:ef:e5:56:55:9c:91:ed: 5b:71:34:ab:05:02:a4:26:8c:e0:63:64:62:3b:80:82:30:58: 3b:e6:cc:ed:1f:0b:04:42:15:dc:1c:61:5d:2f:b5:51:27:0e: 12:d5:ad:34:21:84:86:83:96:42:a8:41:29:41:1d:14:d9:f8: 4e:d0:24:eb:e7:91:8d:1b:c8:2d:8e:a2:d4:ef:fe:b1:a9:35: 4c:ad:5d:19:3e:4b:24:f3:ae:85:82:ad:d7:a8:e5:83:c9:57: f7:2e:f0:69:7a:c4:03:4e:5f:49:21:5e:81:d9:31:f0:d6:bd: 94:9d:47:e2:7f:27:8a:57:7c:f6:83:35:93:d7:d1:2b:32:5d: 17:1c:07:14:06:27:fd:30:6b:1e:dd:fd:f8:fd:10:63:09:90: ed:f9:b0:91:00:da:11:29:31:41:78:66:a0:c2:af:42:ae:d9: 72:1d:2e:d4:0f:cb:05:70:34:cf:35:b3:fe:06:a5:26:52:f4: b1:0a:33:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Ia8D2R8oJ9mx9m4gZQRnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2Q4NTBjZDEyYTM2M2RkY2RiMGRjMjczZTFkZmM4NjNi NzA1ZjcwHhcNMjUxMjIwMDUwMDQ0WhcNMjUxMjIxMDUwMDQ0WjAzMTEwLwYDVQQD Eyg3YWI0YTdhMmJhODk1YzczYWJiNzBiMDhkZjRlNDIwYjQ4ZGZmYzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02JwR7dMSSsEGyjbU3NbVAm2RPmh JYU5pg9DTtP7ulDVq26gWRZ+3vqW/ZB6lgVvBoQ8et1dVjAv8IWtMRDeraDTIdn5 y4iX64IbIe1n/mPmRfIJHktCAT1Fd2SeT1vi6Zu4dup7l5pa+Rzhxvx2vkSsU+L/ LO3s/A/30lbRprSL3Q8yyTrOP1KmdhJ5VJJ1EYwWIr3aZMWy80R4+9VOQXkOscjo nyOdDtaKXNu7vLSftslLhiIHTNPp3Jg/Ux2DvJT9ackKNcdiStNugJHK/Df6HENV bkEFFI961bjpt3gvJnUZeFF5Dr+X+a8rFE93pSFZl2irok34fPLpBYZ9bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHq0p6K6iVxzq7cLCN9OQgtI3/w4MB8GA1UdIwQY MBaAFHQ9hQzRKjY93NsNwnPh38hjtwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzIt MWRhZjgwYzUxOWQwLzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzItMWRhZjgwYzUxOWQw LzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6IRTQ9q KGrctW4Itzgr41t86A052bQfBgQLI+y28ALviftD0nezDWykeSQMrZB6EOjT4BTg j0Voj5F8Tg0XGCLv5VZVnJHtW3E0qwUCpCaM4GNkYjuAgjBYO+bM7R8LBEIV3Bxh XS+1UScOEtWtNCGEhoOWQqhBKUEdFNn4TtAk6+eRjRvILY6i1O/+sak1TK1dGT5L JPOuhYKt16jlg8lX9y7waXrEA05fSSFegdkx8Na9lJ1H4n8nild89oM1k9fRKzJd FxwHFAYn/TBrHt39+P0QYwmQ7fmwkQDaESkxQXhmoMKvQq7Zch0u1A/LBXA0zzWz /galJlL0sQozSg== -----END CERTIFICATE-----Generated at Sat Dec 20 08:40:06 2025 by rpki-client