This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft File: dPs6a3_CjoZ05hHLCYB28OTFV8I.mft (raw, json) Hash identifier: Z0Z/tEja9AE9elnOY4aGrdPBH7nrVfQ3OlGRs7xNNnA= Subject key identifier: 93:4C:70:8A:E1:9D:55:02:3A:73:B4:B0:AC:DB:97:8E:D6:3A:7A:D4 Authority key identifier: 74:FB:3A:6B:7F:C2:8E:86:74:E6:11:CB:09:80:76:F0:E4:C5:57:C2 Certificate issuer: /CN=74fb3a6b7fc28e8674e611cb098076f0e4c557c2 Certificate serial: 019B533D197070EE6D59C073342C56E6A5ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft Manifest number: 1799 Signing time: Thu 25 Dec 2025 02:01:11 +0000 Manifest this update: Thu 25 Dec 2025 02:01:11 +0000 Manifest next update: Fri 26 Dec 2025 02:01:11 +0000 Files and hashes: 1: EbZ-PzExvsrKZ1aOLdbMth19YQY.roa (hash: Y23B6h9Jehv4hPRBbE1Q/MgzAwC8F0dy1/k/s/bejkY=) 2: dPs6a3_CjoZ05hHLCYB28OTFV8I.crl (hash: JiNY5pNOC+muZODPg3+eGTk7FxsQ/8lZ1osh4ctDjsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3d:19:70:70:ee:6d:59:c0:73:34:2c:56:e6:a5:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74fb3a6b7fc28e8674e611cb098076f0e4c557c2 Validity Not Before: Dec 25 02:01:11 2025 GMT Not After : Dec 26 02:01:11 2025 GMT Subject: CN=934c708ae19d55023a73b4b0acdb978ed63a7ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:34:f4:8f:33:4a:2f:29:92:99:22:09:8e:7e: 96:16:47:e0:a2:0b:a8:e8:cc:16:9b:f7:c8:2e:32: d7:58:9a:06:0d:c7:a9:d9:19:43:20:04:5e:a1:14: 65:3a:bd:3e:1f:c9:30:de:9d:69:f5:a1:d2:40:3d: e1:76:6b:e9:a6:e4:02:9c:b3:d7:8d:a8:8d:08:96: f8:2d:b6:47:80:80:d1:89:b4:64:b0:b4:2f:7e:35: 35:c1:70:c3:18:25:fc:37:5a:ff:8a:b9:e6:2a:3f: c8:8d:63:2a:ac:b0:17:75:1e:ce:db:d9:c3:2e:d1: 6e:bd:38:f6:2a:ff:bb:32:a9:3c:6f:e8:55:51:39: b8:a1:a5:75:c8:80:70:18:c8:42:c5:7e:b0:92:80: c8:a7:a5:23:04:f8:fb:5b:07:95:78:e0:86:c9:17: 31:91:30:70:0b:44:77:a2:20:f2:f5:f7:86:29:7e: 5c:a5:7f:e9:88:2f:e1:ff:f6:07:ac:87:14:0a:66: d5:0a:44:e0:e6:5d:ba:87:c1:9d:7d:8f:a6:f5:22: b5:54:3a:38:4b:06:f8:73:0e:9b:72:f5:d6:c7:26: 72:7d:25:7c:1e:25:0f:26:9d:a1:23:d7:19:01:81: 37:60:76:20:e7:e2:72:13:05:35:ce:2d:f5:96:5f: 22:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4C:70:8A:E1:9D:55:02:3A:73:B4:B0:AC:DB:97:8E:D6:3A:7A:D4 X509v3 Authority Key Identifier: keyid:74:FB:3A:6B:7F:C2:8E:86:74:E6:11:CB:09:80:76:F0:E4:C5:57:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:9f:85:14:ad:92:f0:9f:d5:cd:e0:93:b8:04:21:a4:a9:d0: 