This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json) Hash identifier: f/ITMQDpvfzRJai4zTg+e3/k0cFvdVBq7eRMDYMqnOc= Subject key identifier: 97:E5:97:25:B3:CF:1D:37:16:C5:0A:B1:5C:C7:D3:41:C6:EA:DB:66 Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Certificate serial: 019B24AC4FE9BCB536474236A7F12475F788 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft Manifest number: 116B Signing time: Tue 16 Dec 2025 01:00:30 +0000 Manifest this update: Tue 16 Dec 2025 01:00:30 +0000 Manifest next update: Wed 17 Dec 2025 01:00:30 +0000 Files and hashes: 1: QKE5A2-VWyd3J0DRrfMQlK1fMX8.roa (hash: fb4kqhQuHHEA1R522FziGZUhpgN31KA7VLx4uSTZ7+0=) 2: QibsYMI2HzBANNUyuh3X_SXi7C8.roa (hash: J+6lvfhlLdmu7GB6QikI0qn006fBR9guwOXMkwXCaOk=) 3: XeENoq2HuB6omGApVd7MyU5r1TA.roa (hash: epvaDIj9ho9XW3OqF0eBT6eF6xWMid+XMsTU4k7CI2s=) 4: Yrj8M2QKm85FgqezvTNKupJvfRM.roa (hash: 19NO01gkKNfH49H88V9pcdpwsCQD2Y7XMbrn6a7gp8I=) 5: dcRF9U3L6DhFSWTZEdsiTMS3P2o.roa (hash: ES6jEJ/RK/dO83oihrvVXwCUZSvWJGm8C1RK/nM0bYI=) 6: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: cegs3EK3jXlwG8TbWkp8OZ0rnOCVncLTm44Uq4/eMGk=) 7: eaH07OW5KOtKpWvHksqObMQWq4E.roa (hash: /p/ujtYI0LrIojxA4eFgMakt3BjMBgIlLRM6Y1JhEgo=) 8: fKdatG9WcJc5WVUN6pdVKIOjMnQ.roa (hash: kqSOLzeO/Lml0iGRyiBotGsiuI6Y4hQbc4VPC8laBE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:4f:e9:bc:b5:36:47:42:36:a7:f1:24:75:f7:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Validity Not Before: Dec 16 01:00:30 2025 GMT Not After : Dec 17 01:00:30 2025 GMT Subject: CN=97e59725b3cf1d3716c50ab15cc7d341c6eadb66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6f:4c:6e:27:c4:a1:8c:20:c9:e5:e2:eb:58: 05:bf:f0:97:dd:59:cf:87:aa:14:80:fa:16:df:1c: 92:f0:dd:63:cc:93:8d:95:48:93:e8:30:13:33:84: 3f:a7:44:d1:a5:75:3b:a8:0b:7c:8b:13:d7:5d:69: fc:ae:dc:03:e4:69:6f:6c:9c:09:7e:b6:c4:c1:64: 4f:b2:5c:8a:a8:3f:5f:19:10:70:8c:52:08:d4:6d: a2:e1:f5:79:6c:e9:33:75:93:51:f7:38:4a:4e:da: b5:a4:65:a7:c7:7a:31:7a:a6:e6:1d:73:07:f9:7d: bf:8e:d1:54:05:79:9b:e0:40:82:1f:b8:c4:74:5e: 75:30:54:b7:2c:94:22:fd:43:4b:fe:03:95:6c:41: 9e:07:83:d0:3a:44:6f:f1:78:92:3b:7a:77:b7:89: fa:d9:7d:32:5b:c2:3f:fd:1c:e3:9b:f9:37:05:d6: 91:a6:53:9e:ca:5c:9a:ba:c2:7b:7b:0d:63:c8:b4: 75:72:ef:19:d9:53:26:c5:60:98:61:53:b7:05:bc: 09:62:1e:0b:3b:4e:8a:7f:66:16:bd:a7:bb:29:bb: ff:0a:a7:da:32:9e:67:a6:a6:f0:ec:90:5a:7b:0f: