This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json) Hash identifier: LTKD/MMaroeUypvGZ+GE0DqcVJXDN/WWeJX7oUW5+is= Subject key identifier: C3:79:28:C0:91:80:E2:3B:53:49:00:CE:4B:19:C7:C8:16:3B:18:DD Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2 Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2 Certificate serial: 019B39EB65B88B38C4A1DF63FE0C2D6C9E44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 04:01:26 +0000 Manifest this update: Sat 20 Dec 2025 04:01:26 +0000 Manifest next update: Sun 21 Dec 2025 04:01:26 +0000 Files and hashes: 1: _2TO4dSOjfvwTixfDBf-WBuIl0o.roa (hash: RPjvUg/mlm5LB8eSfOAwiB9MoMFdNTXRZHFg7kwXImU=) 2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: FdsNA4Sl8E2lc1WMAfoiZsf7RmBpqVs082J6MO+mkOQ=) 3: f516EGaO9yNnpKCtINgDdW37z6Y.roa (hash: ED6BLlxCP1AdH6cMJc87FGQDnI7Gyi9C1L6MTbKzt54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:65:b8:8b:38:c4:a1:df:63:fe:0c:2d:6c:9e:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2 Validity Not Before: Dec 20 04:01:26 2025 GMT Not After : Dec 21 04:01:26 2025 GMT Subject: CN=c37928c09180e23b534900ce4b19c7c8163b18dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c3:c6:6d:31:4c:6a:b5:d9:f2:77:e1:dd:70: 00:d7:33:71:34:63:65:20:49:e5:e1:19:23:8f:b2: 06:f1:83:bb:2f:c9:dc:87:51:03:fc:3f:82:20:24: 5f:b4:ed:3a:b8:26:14:2b:20:e6:9c:8f:13:d5:bf: 75:a7:36:68:69:2e:6f:c0:33:48:29:7b:0a:e1:ca: fa:13:51:91:f4:07:b7:41:7e:b4:96:8d:b6:91:be: da:b4:9f:9a:64:34:30:d7:0d:34:70:9b:10:9a:9d: 86:aa:a3:ee:4d:fe:68:e3:00:65:4d:55:16:fe:ac: ef:56:41:a0:63:30:ed:89:ae:96:c6:69:e0:b2:75: ea:c6:56:95:a0:3f:62:2d:24:39:4b:b1:9a:a2:45: d6:cd:69:8d:c3:e7:17:2e:b4:17:5c:ec:ac:b1:df: 6b:36:3f:45:2b:13:ff:b4:7a:45:41:b4:56:75:68: df:cb:48:1e:db:58:c0:21:af:d9:6f:4d:d5:d1:2c: 45:cd:6f:43:c1:8a:2a:57:68:54:ce:b2:ea:68:01: ed:7f:f5:39:93:5f:ab:22:8a:cc:41:41:4f:19:0f: 18:d4:75:54:e9:fa:97:e6:68:79:60:d5:16:7a:62: a7:03:6b:f8:19:9e:ad:f9:ef:d1:5e:48:14:15:73: 6d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:79:28:C0:91:80:E2:3B:53:49:00:CE:4B:19:C7:C8:16:3B:18:DD X509v3 Authority Key Identifier: keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5d:28:c6:a0:8c:f5:a0:83:67:74:2f:48:63:7a:98:3f:ac: 83:0e:42:e0:de:40:74:1e:02:8a:4f:88:92:87:46:b0:31:f2: c2:70:f3:8f:75:6f:ad:e7:a6:b0:91:0f:49:18:45:e7:41:8c: 