This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft File: dB4rNVUHc-BTeX92TS4h1l5kKMc.mft (raw, json) Hash identifier: 6DQW5vI7kkDhbfmqb5LDAA3mFjmJLD2GMCso8YQdxn8= Subject key identifier: 3C:D9:1C:DE:17:89:A8:15:C0:9F:4F:D7:25:C5:FC:8B:87:B4:B9:C3 Authority key identifier: 74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7 Certificate issuer: /CN=741e2b35550773e053797f764d2e21d65e6428c7 Certificate serial: 019B3CB50AEE571367AB655FEBE7675D3A11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft Manifest number: 02E8 Signing time: Sat 20 Dec 2025 17:00:56 +0000 Manifest this update: Sat 20 Dec 2025 17:00:56 +0000 Manifest next update: Sun 21 Dec 2025 17:00:56 +0000 Files and hashes: 1: F9mCTEFo2VHLyLNCvGdkZm7NM54.roa (hash: 0GDWpQx7XDKg8YLSvTng54oqtSqIqPi0Fb+po6xzWT8=) 2: dB4rNVUHc-BTeX92TS4h1l5kKMc.crl (hash: ooM5GlrfROlVFDRP7o1dTHVRLY9qZqqA/4Das5gvCrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:0a:ee:57:13:67:ab:65:5f:eb:e7:67:5d:3a:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=741e2b35550773e053797f764d2e21d65e6428c7 Validity Not Before: Dec 20 17:00:56 2025 GMT Not After : Dec 21 17:00:56 2025 GMT Subject: CN=3cd91cde1789a815c09f4fd725c5fc8b87b4b9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:28:11:04:f7:64:1b:c9:d4:6f:16:8f:c6:51: d2:58:26:3c:bc:b0:95:7f:05:89:7d:c8:0b:61:d5: 9a:74:ff:c9:17:68:bd:13:73:84:a4:63:70:05:3e: c8:75:8a:9f:47:0f:91:14:1a:fe:12:21:ac:43:52: c4:c6:6f:ac:77:d1:ba:4a:58:3e:b4:ba:96:02:b5: 7a:7e:f4:6e:47:67:86:03:79:a8:ff:9a:b3:d0:1d: bb:de:73:4b:c4:3a:f0:7a:81:09:16:aa:9b:70:de: 70:de:07:1b:64:f8:e6:b5:3b:9b:6b:de:c3:80:a3: a1:ff:43:e2:5b:e7:2f:21:dc:4c:36:ee:4f:ca:c8: a3:62:df:50:e0:b6:16:dc:ad:40:bb:1f:bc:9a:0b: 18:a2:bb:97:b5:46:e6:99:43:7c:e5:c6:26:69:d6: 3d:7e:12:22:06:89:95:be:d1:56:67:b1:85:98:a1: d9:26:3f:94:09:e7:89:81:79:64:fc:95:d7:11:11: 4e:62:5f:46:5e:db:ca:53:47:4c:42:aa:28:1b:68: cf:d3:81:c0:da:d2:0e:a4:68:d6:b4:4b:cc:d7:e0: c2:cc:c3:f5:20:31:e9:d6:8f:55:9b:0d:c1:4f:0d: 82:81:a8:2c:40:bc:88:53:f2:16:20:26:1a:44:d2: 53:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D9:1C:DE:17:89:A8:15:C0:9F:4F:D7:25:C5:FC:8B:87:B4:B9:C3 X509v3 Authority Key Identifier: keyid:74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:cb:29:75:a4:a8:8d:c5:0d:d5:e3:6a:5b:a3:bd:d6:09:62: 53:e5:df:8e:88:da:e8:a0:f8:90:a8:6d:91:6c:ac:37:89:c7: 