This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft File: dGMyObqiEDEGpiYN39fni4CUNVw.mft (raw, json) Hash identifier: FhBkM4Q0FV6qUf5GVab98Ex4f5IOjs0cBSRP/HJZuAM= Subject key identifier: 19:39:14:2D:59:A5:7D:6D:70:67:57:9F:45:36:F7:A0:04:71:4B:9B Authority key identifier: 74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C Certificate issuer: /CN=74633239baa2103106a6260ddfd7e78b8094355c Certificate serial: 019B3DC759E93BBFEF737815613C21DD77C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft Manifest number: 0E5D Signing time: Sat 20 Dec 2025 22:00:33 +0000 Manifest this update: Sat 20 Dec 2025 22:00:33 +0000 Manifest next update: Sun 21 Dec 2025 22:00:33 +0000 Files and hashes: 1: GndNIt9G7qZhnR5IIBXP3kbyL_4.roa (hash: SBp7dhTz+pfIJxl9syItY+Kj164I5JLZ7F2dz4iFPso=) 2: dGMyObqiEDEGpiYN39fni4CUNVw.crl (hash: EfRL7cQ0ZjDD8iZEF470ncr53k8R1/TKXrg+cqKnWxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:59:e9:3b:bf:ef:73:78:15:61:3c:21:dd:77:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74633239baa2103106a6260ddfd7e78b8094355c Validity Not Before: Dec 20 22:00:33 2025 GMT Not After : Dec 21 22:00:33 2025 GMT Subject: CN=1939142d59a57d6d7067579f4536f7a004714b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:be:99:15:44:19:8f:65:24:04:ba:3b:be:ae: 40:ba:b5:b1:5f:ef:17:0e:ee:79:e9:91:47:2b:a0: a4:bd:4a:8a:fb:f8:ce:0a:2d:41:7f:30:58:77:09: 20:8a:4f:ab:02:77:aa:1e:89:e4:e1:41:9f:60:72: 98:9e:31:c0:3c:c3:d5:8c:5a:6b:09:1a:5f:00:40: 29:4e:f1:f8:7e:e1:4d:38:3a:f0:2d:de:a7:6f:27: 11:5b:7f:1c:5d:f3:bb:51:ec:29:04:a9:af:31:d7: 82:e2:3e:30:cc:3d:49:95:7c:c5:6c:cf:50:bd:37: 88:9f:1f:92:13:e4:15:cb:f4:10:74:6c:76:60:fd: 03:0a:14:77:b2:11:ed:e5:94:0a:51:5c:ad:e4:18: 27:66:9b:89:1e:63:89:35:57:3e:8e:e0:cc:18:c6: b6:e6:f6:80:f2:4e:db:06:02:3c:1c:53:f2:77:fe: aa:a2:27:e9:80:4a:cf:21:19:56:60:5b:6f:59:e7: 3f:cb:85:d4:02:2c:5f:9a:16:6f:a6:e7:cf:9b:68: 23:37:01:a9:6f:83:69:a5:0a:53:50:5c:6e:a9:4e: c0:18:3a:5a:b7:09:73:a3:1d:42:c2:f6:9b:f3:3f: b2:9e:cf:73:df:da:5e:6a:1b:1d:eb:c6:36:bf:c1: 1f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:39:14:2D:59:A5:7D:6D:70:67:57:9F:45:36:F7:A0:04:71:4B:9B X509v3 Authority Key Identifier: keyid:74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:12:46:51:48:53:41:6d:d0:02:5f:35:ea:af:59:1c:7a:f7: 53:95:28:99:5e:9a:5d:6d:2b:7b:d7:d5:08:f4:bb:0c:1d:71: 