9f:ae:20:7f:7a:f2:47:07:b9:0b:f9:de:a9:e8:07:16:ac:b3: d6:ce:51:e9:82:74:3b:ae:21:ac:4c:17:02:a2:9e:25:e6:04: 77:9d:05:dd:e2:5d:58:23:63:fc:15:2f:e0:56:0f:42:a2:18: 35:a6:b5:6b:4d:9f:d6:a7:46:80:13:32:bf:ac:97:52:ee:8b: fe:ae:ca:16:4e:ae:4e:82:cb:d3:c3:df:0f:a6:0f:eb:8a:72: fc:6c:50:71:10:ba:48:8c:5c:96:fc:f0:24:39:16:e0:fd:08: 08:88:50:05:06:38:b3:c1:a9:d7:ac:cc:4f:1b:98:10:cc:d1: e9:4d:64:6b:39:2c:3e:6a:10:36:3f:b5:dc:19:19:a1:83:bc: 1f:ab:ed:f6:77:0d:67:8d:17:28:9b:e6:a1:b5:3a:f3:78:3f: 3a:3a:7c:2c:bc:1c:38:c6:2f:ec:63:93:73:00:64:b1:92:e1: cf:73:e1:50:4d:6a:8a:67:e5:bb:ef:05:4b:dd:58:95:97:2f: 67:2b:53:94:35:61:3a:00:db:cd:18:24:1a:50:33:8f:a8:52: 87:9f:d4:64:0e:41:a1:33:80:db:1c:0d:1b:43:3b:65:a5:cf: 18:3d:45:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPRlwcO5tWcBzNCxW5qXtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZmIzYTZiN2ZjMjhlODY3NGU2MTFjYjA5ODA3NmYwZTRj NTU3YzIwHhcNMjUxMjI1MDIwMTExWhcNMjUxMjI2MDIwMTExWjAzMTEwLwYDVQQD Eyg5MzRjNzA4YWUxOWQ1NTAyM2E3M2I0YjBhY2RiOTc4ZWQ2M2E3YWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzT0jzNKLymSmSIJjn6WFkfgoguo 6MwWm/fILjLXWJoGDcep2RlDIAReoRRlOr0+H8kw3p1p9aHSQD3hdmvppuQCnLPX jaiNCJb4LbZHgIDRibRksLQvfjU1wXDDGCX8N1r/irnmKj/IjWMqrLAXdR7O29nD LtFuvTj2Kv+7Mqk8b+hVUTm4oaV1yIBwGMhCxX6wkoDIp6UjBPj7WweVeOCGyRcx kTBwC0R3oiDy9feGKX5cpX/piC/h//YHrIcUCmbVCkTg5l26h8GdfY+m9SK1VDo4 Swb4cw6bcvXWxyZyfSV8HiUPJp2hI9cZAYE3YHYg5+JyEwU1zi31ll8i3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNMcIrhnVUCOnO0sKzbl47WOnrUMB8GA1UdIwQY MBaAFHT7Omt/wo6GdOYRywmAdvDkxVfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFBzNmEzX0Nqb1owNWhITENZQjI4T1RGVjhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jYTBmNTUtNTc3NC00NWRlLWE2YzAt NzgyYzc4MGU3YzFjLzEvZFBzNmEzX0Nqb1owNWhITENZQjI4T1RGVjhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jYTBmNTUtNTc3NC00NWRlLWE2YzAtNzgyYzc4MGU3YzFj LzEvZFBzNmEzX0Nqb1owNWhITENZQjI4T1RGVjhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJ+FFK2S 8J/VzeCTuAQhpKnQn64gf3ryRwe5C/neqegHFqyz1s5R6YJ0O64hrEwXAqKeJeYE d50F3eJdWCNj/BUv4FYPQqIYNaa1a02f1qdGgBMyv6yXUu6L/q7KFk6uToLL08Pf D6YP64py/GxQcRC6SIxclvzwJDkW4P0ICIhQBQY4s8Gp16zMTxuYEMzR6U1kazks PmoQNj+13BkZoYO8H6vt9ncNZ40XKJvmobU683g/Ojp8LLwcOMYv7GOTcwBksZLh z3PhUE1qimflu+8FS91YlZcvZytTlDVhOgDbzRgkGlAzj6hSh5/UZA5BoTOA2xwN G0M7ZaXPGD1FUg== -----END CERTIFICATE-----Generated at Thu Dec 25 07:23:10 2025 by rpki-client