This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft File: 29B3gCIiIDwWzo6v1Z8LCsHb58M.mft (raw, json) Hash identifier: NsWwkJ2aXMWqLhCJa6+uqFpBylpQROrEcM5T0Q7rnw8= Subject key identifier: A2:FB:BD:31:A0:FA:13:1E:7F:63:FF:34:D6:44:1E:02:50:FB:00:E6 Authority key identifier: DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3 Certificate issuer: /CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3 Certificate serial: 019B4DE0FE6EC9729A0246D2B5EE88A861BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft Manifest number: 1046 Signing time: Wed 24 Dec 2025 01:02:29 +0000 Manifest this update: Wed 24 Dec 2025 01:02:29 +0000 Manifest next update: Thu 25 Dec 2025 01:02:29 +0000 Files and hashes: 1: 29B3gCIiIDwWzo6v1Z8LCsHb58M.crl (hash: OvMszqRin/x68/9fnWI7TpCd8NSNrbEixoEoGq3BLcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.crl rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:fe:6e:c9:72:9a:02:46:d2:b5:ee:88:a8:61:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3 Validity Not Before: Dec 24 01:02:29 2025 GMT Not After : Dec 25 01:02:29 2025 GMT Subject: CN=a2fbbd31a0fa131e7f63ff34d6441e0250fb00e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e5:f1:94:5a:4c:de:68:c7:b5:b2:ac:12:db: 35:3c:85:94:6d:90:00:ae:4a:64:c3:ef:a4:17:a7: b9:4d:d7:d2:97:98:9d:3a:a1:1a:d2:5e:2e:72:b4: b2:3c:af:d3:da:a7:94:64:90:81:e9:35:ee:2c:14: 61:dd:18:94:39:51:ee:31:80:98:b7:ae:82:a0:45: 09:f4:05:60:9f:42:86:01:8e:de:ad:23:01:09:9f: 0e:57:62:ca:57:df:02:40:2f:99:7c:40:76:ad:ef: 4f:81:8c:4a:4e:23:7b:af:a7:70:3b:51:d1:c7:83: eb:61:27:0d:52:32:f3:ec:ed:4d:8b:cb:b1:83:32: 80:3c:e8:2e:31:4a:98:9b:eb:81:5e:55:57:38:9f: 60:d2:61:98:37:bb:7a:dc:6c:93:ac:76:83:f6:9b: 62:e6:b6:ea:c7:df:f6:76:bd:30:c5:ef:a2:c6:ac: 8b:4d:7a:83:82:d5:49:27:f4:21:1f:11:60:65:c9: d1:1a:bb:d4:30:8f:32:2b:6b:a1:64:37:67:94:8c: c5:ea:ed:ea:a5:ce:e2:52:b4:b5:0b:d4:14:3d:28: ad:e6:bc:8b:af:e1:19:42:6a:33:b1:08:18:3f:c3: 69:37:3e:52:9c:f5:de:0f:19:97:a2:be:55:7e:cc: 47:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FB:BD:31:A0:FA:13:1E:7F:63:FF:34:D6:44:1E:02:50:FB:00:E6 X509v3 Authority Key Identifier: keyid:DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:89:3f:ef:3d:6a:95:60:d7:51:83:30:22:e0:83:77:73:22: 3e:5d:87:91:49:ee:40:8d:09:82:3c:83:bc:bc:6f:24:f0:35: af:f8:9e:f3:eb:06:42:0f:b6:8f:52:58:c9:fc:a7:fc:15:55: 4a:78:33:cb:aa:dc:05:6c:05:f3:92:68:b8:67:f4:bd:9f:73: 57:ca:58:20:10:44:81:75:e0:0b:b9:ff:3a:ce:70:84:b7:0d: f9:3a:59:08:81:47:02:95:a1:19:ae:ed:33:a7:da:61:7e:0a: 32:e1:5e:25:20:a2:b6:73:03:30:25:ef:2f:50:3e:33:0c:d8: 34:e9:54:52:b4:09:55:4a:6f:b1:e9:13:1a:ce:7c:2c:56:17: 07:f7:27:d5:63:b1:0c:0e:e0:4e:2c:14:1c:0c:30:b6:cb:11: 28:41:f5:09:bf:96:a3:66:da:24:3f:45:d1:22:91:f1:7a:51: 19:fa:2b:02:a6:8a:cc:78:a7:d2:15:13:0b:38:b1:f3:f7:f3: 08:87:01:44:1f:90:2f:b7:4e:8d:34:58:ef:87:15:0f:83:eb: 96:0d:17:c2:21:b4:cc:18:1d:6d:11:bb:41:60:87:02:26:32: 18:98:2f:4a:89:47:76:17:41:70:ec:96:1d:36:6d:dc:bb:6f: 86:9e:b3:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4P5uyXKaAkbSte6IqGG+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZDA3NzgwMjIyMjIwM2MxNmNlOGVhZmQ1OWYwYjBhYzFk YmU3YzMwHhcNMjUxMjI0MDEwMjI5WhcNMjUxMjI1MDEwMjI5WjAzMTEwLwYDVQQD EyhhMmZiYmQzMWEwZmExMzFlN2Y2M2ZmMzRkNjQ0MWUwMjUwZmIwMGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuXxlFpM3mjHtbKsEts1PIWUbZAA rkpkw++kF6e5TdfSl5idOqEa0l4ucrSyPK/T2qeUZJCB6TXuLBRh3RiUOVHuMYCY t66CoEUJ9AVgn0KGAY7erSMBCZ8OV2LKV98CQC+ZfEB2re9PgYxKTiN7r6dwO1HR x4PrYScNUjLz7O1Ni8uxgzKAPOguMUqYm+uBXlVXOJ9g0mGYN7t63GyTrHaD9pti 5rbqx9/2dr0wxe+ixqyLTXqDgtVJJ/QhHxFgZcnRGrvUMI8yK2uhZDdnlIzF6u3q pc7iUrS1C9QUPSit5ryLr+EZQmozsQgYP8NpNz5SnPXeDxmXor5VfsxHOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKL7vTGg+hMef2P/NNZEHgJQ+wDmMB8GA1UdIwQY MBaAFNvQd4AiIiA8Fs6Or9WfCwrB2+fDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjlCM2dDSWlJRHdXem82djFaOExDc0hiNThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81ZmEwOTQtZWZhNS00Y2Y3LTg2YjAt NWRkOTQ1MjllZWVhLzEvMjlCM2dDSWlJRHdXem82djFaOExDc0hiNThNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS81ZmEwOTQtZWZhNS00Y2Y3LTg2YjAtNWRkOTQ1MjllZWVh LzEvMjlCM2dDSWlJRHdXem82djFaOExDc0hiNThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYk/7z1q lWDXUYMwIuCDd3MiPl2HkUnuQI0JgjyDvLxvJPA1r/ie8+sGQg+2j1JYyfyn/BVV Sngzy6rcBWwF85JouGf0vZ9zV8pYIBBEgXXgC7n/Os5whLcN+TpZCIFHApWhGa7t M6faYX4KMuFeJSCitnMDMCXvL1A+MwzYNOlUUrQJVUpvsekTGs58LFYXB/cn1WOx DA7gTiwUHAwwtssRKEH1Cb+Wo2baJD9F0SKR8XpRGforAqaKzHin0hUTCzix8/fz CIcBRB+QL7dOjTRY74cVD4Prlg0XwiG0zBgdbRG7QWCHAiYyGJgvSolHdhdBcOyW HTZt3Ltvhp6zEg== -----END CERTIFICATE-----Generated at Wed Dec 24 10:37:00 2025 by rpki-client