4e:60:19:92:62:68:05:2b:a6:b6:11:f1:77:19:ed:9d:a2:f3: dd:f3:e9:6a:67:99:33:45:4d:57:d0:1c:87:6e:2d:77:75:14: b3:8a:61:41:66:dc:19:a8:e7:1e:90:89:80:17:b1:4f:e9:a2: 6c:62:a4:17:2d:32:29:3e:11:80:46:65:ca:bf:d9:93:3c:25: e8:e5:49:80:9f:19:da:d2:de:f7:3b:f6:fe:ce:c6:8f:c2:a5: 0f:f6:6b:12:c0:2d:8e:9a:ed:1e:67:e8:07:22:d9:0a:84:af: e2:55:c0:32:f5:43:3a:02:2c:63:f8:24:c8:35:c5:66:d0:9a: 36:7d:0b:86:c5:c2:44:8c:5b:e8:fa:fd:13:98:22:47:4a:e1: 88:86:ee:e3:e0:2c:60:27:39:5a:61:40:be:e0:32:a2:72:a6: 45:4d:51:0e:27:12:ae:3e:a0:d9:b3:85:e0:95:a7:b9:fc:57: e0:48:d4:12:6e:fd:e0:bc:0b:25:c1:30:f6:56:50:f2:c2:7f: 42:dd:99:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs562W4izjEod9j/gwtbJ5EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZjEwNTljMjczYzUwZWRjZjNkY2VkZmM1ODAwMTUyZWM5 MWRiYTIwHhcNMjUxMjIwMDQwMTI2WhcNMjUxMjIxMDQwMTI2WjAzMTEwLwYDVQQD EyhjMzc5MjhjMDkxODBlMjNiNTM0OTAwY2U0YjE5YzdjODE2M2IxOGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsPGbTFMarXZ8nfh3XAA1zNxNGNl IEnl4Rkjj7IG8YO7L8nch1ED/D+CICRftO06uCYUKyDmnI8T1b91pzZoaS5vwDNI KXsK4cr6E1GR9Ae3QX60lo22kb7atJ+aZDQw1w00cJsQmp2GqqPuTf5o4wBlTVUW /qzvVkGgYzDtia6WxmngsnXqxlaVoD9iLSQ5S7GaokXWzWmNw+cXLrQXXOyssd9r Nj9FKxP/tHpFQbRWdWjfy0ge21jAIa/Zb03V0SxFzW9DwYoqV2hUzrLqaAHtf/U5 k1+rIorMQUFPGQ8Y1HVU6fqX5mh5YNUWemKnA2v4GZ6t+e/RXkgUFXNtmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMN5KMCRgOI7U0kAzksZx8gWOxjdMB8GA1UdIwQY MBaAFHTxBZwnPFDtzz3O38WAAVLskduiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFBFRm5DYzhVTzNQUGM3ZnhZQUJVdXlSMjZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83MGY4YmItOWEzNy00ZjNlLWE1ODEt M2VhODE5NGZiNDQ2LzEvZFBFRm5DYzhVTzNQUGM3ZnhZQUJVdXlSMjZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS83MGY4YmItOWEzNy00ZjNlLWE1ODEtM2VhODE5NGZiNDQ2 LzEvZFBFRm5DYzhVTzNQUGM3ZnhZQUJVdXlSMjZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfV0oxqCM 9aCDZ3QvSGN6mD+sgw5C4N5AdB4Cik+IkodGsDHywnDzj3VvreemsJEPSRhF50GM TmAZkmJoBSumthHxdxntnaLz3fPpameZM0VNV9Ach24td3UUs4phQWbcGajnHpCJ gBexT+mibGKkFy0yKT4RgEZlyr/Zkzwl6OVJgJ8Z2tLe9zv2/s7Gj8KlD/ZrEsAt jprtHmfoByLZCoSv4lXAMvVDOgIsY/gkyDXFZtCaNn0LhsXCRIxb6Pr9E5giR0rh iIbu4+AsYCc5WmFAvuAyonKmRU1RDicSrj6g2bOF4JWnufxX4EjUEm794LwLJcEw 9lZQ8sJ/Qt2Z3Q== -----END CERTIFICATE-----Generated at Sat Dec 20 07:31:06 2025 by rpki-client