6a:2e:99:92:4a:8a:98:dc:4e:a8:68:96:5d:59:18:4c:9a:99: d4:a0:3d:02:09:00:6f:3d:d8:06:1e:4c:69:6f:13:82:72:80: 6c:8c:9a:8a:28:65:f2:48:c0:58:67:22:87:e0:7f:e4:78:2a: 23:74:e2:1a:8d:01:a8:35:ee:68:00:bc:af:8e:f8:15:c7:d8: 36:7e:9d:c5:73:68:ec:57:18:da:ba:d0:53:b5:cf:70:a0:7d: b4:1c:53:8e:1f:49:ed:91:4e:22:6d:22:12:74:33:4d:6b:31: e8:d3:28:e0:b1:bd:bc:00:ad:f4:87:f0:92:3c:c2:7f:c8:6c: 3b:c8:b7:69:31:1f:6f:a8:52:5d:ba:d5:f0:b5:9c:13:5e:6f: 7f:1e:e7:f3:24:68:3b:72:db:cb:8f:da:93:96:90:32:71:7f: d0:4f:f6:22:ad:a4:b6:22:9f:46:62:5a:0d:88:e0:89:fc:fa: 7f:8c:00:ee:31:6d:0a:db:95:3b:a3:71:f3:83:95:30:03:d3: 8b:fb:c7:a0:42:26:07:ef:f8:db:35:75:dc:01:9d:df:2f:1d: c2:a8:74:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tQruVxNnq2Vf6+dnXToRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MWUyYjM1NTUwNzczZTA1Mzc5N2Y3NjRkMmUyMWQ2NWU2 NDI4YzcwHhcNMjUxMjIwMTcwMDU2WhcNMjUxMjIxMTcwMDU2WjAzMTEwLwYDVQQD EygzY2Q5MWNkZTE3ODlhODE1YzA5ZjRmZDcyNWM1ZmM4Yjg3YjRiOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqygRBPdkG8nUbxaPxlHSWCY8vLCV fwWJfcgLYdWadP/JF2i9E3OEpGNwBT7IdYqfRw+RFBr+EiGsQ1LExm+sd9G6Slg+ tLqWArV6fvRuR2eGA3mo/5qz0B273nNLxDrweoEJFqqbcN5w3gcbZPjmtTuba97D gKOh/0PiW+cvIdxMNu5PysijYt9Q4LYW3K1Aux+8mgsYoruXtUbmmUN85cYmadY9 fhIiBomVvtFWZ7GFmKHZJj+UCeeJgXlk/JXXERFOYl9GXtvKU0dMQqooG2jP04HA 2tIOpGjWtEvM1+DCzMP1IDHp1o9Vmw3BTw2CgagsQLyIU/IWICYaRNJT8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzZHN4XiagVwJ9P1yXF/IuHtLnDMB8GA1UdIwQY MBaAFHQeKzVVB3PgU3l/dk0uIdZeZCjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEI0ck5WVUhjLUJUZVg5MlRTNGgxbDVrS01jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82YjQxZjUtYjdjNS00MzM0LTlmYmYt YjM4YTZmMjIwZTYzLzEvZEI0ck5WVUhjLUJUZVg5MlRTNGgxbDVrS01jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82YjQxZjUtYjdjNS00MzM0LTlmYmYtYjM4YTZmMjIwZTYz LzEvZEI0ck5WVUhjLUJUZVg5MlRTNGgxbDVrS01jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKMspdaSo jcUN1eNqW6O91gliU+Xfjoja6KD4kKhtkWysN4nHai6ZkkqKmNxOqGiWXVkYTJqZ 1KA9AgkAbz3YBh5MaW8TgnKAbIyaiihl8kjAWGcih+B/5HgqI3TiGo0BqDXuaAC8 r474FcfYNn6dxXNo7FcY2rrQU7XPcKB9tBxTjh9J7ZFOIm0iEnQzTWsx6NMo4LG9 vACt9IfwkjzCf8hsO8i3aTEfb6hSXbrV8LWcE15vfx7n8yRoO3Lby4/ak5aQMnF/ 0E/2Iq2ktiKfRmJaDYjgifz6f4wA7jFtCtuVO6Nx84OVMAPTi/vHoEImB+/42zV1 3AGd3y8dwqh0wA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:41:50 2025 by rpki-client