This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft File: dFYQDLNjsOFKnzhOeowc-aO4W_M.mft (raw, json) Hash identifier: EwVbuMX3E2SJvInQmKDSxqQvJSm7IBwpuw57z9aAKPg= Subject key identifier: C2:2A:CA:11:BA:C5:6E:2E:41:4F:53:E1:79:41:93:03:9C:0F:1E:04 Authority key identifier: 74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3 Certificate issuer: /CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3 Certificate serial: 019B54F43462B9B654C172015CAD7978C5F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft Manifest number: 10B4 Signing time: Thu 25 Dec 2025 10:00:48 +0000 Manifest this update: Thu 25 Dec 2025 10:00:48 +0000 Manifest next update: Fri 26 Dec 2025 10:00:48 +0000 Files and hashes: 1: 6APrd79kmuyNwpex626uNLGMIX0.roa (hash: 7Zm/lOFTt+AfdsIxcjvvrXgteW7mXkxvg9D1ZZh9It8=) 2: dFYQDLNjsOFKnzhOeowc-aO4W_M.crl (hash: zq8Bbe8uW6zNKF9tpjydtekGajfBhRmTQ8vy7M9fgZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:f4:34:62:b9:b6:54:c1:72:01:5c:ad:79:78:c5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3 Validity Not Before: Dec 25 10:00:48 2025 GMT Not After : Dec 26 10:00:48 2025 GMT Subject: CN=c22aca11bac56e2e414f53e1794193039c0f1e04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f3:b9:32:7f:8d:98:5e:65:88:15:ee:66:be: 2b:5f:25:68:ce:36:bc:82:3c:9c:15:20:da:30:cb: 24:86:05:f9:bc:ba:28:23:ff:bc:17:5f:fe:89:09: f7:de:d8:4b:68:ec:3d:9c:77:c1:65:28:c3:02:fb: d1:db:5a:c1:45:f1:fe:52:7d:57:0a:14:8c:89:2d: 0c:30:7e:59:df:56:5e:bf:77:ac:c3:7b:9d:9e:a1: 9f:a2:ed:92:e5:4d:bd:13:82:a4:ea:76:ea:08:6a: 06:5e:37:f3:1d:f3:91:24:ca:16:d2:66:6b:42:d8: 7c:c0:07:54:6c:ed:60:a5:6c:e9:41:ad:61:43:b7: 91:39:66:1a:e1:d8:da:85:43:21:93:3d:e3:96:05: 3b:41:2f:7e:dc:4a:78:4d:30:07:ae:7b:69:cd:b4: 3c:47:fc:e3:5c:82:05:5f:9f:27:45:a6:c5:64:0b: 4f:57:09:ea:9b:1f:81:16:d0:2d:97:f2:bf:82:58: 86:cc:7f:69:04:a5:23:b8:1f:e9:ec:e8:55:8a:1f: fc:e2:6a:4c:3b:a1:93:6d:ed:de:f1:d3:f7:1d:12: 8b:cf:1d:fc:e3:79:5a:e8:17:27:6a:fc:90:43:57: 79:88:58:51:94:7a:ab:a2:76:d7:4f:06:1a:eb:35: 8d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2A:CA:11:BA:C5:6E:2E:41:4F:53:E1:79:41:93:03:9C:0F:1E:04 X509v3 Authority Key Identifier: keyid:74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:e6:ac:23:60:d6:a1:8f:f4:06:0c:c6:df:79:b6:07:07:ea: fc:2b:db:62:8e:2d:9d:8b:13:cd:c5:16:21:d1:17:91:27:0f: 