This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft File: dB4rNVUHc-BTeX92TS4h1l5kKMc.mft (raw, json) Hash identifier: fn2TqF5jd/9Gc6YgxYNAZOdgxks9tszkbkU+f0gOAQ8= Subject key identifier: 3E:8F:A7:2B:FE:16:FE:35:92:A9:21:82:86:4B:77:54:25:4F:07:9B Authority key identifier: 74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7 Certificate issuer: /CN=741e2b35550773e053797f764d2e21d65e6428c7 Certificate serial: 019B446E8B6855201C8732F172D1877B278F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft Manifest number: 02EC Signing time: Mon 22 Dec 2025 05:00:53 +0000 Manifest this update: Mon 22 Dec 2025 05:00:53 +0000 Manifest next update: Tue 23 Dec 2025 05:00:53 +0000 Files and hashes: 1: F9mCTEFo2VHLyLNCvGdkZm7NM54.roa (hash: 0GDWpQx7XDKg8YLSvTng54oqtSqIqPi0Fb+po6xzWT8=) 2: dB4rNVUHc-BTeX92TS4h1l5kKMc.crl (hash: sMdQwSGiQ9Ix7A14MRPUkN6SQ6zuuAC3H9+SxRwkcGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:8b:68:55:20:1c:87:32:f1:72:d1:87:7b:27:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=741e2b35550773e053797f764d2e21d65e6428c7 Validity Not Before: Dec 22 05:00:53 2025 GMT Not After : Dec 23 05:00:53 2025 GMT Subject: CN=3e8fa72bfe16fe3592a92182864b7754254f079b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5c:81:52:0e:a2:b6:17:af:c6:4a:a9:29:c4: c2:c2:3e:e4:ba:85:9d:39:fb:96:4c:c9:7a:76:68: 11:e0:76:a0:78:b6:dc:ca:1e:d7:d7:19:6c:fc:e8: 4e:a0:74:78:2d:9a:d0:d4:5a:18:c8:8e:cf:17:98: c8:a4:55:b7:d1:c0:fa:c8:a8:ef:ce:71:98:3c:66: c2:a0:ed:2f:80:6d:5e:91:45:00:94:c1:a2:42:76: 09:d8:e7:60:7e:54:85:ea:a7:e2:b9:8b:e3:ab:d6: 33:6f:63:32:3d:f9:d9:0e:c2:cc:39:c9:63:da:09: 35:4a:b9:4d:e6:bb:51:f7:ca:7e:4b:52:41:a2:35: e8:e2:15:cc:60:a6:f4:1e:93:a6:0d:f0:d7:14:0c: 16:77:8e:c1:79:22:2e:f6:57:90:30:95:6d:1c:92: f5:cd:02:c0:03:0b:fe:1e:cc:97:42:b6:14:e6:cb: 92:c3:83:49:fd:b7:5a:e1:75:2f:a4:97:77:0e:6f: d9:ea:ba:f8:c4:ab:ae:e5:93:0f:9e:b9:91:14:e1: a8:c9:90:c0:6b:ed:7f:30:c9:18:e3:49:7d:6b:80: 86:a5:29:77:60:1b:81:68:dd:c3:d2:c5:f4:f5:04: 2d:a4:2e:b4:1e:d0:f6:b6:69:4c:74:e8:50:ad:47: aa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:8F:A7:2B:FE:16:FE:35:92:A9:21:82:86:4B:77:54:25:4F:07:9B X509v3 Authority Key Identifier: keyid:74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7a:7a:9a:d3:77:da:a8:5d:2b:0a:05:90:68:00:30:95:e1: da:c0:49:2f:7d:3b:47:5e:1c:48:90:2f:22:9a:5f:c6:39:56: af:1c:29:11:44:ff:b9:0d:d3:01:e3:fb:c3:bf:15:38:a6:13: 3e:cb:30:0b:54:ed:30:37:29:84:81:0e:ff:3e:93:9d:26:ee: 63:14:2c:2d:18:16:f8:5e:13:02:d5:56:24:61:dd:10:ab:f2: 1c:4b:aa:3f:50:7e:94:81:ed:a4:a5:b7:40:54:d6:9f:c8:2c: a3:65:80:7d:17:2d:a2:9f:c6:fe:2f:a7:0f:cc:7e:e3:d9:89: 3f:a8:10:6c:8e:ba:a0:78:0e:71:ca:d6:d7:65:98:34:ad:cb: 71:47:e3:9f:c6:9f:e2:e1:80:35:8f:ce:cb:93:4a:97:58:e7: 35:0b:25:b5:3e:52:fb:52:0d:53:a9:b4:3c:74:0e:d3:25:90: c7:b9:6c:3f:3f:d6:90:2b:65:be:19:55:67:27:1d:37:06:05: b0:91:f9:b6:cf:51:32:0d:3f:59:1a:bf:de:d9:1c:49:78:65: 24:37:23:80:90:93:5e:14:fd:55:2e:d5:aa:5b:fb:54:be:ec: ee:05:58:75:6c:ed:90:86:c4:b4:00:9f:6d:79:66:d0:82:5b: ee:04:ff:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbotoVSAchzLxctGHeyePMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MWUyYjM1NTUwNzczZTA1Mzc5N2Y3NjRkMmUyMWQ2NWU2 NDI4YzcwHhcNMjUxMjIyMDUwMDUzWhcNMjUxMjIzMDUwMDUzWjAzMTEwLwYDVQQD EygzZThmYTcyYmZlMTZmZTM1OTJhOTIxODI4NjRiNzc1NDI1NGYwNzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVyBUg6ithevxkqpKcTCwj7kuoWd OfuWTMl6dmgR4HageLbcyh7X1xls/OhOoHR4LZrQ1FoYyI7PF5jIpFW30cD6yKjv znGYPGbCoO0vgG1ekUUAlMGiQnYJ2OdgflSF6qfiuYvjq9Yzb2MyPfnZDsLMOclj 2gk1SrlN5rtR98p+S1JBojXo4hXMYKb0HpOmDfDXFAwWd47BeSIu9leQMJVtHJL1 zQLAAwv+HsyXQrYU5suSw4NJ/bda4XUvpJd3Dm/Z6rr4xKuu5ZMPnrmRFOGoyZDA a+1/MMkY40l9a4CGpSl3YBuBaN3D0sX09QQtpC60HtD2tmlMdOhQrUeqSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6Ppyv+Fv41kqkhgoZLd1QlTwebMB8GA1UdIwQY MBaAFHQeKzVVB3PgU3l/dk0uIdZeZCjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEI0ck5WVUhjLUJUZVg5MlRTNGgxbDVrS01jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82YjQxZjUtYjdjNS00MzM0LTlmYmYt YjM4YTZmMjIwZTYzLzEvZEI0ck5WVUhjLUJUZVg5MlRTNGgxbDVrS01jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82YjQxZjUtYjdjNS00MzM0LTlmYmYtYjM4YTZmMjIwZTYz LzEvZEI0ck5WVUhjLUJUZVg5MlRTNGgxbDVrS01jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXp6mtN3 2qhdKwoFkGgAMJXh2sBJL307R14cSJAvIppfxjlWrxwpEUT/uQ3TAeP7w78VOKYT PsswC1TtMDcphIEO/z6TnSbuYxQsLRgW+F4TAtVWJGHdEKvyHEuqP1B+lIHtpKW3 QFTWn8gso2WAfRctop/G/i+nD8x+49mJP6gQbI66oHgOccrW12WYNK3LcUfjn8af 4uGANY/Oy5NKl1jnNQsltT5S+1INU6m0PHQO0yWQx7lsPz/WkCtlvhlVZycdNwYF sJH5ts9RMg0/WRq/3tkcSXhlJDcjgJCTXhT9VS7Vqlv7VL7s7gVYdWztkIbEtACf bXlm0IJb7gT/dA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:29:51 2025 by rpki-client