This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft File: 29fJUTSL0uCcyvdvV7g4XxXfROQ.mft (raw, json) Hash identifier: oBaagCbq+kfVfj3F4tJY86rbYVkHlH5/iAXzeGfZqfQ= Subject key identifier: 89:6D:AB:33:07:2C:6C:6E:C2:D8:11:7F:70:9E:F7:11:55:BD:C6:F6 Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4 Certificate issuer: /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4 Certificate serial: 019B10815D3D9AF4662ABCBFDB455B2858AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft Manifest number: 1776 Signing time: Fri 12 Dec 2025 03:01:12 +0000 Manifest this update: Fri 12 Dec 2025 03:01:12 +0000 Manifest next update: Sat 13 Dec 2025 03:01:12 +0000 Files and hashes: 1: 16VwzWVgNRyLCtAXch9PWfSWgeM.roa (hash: C203Vfz7VUs5MzzkDe6+jJ/0Hm3QJ8YvUWmNLcGjW6Q=) 2: 29fJUTSL0uCcyvdvV7g4XxXfROQ.crl (hash: omjDkwmurLeye2rKCUq19UaTV/Z7He4Mp/QLvvUAmFE=) 3: RoOd2HW-hclsaajPqLH0ri7W8zo.roa (hash: AkuyZ5XIC7eywYVom8E+pvjHdZCKK00C97/hKtRD6Tw=) 4: si754UrpKqsViXC-aHyx2LtipFA.roa (hash: VCYyh8ACSkDGJLu/cfRmB43QT8YqJ4jUUodjDefcg/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:5d:3d:9a:f4:66:2a:bc:bf:db:45:5b:28:58:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4 Validity Not Before: Dec 12 03:01:12 2025 GMT Not After : Dec 13 03:01:12 2025 GMT Subject: CN=896dab33072c6c6ec2d8117f709ef71155bdc6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ed:5c:1b:d7:67:ef:db:94:59:5b:d7:fe:ab: b8:57:04:78:ec:bc:8a:ac:1e:a0:9b:7f:4a:01:b9: 91:ec:8b:14:a2:ad:8e:87:80:9a:9c:89:0c:c4:32: 81:d2:a4:a4:6c:05:67:a9:c9:eb:69:cd:bf:7c:c9: 7f:a4:b1:0a:5d:ec:ce:28:8c:cf:d9:1c:22:f9:4f: 9b:f8:e0:42:70:75:2b:67:ae:c7:1d:3c:19:86:fb: 0b:ff:f0:f4:9f:88:ed:02:79:1a:ee:7c:f1:42:be: 9f:43:e0:b7:5e:da:55:c1:05:fd:d1:d5:cf:c3:a2: 2f:15:a9:67:03:55:82:c2:1e:71:c3:63:f8:b1:ea: 80:bb:74:69:7f:70:24:80:c5:9b:c3:03:cd:d4:aa: 04:f2:37:ea:f0:31:88:af:a1:ce:d5:a2:d6:15:5d: 56:a5:f9:a7:78:b6:0e:b4:df:8e:83:dd:6b:58:ef: a5:66:59:e0:e8:1a:0b:70:2c:51:75:42:db:4c:3b: fa:5a:49:cd:4c:eb:37:c9:76:e1:5e:c9:f9:c1:19: cf:2b:18:f3:93:74:f3:46:39:5f:c4:e4:17:05:6f: 79:df:2e:d9:2e:f0:e0:4a:a6:b0:92:a8:64:03:3d: 37:5a:d7:35:23:95:19:d2:1c:a7:a2:7f:97:0e:89: be:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6D:AB:33:07:2C:6C:6E:C2:D8:11:7F:70:9E:F7:11:55:BD:C6:F6 X509v3 Authority Key Identifier: keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:1d:8b:73:fe:9f:45:a7:db:21:1b:65:3f:ea:6b:91:30:4f: eb:17:b4:2e:ab:28:51:fd:cf:b2:0b:2a:3a:e9:dd:3d:2e:3e: 1c:2a:0b:e7:b1:dc:4d:b6:38:5d:81:78:09:85:23:6b:59:35: cd:93:3b:62:75:22:37:a6:f1:e7:4a:3b:29:01:dd:7a:11:3e: aa:9f:82:db:93:47:d2:0f:86:0b:5b:92:69:01:25:28:09:5d: bd:83:7a:4a:a5:2b:2c:dd:2e:9d:5b:49:be:43:6c:08:ca:55: a2:f9:85:5b:60:b1:1a:c6:98:0a:28:64:e7:3e:63:85:da:0f: a8:0f:09:52:5d:56:fb:bb:b2:e1:93:aa:24:42:f4:67:ca:f4: e4:17:97:c2:d7:e5:a0:c3:13:df:c6:9a:33:22:b5:be:e8:c1: c4:af:c0:3b:6d:07:1b:4b:67:95:30:af:9c:94:36:71:8d:34: 2d:50:bb:f1:f9:c9:c6:1b:08:6e:1e:33:d3:ed:73:5f:58:5e: b8:60:e1:76:dd:cc:dd:0c:9f:56:a9:07:9e:bd:35:c2:29:e8: 19:fa:b5:8b:2d:22:af:0a:96:26:87:f4:3e:a6:e0:83:90:49: 07:4b:65:09:89:fc:7c:77:3f:2d:d4:fd:8e:51:6a:e3:d1:d6: d9:24:09:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgV09mvRmKry/20VbKFitMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZDdjOTUxMzQ4YmQyZTA5Y2NhZjc2ZjU3YjgzODVmMTVk ZjQ0ZTQwHhcNMjUxMjEyMDMwMTEyWhcNMjUxMjEzMDMwMTEyWjAzMTEwLwYDVQQD Eyg4OTZkYWIzMzA3MmM2YzZlYzJkODExN2Y3MDllZjcxMTU1YmRjNmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe1cG9dn79uUWVvX/qu4VwR47LyK rB6gm39KAbmR7IsUoq2Oh4CanIkMxDKB0qSkbAVnqcnrac2/fMl/pLEKXezOKIzP 2Rwi+U+b+OBCcHUrZ67HHTwZhvsL//D0n4jtAnka7nzxQr6fQ+C3XtpVwQX90dXP w6IvFalnA1WCwh5xw2P4seqAu3Rpf3AkgMWbwwPN1KoE8jfq8DGIr6HO1aLWFV1W pfmneLYOtN+Og91rWO+lZlng6BoLcCxRdULbTDv6WknNTOs3yXbhXsn5wRnPKxjz k3TzRjlfxOQXBW953y7ZLvDgSqawkqhkAz03Wtc1I5UZ0hynon+XDom+mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIltqzMHLGxuwtgRf3Ce9xFVvcb2MB8GA1UdIwQY MBaAFNvXyVE0i9LgnMr3b1e4OF8V30TkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjlmSlVUU0wwdUNjeXZkdlY3ZzRYeFhmUk9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84NTNjNzYtYTM5OC00MzVhLWJlNDEt N2QwYWM1MjgxNWE2LzEvMjlmSlVUU0wwdUNjeXZkdlY3ZzRYeFhmUk9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84NTNjNzYtYTM5OC00MzVhLWJlNDEtN2QwYWM1MjgxNWE2 LzEvMjlmSlVUU0wwdUNjeXZkdlY3ZzRYeFhmUk9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYR2Lc/6f RafbIRtlP+prkTBP6xe0LqsoUf3PsgsqOundPS4+HCoL57HcTbY4XYF4CYUja1k1 zZM7YnUiN6bx50o7KQHdehE+qp+C25NH0g+GC1uSaQElKAldvYN6SqUrLN0unVtJ vkNsCMpVovmFW2CxGsaYCihk5z5jhdoPqA8JUl1W+7uy4ZOqJEL0Z8r05BeXwtfl oMMT38aaMyK1vujBxK/AO20HG0tnlTCvnJQ2cY00LVC78fnJxhsIbh4z0+1zX1he uGDhdt3M3QyfVqkHnr01winoGfq1iy0irwqWJof0Pqbgg5BJB0tlCYn8fHc/LdT9 jlFq49HW2SQJJg== -----END CERTIFICATE-----Generated at Fri Dec 12 05:50:25 2025 by rpki-client