5c:d9:6b:34:c1:e9:32:a8:14:4b:c0:7a:5d:01:9a:c1:3e:46: 5b:22:e5:36:85:c9:b9:42:30:4b:7c:e9:7e:79:a9:ce:79:c6: dd:8c:68:39:ac:95:2d:1a:fa:ca:74:6c:89:72:64:ec:cf:7a: 4e:d2:d7:1d:64:d7:85:a5:f4:40:2a:05:bf:d0:0a:a5:ab:59: 3e:0d:d0:f5:0f:73:af:05:ee:41:61:62:80:44:23:f2:5a:af: bf:45:05:d1:71:e7:e1:b1:bd:68:9f:45:dc:fb:8d:51:ca:24: 95:54:0a:45:82:01:7d:af:ec:ff:a5:d9:73:11:b7:fd:24:31: 39:a0:3a:7b:8d:30:7a:74:34:3b:bf:2b:70:00:ff:ee:cf:a4: 2d:68:c3:b4:de:9d:32:14:39:c2:ab:0d:eb:84:82:ca:6c:d9: b5:5f:20:4a:fb:ca:28:08:b7:c2:78:b6:8a:88:09:36:d9:eb: 37:86:e2:ae:c9:f9:e2:38:f5:99:16:89:ae:89:32:b7:14:18: 42:4b:3a:34:ba:10:9f:7a:28:b8:1d:cd:d4:e9:06:79:b8:44: 84:73:85:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x1npO7/vc3gVYTwh3XfJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjMzMjM5YmFhMjEwMzEwNmE2MjYwZGRmZDdlNzhiODA5 NDM1NWMwHhcNMjUxMjIwMjIwMDMzWhcNMjUxMjIxMjIwMDMzWjAzMTEwLwYDVQQD EygxOTM5MTQyZDU5YTU3ZDZkNzA2NzU3OWY0NTM2ZjdhMDA0NzE0YjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL6ZFUQZj2UkBLo7vq5AurWxX+8X Du556ZFHK6CkvUqK+/jOCi1BfzBYdwkgik+rAneqHonk4UGfYHKYnjHAPMPVjFpr CRpfAEApTvH4fuFNODrwLd6nbycRW38cXfO7UewpBKmvMdeC4j4wzD1JlXzFbM9Q vTeInx+SE+QVy/QQdGx2YP0DChR3shHt5ZQKUVyt5BgnZpuJHmOJNVc+juDMGMa2 5vaA8k7bBgI8HFPyd/6qoifpgErPIRlWYFtvWec/y4XUAixfmhZvpufPm2gjNwGp b4NppQpTUFxuqU7AGDpatwlzox1Cwvab8z+yns9z39peahsd68Y2v8EfFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBk5FC1ZpX1tcGdXn0U296AEcUubMB8GA1UdIwQY MBaAFHRjMjm6ohAxBqYmDd/X54uAlDVcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdNeU9icWlFREVHcGlZTjM5Zm5pNENVTlZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84ZjM1ZTgtYWMyZS00ZTE1LWEwYjQt YjJlYzYxMTdjZTllLzEvZEdNeU9icWlFREVHcGlZTjM5Zm5pNENVTlZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84ZjM1ZTgtYWMyZS00ZTE1LWEwYjQtYjJlYzYxMTdjZTll LzEvZEdNeU9icWlFREVHcGlZTjM5Zm5pNENVTlZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChJGUUhT QW3QAl816q9ZHHr3U5UomV6aXW0re9fVCPS7DB1xXNlrNMHpMqgUS8B6XQGawT5G WyLlNoXJuUIwS3zpfnmpznnG3YxoOayVLRr6ynRsiXJk7M96TtLXHWTXhaX0QCoF v9AKpatZPg3Q9Q9zrwXuQWFigEQj8lqvv0UF0XHn4bG9aJ9F3PuNUcoklVQKRYIB fa/s/6XZcxG3/SQxOaA6e40wenQ0O78rcAD/7s+kLWjDtN6dMhQ5wqsN64SCymzZ tV8gSvvKKAi3wni2iogJNtnrN4birsn54jj1mRaJrokytxQYQks6NLoQn3oouB3N 1OkGebhEhHOFFw== -----END CERTIFICATE-----Generated at Sun Dec 21 05:49:35 2025 by rpki-client