62:89:0e:a1:92:a6:ca:db:0b:a9:7f:69:57:79:e9:c7:86:9f: c2:90:87:e3:c2:d5:2e:b3:76:8b:cd:d1:dc:86:cb:a6:34:e4: 3c:4a:60:fb:9a:11:1e:d7:5b:0c:22:ba:0a:df:3f:d4:c5:3d: bb:a0:19:35:55:40:0a:33:b2:46:dd:c7:90:af:77:0f:50:52: aa:08:0c:a3:99:09:94:d2:e4:f5:84:87:74:fd:2f:72:c0:e0: 75:79:ab:ac:c3:16:c2:33:ac:f5:e4:57:55:2b:c5:84:54:87: 5b:f6:a8:75:f6:4b:b2:fa:46:98:ec:06:7b:c1:72:fb:d5:2e: 07:2e:6a:8e:d9:b9:2e:11:b6:e5:58:e6:45:4d:b6:08:d9:bd: c2:2a:97:4b:0c:51:24:8c:eb:78:e0:01:b0:13:ed:5e:6b:83: b0:d5:a5:87:17:51:dd:5e:52:e2:62:1e:22:2d:76:a7:49:86: eb:9a:65:4f:85:f9:66:44:4a:42:14:90:27:dc:dc:ad:dd:50: f0:59:31:57:bb:34:bf:3c:cc:5e:00:34:59:5f:71:13:d2:fe: b1:52:3c:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtU9DRiubZUwXIBXK15eMXwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NTYxMDBjYjM2M2IwZTE0YTlmMzg0ZTdhOGMxY2Y5YTNi ODViZjMwHhcNMjUxMjI1MTAwMDQ4WhcNMjUxMjI2MTAwMDQ4WjAzMTEwLwYDVQQD EyhjMjJhY2ExMWJhYzU2ZTJlNDE0ZjUzZTE3OTQxOTMwMzljMGYxZTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfO5Mn+NmF5liBXuZr4rXyVozja8 gjycFSDaMMskhgX5vLooI/+8F1/+iQn33thLaOw9nHfBZSjDAvvR21rBRfH+Un1X ChSMiS0MMH5Z31Zev3esw3udnqGfou2S5U29E4Kk6nbqCGoGXjfzHfORJMoW0mZr Qth8wAdUbO1gpWzpQa1hQ7eROWYa4djahUMhkz3jlgU7QS9+3Ep4TTAHrntpzbQ8 R/zjXIIFX58nRabFZAtPVwnqmx+BFtAtl/K/gliGzH9pBKUjuB/p7OhVih/84mpM O6GTbe3e8dP3HRKLzx3843la6BcnavyQQ1d5iFhRlHqronbXTwYa6zWNGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIqyhG6xW4uQU9T4XlBkwOcDx4EMB8GA1UdIwQY MBaAFHRWEAyzY7DhSp84TnqMHPmjuFvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEZZUURMTmpzT0ZLbnpoT2Vvd2MtYU80V19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xMmIzMmMtOTRhNi00OGJiLTg5NTYt ODk4OThiMmVkMTVlLzEvZEZZUURMTmpzT0ZLbnpoT2Vvd2MtYU80V19NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xMmIzMmMtOTRhNi00OGJiLTg5NTYtODk4OThiMmVkMTVl LzEvZEZZUURMTmpzT0ZLbnpoT2Vvd2MtYU80V19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoOasI2DW oY/0BgzG33m2Bwfq/CvbYo4tnYsTzcUWIdEXkScPYokOoZKmytsLqX9pV3npx4af wpCH48LVLrN2i83R3IbLpjTkPEpg+5oRHtdbDCK6Ct8/1MU9u6AZNVVACjOyRt3H kK93D1BSqggMo5kJlNLk9YSHdP0vcsDgdXmrrMMWwjOs9eRXVSvFhFSHW/aodfZL svpGmOwGe8Fy+9UuBy5qjtm5LhG25VjmRU22CNm9wiqXSwxRJIzreOABsBPtXmuD sNWlhxdR3V5S4mIeIi12p0mG65plT4X5ZkRKQhSQJ9zcrd1Q8FkxV7s0vzzMXgA0 WV9xE9L+sVI81A== -----END CERTIFICATE-----Generated at Thu Dec 25 13:59:09 2025 by rpki-client