This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft File: dPgamLSHAgyYEF1jE7zWneUKwXs.mft (raw, json) Hash identifier: crlaHwmJo1DcwrDwPPGevuvlbvo0P4vVvVtAX7ncZrs= Subject key identifier: 68:F5:44:C4:23:4F:D8:1B:30:53:84:F4:F5:16:B1:80:B6:39:65:43 Authority key identifier: 74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B Certificate issuer: /CN=74f81a98b487020c98105d6313bcd69de50ac17b Certificate serial: 019B54BD9E654D61CA02D83BDC3B61A9A68C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft Manifest number: 03DD Signing time: Thu 25 Dec 2025 09:01:11 +0000 Manifest this update: Thu 25 Dec 2025 09:01:11 +0000 Manifest next update: Fri 26 Dec 2025 09:01:11 +0000 Files and hashes: 1: 7-iGt4e7trCrvhjbqw5ailuotG8.roa (hash: cy0FH1gqtKBfDPhq2ot6+GUFGCM2/G1KgLpKIId8UGA=) 2: dPgamLSHAgyYEF1jE7zWneUKwXs.crl (hash: VBhnNwPyvAC7omm7KIHJkuu7l5P1uFTisFVYsco+QAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:bd:9e:65:4d:61:ca:02:d8:3b:dc:3b:61:a9:a6:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74f81a98b487020c98105d6313bcd69de50ac17b Validity Not Before: Dec 25 09:01:11 2025 GMT Not After : Dec 26 09:01:11 2025 GMT Subject: CN=68f544c4234fd81b305384f4f516b180b6396543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0d:90:0d:5c:f8:bf:19:3a:7d:cb:77:a3:c8: a6:a9:11:ed:b2:bb:26:ae:19:a3:c7:8d:48:60:5f: 10:41:c1:fe:3d:9e:2e:d3:60:9c:f5:b3:e7:05:5f: 4e:01:e6:58:c6:ec:70:25:eb:6e:4e:c8:fa:65:76: 68:8b:ff:3b:10:98:9d:15:cd:43:4a:b6:a4:23:7f: 3e:68:85:37:4e:45:c5:69:67:67:f4:ac:ba:a5:b5: bf:be:3c:98:65:08:dd:f1:ab:d4:67:cb:e0:16:79: 40:b7:f9:c0:69:5c:7c:e7:ed:bd:79:9c:a3:6a:1c: 67:5a:b5:dd:a3:8e:19:60:74:fa:55:00:1c:d7:8e: 58:fd:0f:dc:db:d8:bd:1f:d1:f3:49:c5:dd:fe:b2: ca:42:47:a9:f2:d1:5b:d1:7c:cc:10:2e:81:05:7b: 99:a5:14:d5:98:20:bc:60:99:4c:77:4d:c7:e4:7a: 84:b2:d1:29:b4:42:17:b9:9c:36:4a:60:c5:a4:4e: 25:b2:0a:01:b8:5d:06:96:b9:98:93:db:b6:72:b8: bb:60:00:5b:2d:18:01:f0:51:f4:4b:b0:91:4f:71: 47:6b:a6:00:dd:c3:3b:05:bf:4d:97:15:e4:99:6e: ad:e1:62:89:b4:55:39:d9:fa:8b:37:88:98:da:c3: 78:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F5:44:C4:23:4F:D8:1B:30:53:84:F4:F5:16:B1:80:B6:39:65:43 X509v3 Authority Key Identifier: keyid:74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:3d:c1:e2:05:cf:c6:25:53:d7:0a:99:6a:c2:c5:95:66:3f: 98:83:d7:a8:0f:ab:de:c9:09:0b:5a:3f:23:fa:7e:3f:12:31: cb:07:2d:0a:00:17:f5:37:f9:e9:e6:21:b4:70:db:37:75:57: 2c:02:9f:fd:ac:94:d7:d9:25:71:0c:fc:55:08:19:38:ca:26: 4b:05:be:95:51:54:03:ce:34:64:e5:60:66:bb:12:a5:7d:e9: 4d:54:08:bb:07:e7:ef:f6:f6:17:7f:1f:a0:f4:2d:e4:01:37: c1:e4:45:2b:5b:2a:18:1a:5f:87:81:19:08:62:4d:c3:79:65: cb:89:31:99:11:ba:68:b2:aa:e8:04:53:21:49:9d:b0:12:db: a2:65:37:db:60:99:a6:d1:fd:8c:41:d8:39:31:ff:c6:dd:85: 09:e9:00:62:b8:30:cc:bd:bc:58:b6:56:80:11:56:c2:f3:19: b6:44:51:0e:21:f8:7b:12:4e:12:33:11:e8:db:b6:1f:99:43: 18:0b:5e:80:31:ab:c6:3b:91:b4:23:1f:b4:5b:77:1c:e8:ed: 36:41:02:71:17:17:73:6b:7a:95:4a:04:6d:dc:9a:d5:7a:d6: eb:ab:b2:2b:20:af:b1:53:3c:9e:45:ea:38:92:3a:20:7c:03: 54:e9:60:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUvZ5lTWHKAtg73DthqaaMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZjgxYTk4YjQ4NzAyMGM5ODEwNWQ2MzEzYmNkNjlkZTUw YWMxN2IwHhcNMjUxMjI1MDkwMTExWhcNMjUxMjI2MDkwMTExWjAzMTEwLwYDVQQD Eyg2OGY1NDRjNDIzNGZkODFiMzA1Mzg0ZjRmNTE2YjE4MGI2Mzk2NTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ2QDVz4vxk6fct3o8imqRHtsrsm rhmjx41IYF8QQcH+PZ4u02Cc9bPnBV9OAeZYxuxwJetuTsj6ZXZoi/87EJidFc1D SrakI38+aIU3TkXFaWdn9Ky6pbW/vjyYZQjd8avUZ8vgFnlAt/nAaVx85+29eZyj ahxnWrXdo44ZYHT6VQAc145Y/Q/c29i9H9HzScXd/rLKQkep8tFb0XzMEC6BBXuZ pRTVmCC8YJlMd03H5HqEstEptEIXuZw2SmDFpE4lsgoBuF0GlrmYk9u2cri7YABb LRgB8FH0S7CRT3FHa6YA3cM7Bb9NlxXkmW6t4WKJtFU52fqLN4iY2sN4SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGj1RMQjT9gbMFOE9PUWsYC2OWVDMB8GA1UdIwQY MBaAFHT4Gpi0hwIMmBBdYxO81p3lCsF7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFBnYW1MU0hBZ3lZRUYxakU3elduZVVLd1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODI5ODMtMjRiYy00ZWUxLWFkMzYt MDFlNzEzMWFlMWRlLzEvZFBnYW1MU0hBZ3lZRUYxakU3elduZVVLd1hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODI5ODMtMjRiYy00ZWUxLWFkMzYtMDFlNzEzMWFlMWRl LzEvZFBnYW1MU0hBZ3lZRUYxakU3elduZVVLd1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwj3B4gXP xiVT1wqZasLFlWY/mIPXqA+r3skJC1o/I/p+PxIxywctCgAX9Tf56eYhtHDbN3VX LAKf/ayU19klcQz8VQgZOMomSwW+lVFUA840ZOVgZrsSpX3pTVQIuwfn7/b2F38f oPQt5AE3weRFK1sqGBpfh4EZCGJNw3lly4kxmRG6aLKq6ARTIUmdsBLbomU322CZ ptH9jEHYOTH/xt2FCekAYrgwzL28WLZWgBFWwvMZtkRRDiH4exJOEjMR6Nu2H5lD GAtegDGrxjuRtCMftFt3HOjtNkECcRcXc2t6lUoEbdya1XrW66uyKyCvsVM8nkXq OJI6IHwDVOlgTw== -----END CERTIFICATE-----Generated at Thu Dec 25 13:10:58 2025 by rpki-client