a2:00:78:26:b9:70:d0:97:48:35:0a:71:53:41:37: 24:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E5:97:25:B3:CF:1D:37:16:C5:0A:B1:5C:C7:D3:41:C6:EA:DB:66 X509v3 Authority Key Identifier: keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3f:c3:18:16:a5:3d:fc:ad:ac:4d:5f:74:c0:8d:cb:20:3f: e2:9c:cb:0c:86:2f:c6:06:ab:53:40:7a:0a:ca:7f:57:cb:28: 44:00:e0:1e:32:f3:31:67:f3:6c:a8:68:2a:7b:3b:32:86:c9: 80:30:53:c1:d7:4c:bc:a5:92:d6:cb:dc:87:76:07:01:13:9e: 42:79:6b:0b:98:b1:59:66:c4:ee:8e:9e:8d:36:72:51:15:09: 65:bd:6e:06:52:4d:b0:a5:83:64:6d:55:e0:9a:d0:e3:76:b2: 99:d6:78:7d:09:f6:b3:c4:4e:cf:bc:75:8c:ed:78:58:14:85: ce:5f:16:12:fa:3d:00:a9:6a:66:f7:17:ef:9a:63:c9:68:cc: 56:01:5c:c1:d0:bf:e6:09:c8:c1:04:04:3f:a4:ab:15:2b:0b: 8e:71:1c:97:5d:ef:22:29:19:e6:c2:dd:70:c8:90:38:93:13: 16:85:5a:42:f1:19:80:3e:17:e8:82:c2:ba:b5:61:45:04:48: 10:83:66:fd:57:d1:c0:08:7b:eb:0e:fc:e9:a3:82:0d:5b:ab: a5:5c:78:0e:b4:c3:0a:79:83:c6:c4:f3:aa:8d:e1:b9:c2:5e: 4a:a0:d1:67:d0:ae:4a:f6:05:4b:45:48:40:61:0f:b4:ec:83: 20:f4:18:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrE/pvLU2R0I2p/EkdfeIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky MGMzZDkwHhcNMjUxMjE2MDEwMDMwWhcNMjUxMjE3MDEwMDMwWjAzMTEwLwYDVQQD Eyg5N2U1OTcyNWIzY2YxZDM3MTZjNTBhYjE1Y2M3ZDM0MWM2ZWFkYjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo29MbifEoYwgyeXi61gFv/CX3VnP h6oUgPoW3xyS8N1jzJONlUiT6DATM4Q/p0TRpXU7qAt8ixPXXWn8rtwD5GlvbJwJ frbEwWRPslyKqD9fGRBwjFII1G2i4fV5bOkzdZNR9zhKTtq1pGWnx3oxeqbmHXMH +X2/jtFUBXmb4ECCH7jEdF51MFS3LJQi/UNL/gOVbEGeB4PQOkRv8XiSO3p3t4n6 2X0yW8I//Rzjm/k3BdaRplOeylyausJ7ew1jyLR1cu8Z2VMmxWCYYVO3BbwJYh4L O06Kf2YWvae7Kbv/CqfaMp5npqbw7JBaew+iAHgmuXDQl0g1CnFTQTckUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfllyWzzx03FsUKsVzH00HG6ttmMB8GA1UdIwQY MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt NGZiNTU5YjNiOWIzLzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATT/DGBal PfytrE1fdMCNyyA/4pzLDIYvxgarU0B6Csp/V8soRADgHjLzMWfzbKhoKns7MobJ gDBTwddMvKWS1svch3YHAROeQnlrC5ixWWbE7o6ejTZyURUJZb1uBlJNsKWDZG1V 4JrQ43aymdZ4fQn2s8ROz7x1jO14WBSFzl8WEvo9AKlqZvcX75pjyWjMVgFcwdC/ 5gnIwQQEP6SrFSsLjnEcl13vIikZ5sLdcMiQOJMTFoVaQvEZgD4X6ILCurVhRQRI EINm/VfRwAh76w786aOCDVurpVx4DrTDCnmDxsTzqo3hucJeSqDRZ9CuSvYFS0VI QGEPtOyDIPQYwA== -----END CERTIFICATE-----Generated at Tue Dec 16 06:23:35 2025 by rpki-client